last executing test programs: 4.208635572s ago: executing program 0 (id=1581): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3d, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 4.10577616s ago: executing program 0 (id=1583): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) creat(&(0x7f00000000c0)='./file0\x00', 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3.977898151s ago: executing program 0 (id=1595): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 3.923955015s ago: executing program 0 (id=1587): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0xa, 0x300) 3.591679442s ago: executing program 0 (id=1588): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.181800555s ago: executing program 4 (id=1605): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 2.387437349s ago: executing program 4 (id=1609): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 2.100050751s ago: executing program 4 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) splice(r3, 0x0, r2, 0x0, 0x4ff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.525602557s ago: executing program 4 (id=1622): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) 1.429868295s ago: executing program 4 (id=1624): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) 1.190126975s ago: executing program 3 (id=1632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.152219667s ago: executing program 3 (id=1633): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0xd17, 0x0, 0x0, 0x1}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) 1.131239999s ago: executing program 1 (id=1634): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.075740623s ago: executing program 3 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x140, 0x0) 1.048558556s ago: executing program 1 (id=1636): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.035535487s ago: executing program 3 (id=1637): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 850.000602ms ago: executing program 1 (id=1638): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 849.892132ms ago: executing program 3 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) close_range(r2, r3, 0x0) 796.026846ms ago: executing program 1 (id=1640): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 768.483388ms ago: executing program 1 (id=1642): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 749.558679ms ago: executing program 2 (id=1643): bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={0x0, r1}, 0x18) 677.149765ms ago: executing program 2 (id=1644): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x44000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x32}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x80090) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x9, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 676.942146ms ago: executing program 2 (id=1645): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 658.247307ms ago: executing program 1 (id=1646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 610.170381ms ago: executing program 2 (id=1647): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb90, &(0x7f00000017c0)="$eJzs3E9rXFUUAPDzXiZp2sQmFVFbBANSK4rTpCkKXbWuRQVddNmYTErI9I9JBBO6SOteXYi4KEg/guDeunAluKgLrZ+giEWKbloXkTd/0qGZSWKdyU3r7wc3c++cMOecee28d2FeAvjfGit+5BEHI+JMFjHSeD6PiIHabDBitf579+5cmi5GFmtr7/6RRRYRd+9cmm6+VtZ4HGosBiPixhtZPPnxxryLyyvzWVQrC4310aVzF48uLq+8Ondu6mzlbOX88cnXj0++NjnZxV5vXXz/y+d+euvFK9c+GX/7i/0/ZHEyhhux1j66ZSzG1t+TVqWImOp2skT6Gv209pmVav9kAADYhfKWa7inYyT6arO6kfj+56TFAQAAAF2x1hexBgAAADzmMvt/AAAAeMw1vwdw986l6eZI+42EnXX7VESM1vtv3t9cj5Qa97AORn9E7Psza7kzon6/62gX8o8Vmb75sVKM6NF9yJtZvRwRz7Y7/lmt/9HaXdwb+88jYrwL+cceWD9K/Z/sQv5N+p/owssDQFvXT9VPZBvPf/n69U+0Of+V2py7Hkbq83/z+u/ehuu/+/33dbj+e2ebOQ79/fKNTrHW67/Tn/46U+QvHv9TU//C7csRh0rt+s/W+8869H9mmzmGpm9d7RQr+i/6bY6d7n/tWsThaN9/U7bZ3yc6OjtXrYzXf3bIcfi700c65W89/sUo8jf3AjuhOP77OvS/1fG/uM0co8/8frBTbOv+898Gsvdqs4HGMx9NLS0tTEQMZG9ufP7Y5rU0f6f5GkX/L72w+f//dv0Xnwmrjfeh2AtcbjwW6ysP5Bw6fOzrh++/t4r+Zx7y+H+2zRxffXv1g06x1P0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GjII2I4sry8Ps/zcjliKCKein159cLi0iuzFz48P1PEIkajP5+dq1bGI2Kkvs6K9URtfn997IH1ZEQciIjPR/bW1uXpC9WZ1M0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwbigihiPLyxGRR8RfI3leLqeuCgAAAOi60dQFAAAAAD1n/w8AAACPP/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuzA89dvZhGxemJvbRQGGrH+pJUBvZanLgBIpi91AUAypdQFAMnY4wPZFvHBjpE9Xa8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN3ryMHrN7OIWD2xtzYKA41Yf9LKgF7LUxcAJNOXugAgmVLqAoBk7PGBbIv4YMfInq7XAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuNVwbWV6OiLw2z/NyOeKJiBiN/mx2rloZj4j9EfHLSP+eYj2RumgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6bnF5ZX6qWq0smHSYRCliF5Sxs5PB3VGGSbpJ6k8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABSWFxemZ+qVisLi6krAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFJbXF6Zn6pWKws9nKTuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4JAAD//4NBA/c=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 568.339144ms ago: executing program 4 (id=1648): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 477.918021ms ago: executing program 2 (id=1649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 442.215894ms ago: executing program 2 (id=1650): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 85.225173ms ago: executing program 0 (id=1651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) 0s ago: executing program 3 (id=1652): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) kernel console output (not intermixed with test programs): T3728] bond_slave_0: entered allmulticast mode [ 39.123525][ T3728] bond_slave_1: entered allmulticast mode [ 39.199275][ T3733] sctp: [Deprecated]: syz.4.95 (pid 3733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.199275][ T3733] Use struct sctp_sack_info instead [ 39.228048][ T3733] sctp: [Deprecated]: syz.4.95 (pid 3733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.228048][ T3733] Use struct sctp_sack_info instead [ 39.325349][ T3738] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.493044][ T3743] capability: warning: `syz.4.99' uses deprecated v2 capabilities in a way that may be insecure [ 39.638027][ T3759] loop4: detected capacity change from 0 to 128 [ 39.658846][ T3759] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.671214][ T3759] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.747853][ T3773] loop3: detected capacity change from 0 to 128 [ 40.683707][ T3815] syz.2.131 uses obsolete (PF_INET,SOCK_PACKET) [ 40.763920][ T3785] syz.1.118 (3785) used greatest stack depth: 9912 bytes left [ 40.773674][ T3790] syz.1.118 (3790) used greatest stack depth: 8744 bytes left [ 40.836292][ T3830] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 40.861623][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 40.861641][ T29] audit: type=1400 audit(1754620710.618:645): avc: denied { mount } for pid=3831 comm="syz.2.139" name="/" dev="ramfs" ino=5653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.014928][ T3783] syz.1.118 (3783) used greatest stack depth: 7416 bytes left [ 41.041184][ T29] audit: type=1326 audit(1754620710.788:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.1.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc5a46ebe9 code=0x0 [ 41.106725][ T29] audit: type=1400 audit(1754620710.858:647): avc: denied { bind } for pid=3850 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.289818][ T3863] loop2: detected capacity change from 0 to 1024 [ 41.316154][ T3863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.327818][ T3863] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.339325][ T3863] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.347652][ T3863] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.355110][ T3863] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.152: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.383767][ T3863] EXT4-fs (loop2): 1 orphan inode deleted [ 41.397984][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.417412][ T29] audit: type=1326 audit(1754620711.168:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.453082][ T29] audit: type=1326 audit(1754620711.168:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.476672][ T29] audit: type=1326 audit(1754620711.168:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.500053][ T29] audit: type=1326 audit(1754620711.168:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.523586][ T29] audit: type=1326 audit(1754620711.168:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.547395][ T29] audit: type=1326 audit(1754620711.168:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.570774][ T29] audit: type=1326 audit(1754620711.168:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 41.607031][ T3870] loop3: detected capacity change from 0 to 512 [ 41.623156][ T3870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.641115][ T3870] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.656252][ T3870] EXT4-fs (loop3): 1 truncate cleaned up [ 41.662411][ T3870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.717261][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.759959][ T3891] netlink: 'syz.3.163': attribute type 13 has an invalid length. [ 41.805586][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.812908][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.865102][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.876138][ T3891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.961091][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.970388][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.983059][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.993416][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.119653][ T3925] loop1: detected capacity change from 0 to 512 [ 42.126467][ T3925] ext4: Unknown parameter 'fsname' [ 42.137744][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.515340][ T3974] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 42.523492][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.534153][ T3974] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 42.644264][ T3984] IPv6: Can't replace route, no match found [ 42.765803][ T3999] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 42.777415][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.790440][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.811585][ T3999] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 43.193339][ T4052] IPv6: Can't replace route, no match found [ 43.495192][ T4090] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 43.503322][ T4090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.535697][ T4090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.566314][ T4090] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 43.633742][ T4105] loop0: detected capacity change from 0 to 1024 [ 43.647632][ T4105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.659788][ T4105] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.688962][ T4105] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.703597][ T4105] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.710349][ T4105] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.255: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.725590][ T4105] EXT4-fs (loop0): 1 orphan inode deleted [ 43.731899][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.831707][ T4123] loop2: detected capacity change from 0 to 512 [ 43.847954][ T4123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.873437][ T4123] EXT4-fs (loop2): 1 truncate cleaned up [ 43.887825][ T4123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.928859][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.949930][ T4128] netlink: 'syz.2.268': attribute type 10 has an invalid length. [ 43.960262][ T4128] team0: Device hsr_slave_0 failed to register rx_handler [ 44.029898][ T4134] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 44.037827][ T4134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.064639][ T4134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.073703][ T4134] batadv_slave_0: entered promiscuous mode [ 44.079690][ T4134] batadv_slave_0: entered allmulticast mode [ 44.088529][ T4134] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 44.225391][ T4154] loop4: detected capacity change from 0 to 512 [ 44.247716][ T4154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.288727][ T4154] EXT4-fs (loop4): 1 truncate cleaned up [ 44.303359][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.327044][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.405833][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.778630][ T4194] loop3: detected capacity change from 0 to 1024 [ 44.785838][ T4194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.795972][ T4194] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.807748][ T4194] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.816906][ T4194] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.824325][ T4194] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.296: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.838759][ T4194] EXT4-fs (loop3): 1 orphan inode deleted [ 44.845531][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.404753][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.304626][ T4222] loop9: detected capacity change from 0 to 7 [ 46.323123][ T4222] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.331094][ T4222] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.338989][ T4222] loop9: unable to read partition table [ 46.365730][ T4222] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 46.365730][ T4222] ) failed (rc=-5) [ 46.618682][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 46.618702][ T29] audit: type=1326 audit(1754620716.368:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.654742][ T4242] __nla_validate_parse: 1 callbacks suppressed [ 46.654764][ T4242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 46.663350][ T29] audit: type=1326 audit(1754620716.398:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.693123][ T29] audit: type=1326 audit(1754620716.398:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.705225][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 46.716478][ T29] audit: type=1326 audit(1754620716.398:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.748698][ T29] audit: type=1326 audit(1754620716.408:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.772066][ T29] audit: type=1326 audit(1754620716.408:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.795522][ T29] audit: type=1326 audit(1754620716.408:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.818790][ T29] audit: type=1326 audit(1754620716.408:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.842468][ T29] audit: type=1326 audit(1754620716.408:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.865823][ T29] audit: type=1326 audit(1754620716.408:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 46.909629][ T4252] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.327'. [ 46.918740][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 46.938498][ T4254] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 46.976211][ T4258] netlink: 48 bytes leftover after parsing attributes in process `syz.4.321'. [ 47.196732][ T4272] loop9: detected capacity change from 0 to 7 [ 47.203123][ T4272] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.211364][ T4272] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.219316][ T4272] loop9: unable to read partition table [ 47.225259][ T4272] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 47.225259][ T4272] ) failed (rc=-5) [ 47.373891][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 47.391208][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 47.482260][ T4294] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 47.671057][ T4299] loop4: detected capacity change from 0 to 8192 [ 47.677970][ T4299] msdos: Unknown parameter 'A' [ 47.959661][ T4339] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.351'. [ 47.989532][ T4331] loop1: detected capacity change from 0 to 8192 [ 47.996616][ T4331] msdos: Unknown parameter 'A' [ 48.644482][ T4352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4352 comm=syz.3.363 [ 48.667562][ T4356] loop0: detected capacity change from 0 to 512 [ 48.678344][ T4356] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.691676][ T4356] EXT4-fs (loop0): 1 truncate cleaned up [ 48.698305][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.737978][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.792086][ T4368] loop4: detected capacity change from 0 to 512 [ 48.806080][ T4368] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.830839][ T4368] EXT4-fs (loop4): 1 truncate cleaned up [ 48.837896][ T4368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.870713][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.908303][ T4381] loop3: detected capacity change from 0 to 2048 [ 48.952162][ T4381] loop3: p1 < > p3 p4 [ 48.957249][ T4381] loop3: p3 start 922746880 is beyond EOD, truncated [ 48.964160][ T4381] loop3: p4 size 8388608 extends beyond EOD, truncated [ 49.083605][ T4403] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 49.104608][ T4403] team0: Port device dummy0 added [ 49.131967][ T4403] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 49.140321][ T4403] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.156487][ T4403] team0: Failed to send options change via netlink (err -105) [ 49.176749][ T4403] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.186080][ T4403] team0: Port device dummy0 removed [ 49.194766][ T4403] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.838007][ T4433] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 49.853579][ T4433] team0: Port device dummy0 added [ 49.874723][ T4433] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 49.890700][ T4433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.913149][ T4436] loop0: detected capacity change from 0 to 2048 [ 49.921080][ T4433] team0: Failed to send options change via netlink (err -105) [ 49.928857][ T4433] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.937932][ T4433] team0: Port device dummy0 removed [ 49.945169][ T4433] dummy0: entered promiscuous mode [ 49.950515][ T4433] dummy0: entered allmulticast mode [ 49.956478][ T4436] loop0: p1 < > p3 p4 [ 49.956941][ T4433] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.961989][ T4436] loop0: p3 start 922746880 is beyond EOD, truncated [ 49.976052][ T4436] loop0: p4 size 8388608 extends beyond EOD, truncated [ 50.004568][ T4440] Driver unsupported XDP return value 0 on prog (id 334) dev N/A, expect packet loss! [ 51.139670][ T4463] veth1_macvtap: left promiscuous mode [ 51.156998][ T4463] macsec0: entered allmulticast mode [ 51.198467][ T4463] veth1_macvtap: entered promiscuous mode [ 51.204307][ T4463] veth1_macvtap: entered allmulticast mode [ 51.221892][ T4463] macsec0: entered promiscuous mode [ 51.337988][ T3359] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 51.345883][ T3359] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 51.359723][ T3359] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 51.396116][ T3359] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 51.496580][ T4510] macsec0: entered allmulticast mode [ 51.503069][ T4510] veth1_macvtap: entered allmulticast mode [ 51.509061][ T4510] macsec0: entered promiscuous mode [ 51.588573][ T4517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4517 comm=syz.3.437 [ 51.663151][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 51.663168][ T29] audit: type=1400 audit(1754620721.418:1497): avc: denied { listen } for pid=4525 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.721311][ T29] audit: type=1400 audit(1754620721.438:1498): avc: denied { accept } for pid=4525 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.888211][ T4539] veth1_macvtap: left promiscuous mode [ 51.902091][ T4539] macsec0: entered allmulticast mode [ 51.945881][ T4539] veth1_macvtap: entered promiscuous mode [ 51.951894][ T4539] veth1_macvtap: entered allmulticast mode [ 51.958508][ T4539] macsec0: entered promiscuous mode [ 52.151565][ T29] audit: type=1400 audit(1754620721.908:1499): avc: denied { ioctl } for pid=4548 comm="syz.0.453" path="socket:[7993]" dev="sockfs" ino=7993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.208580][ T29] audit: type=1400 audit(1754620721.928:1500): avc: denied { create } for pid=4550 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 52.228408][ T29] audit: type=1400 audit(1754620721.938:1501): avc: denied { sys_admin } for pid=4550 comm="syz.3.451" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 52.360019][ T4580] tipc: Started in network mode [ 52.365100][ T4580] tipc: Node identity ac14140f, cluster identity 4711 [ 52.373616][ T4580] tipc: New replicast peer: 255.255.255.83 [ 52.379601][ T4580] tipc: Enabled bearer , priority 10 [ 52.406251][ T29] audit: type=1400 audit(1754620722.148:1502): avc: denied { block_suspend } for pid=4581 comm="syz.0.464" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.441073][ T4593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4593 comm=syz.4.467 [ 53.141366][ T4630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4630 comm=syz.1.488 [ 53.164482][ T4637] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 53.188142][ T4637] bond0: (slave dummy0): Releasing backup interface [ 53.205450][ T4637] dummy0: left promiscuous mode [ 53.210444][ T4637] dummy0: left allmulticast mode [ 53.230952][ T4645] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 53.235778][ T4637] team0: Port device dummy0 added [ 53.300044][ T4654] loop2: detected capacity change from 0 to 2048 [ 53.307060][ T4645] team0: Port device dummy0 removed [ 53.320934][ T4645] dummy0: entered promiscuous mode [ 53.329995][ T4645] dummy0: entered allmulticast mode [ 53.335731][ T4654] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 53.341050][ T4654] loop2: partition table partially beyond EOD, truncated [ 53.348358][ T4654] loop2: p1 start 4278190080 is beyond EOD, truncated [ 53.355318][ T4654] loop2: p2 start 16908800 is beyond EOD, truncated [ 53.365509][ T29] audit: type=1400 audit(1754620723.118:1503): avc: denied { setopt } for pid=4658 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.366173][ T4645] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.395231][ T29] audit: type=1400 audit(1754620723.138:1504): avc: denied { bind } for pid=4658 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.415785][ T4654] loop2: p5 start 16908800 is beyond EOD, truncated [ 53.465091][ T4666] __nla_validate_parse: 4 callbacks suppressed [ 53.465124][ T4666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 53.471539][ T29] audit: type=1400 audit(1754620723.188:1505): avc: denied { read } for pid=4653 comm="syz.2.498" name="loop2p6" dev="devtmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.503013][ T29] audit: type=1400 audit(1754620723.188:1506): avc: denied { open } for pid=4653 comm="syz.2.498" path="/dev/loop2p6" dev="devtmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.526348][ T3387] tipc: Node number set to 2886997007 [ 53.543978][ T4672] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 53.563482][ T4668] loop3: detected capacity change from 0 to 1024 [ 53.566874][ T4672] bond1: entered promiscuous mode [ 53.575406][ T4672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.582708][ T4668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.591050][ T4672] netlink: 3 bytes leftover after parsing attributes in process `syz.4.507'. [ 53.603864][ T4668] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.620139][ T4668] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.636859][ T4668] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 53.649285][ T4668] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.649285][ T4668] [ 53.659181][ T4668] EXT4-fs (loop3): Total free blocks count 0 [ 53.665343][ T4668] EXT4-fs (loop3): Free/Dirty block details [ 53.669233][ T4672] batadv1: entered promiscuous mode [ 53.671298][ T4668] EXT4-fs (loop3): free_blocks=4293918720 [ 53.671317][ T4668] EXT4-fs (loop3): dirty_blocks=16 [ 53.676535][ T4672] batadv1: entered allmulticast mode [ 53.682369][ T4668] EXT4-fs (loop3): Block reservation details [ 53.689915][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 53.692747][ T4668] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 53.700927][ T4672] bond1: (slave batadv1): making interface the new active one [ 53.720777][ T4683] netlink: 3 bytes leftover after parsing attributes in process `syz.4.507'. [ 53.725961][ T4672] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 53.744649][ T4683] batadv2: entered promiscuous mode [ 53.749902][ T4683] batadv2: entered allmulticast mode [ 53.756067][ T4683] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 53.764848][ T4683] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 53.775222][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.811586][ T4688] tipc: Started in network mode [ 53.816645][ T4688] tipc: Node identity ac14140f, cluster identity 4711 [ 53.823942][ T4688] tipc: New replicast peer: 255.255.255.83 [ 53.829837][ T4688] tipc: Enabled bearer , priority 10 [ 53.965314][ T4715] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.146145][ T4745] netem: incorrect gi model size [ 54.151158][ T4745] netem: change failed [ 54.951342][ T3394] tipc: Node number set to 2886997007 [ 54.967286][ T4776] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 54.981861][ T4776] team0: Port device dummy0 added [ 54.992302][ T4776] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 55.005375][ T4776] team0: Port device dummy0 removed [ 55.014733][ T4776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.341832][ T4825] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 55.373234][ T4825] bond1: entered promiscuous mode [ 55.388988][ T4825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.406034][ T4825] netlink: 3 bytes leftover after parsing attributes in process `syz.3.564'. [ 55.419900][ T4825] batadv1: entered promiscuous mode [ 55.425297][ T4825] batadv1: entered allmulticast mode [ 55.431913][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.440578][ T4825] bond1: (slave batadv1): making interface the new active one [ 55.449195][ T4825] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 55.459603][ T4837] netlink: 3 bytes leftover after parsing attributes in process `syz.3.564'. [ 55.485278][ T4837] batadv2: entered promiscuous mode [ 55.490590][ T4837] batadv2: entered allmulticast mode [ 55.507782][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 55.519218][ T4837] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 55.589669][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 55.714709][ T4866] netlink: 'syz.0.577': attribute type 3 has an invalid length. [ 55.742485][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 55.751744][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.579'. [ 55.760837][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 55.770670][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.579'. [ 55.779777][ T4868] netlink: 'syz.3.579': attribute type 6 has an invalid length. [ 55.916298][ T4876] netlink: 'syz.3.584': attribute type 2 has an invalid length. [ 56.046681][ T3387] kernel write not supported for file /snd/seq (pid: 3387 comm: kworker/0:3) [ 56.145097][ T4907] wg2: entered promiscuous mode [ 56.150059][ T4907] wg2: entered allmulticast mode [ 56.523651][ T4957] loop2: detected capacity change from 0 to 512 [ 56.534646][ T4957] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.541972][ T4957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.621: bg 0: block 248: padding at end of block bitmap is not set [ 56.560085][ T4957] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.621: Failed to acquire dquot type 1 [ 56.574960][ T4957] EXT4-fs (loop2): 1 truncate cleaned up [ 56.581819][ T4957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.669082][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.942739][ T4977] loop2: detected capacity change from 0 to 1024 [ 56.949570][ T4977] EXT4-fs: Ignoring removed orlov option [ 56.958410][ T4977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.984297][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 56.984313][ T29] audit: type=1400 audit(1754620726.738:1662): avc: denied { read open } for pid=4976 comm="syz.2.630" path="/137/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.013345][ T29] audit: type=1400 audit(1754620726.738:1663): avc: denied { write } for pid=4976 comm="syz.2.630" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.214008][ T4988] loop3: detected capacity change from 0 to 2048 [ 57.229162][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.255636][ T4988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.292762][ T5005] wireguard0: entered promiscuous mode [ 57.310028][ T29] audit: type=1400 audit(1754620727.058:1664): avc: denied { append } for pid=4987 comm="syz.3.634" path="/136/file0/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.409412][ T5015] loop4: detected capacity change from 0 to 128 [ 57.426141][ T29] audit: type=1400 audit(1754620727.168:1665): avc: denied { read } for pid=5014 comm="syz.4.644" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.449145][ T29] audit: type=1400 audit(1754620727.168:1666): avc: denied { open } for pid=5014 comm="syz.4.644" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.472920][ T29] audit: type=1400 audit(1754620727.168:1667): avc: denied { ioctl } for pid=5014 comm="syz.4.644" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.497911][ T29] audit: type=1400 audit(1754620727.178:1668): avc: denied { ioctl } for pid=4987 comm="syz.3.634" path="/136/file0/memory.events" dev="loop3" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.555542][ T5007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.576519][ T29] audit: type=1400 audit(1754620727.328:1669): avc: denied { kexec_image_load } for pid=5020 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 57.599623][ T5012] smc: net device bond0 applied user defined pnetid SYZ2 [ 57.607023][ T5017] smc: net device bond0 erased user defined pnetid SYZ2 [ 57.647839][ T5007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.709972][ T29] audit: type=1326 audit(1754620727.458:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 57.733408][ T29] audit: type=1326 audit(1754620727.458:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 57.824514][ T5007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.839110][ T5030] bridge_slave_1: left allmulticast mode [ 57.844889][ T5030] bridge_slave_1: left promiscuous mode [ 57.850734][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.861593][ T5030] bridge_slave_0: left allmulticast mode [ 57.867395][ T5030] bridge_slave_0: left promiscuous mode [ 57.873173][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.921859][ T5016] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.634: bg 0: block 234: padding at end of block bitmap is not set [ 57.936564][ T5016] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 57.949279][ T5016] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.949279][ T5016] [ 57.985063][ T5007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.023391][ T3417] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 58.036169][ T3417] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.036169][ T3417] [ 58.045850][ T3417] EXT4-fs (loop3): Total free blocks count 0 [ 58.051892][ T3417] EXT4-fs (loop3): Free/Dirty block details [ 58.057811][ T3417] EXT4-fs (loop3): free_blocks=0 [ 58.062838][ T3417] EXT4-fs (loop3): dirty_blocks=5600 [ 58.068165][ T3417] EXT4-fs (loop3): Block reservation details [ 58.106427][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.134768][ T3417] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.146671][ T3417] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.161857][ T3417] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.625600][ T5072] loop2: detected capacity change from 0 to 1024 [ 58.636205][ T5072] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 58.646517][ T5072] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.657131][ T5072] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.668: iget: special inode unallocated [ 58.670035][ T5072] EXT4-fs (loop2): Remounting filesystem read-only [ 58.676623][ T5072] EXT4-fs (loop2): no journal found [ 58.682054][ T5072] EXT4-fs (loop2): can't get journal size [ 58.710643][ T5082] unsupported nla_type 52263 [ 58.735595][ T5072] EXT4-fs (loop2): filesystem is read-only [ 58.761382][ T5089] syz_tun: entered allmulticast mode [ 58.779344][ T5072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.792225][ T5088] syz_tun: left allmulticast mode [ 58.877782][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.974119][ T5098] loop2: detected capacity change from 0 to 2048 [ 59.018613][ T5098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.020987][ T5106] syz_tun: entered allmulticast mode [ 59.199269][ T5122] loop0: detected capacity change from 0 to 1024 [ 59.236460][ T5125] syz.3.688 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.248827][ T5122] EXT4-fs: Ignoring removed orlov option [ 59.260207][ T5122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.355370][ T5131] loop3: detected capacity change from 0 to 256 [ 59.411976][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.477530][ T5131] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 59.486387][ T5131] FAT-fs (loop3): Filesystem has been set read-only [ 59.607114][ T5146] IPv4: Oversized IP packet from 127.202.26.0 [ 59.635212][ T5150] geneve2: entered promiscuous mode [ 59.640454][ T5150] geneve2: entered allmulticast mode [ 59.652091][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.781488][ T5155] Falling back ldisc for ttyS3. [ 59.804947][ T5171] sctp: [Deprecated]: syz.2.705 (pid 5171) Use of int in max_burst socket option. [ 59.804947][ T5171] Use struct sctp_assoc_value instead [ 59.826189][ T5170] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 60.111199][ T5258] loop0: detected capacity change from 0 to 128 [ 60.155130][ T5261] loop0: detected capacity change from 0 to 512 [ 60.167555][ T5261] EXT4-fs: Ignoring removed bh option [ 60.188968][ T5261] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 60.252070][ T5261] EXT4-fs (loop0): 1 truncate cleaned up [ 60.258788][ T5261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.311100][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.337868][ T5271] loop0: detected capacity change from 0 to 128 [ 60.355882][ T5271] loop0: detected capacity change from 0 to 256 [ 60.386619][ T5273] __nla_validate_parse: 7 callbacks suppressed [ 60.386635][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.872696][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 60.896834][ T5296] loop1: detected capacity change from 0 to 512 [ 60.914672][ T5296] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.929483][ T5296] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.948434][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.736: corrupted inode contents [ 60.983458][ T5296] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.736: mark_inode_dirty error [ 61.014628][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.736: corrupted inode contents [ 61.028262][ T5296] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.736: mark_inode_dirty error [ 61.056552][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.736: corrupted inode contents [ 61.080911][ T5296] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 61.113969][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.736: corrupted inode contents [ 61.116207][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 61.137588][ T5296] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.736: mark_inode_dirty error [ 61.154395][ T5310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5310 comm=syz.0.742 [ 61.168515][ T5296] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 61.187587][ T5296] EXT4-fs (loop1): 1 truncate cleaned up [ 61.194518][ T5199] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 61.220291][ T5296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.271787][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 61.321416][ T5320] loop0: detected capacity change from 0 to 512 [ 61.335678][ T5320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.349782][ T5320] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.364948][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.377303][ T5320] EXT4-fs (loop0): shut down requested (2) [ 61.397993][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.711716][ T5350] Falling back ldisc for ttyS3. [ 61.854859][ T5367] bridge: RTM_NEWNEIGH with invalid ether address [ 61.862680][ T5361] pim6reg1: entered promiscuous mode [ 61.868015][ T5361] pim6reg1: entered allmulticast mode [ 61.928116][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 61.937113][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 62.184192][ T5385] Falling back ldisc for ttyS3. [ 62.267210][ T5399] loop3: detected capacity change from 0 to 512 [ 62.283888][ T5401] mmap: syz.0.781 (5401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.291808][ T5399] EXT4-fs: Ignoring removed bh option [ 62.313770][ T5399] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 62.332210][ T5399] EXT4-fs (loop3): 1 truncate cleaned up [ 62.353261][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.380149][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.402765][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 62.402783][ T29] audit: type=1400 audit(1754620732.158:2059): avc: denied { write } for pid=5408 comm="syz.3.784" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.430132][ T29] audit: type=1400 audit(1754620732.158:2060): avc: denied { open } for pid=5408 comm="syz.3.784" path="/169/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.531621][ T5419] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.787'. [ 62.553019][ T29] audit: type=1400 audit(1754620732.308:2061): avc: denied { connect } for pid=5413 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.597341][ T5424] loop3: detected capacity change from 0 to 2048 [ 62.641822][ T5424] loop3: p1 < > p4 [ 62.646608][ T5424] loop3: p4 size 8388608 extends beyond EOD, truncated [ 62.662975][ T29] audit: type=1400 audit(1754620732.418:2062): avc: denied { write } for pid=5423 comm="syz.3.791" name="loop3p4" dev="devtmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.686291][ T5427] Falling back ldisc for ttyS3. [ 62.695537][ T29] audit: type=1400 audit(1754620732.448:2063): avc: denied { mounton } for pid=5430 comm="syz.2.794" path="/153/file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.772769][ T29] audit: type=1326 audit(1754620732.508:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 62.793010][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 62.796276][ T29] audit: type=1326 audit(1754620732.508:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 62.828461][ T29] audit: type=1326 audit(1754620732.508:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 62.852007][ T29] audit: type=1326 audit(1754620732.508:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 62.875827][ T29] audit: type=1326 audit(1754620732.508:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5432 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 62.886209][ T5440] loop3: detected capacity change from 0 to 512 [ 62.934333][ T5440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.957374][ T5440] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.028323][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.404259][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 63.435416][ T5490] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 63.449040][ T5490] bond1: entered promiscuous mode [ 63.456928][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.475312][ T5493] bridge: RTM_NEWNEIGH with invalid ether address [ 63.480069][ T5490] netlink: 3 bytes leftover after parsing attributes in process `syz.1.809'. [ 63.504657][ T5490] batadv1: entered promiscuous mode [ 63.509933][ T5490] batadv1: entered allmulticast mode [ 63.520857][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 63.529364][ T5490] bond1: (slave batadv1): making interface the new active one [ 63.538134][ T5490] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 63.539865][ T5497] loop3: detected capacity change from 0 to 512 [ 63.558998][ T5490] batadv2: entered promiscuous mode [ 63.561100][ T5497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.564300][ T5490] batadv2: entered allmulticast mode [ 63.564924][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 63.588395][ T5490] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 63.594037][ T5497] EXT4-fs (loop3): 1 truncate cleaned up [ 63.604360][ T5497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.681113][ T5506] loop0: detected capacity change from 0 to 128 [ 63.690013][ T5506] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.698165][ T5506] FAT-fs (loop0): Filesystem has been set read-only [ 63.706611][ T5506] syz.0.817: attempt to access beyond end of device [ 63.706611][ T5506] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.721036][ T5506] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.729081][ T5506] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.737863][ T5506] syz.0.817: attempt to access beyond end of device [ 63.737863][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.756078][ T5506] syz.0.817: attempt to access beyond end of device [ 63.756078][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.772216][ T5506] syz.0.817: attempt to access beyond end of device [ 63.772216][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.789559][ T5506] syz.0.817: attempt to access beyond end of device [ 63.789559][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.824166][ T5506] syz.0.817: attempt to access beyond end of device [ 63.824166][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.838100][ T5506] syz.0.817: attempt to access beyond end of device [ 63.838100][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.851616][ T5506] syz.0.817: attempt to access beyond end of device [ 63.851616][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.864910][ T5506] syz.0.817: attempt to access beyond end of device [ 63.864910][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.878103][ T5506] syz.0.817: attempt to access beyond end of device [ 63.878103][ T5506] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.159606][ T5522] loop1: detected capacity change from 0 to 1024 [ 64.184752][ T5522] EXT4-fs: Ignoring removed orlov option [ 64.216041][ T5522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.385687][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.466398][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.490628][ T5534] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 64.765666][ T5567] netlink: 'syz.2.845': attribute type 4 has an invalid length. [ 64.822193][ T5576] smc: net device bond0 applied user defined pnetid SYZ2 [ 64.829551][ T5576] smc: net device bond0 erased user defined pnetid SYZ2 [ 64.908942][ T5579] loop2: detected capacity change from 0 to 1024 [ 64.928749][ T5579] EXT4-fs: Ignoring removed orlov option [ 64.944916][ T5578] syz_tun: entered allmulticast mode [ 65.198992][ T5579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.498320][ T5592] __nla_validate_parse: 5 callbacks suppressed [ 65.498342][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 65.552253][ T5593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.654817][ T5593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.677427][ T5596] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.685333][ T5601] smc: net device bond0 erased user defined pnetid SYZ2 [ 65.756605][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'. [ 65.795223][ T5593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.873403][ T5593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.930903][ T5244] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.934237][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.956140][ T5193] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.978218][ T5193] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.013128][ T5617] geneve2: entered promiscuous mode [ 66.018394][ T5617] geneve2: entered allmulticast mode [ 66.031522][ T5193] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.222553][ T5641] loop4: detected capacity change from 0 to 2048 [ 66.282011][ T5641] loop4: p1 < > p4 [ 66.286395][ T5641] loop4: p4 size 8388608 extends beyond EOD, truncated [ 67.016214][ T5660] openvswitch: netlink: Message has 6 unknown bytes. [ 67.028844][ T5662] geneve2: entered promiscuous mode [ 67.034138][ T5662] geneve2: entered allmulticast mode [ 67.066315][ T5659] netlink: 730 bytes leftover after parsing attributes in process `syz.1.878'. [ 67.202947][ T5676] loop2: detected capacity change from 0 to 2048 [ 67.214702][ T5673] loop1: detected capacity change from 0 to 1024 [ 67.232224][ T5673] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 67.257646][ T5673] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.271327][ T5673] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.884: iget: special inode unallocated [ 67.296454][ T5676] loop2: p1 < > p4 [ 67.310279][ T5673] EXT4-fs (loop1): Remounting filesystem read-only [ 67.317117][ T5673] EXT4-fs (loop1): no journal found [ 67.321440][ T5676] loop2: p4 size 8388608 extends beyond EOD, truncated [ 67.322466][ T5673] EXT4-fs (loop1): can't get journal size [ 67.355711][ T5673] EXT4-fs (loop1): filesystem is read-only [ 67.365306][ T5673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.388158][ T5691] netlink: 'syz.4.892': attribute type 4 has an invalid length. [ 67.396146][ T5691] netlink: 17 bytes leftover after parsing attributes in process `syz.4.892'. [ 67.425935][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.439753][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 67.439771][ T29] audit: type=1326 audit(1754620737.188:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.486610][ T5698] loop1: detected capacity change from 0 to 512 [ 67.502735][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 67.515995][ T29] audit: type=1326 audit(1754620737.228:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.539535][ T29] audit: type=1326 audit(1754620737.228:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.562966][ T29] audit: type=1326 audit(1754620737.228:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.566487][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 67.586358][ T29] audit: type=1326 audit(1754620737.228:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.619315][ T29] audit: type=1326 audit(1754620737.228:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.642684][ T29] audit: type=1326 audit(1754620737.228:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.666589][ T29] audit: type=1326 audit(1754620737.228:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.693352][ T29] audit: type=1326 audit(1754620737.228:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.708649][ T5698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.718104][ T29] audit: type=1326 audit(1754620737.228:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 67.732286][ T5698] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.803621][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 67.852022][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.894953][ T36] kernel write not supported for file /snd/seq (pid: 36 comm: kworker/1:1) [ 67.903805][ T5727] wireguard0: entered promiscuous mode [ 68.194954][ T5745] loop0: detected capacity change from 0 to 1024 [ 68.202125][ T5745] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 68.211866][ T5745] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.224994][ T5745] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.915: iget: special inode unallocated [ 68.238564][ T5745] EXT4-fs (loop0): Remounting filesystem read-only [ 68.245194][ T5745] EXT4-fs (loop0): no journal found [ 68.250647][ T5745] EXT4-fs (loop0): can't get journal size [ 68.267390][ T5751] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.280440][ T5752] loop2: detected capacity change from 0 to 512 [ 68.294571][ T5745] EXT4-fs (loop0): filesystem is read-only [ 68.305400][ T5745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.321118][ T5758] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.329096][ T5758] smc: net device bond0 erased user defined pnetid SYZ2 [ 68.345056][ T5752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.359853][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.363580][ T5752] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.434841][ T5751] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.495331][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.546552][ T5751] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.639233][ T5751] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.756364][ T5199] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.797882][ T5778] wireguard0: entered promiscuous mode [ 68.907701][ T5199] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.920466][ T5199] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.928958][ T5199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.081984][ T5791] loop4: detected capacity change from 0 to 1024 [ 69.089132][ T5791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 69.102124][ T5791] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.115129][ T5791] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.931: iget: special inode unallocated [ 69.128584][ T5791] EXT4-fs (loop4): Remounting filesystem read-only [ 69.135408][ T5791] EXT4-fs (loop4): no journal found [ 69.140656][ T5791] EXT4-fs (loop4): can't get journal size [ 69.152234][ T5791] EXT4-fs (loop4): filesystem is read-only [ 69.158924][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.194014][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.220725][ T5800] loop4: detected capacity change from 0 to 1024 [ 69.230270][ T5800] EXT4-fs: Ignoring removed orlov option [ 69.239198][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.261118][ T5805] netlink: 'syz.0.935': attribute type 4 has an invalid length. [ 69.269050][ T5805] netlink: 17 bytes leftover after parsing attributes in process `syz.0.935'. [ 69.514170][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.578117][ T5821] loop4: detected capacity change from 0 to 1024 [ 69.588179][ T5821] EXT4-fs: Ignoring removed orlov option [ 69.618763][ T5821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.718745][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.749598][ T5828] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 69.838586][ T5831] wg2: entered promiscuous mode [ 69.843645][ T5831] wg2: entered allmulticast mode [ 69.877182][ T5837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.946816][ T5837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.970068][ T5844] smc: net device bond0 applied user defined pnetid SYZ2 [ 69.985694][ T5851] smc: net device bond0 erased user defined pnetid SYZ2 [ 70.015606][ T5837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.123802][ T5837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.146186][ T5860] loop2: detected capacity change from 0 to 1024 [ 70.154885][ T5860] EXT4-fs: Ignoring removed orlov option [ 70.187306][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.219819][ T5251] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.267743][ T5251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.287960][ T5251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.308410][ T5251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.352103][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.394737][ T5876] netlink: 'syz.2.960': attribute type 2 has an invalid length. [ 70.635207][ T5893] loop2: detected capacity change from 0 to 2048 [ 70.665233][ T5893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.736303][ T3305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 70.767458][ T3305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 70.825660][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.960894][ T5914] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 71.001122][ T5914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.060356][ T5922] loop4: detected capacity change from 0 to 128 [ 71.074600][ T5914] macvlan2: entered promiscuous mode [ 71.079959][ T5914] macvlan2: entered allmulticast mode [ 71.102865][ T5922] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.110742][ T5922] FAT-fs (loop4): Filesystem has been set read-only [ 71.128175][ T5914] bond2: entered promiscuous mode [ 71.144825][ T5914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.151016][ T5922] bio_check_eod: 12379 callbacks suppressed [ 71.151037][ T5922] syz.4.989: attempt to access beyond end of device [ 71.151037][ T5922] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.171399][ T5922] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.179257][ T5922] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.187727][ T5922] syz.4.989: attempt to access beyond end of device [ 71.187727][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.201670][ T5914] bond2: left promiscuous mode [ 71.223665][ T5922] syz.4.989: attempt to access beyond end of device [ 71.223665][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.237129][ T5922] syz.4.989: attempt to access beyond end of device [ 71.237129][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.255273][ T5922] syz.4.989: attempt to access beyond end of device [ 71.255273][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.269060][ T5922] syz.4.989: attempt to access beyond end of device [ 71.269060][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.282837][ T5922] syz.4.989: attempt to access beyond end of device [ 71.282837][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.302274][ T5922] syz.4.989: attempt to access beyond end of device [ 71.302274][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.317426][ T5926] wg2: entered promiscuous mode [ 71.322388][ T5926] wg2: entered allmulticast mode [ 71.344845][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5928 comm=syz.3.982 [ 71.371446][ T5922] syz.4.989: attempt to access beyond end of device [ 71.371446][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.411418][ T5922] syz.4.989: attempt to access beyond end of device [ 71.411418][ T5922] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.028030][ T5958] netlink: 830 bytes leftover after parsing attributes in process `syz.1.993'. [ 72.039141][ T5958] bond_slave_0: entered promiscuous mode [ 72.045369][ T5958] bond_slave_1: entered promiscuous mode [ 72.051230][ T5958] dummy0: entered promiscuous mode [ 72.070927][ T5967] wg2: entered promiscuous mode [ 72.076278][ T5967] wg2: entered allmulticast mode [ 72.286924][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'. [ 72.296272][ T5989] netem: change failed [ 72.303495][ T5991] macvlan0: entered allmulticast mode [ 72.314742][ T5985] SELinux: failed to load policy [ 72.320077][ T5991] macvlan0 (unregistering): left allmulticast mode [ 72.366998][ T5997] @: renamed from vlan0 (while UP) [ 72.464061][ T6005] wg2: entered promiscuous mode [ 72.468986][ T6005] wg2: entered allmulticast mode [ 72.576443][ T6018] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1019'. [ 72.619467][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 72.619484][ T29] audit: type=1400 audit(1754620742.368:2633): avc: denied { mounton } for pid=6021 comm="syz.0.1023" path="/proc/501/task" dev="proc" ino=13151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 72.630263][ T6026] loop1: detected capacity change from 0 to 2048 [ 72.655432][ T6024] loop2: detected capacity change from 0 to 128 [ 72.663584][ T29] audit: type=1326 audit(1754620742.408:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.0.1023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x0 [ 72.686920][ T6024] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 72.700146][ T6024] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.729967][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.740594][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.784236][ T29] audit: type=1326 audit(1754620742.538:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.809737][ T3299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 72.824796][ T3299] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 72.833628][ T29] audit: type=1326 audit(1754620742.558:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.857157][ T29] audit: type=1326 audit(1754620742.558:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.880760][ T29] audit: type=1326 audit(1754620742.558:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.897158][ T6041] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 72.904437][ T29] audit: type=1326 audit(1754620742.558:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.923050][ T6041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.935731][ T29] audit: type=1326 audit(1754620742.558:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.935769][ T29] audit: type=1326 audit(1754620742.558:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 72.989424][ T29] audit: type=1326 audit(1754620742.558:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 73.020944][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.038257][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 73.048602][ T6041] bond3: (slave batadv3): making interface the new active one [ 73.058342][ T6041] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 73.218301][ T6060] loop1: detected capacity change from 0 to 128 [ 73.234638][ T6060] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.251778][ T6060] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.291876][ T6065] loop3: detected capacity change from 0 to 2048 [ 73.314843][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.380460][ T3306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 73.419094][ T3306] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 73.437450][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.488960][ T6085] syzkaller0: entered promiscuous mode [ 73.494597][ T6085] syzkaller0: entered allmulticast mode [ 73.580125][ T6095] sd 0:0:1:0: device reset [ 73.633265][ T6104] netlink: 'syz.1.1056': attribute type 1 has an invalid length. [ 73.647679][ T6104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.665339][ T6104] macvlan2: entered promiscuous mode [ 73.670874][ T6104] macvlan2: entered allmulticast mode [ 73.678413][ T6104] bond2: entered promiscuous mode [ 73.683849][ T6104] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.692409][ T6104] bond2: left promiscuous mode [ 74.232587][ T6129] pim6reg1: entered promiscuous mode [ 74.237946][ T6129] pim6reg1: entered allmulticast mode [ 74.266944][ T6131] tipc: Failed to remove unknown binding: 66,1,1/0:1054920429/1054920431 [ 74.276081][ T6131] tipc: Failed to remove unknown binding: 66,1,1/0:1054920429/1054920431 [ 74.285329][ T6131] tipc: Failed to remove unknown binding: 66,1,1/0:1054920429/1054920431 [ 74.345950][ T6136] @: renamed from vlan0 (while UP) [ 74.540486][ T6158] loop4: detected capacity change from 0 to 128 [ 74.547887][ T6158] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.562887][ T6158] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.010318][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1095'. [ 75.100649][ T6207] loop2: detected capacity change from 0 to 1024 [ 75.127966][ T6207] EXT4-fs: Ignoring removed orlov option [ 75.144930][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.413680][ T6225] pim6reg1: entered promiscuous mode [ 75.419072][ T6225] pim6reg1: entered allmulticast mode [ 75.516713][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.766128][ T6243] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 75.791596][ T6243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.815196][ T6243] bond3: (slave ip6erspan0): making interface the new active one [ 75.824680][ T6243] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 76.042473][ T6257] wireguard0: entered promiscuous mode [ 76.048180][ T6257] wireguard0: entered allmulticast mode [ 76.253894][ T6267] tipc: Enabled bearer , priority 0 [ 76.261291][ T6266] tipc: Resetting bearer [ 76.273860][ T6266] tipc: Disabling bearer [ 76.380897][ T6279] netlink: 'syz.4.1128': attribute type 1 has an invalid length. [ 76.400682][ T6279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.422398][ T6279] bond2: (slave ip6erspan0): making interface the new active one [ 76.431889][ T6279] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 76.511506][ T6289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.564663][ T6289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.629581][ T6296] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 76.646044][ T6296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.664348][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 76.674444][ T6296] bond3: (slave batadv3): making interface the new active one [ 76.683809][ T6296] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 76.694092][ T6289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.753364][ T6289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.768502][ T6307] loop2: detected capacity change from 0 to 2048 [ 76.783605][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.834836][ T5199] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.848584][ T5199] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.883763][ T6320] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 76.891805][ T5199] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.900019][ T5199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.929651][ T6320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 76.951406][ T6327] bond4: (slave ip6erspan0): making interface the new active one [ 76.960511][ T6327] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 77.013825][ T6329] loop1: detected capacity change from 0 to 128 [ 77.026618][ T6329] FAT-fs (loop1): Directory bread(block 162) failed [ 77.035649][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.048319][ T6329] FAT-fs (loop1): Directory bread(block 163) failed [ 77.056408][ T6329] FAT-fs (loop1): Directory bread(block 164) failed [ 77.066585][ T6329] FAT-fs (loop1): Directory bread(block 165) failed [ 77.073331][ T6329] FAT-fs (loop1): Directory bread(block 166) failed [ 77.081773][ T6329] FAT-fs (loop1): Directory bread(block 167) failed [ 77.089258][ T6329] FAT-fs (loop1): Directory bread(block 168) failed [ 77.097767][ T6329] FAT-fs (loop1): Directory bread(block 169) failed [ 77.107398][ T6329] FAT-fs (loop1): Directory bread(block 162) failed [ 77.114184][ T6329] FAT-fs (loop1): Directory bread(block 163) failed [ 77.122791][ T6329] bio_check_eod: 13206 callbacks suppressed [ 77.122808][ T6329] syz.1.1146: attempt to access beyond end of device [ 77.122808][ T6329] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 77.142634][ T6329] syz.1.1146: attempt to access beyond end of device [ 77.142634][ T6329] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 77.342392][ T6351] syzkaller0: entered promiscuous mode [ 77.348000][ T6351] syzkaller0: entered allmulticast mode [ 77.356394][ T6354] @: renamed from vlan0 (while UP) [ 77.431024][ T6360] pim6reg1: entered promiscuous mode [ 77.436566][ T6360] pim6reg1: entered allmulticast mode [ 77.455151][ T6362] loop1: detected capacity change from 0 to 1024 [ 77.473709][ T6362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.493031][ T6364] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.494867][ T6362] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1161: Allocating blocks 385-513 which overlap fs metadata [ 77.545919][ T6362] EXT4-fs (loop1): pa ffff888106e8a700: logic 16, phys. 129, len 24 [ 77.554141][ T6362] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 77.569636][ T6371] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.597272][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.633619][ T6371] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.640244][ T6378] loop1: detected capacity change from 0 to 128 [ 77.670958][ T6378] syz.1.1167: attempt to access beyond end of device [ 77.670958][ T6378] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 77.707606][ T6380] @: renamed from vlan0 [ 77.714410][ T6371] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.742026][ T6382] macvlan0: entered allmulticast mode [ 77.747527][ T6382] veth1_vlan: entered allmulticast mode [ 77.754121][ T6382] veth1_vlan: left allmulticast mode [ 77.768438][ T6382] macvlan0 (unregistering): left allmulticast mode [ 77.775329][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 77.775347][ T29] audit: type=1326 audit(1754620747.518:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 77.805225][ T29] audit: type=1326 audit(1754620747.518:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 77.829018][ T29] audit: type=1326 audit(1754620747.518:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 77.852685][ T29] audit: type=1326 audit(1754620747.518:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 77.876256][ T29] audit: type=1326 audit(77.747:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 77.899226][ T29] audit: type=1326 audit(77.757:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 77.923777][ T6371] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.031385][ T5196] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.056690][ T5196] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.076715][ T6404] pim6reg1: entered promiscuous mode [ 78.082230][ T6404] pim6reg1: entered allmulticast mode [ 78.090804][ T5196] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.125776][ T5196] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.204968][ T6417] wg2: left promiscuous mode [ 78.209701][ T6417] wg2: left allmulticast mode [ 78.215967][ T29] audit: type=1326 audit(78.187:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 78.238960][ T29] audit: type=1326 audit(78.187:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 78.261918][ T29] audit: type=1326 audit(78.187:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 78.284689][ T29] audit: type=1326 audit(78.187:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc299ebe9 code=0x7ffc0000 [ 78.330095][ T6417] wg2: entered promiscuous mode [ 78.335161][ T6417] wg2: entered allmulticast mode [ 78.575146][ T6426] wireguard0: entered promiscuous mode [ 78.582176][ T6426] wireguard0: entered allmulticast mode [ 78.590064][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 78.725154][ T6437] loop1: detected capacity change from 0 to 128 [ 78.738740][ T6437] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.746892][ T6437] FAT-fs (loop1): Filesystem has been set read-only [ 78.754679][ T6437] syz.1.1191: attempt to access beyond end of device [ 78.754679][ T6437] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 78.768976][ T6437] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.777048][ T6437] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.783384][ T6439] 9pnet: p9_errstr2errno: server reported unknown error [ 78.786029][ T6437] syz.1.1191: attempt to access beyond end of device [ 78.786029][ T6437] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.809505][ T6437] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.809551][ T6440] syz.1.1191: attempt to access beyond end of device [ 78.809551][ T6440] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 78.817691][ T6437] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.830681][ T6440] Buffer I/O error on dev loop1, logical block 2065, async page read [ 78.831467][ T6440] syz.1.1191: attempt to access beyond end of device [ 78.831467][ T6440] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 78.838726][ T6437] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.846828][ T6440] Buffer I/O error on dev loop1, logical block 2066, async page read [ 78.877172][ T6440] syz.1.1191: attempt to access beyond end of device [ 78.877172][ T6440] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 78.890495][ T6440] Buffer I/O error on dev loop1, logical block 2067, async page read [ 78.899771][ T6440] syz.1.1191: attempt to access beyond end of device [ 78.899771][ T6440] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 78.913098][ T6440] Buffer I/O error on dev loop1, logical block 2068, async page read [ 78.924873][ T6440] syz.1.1191: attempt to access beyond end of device [ 78.924873][ T6440] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 78.938467][ T6440] Buffer I/O error on dev loop1, logical block 2069, async page read [ 78.946957][ T6440] Buffer I/O error on dev loop1, logical block 2070, async page read [ 78.960194][ T6440] Buffer I/O error on dev loop1, logical block 2071, async page read [ 78.969145][ T6440] Buffer I/O error on dev loop1, logical block 2072, async page read [ 78.977825][ T6437] Buffer I/O error on dev loop1, logical block 2065, async page read [ 78.989141][ T6437] Buffer I/O error on dev loop1, logical block 2066, async page read [ 79.099279][ T6454] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.124492][ T6458] loop0: detected capacity change from 0 to 128 [ 79.134770][ T6458] FAT-fs (loop0): Directory bread(block 162) failed [ 79.142706][ T6458] FAT-fs (loop0): Directory bread(block 163) failed [ 79.151024][ T6458] FAT-fs (loop0): Directory bread(block 164) failed [ 79.161068][ T6458] FAT-fs (loop0): Directory bread(block 165) failed [ 79.167972][ T6458] FAT-fs (loop0): Directory bread(block 166) failed [ 79.177724][ T6458] FAT-fs (loop0): Directory bread(block 167) failed [ 79.180738][ T6454] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.184661][ T6458] FAT-fs (loop0): Directory bread(block 168) failed [ 79.205441][ T6458] FAT-fs (loop0): Directory bread(block 169) failed [ 79.224367][ T6458] FAT-fs (loop0): Directory bread(block 162) failed [ 79.231170][ T6458] FAT-fs (loop0): Directory bread(block 163) failed [ 79.325967][ T6454] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.407089][ T6454] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.490639][ T5242] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.535384][ T5227] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.550808][ T5227] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.559279][ T6471] syzkaller0: entered allmulticast mode [ 79.571547][ T6471] syzkaller0: entered promiscuous mode [ 79.583204][ T5242] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.603590][ T6471] syzkaller0 (unregistering): left allmulticast mode [ 79.610365][ T6471] syzkaller0 (unregistering): left promiscuous mode [ 79.937481][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1211'. [ 79.986274][ T6491] loop4: detected capacity change from 0 to 128 [ 79.999501][ T6491] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.077911][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.145446][ T6501] loop4: detected capacity change from 0 to 128 [ 80.153677][ T6501] FAT-fs (loop4): Directory bread(block 162) failed [ 80.160373][ T6501] FAT-fs (loop4): Directory bread(block 163) failed [ 80.167253][ T6501] FAT-fs (loop4): Directory bread(block 164) failed [ 80.173939][ T6501] FAT-fs (loop4): Directory bread(block 165) failed [ 80.180637][ T6501] FAT-fs (loop4): Directory bread(block 166) failed [ 80.187632][ T6501] FAT-fs (loop4): Directory bread(block 167) failed [ 80.195764][ T6501] FAT-fs (loop4): Directory bread(block 168) failed [ 80.203184][ T6501] FAT-fs (loop4): Directory bread(block 169) failed [ 80.212213][ T6501] FAT-fs (loop4): Directory bread(block 162) failed [ 80.218874][ T6501] FAT-fs (loop4): Directory bread(block 163) failed [ 80.227848][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 80.237225][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 80.255819][ T6504] bridge0: port 3(vlan0) entered blocking state [ 80.262198][ T6504] bridge0: port 3(vlan0) entered disabled state [ 80.268639][ T6504] vlan0: entered allmulticast mode [ 80.273885][ T6504] bridge0: entered allmulticast mode [ 80.279991][ T6504] vlan0: left allmulticast mode [ 80.284939][ T6504] bridge0: left allmulticast mode [ 80.799518][ T6535] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.841543][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'. [ 80.883225][ T6535] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.923112][ T6535] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.933388][ T6544] loop3: detected capacity change from 0 to 512 [ 80.941011][ T6544] EXT4-fs: Ignoring removed bh option [ 80.947200][ T6544] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.956484][ T6544] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 80.966671][ T6544] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 80.977077][ T6544] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 80.986309][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.999765][ T6535] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.030403][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.090451][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'. [ 81.116332][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 81.225098][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'. [ 81.272005][ T6583] netlink: 'syz.4.1246': attribute type 30 has an invalid length. [ 81.346041][ T6589] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1247'. [ 81.357055][ T6585] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1247'. [ 81.436795][ T6598] loop0: detected capacity change from 0 to 1024 [ 81.443870][ T6598] EXT4-fs: Ignoring removed orlov option [ 81.452050][ T6598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.742832][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.800447][ T6610] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.909436][ T5215] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.929783][ T5215] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.941326][ T5215] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.949635][ T5215] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.073717][ T6619] loop3: detected capacity change from 0 to 2048 [ 82.098216][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.304754][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.344773][ T6642] loop3: detected capacity change from 0 to 128 [ 82.368440][ T6642] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.376489][ T6642] FAT-fs (loop3): Filesystem has been set read-only [ 82.383369][ T6642] bio_check_eod: 33895 callbacks suppressed [ 82.383389][ T6642] syz.3.1266: attempt to access beyond end of device [ 82.383389][ T6642] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.403852][ T6642] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.412126][ T6642] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.422068][ T6642] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.430492][ T6642] syz.3.1266: attempt to access beyond end of device [ 82.430492][ T6642] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 82.444602][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.444602][ T6649] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 82.458290][ T6642] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.466374][ T6642] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 82.469999][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.469999][ T6649] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 82.491296][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.491296][ T6649] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 82.505209][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.505209][ T6649] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 82.530362][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.530362][ T6649] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 82.548256][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.548256][ T6649] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 82.561894][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.561894][ T6649] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 82.575273][ T6649] syz.3.1266: attempt to access beyond end of device [ 82.575273][ T6649] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 82.781682][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 82.781698][ T29] audit: type=1326 audit(82.757:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b5d465ba7 code=0x7ffc0000 [ 82.810699][ T29] audit: type=1326 audit(82.757:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b5d40add9 code=0x7ffc0000 [ 82.836601][ T29] audit: type=1326 audit(82.757:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 82.859500][ T29] audit: type=1326 audit(82.757:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b5d465ba7 code=0x7ffc0000 [ 82.882213][ T29] audit: type=1326 audit(82.757:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b5d40add9 code=0x7ffc0000 [ 82.904977][ T29] audit: type=1326 audit(82.757:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 82.927904][ T29] audit: type=1326 audit(82.757:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b5d465ba7 code=0x7ffc0000 [ 82.950576][ T29] audit: type=1326 audit(82.757:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b5d40add9 code=0x7ffc0000 [ 82.973372][ T29] audit: type=1326 audit(82.757:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6b5d46ebe9 code=0x7ffc0000 [ 82.996117][ T29] audit: type=1326 audit(82.787:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b5d465ba7 code=0x7ffc0000 [ 83.365906][ T6677] loop1: detected capacity change from 0 to 1024 [ 83.372998][ T6677] EXT4-fs: Ignoring removed orlov option [ 83.389705][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.456779][ T6686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.633886][ T6686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.691619][ T6699] loop0: detected capacity change from 0 to 128 [ 83.734537][ T6699] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.742445][ T6699] FAT-fs (loop0): Filesystem has been set read-only [ 83.750157][ T6686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.755128][ T6699] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.768248][ T6699] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 83.791970][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.814146][ T6705] loop3: detected capacity change from 0 to 1024 [ 83.821762][ T6699] buffer_io_error: 87750 callbacks suppressed [ 83.821782][ T6699] Buffer I/O error on dev loop0, logical block 2065, async page read [ 83.841554][ T6686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.855765][ T6699] Buffer I/O error on dev loop0, logical block 2066, async page read [ 83.856916][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.864253][ T6699] Buffer I/O error on dev loop0, logical block 2067, async page read [ 83.885609][ T6699] Buffer I/O error on dev loop0, logical block 2068, async page read [ 83.893882][ T6699] Buffer I/O error on dev loop0, logical block 2069, async page read [ 83.900521][ T6705] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1297: Allocating blocks 385-513 which overlap fs metadata [ 83.916335][ T6699] Buffer I/O error on dev loop0, logical block 2070, async page read [ 83.924621][ T6699] Buffer I/O error on dev loop0, logical block 2071, async page read [ 83.932922][ T6699] Buffer I/O error on dev loop0, logical block 2072, async page read [ 83.941111][ T6699] Buffer I/O error on dev loop0, logical block 2065, async page read [ 83.949409][ T6699] Buffer I/O error on dev loop0, logical block 2066, async page read [ 83.969570][ T5242] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.004996][ T5242] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024997][ T6716] EXT4-fs (loop3): pa ffff888106e8a690: logic 16, phys. 129, len 24 [ 84.033174][ T6716] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 84.044487][ T6717] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.055411][ T5242] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.070170][ T5242] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.092419][ T6717] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.111969][ T6720] loop4: detected capacity change from 0 to 512 [ 84.118922][ T6720] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.138494][ T6720] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.153431][ T6717] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.179643][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.207414][ T6720] EXT4-fs (loop4): 1 truncate cleaned up [ 84.214833][ T6720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.237736][ T6717] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.275442][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.336104][ T6729] wireguard0: entered promiscuous mode [ 84.341729][ T6729] wireguard0: entered allmulticast mode [ 84.360752][ T5242] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.407824][ T5242] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.416171][ T5242] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.424955][ T5242] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.568525][ T6746] loop4: detected capacity change from 0 to 1024 [ 84.589184][ T6746] EXT4-fs: Ignoring removed orlov option [ 84.604825][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.790499][ T6758] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.806275][ T6760] ip6gre2: entered allmulticast mode [ 84.843340][ T6758] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.903962][ T6758] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.956000][ T6758] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.968157][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.015172][ T5199] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.029989][ T5199] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.043862][ T5199] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.055485][ T5199] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.157456][ T6774] syzkaller0: entered promiscuous mode [ 85.163191][ T6774] syzkaller0: entered allmulticast mode [ 85.299793][ T6789] netlink: 'syz.0.1328': attribute type 30 has an invalid length. [ 85.476234][ T6795] loop0: detected capacity change from 0 to 8192 [ 86.103031][ T6845] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.110703][ T6845] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 86.173635][ T6855] loop3: detected capacity change from 0 to 128 [ 86.229019][ T6861] pim6reg1: entered promiscuous mode [ 86.234489][ T6861] pim6reg1: entered allmulticast mode [ 86.403440][ T6871] netlink: 'syz.2.1366': attribute type 13 has an invalid length. [ 86.443559][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.450891][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.493144][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.522981][ T6871] veth1_macvtap: left allmulticast mode [ 86.535342][ T5199] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.544164][ T5199] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.553493][ T5199] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.561999][ T5199] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.037526][ T6883] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 87.050961][ T6883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 87.064034][ T6883] __nla_validate_parse: 1 callbacks suppressed [ 87.064061][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 87.081556][ T6883] bond4 (unregistering): Released all slaves [ 87.111544][ T6886] syzkaller1: entered promiscuous mode [ 87.117131][ T6886] syzkaller1: entered allmulticast mode [ 87.248619][ T6897] netlink: 'syz.1.1378': attribute type 4 has an invalid length. [ 87.294818][ T6902] loop1: detected capacity change from 0 to 128 [ 87.404299][ T6902] bio_check_eod: 93910 callbacks suppressed [ 87.404345][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.404345][ T6902] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 87.427030][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.427030][ T6902] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 87.440841][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.440841][ T6902] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 87.454647][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.454647][ T6902] loop1: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 87.468223][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.468223][ T6902] loop1: rw=2049, sector=441, nr_sectors = 8 limit=128 [ 87.481936][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.481936][ T6902] loop1: rw=2049, sector=457, nr_sectors = 8 limit=128 [ 87.495579][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.495579][ T6902] loop1: rw=2049, sector=473, nr_sectors = 8 limit=128 [ 87.509592][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.509592][ T6902] loop1: rw=2049, sector=489, nr_sectors = 8 limit=128 [ 87.538618][ T6902] syz.1.1380: attempt to access beyond end of device [ 87.538618][ T6902] loop1: rw=2049, sector=505, nr_sectors = 8 limit=128 [ 87.588030][ T5249] kworker/u8:63: attempt to access beyond end of device [ 87.588030][ T5249] loop1: rw=1, sector=305, nr_sectors = 1 limit=128 [ 87.667390][ T6917] netlink: 'syz.2.1386': attribute type 1 has an invalid length. [ 87.690771][ T6917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.706925][ T6920] : renamed from vlan1 (while UP) [ 87.720002][ T6917] bond1: (slave ip6erspan0): making interface the new active one [ 87.732800][ T6917] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 87.778256][ T6925] ip6gre1: entered allmulticast mode [ 87.831596][ T6934] loop1: detected capacity change from 0 to 512 [ 87.868170][ T6931] syzkaller0: entered promiscuous mode [ 87.871969][ T6934] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.873710][ T6931] syzkaller0: entered allmulticast mode [ 87.887827][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 87.887841][ T29] audit: type=1400 audit(87.857:3732): avc: denied { wake_alarm } for pid=6929 comm="syz.2.1392" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.907398][ T6934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.922196][ T6934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.930764][ T6934] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.943781][ T29] audit: type=1400 audit(87.917:3733): avc: denied { map } for pid=6929 comm="syz.2.1392" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.972880][ T6934] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1393: Allocating blocks 41-42 which overlap fs metadata [ 87.988372][ T6934] Quota error (device loop1): write_blk: dquota write failed [ 87.995912][ T6934] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 88.005924][ T6934] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.018011][ T6934] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1393: Failed to acquire dquot type 1 [ 88.030543][ T6934] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.046004][ T6934] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1393: corrupted inode contents [ 88.058516][ T6934] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.1393: mark_inode_dirty error [ 88.095703][ T6934] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1393: corrupted inode contents [ 88.109112][ T6934] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1393: mark_inode_dirty error [ 88.123371][ T6934] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1393: corrupted inode contents [ 88.136653][ T6934] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 88.149598][ T29] audit: type=1326 audit(88.117:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 88.173245][ T6934] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1393: corrupted inode contents [ 88.216008][ T6934] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.1393: mark_inode_dirty error [ 88.220838][ T29] audit: type=1326 audit(88.117:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 88.227863][ T6934] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 88.250177][ T29] audit: type=1326 audit(88.117:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 88.281877][ T29] audit: type=1326 audit(88.167:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 88.292161][ T6934] EXT4-fs (loop1): 1 truncate cleaned up [ 88.304885][ T29] audit: type=1326 audit(88.177:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6949 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 88.347769][ T6934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.369112][ T6954] serio: Serial port ttyS3 [ 88.373507][ T6959] netlink: 'syz.2.1401': attribute type 2 has an invalid length. [ 88.375487][ T6934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.468476][ T6967] team0 (unregistering): Port device team_slave_0 removed [ 88.482846][ T6967] team0 (unregistering): Port device team_slave_1 removed [ 88.616991][ T6970] openvswitch: netlink: Message has 6 unknown bytes. [ 88.700814][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 88.710565][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1410'. [ 88.791084][ T6982] syzkaller0: entered promiscuous mode [ 88.796697][ T6982] syzkaller0: entered allmulticast mode [ 88.876616][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 88.900422][ T6984] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1412'. [ 89.160059][ T7012] loop4: detected capacity change from 0 to 128 [ 89.206718][ T7016] loop1: detected capacity change from 0 to 512 [ 89.245472][ T7016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.333980][ T7016] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1427: corrupted inode contents [ 89.366187][ T7016] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1427: mark_inode_dirty error [ 89.406108][ T7016] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1427: corrupted inode contents [ 89.433643][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.535558][ T7037] loop0: detected capacity change from 0 to 256 [ 89.583534][ T7037] vfat: Unknown parameter 'shorname' [ 89.655589][ T7037] bridge: RTM_NEWNEIGH with invalid ether address [ 90.082643][ T7060] loop3: detected capacity change from 0 to 512 [ 90.181798][ T7060] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.210200][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 90.222257][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.229764][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.231864][ T7060] EXT4-fs (loop3): mount failed [ 90.255368][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.263074][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.370130][ T7067] loop0: detected capacity change from 0 to 8192 [ 90.438438][ T7067] loop0: p1 p2 p4 < > [ 90.451479][ T7067] loop0: p1 start 4261412864 is beyond EOD, truncated [ 90.458310][ T7067] loop0: p2 start 4009754624 is beyond EOD, truncated [ 90.632794][ T7090] tipc: Started in network mode [ 90.637740][ T7090] tipc: Node identity c6ff8ea0394c, cluster identity 4711 [ 90.644995][ T7090] tipc: Enabled bearer , priority 0 [ 90.689561][ T7079] tipc: Resetting bearer [ 90.704345][ T7079] tipc: Disabling bearer [ 90.775809][ T7098] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.859061][ T36] IPVS: starting estimator thread 0... [ 90.875971][ T7098] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.936213][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1460'. [ 90.981266][ T7105] IPVS: using max 1968 ests per chain, 98400 per kthread [ 91.018305][ T7098] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.126097][ T7098] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.165399][ T7119] netlink: 'syz.0.1464': attribute type 21 has an invalid length. [ 91.192130][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1464'. [ 91.201381][ T7119] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 91.240416][ T5215] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.259158][ T5215] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.292017][ T5227] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.312836][ T5199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.818060][ T7082] syz.3.1450 (7082) used greatest stack depth: 7096 bytes left [ 92.217269][ T7181] bridge: RTM_NEWNEIGH with invalid ether address [ 92.479544][ T7165] Set syz1 is full, maxelem 65536 reached [ 92.807450][ T7193] syzkaller0: entered promiscuous mode [ 92.813025][ T7193] syzkaller0: entered allmulticast mode [ 92.973901][ T7229] wg2: left promiscuous mode [ 92.978619][ T7229] wg2: left allmulticast mode [ 93.009848][ T7229] wg2: entered promiscuous mode [ 93.014970][ T7229] wg2: entered allmulticast mode [ 93.128512][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 93.128526][ T29] audit: type=1400 audit(93.100:4090): avc: denied { accept } for pid=7233 comm="syz.1.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.351301][ T7253] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 93.430043][ T7253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 93.584781][ T7258] loop4: detected capacity change from 0 to 512 [ 93.629406][ T7258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.659799][ T29] audit: type=1400 audit(93.630:4091): avc: denied { lock } for pid=7266 comm="syz.0.1516" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.697110][ T7256] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1513: corrupted inode contents [ 93.719317][ T7256] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1513: mark_inode_dirty error [ 93.747485][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 93.760694][ T7256] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1513: corrupted inode contents [ 93.798297][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 93.827778][ T7278] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 93.839271][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.853087][ T7278] bond0: (slave dummy0): Releasing backup interface [ 93.868645][ T7278] dummy0: left promiscuous mode [ 93.875258][ T7278] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.887940][ T7278] team0: Failed to send options change via netlink (err -105) [ 93.895639][ T7278] team0: Port device dummy0 added [ 93.917632][ T7278] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 93.928782][ T7278] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 93.946431][ T29] audit: type=1400 audit(93.920:4092): avc: denied { shutdown } for pid=7286 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.965603][ T7278] team0: Failed to send options change via netlink (err -105) [ 93.996179][ T7278] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.008663][ T7278] team0: Port device dummy0 removed [ 94.016226][ T7278] dummy0: entered promiscuous mode [ 94.045222][ T7278] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.054821][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 94.084405][ T29] audit: type=1326 audit(94.060:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.107368][ T29] audit: type=1326 audit(94.060:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.130206][ T29] audit: type=1326 audit(94.060:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.153121][ T29] audit: type=1326 audit(94.060:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.175901][ T29] audit: type=1326 audit(94.060:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.198863][ T29] audit: type=1326 audit(94.060:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.221533][ T29] audit: type=1326 audit(94.060:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.0.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f436ebe9 code=0x7ffc0000 [ 94.369767][ T7311] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1534'. [ 95.143751][ T7365] netlink: 'syz.1.1557': attribute type 30 has an invalid length. [ 96.067371][ T7393] loop3: detected capacity change from 0 to 1024 [ 96.113739][ T7394] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1565'. [ 96.117628][ T7393] EXT4-fs: Ignoring removed orlov option [ 96.139335][ T7389] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1565'. [ 96.139672][ T7393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.418191][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 96.429444][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 96.503562][ T7428] loop4: detected capacity change from 0 to 164 [ 96.574990][ T7428] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 96.660495][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.866564][ T7445] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.924282][ T7445] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.975218][ T7445] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.026073][ T7445] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.083735][ T5248] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.107961][ T5248] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.127304][ T5248] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.141280][ T5248] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.196177][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'. [ 97.205310][ T7450] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1589'. [ 97.219325][ T7452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.331182][ T7461] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 97.384617][ T7452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.432776][ T7452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.554930][ T7452] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.318172][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 98.318248][ T29] audit: type=1326 audit(98.290:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.377928][ T29] audit: type=1326 audit(98.320:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.400792][ T29] audit: type=1326 audit(98.320:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.423666][ T29] audit: type=1326 audit(98.320:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.446497][ T29] audit: type=1326 audit(98.320:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.469585][ T29] audit: type=1326 audit(98.440:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.492584][ T29] audit: type=1326 audit(98.440:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.588544][ T29] audit: type=1326 audit(98.560:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.611426][ T29] audit: type=1326 audit(98.560:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.662589][ T29] audit: type=1326 audit(98.620:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.2.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0630ebe9 code=0x7ffc0000 [ 98.744294][ T7515] netlink: 'syz.2.1615': attribute type 12 has an invalid length. [ 98.909481][ T7519] loop3: detected capacity change from 0 to 512 [ 98.944911][ T7519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.995645][ T7519] EXT4-fs (loop3): 1 orphan inode deleted [ 99.001638][ T7519] EXT4-fs (loop3): 1 truncate cleaned up [ 99.013930][ T7519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.223445][ T7519] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 99.239606][ T7519] EXT4-fs (loop3): Remounting filesystem read-only [ 99.261503][ T7519] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 99.334603][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.642115][ T3359] hid-generic 0000:0D17:0000.0002: item fetching failed at offset 0/2 [ 99.650580][ T3359] hid-generic 0000:0D17:0000.0002: probe with driver hid-generic failed with error -22 [ 100.617747][ T5240] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.628775][ T5240] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.643584][ T5231] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.654852][ T5231] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.683978][ T7607] loop0: detected capacity change from 0 to 1024 [ 100.690821][ T7607] EXT4-fs: Ignoring removed orlov option [ 100.699249][ T7607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.771742][ T7610] ================================================================== [ 100.779979][ T7610] BUG: KCSAN: data-race in filemap_read / filemap_read [ 100.787130][ T7610] [ 100.789470][ T7610] read to 0xffff88811859b168 of 8 bytes by task 7607 on cpu 1: [ 100.797036][ T7610] filemap_read+0x6f/0xa00 [ 100.801535][ T7610] generic_file_read_iter+0x79/0x330 [ 100.806887][ T7610] ext4_file_read_iter+0x1cc/0x290 [ 100.812043][ T7610] copy_splice_read+0x3c1/0x5f0 [ 100.816960][ T7610] splice_direct_to_actor+0x290/0x680 [ 100.822366][ T7610] do_splice_direct+0xda/0x150 [ 100.827162][ T7610] do_sendfile+0x380/0x650 [ 100.831706][ T7610] __x64_sys_sendfile64+0x105/0x150 [ 100.836937][ T7610] x64_sys_call+0x2bb0/0x2ff0 [ 100.841652][ T7610] do_syscall_64+0xd2/0x200 [ 100.846182][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.852139][ T7610] [ 100.854485][ T7610] write to 0xffff88811859b168 of 8 bytes by task 7610 on cpu 0: [ 100.862149][ T7610] filemap_read+0x974/0xa00 [ 100.866678][ T7610] generic_file_read_iter+0x79/0x330 [ 100.871991][ T7610] ext4_file_read_iter+0x1cc/0x290 [ 100.877223][ T7610] copy_splice_read+0x3c1/0x5f0 [ 100.882196][ T7610] splice_direct_to_actor+0x290/0x680 [ 100.887580][ T7610] do_splice_direct+0xda/0x150 [ 100.892353][ T7610] do_sendfile+0x380/0x650 [ 100.896793][ T7610] __x64_sys_sendfile64+0x105/0x150 [ 100.902005][ T7610] x64_sys_call+0x2bb0/0x2ff0 [ 100.906720][ T7610] do_syscall_64+0xd2/0x200 [ 100.911237][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.917175][ T7610] [ 100.919520][ T7610] value changed: 0x00000000000000c2 -> 0x00000000000000c3 [ 100.926649][ T7610] [ 100.928995][ T7610] Reported by Kernel Concurrency Sanitizer on: [ 100.935164][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.0.1651 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 100.947245][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.957309][ T7610] ================================================================== [ 101.149265][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.