last executing test programs: 6.523475586s ago: executing program 3 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000380), &(0x7f0000000340)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 6.511784147s ago: executing program 3 (id=1629): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) wait4(0x0, 0x0, 0x8, 0x0) 4.701687378s ago: executing program 3 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4.643943824s ago: executing program 3 (id=1661): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)="2c3b6227da92ba7ecf8c600f1b7bfffbeccc6d9c189da8cff2882d49468b7483a49e411f5ee389f9609d74c158fd4bb2d63087bee9be4b492ab7d9d541f79c1dbf", 0x41}], 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x1f00, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='i', 0x1001, 0x8b}]) 3.813217217s ago: executing program 3 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 3.326321416s ago: executing program 3 (id=1695): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.326130146s ago: executing program 32 (id=1695): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.258413133s ago: executing program 1 (id=1727): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) 1.613967548s ago: executing program 4 (id=1732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.368433762s ago: executing program 5 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.310682508s ago: executing program 5 (id=1735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 1.307179808s ago: executing program 1 (id=1736): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.238954325s ago: executing program 1 (id=1739): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.19138047s ago: executing program 4 (id=1740): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 1.169121213s ago: executing program 0 (id=1742): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) accept4(r0, 0x0, 0x0, 0x400000000000800) 1.156307404s ago: executing program 5 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xdc1, &(0x7f0000001400)=ANY=[], 0x0) 1.142076385s ago: executing program 0 (id=1745): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$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") ftruncate(0xffffffffffffffff, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='io_uring_cqring_wait\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3d1a, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000040)) io_uring_enter(r2, 0x0, 0x235c, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 1.131943296s ago: executing program 1 (id=1746): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.008454328s ago: executing program 5 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r2, 0x0, 0x3, 0x800000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 907.378269ms ago: executing program 1 (id=1751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) 882.858921ms ago: executing program 1 (id=1752): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1d, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095", @ANYRES8=r0, @ANYRES32=r3, @ANYRES64=r0, @ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 862.310223ms ago: executing program 5 (id=1753): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)="2c3b6227da92ba7ecf8c600f1b7bfffbeccc6d9c189da8cff2882d49468b7483a49e411f5ee389f9609d74c158fd4bb2d63087bee9be4b492ab7d9d541f79c1dbf", 0x41}], 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x1f00, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='i', 0x1001, 0x8b}]) 787.264321ms ago: executing program 2 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 594.86438ms ago: executing program 2 (id=1756): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2bfffdffd}, 0xc) r1 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) fstatfs(r3, &(0x7f0000000180)=""/99) 538.252346ms ago: executing program 2 (id=1757): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 451.552684ms ago: executing program 2 (id=1758): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"/12, @ANYBLOB="11"], 0x20) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") 414.519788ms ago: executing program 5 (id=1759): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0}, &(0x7f0000000040)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0xffffff4f}], 0x1) close_range(r0, r1, 0x0) 331.335856ms ago: executing program 2 (id=1760): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 273.123372ms ago: executing program 4 (id=1761): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 227.029077ms ago: executing program 0 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010105, 0x4e25, 0x3, 'lc\x00', 0x5, 0xd, 0xf}, {@remote, 0x4e1d, 0x3, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 165.455943ms ago: executing program 2 (id=1764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0x20) r3 = dup(r2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 161.794394ms ago: executing program 4 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 133.593886ms ago: executing program 0 (id=1766): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x9, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 120.688487ms ago: executing program 4 (id=1767): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) lseek(r2, 0x3, 0x1) 100.859389ms ago: executing program 4 (id=1768): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) sendmsg$tipc(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 39.484716ms ago: executing program 0 (id=1769): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000004c0)='\n', &(0x7f0000000780), 0x20006, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 0s ago: executing program 0 (id=1770): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r2, 0x0, 0x2, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): t journal. Quota mode: none. [ 41.821223][ T4150] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.850061][ T3538] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.884321][ T3538] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.922006][ T3538] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.960210][ T3538] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.025510][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.104151][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 43.104164][ T29] audit: type=1326 audit(1763383379.383:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.134263][ T29] audit: type=1326 audit(1763383379.393:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.157620][ T29] audit: type=1326 audit(1763383379.413:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.212836][ T29] audit: type=1326 audit(1763383379.423:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.236214][ T29] audit: type=1326 audit(1763383379.433:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.259967][ T29] audit: type=1326 audit(1763383379.443:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.283234][ T29] audit: type=1326 audit(1763383379.453:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 43.335496][ T4223] netlink: 'syz.0.274': attribute type 13 has an invalid length. [ 43.537964][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.545178][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.664172][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.674540][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.778967][ T4228] tipc: Started in network mode [ 43.783949][ T4228] tipc: Node identity ac1414aa, cluster identity 4711 [ 43.844315][ T4228] tipc: Enabled bearer , priority 10 [ 43.852446][ T3531] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.868101][ T3531] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.894812][ T3531] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.919203][ T3531] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.040408][ T4259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.365920][ T29] audit: type=1400 audit(1763383380.643:691): avc: denied { name_connect } for pid=4264 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 44.560209][ T29] audit: type=1326 audit(1763383380.843:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 44.583584][ T29] audit: type=1326 audit(1763383380.843:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 44.645104][ T4271] mmap: syz.2.287 (4271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.964115][ T3407] tipc: Node number set to 2886997162 [ 45.291127][ T4317] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.670371][ T4388] netlink: 'syz.3.336': attribute type 12 has an invalid length. [ 47.739176][ T4398] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 47.750283][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 47.759219][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 47.759825][ T4398] team0: Port device dummy0 added [ 47.801316][ T4404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'. [ 47.805324][ T4398] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 47.822583][ T4402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.341'. [ 47.828624][ T4398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.865696][ T4398] team0: Failed to send options change via netlink (err -105) [ 47.873331][ T4398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.882952][ T4398] team0: Port device dummy0 removed [ 47.891667][ T4398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.900871][ T4410] syz_tun: entered allmulticast mode [ 47.917411][ T4410] pimreg: entered allmulticast mode [ 47.925474][ T4408] syz_tun: left allmulticast mode [ 48.027922][ T4427] netlink: 'syz.2.347': attribute type 7 has an invalid length. [ 48.035690][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 48.213804][ T4437] bridge: RTM_NEWNEIGH with invalid ether address [ 48.356631][ T4452] loop3: detected capacity change from 0 to 256 [ 48.363320][ T4452] vfat: Unknown parameter 'ÿÿÿÿŽ)µÆÕš©ñ"' [ 48.441801][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 48.441818][ T29] audit: type=1400 audit(1763383384.723:828): avc: denied { write } for pid=4457 comm="syz.3.361" lport=37759 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 48.490175][ T29] audit: type=1400 audit(1763383384.763:829): avc: denied { setopt } for pid=4457 comm="syz.3.361" lport=37759 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 48.593891][ T29] audit: type=1400 audit(1763383384.863:830): avc: denied { mounton } for pid=4472 comm="syz.4.367" path="/65/file0" dev="ramfs" ino=8216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 48.615960][ T29] audit: type=1400 audit(1763383384.863:831): avc: denied { read } for pid=4472 comm="syz.4.367" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.639110][ T29] audit: type=1400 audit(1763383384.863:832): avc: denied { open } for pid=4472 comm="syz.4.367" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.662610][ T29] audit: type=1400 audit(1763383384.863:833): avc: denied { ioctl } for pid=4472 comm="syz.4.367" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.688772][ T29] audit: type=1400 audit(1763383384.933:834): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.772578][ T4482] loop4: detected capacity change from 0 to 512 [ 48.791769][ T4482] EXT4-fs: dax option not supported [ 48.797396][ T29] audit: type=1400 audit(1763383385.073:835): avc: denied { mounton } for pid=4481 comm="syz.4.370" path="/66/bus" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.800793][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 48.854253][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 48.868624][ T29] audit: type=1400 audit(1763383385.143:836): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.918002][ T4487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.929907][ T4495] macvlan2: entered promiscuous mode [ 48.935568][ T4495] macvlan2: entered allmulticast mode [ 48.942776][ T4495] bond1: (slave macvlan2): Opening slave failed [ 49.284532][ T4512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.357796][ T4512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.410387][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 49.419350][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 49.479323][ T4512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.527672][ T4512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.546283][ T29] audit: type=1400 audit(1763383385.833:837): avc: denied { cpu } for pid=4523 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.566398][ T4524] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 49.575505][ T4524] ref_ctr increment failed for inode: 0x156 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888104345640 [ 49.607906][ T3451] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.622776][ T3451] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.639980][ T3451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.664172][ T3451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.701155][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 49.720825][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 49.740394][ T4538] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 49.740644][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 49.765118][ T4538] team0: Port device dummy0 added [ 49.783198][ T4538] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 49.791832][ T4538] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.808805][ T4538] team0: Failed to send options change via netlink (err -105) [ 49.826641][ T4538] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.836122][ T4538] team0: Port device dummy0 removed [ 49.856045][ T4538] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.932817][ T4558] wireguard0: entered promiscuous mode [ 49.938391][ T4558] wireguard0: entered allmulticast mode [ 49.958858][ T4564] SELinux: policydb version 0 does not match my version range 15-35 [ 49.967766][ T4564] SELinux: failed to load policy [ 50.121515][ T4586] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 50.144103][ T4586] team0: Port device dummy0 added [ 50.159317][ T4586] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 50.170240][ T4586] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.186188][ T4586] team0: Failed to send options change via netlink (err -105) [ 50.194630][ T4586] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.232476][ T4586] team0: Port device dummy0 removed [ 50.242233][ T4586] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.302363][ T4602] loop4: detected capacity change from 0 to 512 [ 50.318012][ T4602] EXT4-fs: Ignoring removed nobh option [ 50.330469][ T4602] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.422: iget: bad i_size value: 38620345925642 [ 50.359075][ T4602] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.422: couldn't read orphan inode 15 (err -117) [ 50.376876][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.610985][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.655012][ T4629] tipc: Started in network mode [ 50.660843][ T4629] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 50.675478][ T4629] tipc: Enabled bearer , priority 10 [ 50.753136][ T4639] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 50.766581][ T4639] team0: Port device dummy0 added [ 50.777726][ T4639] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 50.794900][ T4639] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.822366][ T4639] team0: Failed to send options change via netlink (err -105) [ 50.830245][ T4639] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.839887][ T4639] team0: Port device dummy0 removed [ 50.848550][ T4639] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.871392][ T4648] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.903214][ T4653] tipc: Started in network mode [ 50.908241][ T4653] tipc: Node identity 2, cluster identity 4711 [ 50.914474][ T4653] tipc: Node number set to 2 [ 51.047675][ T4648] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.107580][ T4648] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.205338][ T4648] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.262026][ T3531] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.283253][ T3531] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.292255][ T3531] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.318992][ T3531] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.446151][ T4667] IPv6: sit1: Disabled Multicast RS [ 51.461971][ T4667] sit1: entered allmulticast mode [ 51.794136][ T4249] tipc: Node number set to 4269801488 [ 52.150420][ T4703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.168512][ T4703] bond1: (slave veth3): Enslaving as an active interface with a down link [ 52.177175][ T4706] bridge: RTM_NEWNEIGH with invalid ether address [ 52.186332][ T4703] bond0: (slave dummy0): Releasing backup interface [ 52.199930][ T4703] bond1: (slave dummy0): making interface the new active one [ 52.209061][ T4703] dummy0: entered promiscuous mode [ 52.214582][ T4703] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 52.229242][ T4703] bond1 (unregistering): (slave veth3): Releasing active interface [ 52.239594][ T4703] bond1 (unregistering): (slave dummy0): Releasing active interface [ 52.249814][ T4703] bond1 (unregistering): Released all slaves [ 52.524918][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.559403][ T4744] sctp: [Deprecated]: syz.2.483 (pid 4744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 52.559403][ T4744] Use struct sctp_sack_info instead [ 52.724157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.784498][ T4759] validate_nla: 1 callbacks suppressed [ 52.784517][ T4759] netlink: 'syz.3.489': attribute type 12 has an invalid length. [ 52.865000][ T4766] loop3: detected capacity change from 0 to 512 [ 52.872212][ T4766] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.067072][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.076333][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.404478][ T3503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.412805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.477564][ T4800] __nla_validate_parse: 8 callbacks suppressed [ 53.477585][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 53.497743][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.506325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.567113][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.645027][ T3407] IPVS: starting estimator thread 0... [ 53.665933][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 53.665952][ T29] audit: type=1400 audit(1763383389.953:1557): avc: denied { mounton } for pid=4811 comm="syz.3.515" path="/100/file0" dev="proc" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 53.721092][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 53.730001][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 53.745898][ T29] audit: type=1400 audit(1763383389.983:1558): avc: denied { mount } for pid=4811 comm="syz.3.515" name="/" dev="hugetlbfs" ino=9509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 53.768969][ T4810] IPVS: using max 2400 ests per chain, 120000 per kthread [ 53.788225][ T29] audit: type=1326 audit(1763383390.063:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 53.811762][ T29] audit: type=1326 audit(1763383390.063:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 53.835436][ T29] audit: type=1326 audit(1763383390.063:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 53.911973][ T29] audit: type=1400 audit(1763383390.183:1562): avc: denied { write } for pid=4818 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.984479][ T4832] loop3: detected capacity change from 0 to 512 [ 53.994331][ T29] audit: type=1400 audit(1763383390.283:1563): avc: denied { execute } for pid=4827 comm="syz.1.520" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 54.093866][ T4832] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 54.103967][ T29] audit: type=1400 audit(1763383390.373:1564): avc: denied { mounton } for pid=4837 comm="syz.0.526" path="/94/file0" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 54.133320][ T4832] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.150183][ T4832] EXT4-fs (loop3): mount failed [ 54.157535][ T29] audit: type=1400 audit(1763383390.443:1565): avc: denied { mount } for pid=4846 comm="syz.4.530" name="/" dev="configfs" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.307219][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 54.466207][ T4875] loop4: detected capacity change from 0 to 512 [ 54.480972][ T4875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.521258][ T4875] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.535154][ T4875] EXT4-fs (loop4): 1 truncate cleaned up [ 54.541299][ T4875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.577249][ T4881] netlink: 'syz.3.542': attribute type 10 has an invalid length. [ 54.585317][ T4881] ipvlan0: entered allmulticast mode [ 54.590629][ T4881] veth0_vlan: entered allmulticast mode [ 54.597716][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.597984][ T4881] team0: Device ipvlan0 failed to register rx_handler [ 54.614569][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.624547][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.647055][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.664530][ T4887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 54.844742][ T4903] bridge: RTM_NEWNEIGH with invalid ether address [ 55.107134][ T4924] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 55.184424][ T4932] netlink: 'syz.2.566': attribute type 27 has an invalid length. [ 55.274595][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.281793][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.332327][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.343860][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.402947][ T3538] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.424476][ T3538] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.454239][ T3538] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.476035][ T4943] loop1: detected capacity change from 0 to 512 [ 55.493641][ T3538] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.579438][ T4952] loop4: detected capacity change from 0 to 512 [ 55.608085][ T4952] EXT4-fs: Ignoring removed i_version option [ 55.614303][ T4952] EXT4-fs: Ignoring removed bh option [ 55.629138][ T4956] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 55.637969][ T4956] ref_ctr increment failed for inode: 0x28e offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810005f8c0 [ 55.660402][ T4943] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.570: EA inode hash validation failed [ 55.675337][ T4952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.688451][ T4952] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.692169][ T4943] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.570: corrupted inode contents [ 55.710902][ T4943] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.570: mark_inode_dirty error [ 55.737082][ T4943] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.570: corrupted inode contents [ 55.754413][ T4943] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.570: mark_inode_dirty error [ 55.771736][ T4943] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.570: mark inode dirty (error -117) [ 55.787831][ T4943] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 55.804340][ T4943] EXT4-fs (loop1): 1 orphan inode deleted [ 55.810679][ T4943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.859726][ T4942] delete_channel: no stack [ 55.866900][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.878583][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.938776][ T4980] loop1: detected capacity change from 0 to 512 [ 55.960666][ T4980] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.978602][ T4980] EXT4-fs (loop1): mount failed [ 56.024483][ T4992] netlink: 'syz.4.588': attribute type 10 has an invalid length. [ 56.049183][ T4992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.588'. [ 56.168836][ T4992] team0: Port device geneve1 added [ 56.286605][ T5014] vhci_hcd: invalid port number 96 [ 56.291802][ T5014] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 56.476861][ T5032] loop4: detected capacity change from 0 to 512 [ 56.484274][ T5032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.512968][ T5032] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.604: invalid indirect mapped block 4294967295 (level 0) [ 56.574807][ T5032] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.604: invalid indirect mapped block 4294967295 (level 1) [ 56.622217][ T5032] EXT4-fs (loop4): 1 orphan inode deleted [ 56.628034][ T5032] EXT4-fs (loop4): 1 truncate cleaned up [ 56.726629][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.951481][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.006573][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 57.024398][ T5041] bridge_slave_1: left allmulticast mode [ 57.030088][ T5041] bridge_slave_1: left promiscuous mode [ 57.035828][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.075515][ T5041] bridge_slave_0: left allmulticast mode [ 57.081232][ T5041] bridge_slave_0: left promiscuous mode [ 57.087004][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.163165][ T5052] loop1: detected capacity change from 0 to 512 [ 57.170850][ T5052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.185864][ T5052] EXT4-fs (loop1): 1 truncate cleaned up [ 57.194987][ T5052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.232268][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.549846][ T5074] loop3: detected capacity change from 0 to 256 [ 57.559303][ T5074] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.661813][ T5076] $Hÿ: renamed from bond0 [ 57.668095][ T5076] $Hÿ: entered promiscuous mode [ 57.673199][ T5076] bond_slave_0: entered promiscuous mode [ 57.679069][ T5076] bond_slave_1: entered promiscuous mode [ 57.724179][ T4249] net_ratelimit: 11 callbacks suppressed [ 57.724196][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.995143][ T5112] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.055936][ T5112] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.116146][ T5112] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.181356][ T5112] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.237492][ T3503] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.242162][ T5126] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 58.254342][ T5126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 58.255039][ T3503] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.350134][ T5126] team0: Port device geneve1 added [ 58.383547][ T3503] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.392309][ T3503] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.416527][ T5126] syz.1.643 (5126) used greatest stack depth: 9288 bytes left [ 58.500456][ T5146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.652'. [ 58.572457][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 58.594552][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 58.605594][ T894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.613927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.627556][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 58.647783][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 58.674136][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 58.675566][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 58.675584][ T29] audit: type=1326 audit(1763383394.963:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.719231][ T29] audit: type=1326 audit(1763383394.993:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.742662][ T29] audit: type=1326 audit(1763383395.003:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.746471][ T5168] netlink: 'syz.2.659': attribute type 4 has an invalid length. [ 58.766308][ T29] audit: type=1326 audit(1763383395.003:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.789922][ T5168] netlink: 'syz.2.659': attribute type 4 has an invalid length. [ 58.797343][ T29] audit: type=1326 audit(1763383395.003:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.828465][ T29] audit: type=1326 audit(1763383395.003:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.851880][ T29] audit: type=1326 audit(1763383395.003:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.875251][ T29] audit: type=1326 audit(1763383395.003:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.898633][ T29] audit: type=1326 audit(1763383395.003:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.922009][ T29] audit: type=1326 audit(1763383395.003:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 58.946076][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.974546][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 58.987704][ T5172] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 58.996382][ T5172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.661'. [ 59.021697][ T5172] team0: Port device geneve1 added [ 59.028739][ T3521] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.045085][ T3521] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054204][ T3521] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.062902][ T3521] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.112232][ T5183] loop3: detected capacity change from 0 to 512 [ 59.120066][ T5183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.135566][ T5183] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.665: invalid indirect mapped block 4294967295 (level 0) [ 59.150408][ T5183] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.665: invalid indirect mapped block 4294967295 (level 1) [ 59.165305][ T5183] EXT4-fs (loop3): 1 orphan inode deleted [ 59.171111][ T5183] EXT4-fs (loop3): 1 truncate cleaned up [ 59.177499][ T5183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.206363][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.244688][ T3521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.253014][ T3521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.261245][ T894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.269455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.277671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.285794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.420844][ T5206] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.670'. [ 59.430038][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'. [ 59.591994][ T5222] loop4: detected capacity change from 0 to 512 [ 59.610088][ T5222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.629367][ T5222] EXT4-fs (loop4): 1 truncate cleaned up [ 59.641243][ T5222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.659259][ T5222] bridge_slave_1: left allmulticast mode [ 59.665080][ T5222] bridge_slave_1: left promiscuous mode [ 59.670883][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.698506][ T5222] bridge_slave_0: left allmulticast mode [ 59.704257][ T5222] bridge_slave_0: left promiscuous mode [ 59.709974][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.062362][ T5253] syzkaller0: entered allmulticast mode [ 60.068362][ T5253] syzkaller0: entered promiscuous mode [ 60.078237][ T5255] : renamed from bond_slave_0 (while UP) [ 60.089252][ T5253] syzkaller0 (unregistering): left allmulticast mode [ 60.096087][ T5253] syzkaller0 (unregistering): left promiscuous mode [ 60.118540][ T5259] loop3: detected capacity change from 0 to 512 [ 60.125631][ T5259] EXT4-fs: Ignoring removed nobh option [ 60.132732][ T5259] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.698: iget: bad i_size value: 38620345925642 [ 60.145698][ T5259] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.698: couldn't read orphan inode 15 (err -117) [ 60.161267][ T5259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.164741][ T5262] veth2: entered promiscuous mode [ 60.178901][ T5262] veth2: entered allmulticast mode [ 60.225923][ T5264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.338183][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.643034][ T5303] loop3: detected capacity change from 0 to 128 [ 60.653447][ T5303] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.694371][ T5303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.063239][ T5318] loop1: detected capacity change from 0 to 512 [ 61.069987][ T5318] EXT4-fs: Ignoring removed nobh option [ 61.077320][ T5318] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.717: iget: bad i_size value: 38620345925642 [ 61.091459][ T5318] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.717: couldn't read orphan inode 15 (err -117) [ 61.104488][ T5318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.280042][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.320167][ T5330] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 61.333140][ T5330] team0: Port device geneve1 added [ 61.411391][ T5338] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 61.437435][ T5338] team0: Port device dummy0 added [ 61.453521][ T5338] netlink: 'syz.2.728': attribute type 10 has an invalid length. [ 61.476710][ T5338] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.506612][ T5338] team0: Failed to send options change via netlink (err -105) [ 61.539288][ T5338] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.550777][ T5338] team0: Port device dummy0 removed [ 61.560621][ T5338] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.812543][ T5358] netem: change failed [ 61.843933][ T5360] loop1: detected capacity change from 0 to 1024 [ 61.856340][ T5360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.882452][ T5360] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.737: Allocating blocks 449-513 which overlap fs metadata [ 61.899401][ T5359] EXT4-fs (loop1): pa ffff888106e8b4d0: logic 48, phys. 177, len 21 [ 61.907600][ T5359] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 61.928261][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.134098][ T5385] sch_fq: defrate 0 ignored. [ 62.197290][ T5389] netlink: 'syz.3.750': attribute type 12 has an invalid length. [ 62.269402][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.755326][ T5423] sch_fq: defrate 0 ignored. [ 63.684234][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 63.684253][ T29] audit: type=1326 audit(1763383399.963:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3ac98b789 code=0x7ffc0000 [ 63.726122][ T5532] veth0_macvtap: entered allmulticast mode [ 63.747397][ T29] audit: type=1326 audit(1763383399.973:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3ac9e6567 code=0x7ffc0000 [ 63.770848][ T29] audit: type=1326 audit(1763383399.973:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3ac98b789 code=0x7ffc0000 [ 63.794128][ T29] audit: type=1326 audit(1763383399.973:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 63.817579][ T29] audit: type=1326 audit(1763383399.973:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3ac9e6567 code=0x7ffc0000 [ 63.840952][ T29] audit: type=1326 audit(1763383399.973:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3ac98b789 code=0x7ffc0000 [ 63.864230][ T29] audit: type=1326 audit(1763383399.973:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 63.887503][ T29] audit: type=1326 audit(1763383399.973:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3ac9e6567 code=0x7ffc0000 [ 63.910767][ T29] audit: type=1326 audit(1763383399.973:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3ac98b789 code=0x7ffc0000 [ 63.934054][ T29] audit: type=1326 audit(1763383399.973:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 63.976387][ T5537] loop4: detected capacity change from 0 to 1024 [ 64.037127][ T5537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.063215][ T5545] __nla_validate_parse: 13 callbacks suppressed [ 64.063236][ T5545] netlink: 96 bytes leftover after parsing attributes in process `syz.2.812'. [ 64.100545][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 64.114290][ T5537] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.808: Allocating blocks 449-513 which overlap fs metadata [ 64.132663][ T5555] bridge_slave_1: left allmulticast mode [ 64.138605][ T5555] bridge_slave_1: left promiscuous mode [ 64.144522][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.170198][ T5534] EXT4-fs (loop4): pa ffff8881006201c0: logic 48, phys. 177, len 21 [ 64.178362][ T5534] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 64.194594][ T5555] bridge_slave_0: left allmulticast mode [ 64.200539][ T5555] bridge_slave_0: left promiscuous mode [ 64.206331][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.229486][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.303154][ T5574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5574 comm=syz.0.825 [ 64.458800][ T5593] loop3: detected capacity change from 0 to 164 [ 64.470032][ T5593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.479809][ T5593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 64.489074][ T5593] Symlink component flag not implemented [ 64.494760][ T5593] Symlink component flag not implemented [ 64.500973][ T5593] Symlink component flag not implemented (7) [ 64.507054][ T5593] Symlink component flag not implemented (116) [ 64.628440][ T5597] syz_tun: entered allmulticast mode [ 64.638234][ T5596] dvmrp8: entered allmulticast mode [ 64.700962][ T5595] syz_tun: left allmulticast mode [ 65.017381][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 65.031228][ T5606] bridge_slave_1: left allmulticast mode [ 65.037004][ T5606] bridge_slave_1: left promiscuous mode [ 65.042677][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.051185][ T5606] bridge_slave_0: left allmulticast mode [ 65.056933][ T5606] bridge_slave_0: left promiscuous mode [ 65.062768][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.315104][ T5628] IPVS: Error connecting to the multicast addr [ 65.902477][ T5655] loop4: detected capacity change from 0 to 128 [ 65.947291][ T5657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.858'. [ 65.986871][ T5659] syz.4.857: attempt to access beyond end of device [ 65.986871][ T5659] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 66.000769][ T5659] syz.4.857: attempt to access beyond end of device [ 66.000769][ T5659] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 66.015183][ T5659] syz.4.857: attempt to access beyond end of device [ 66.015183][ T5659] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 66.049036][ T5659] syz.4.857: attempt to access beyond end of device [ 66.049036][ T5659] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 66.142048][ T5659] syz.4.857: attempt to access beyond end of device [ 66.142048][ T5659] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 66.166215][ T5659] syz.4.857: attempt to access beyond end of device [ 66.166215][ T5659] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 66.192201][ T5659] syz.4.857: attempt to access beyond end of device [ 66.192201][ T5659] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 66.635312][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 66.652908][ T5691] loop4: detected capacity change from 0 to 1024 [ 66.667744][ T5691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.702074][ T5691] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.870: Allocating blocks 449-513 which overlap fs metadata [ 66.722084][ T5690] EXT4-fs (loop4): pa ffff888100620150: logic 48, phys. 177, len 21 [ 66.730148][ T5690] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 66.750802][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.861900][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 66.872027][ T5715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.879'. [ 66.929155][ T5722] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 66.939994][ T5722] bond0: (slave dummy0): Releasing backup interface [ 66.949376][ T5722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.958514][ T5722] team0: Failed to send options change via netlink (err -105) [ 66.966172][ T5722] team0: Port device dummy0 added [ 66.974832][ T5722] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 66.983425][ T5722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.988813][ T5724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.884'. [ 67.004321][ T5722] team0: Failed to send options change via netlink (err -105) [ 67.024943][ T5722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.035292][ T5722] team0: Port device dummy0 removed [ 67.042566][ T5722] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.140426][ T5738] loop4: detected capacity change from 0 to 1024 [ 67.155779][ T5738] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.889: Failed to acquire dquot type 0 [ 67.170015][ T5738] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 67.184924][ T5738] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.889: corrupted inode contents [ 67.199768][ T5738] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.889: mark_inode_dirty error [ 67.211417][ T5738] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.889: corrupted inode contents [ 67.223904][ T5738] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.889: mark_inode_dirty error [ 67.235428][ T5738] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.889: corrupted inode contents [ 67.250297][ T5738] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.889: mark_inode_dirty error [ 67.261828][ T5738] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.889: corrupted inode contents [ 67.273985][ T5738] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 67.283225][ T5738] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.889: corrupted inode contents [ 67.295335][ T5738] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.889: mark_inode_dirty error [ 67.306841][ T5738] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 67.316300][ T5738] EXT4-fs (loop4): 1 truncate cleaned up [ 67.322561][ T5738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.360425][ T5754] geneve2: entered promiscuous mode [ 67.365731][ T5754] geneve2: entered allmulticast mode [ 67.389640][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.467971][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 67.476936][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 67.583016][ T5782] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.773537][ T5782] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.837365][ T5806] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 67.931956][ T5782] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.031366][ T5818] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.190938][ T5782] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.381492][ T3451] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.389790][ T3451] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.398041][ T3451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406348][ T3451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.504169][ T5836] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 68.522440][ T5836] bond0: (slave dummy0): Releasing backup interface [ 68.531863][ T5836] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.546076][ T5836] team0: Failed to send options change via netlink (err -105) [ 68.553611][ T5836] team0: Port device dummy0 added [ 68.560087][ T5840] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 68.569554][ T5840] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.580336][ T5840] team0: Failed to send options change via netlink (err -105) [ 68.588005][ T5840] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.597086][ T5840] team0: Port device dummy0 removed [ 68.605987][ T5840] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.753722][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 68.753742][ T29] audit: type=1400 audit(1763383405.033:2687): avc: denied { append } for pid=5857 comm="syz.4.939" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.035871][ T29] audit: type=1326 audit(1763383405.313:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.059970][ T29] audit: type=1326 audit(1763383405.313:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.083478][ T29] audit: type=1326 audit(1763383405.313:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.106902][ T29] audit: type=1326 audit(1763383405.313:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.130284][ T29] audit: type=1326 audit(1763383405.313:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.154270][ T29] audit: type=1326 audit(1763383405.313:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.177620][ T29] audit: type=1326 audit(1763383405.313:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.201358][ T29] audit: type=1326 audit(1763383405.313:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.224771][ T29] audit: type=1326 audit(1763383405.313:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 69.324177][ T5879] $Hÿ: left promiscuous mode [ 69.329192][ T5879] bond_slave_0: left promiscuous mode [ 69.334708][ T5879] bond_slave_1: left promiscuous mode [ 69.607182][ T5894] netlink: 'syz.1.951': attribute type 3 has an invalid length. [ 69.614991][ T5894] __nla_validate_parse: 1 callbacks suppressed [ 69.615009][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 69.630628][ T5896] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 69.710317][ T5905] loop4: detected capacity change from 0 to 256 [ 69.876478][ T5934] netlink: 64 bytes leftover after parsing attributes in process `syz.1.970'. [ 69.938290][ T5938] capability: warning: `syz.1.972' uses deprecated v2 capabilities in a way that may be insecure [ 70.243069][ T5968] loop3: detected capacity change from 0 to 256 [ 70.256276][ T5968] FAT-fs (loop3): bogus number of FAT sectors [ 70.262470][ T5968] FAT-fs (loop3): Can't find a valid FAT filesystem [ 72.011136][ T6021] syz.2.1005 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.250141][ T6032] netlink: 'syz.2.1009': attribute type 4 has an invalid length. [ 73.112279][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 74.192076][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 74.192093][ T29] audit: type=1400 audit(1763383410.482:2838): avc: denied { read write } for pid=6078 comm="syz.4.1029" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.223007][ T29] audit: type=1400 audit(1763383410.482:2839): avc: denied { open } for pid=6078 comm="syz.4.1029" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.256664][ T6079] loop4: detected capacity change from 0 to 8192 [ 74.279816][ T6085] delete_channel: no stack [ 74.284422][ T6085] delete_channel: no stack [ 74.305812][ T6079] loop4: p2 p3 p4 [ 74.309694][ T6079] loop4: p2 start 164919041 is beyond EOD, truncated [ 74.316439][ T6079] loop4: p3 size 66846464 extends beyond EOD, truncated [ 74.324518][ T6079] loop4: p4 size 37048832 extends beyond EOD, truncated [ 74.481619][ T29] audit: type=1326 audit(1763383410.772:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.505211][ T29] audit: type=1326 audit(1763383410.772:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.537146][ T29] audit: type=1326 audit(1763383410.822:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.560673][ T29] audit: type=1326 audit(1763383410.822:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.584097][ T29] audit: type=1326 audit(1763383410.822:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.607600][ T29] audit: type=1326 audit(1763383410.822:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.625818][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105591a00: rx timeout, send abort [ 74.631129][ T29] audit: type=1326 audit(1763383410.822:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.639456][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888105591a00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.662703][ T29] audit: type=1326 audit(1763383410.822:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 74.710476][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 74.770080][ T6109] tipc: Started in network mode [ 74.775008][ T6109] tipc: Node identity ac14142f, cluster identity 4711 [ 74.787976][ T6109] tipc: New replicast peer: 0.0.0.0 [ 74.793630][ T6109] tipc: Enabled bearer , priority 10 [ 74.801248][ T6113] wg2: entered promiscuous mode [ 74.806231][ T6113] wg2: entered allmulticast mode [ 74.821988][ T6109] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 74.848166][ T6119] netlink: 'syz.2.1047': attribute type 39 has an invalid length. [ 74.971200][ T6130] loop4: detected capacity change from 0 to 2048 [ 74.991441][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 75.017345][ T6130] Alternate GPT is invalid, using primary GPT. [ 75.023873][ T6130] loop4: p2 p3 p7 [ 75.070285][ T6134] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.084500][ T6134] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.152325][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 75.212591][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.223245][ T6125] net_ratelimit: 11 callbacks suppressed [ 75.223261][ T6125] Set syz1 is full, maxelem 65536 reached [ 75.383795][ T6158] loop1: detected capacity change from 0 to 512 [ 75.406294][ T6160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6160 comm=syz.4.1065 [ 75.418868][ T6160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6160 comm=syz.4.1065 [ 75.436380][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.452716][ T6158] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.487184][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 75.493529][ T3914] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.504442][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.896153][ T6204] netlink: 'syz.1.1078': attribute type 21 has an invalid length. [ 75.905779][ T4254] tipc: Node number set to 2886997039 [ 75.972717][ T6204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1078'. [ 75.975371][ T6212] loop4: detected capacity change from 0 to 512 [ 76.013795][ T6212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.033612][ T6212] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.125418][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.477196][ T6235] unsupported nla_type 46065 [ 76.657989][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 76.685563][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 76.908077][ T6275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1099'. [ 76.971161][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.978821][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.986660][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.002890][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.010378][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.017812][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.025388][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.033005][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.040450][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.047889][ T894] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.069872][ T894] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 77.096106][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'. [ 77.129795][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1105'. [ 77.174726][ T6302] loop4: detected capacity change from 0 to 512 [ 77.183557][ T6302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.190176][ T6297] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 77.192329][ T6302] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.250080][ T6302] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1107: Allocating blocks 41-42 which overlap fs metadata [ 77.282956][ T6302] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1107: Allocating blocks 41-42 which overlap fs metadata [ 77.300559][ T6302] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1107: Failed to acquire dquot type 1 [ 77.321041][ T6302] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 77.335987][ T6302] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.1107: corrupted inode contents [ 77.349275][ T6302] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.1107: mark_inode_dirty error [ 77.375999][ T6302] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.1107: corrupted inode contents [ 77.388404][ T6302] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1107: mark_inode_dirty error [ 77.409848][ T6302] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.1107: corrupted inode contents [ 77.446169][ T6302] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 77.473456][ T6302] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.1107: corrupted inode contents [ 77.519591][ T6302] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.1107: mark_inode_dirty error [ 77.550978][ T6302] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 77.569254][ T6302] EXT4-fs (loop4): 1 truncate cleaned up [ 77.586369][ T6302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.658840][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.204464][ T6430] netlink: 'syz.3.1124': attribute type 13 has an invalid length. [ 78.262483][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 78.364971][ T6453] bridge0: port 1(gretap0) entered blocking state [ 78.371535][ T6453] bridge0: port 1(gretap0) entered disabled state [ 78.379387][ T6453] gretap0: entered allmulticast mode [ 78.390053][ T6453] gretap0: entered promiscuous mode [ 78.398679][ T6453] gretap0: left allmulticast mode [ 78.403791][ T6453] gretap0: left promiscuous mode [ 78.409137][ T6453] bridge0: port 1(gretap0) entered disabled state [ 78.442163][ T6465] $Hÿ: renamed from bond0 [ 78.448573][ T6465] $Hÿ: entered promiscuous mode [ 78.453709][ T6465] bond_slave_0: entered promiscuous mode [ 78.459841][ T6465] bond_slave_1: entered promiscuous mode [ 78.484191][ T6468] bridge: RTM_NEWNEIGH with invalid ether address [ 78.672056][ T6483] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 78.679654][ T6483] 0ªî{X¹¦: entered allmulticast mode [ 78.685814][ T6483] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 79.298295][ T6501] loop1: detected capacity change from 0 to 128 [ 79.304819][ T6501] EXT4-fs: Ignoring removed nobh option [ 79.328555][ T6501] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.342533][ T6501] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.378010][ T6501] EXT4-fs (loop1): shut down requested (1) [ 79.394090][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 79.394108][ T29] audit: type=1400 audit(1763383415.681:2991): avc: denied { create } for pid=6500 comm="syz.1.1146" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 79.496704][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.623878][ T6527] loop3: detected capacity change from 0 to 128 [ 79.669234][ T6527] syz.3.1157: attempt to access beyond end of device [ 79.669234][ T6527] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 80.098325][ T29] audit: type=1400 audit(1763383416.391:2992): avc: denied { ioctl } for pid=6559 comm="syz.2.1169" path="socket:[13998]" dev="sockfs" ino=13998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.149876][ T6560] __nla_validate_parse: 3 callbacks suppressed [ 80.149949][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1168'. [ 80.187286][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 80.237810][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1172'. [ 80.272756][ T6560] veth3: entered promiscuous mode [ 80.278495][ T6560] veth3: entered allmulticast mode [ 80.402113][ T6583] loop3: detected capacity change from 0 to 512 [ 80.444551][ T29] audit: type=1326 audit(1763383416.731:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 80.468114][ T29] audit: type=1326 audit(1763383416.731:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 80.491522][ T29] audit: type=1326 audit(1763383416.731:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 80.515019][ T29] audit: type=1326 audit(1763383416.731:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3ac9ef703 code=0x7ffc0000 [ 80.538283][ T29] audit: type=1326 audit(1763383416.731:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3ac9ef703 code=0x7ffc0000 [ 80.538756][ T6583] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1177: corrupted in-inode xattr: e_value size too large [ 80.561656][ T29] audit: type=1326 audit(1763383416.731:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 80.599065][ T29] audit: type=1326 audit(1763383416.731:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 80.635232][ T29] audit: type=1326 audit(1763383416.791:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 80.669289][ T6583] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1177: couldn't read orphan inode 15 (err -117) [ 80.693303][ T6583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.832294][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.992678][ T6615] loop3: detected capacity change from 0 to 512 [ 81.048374][ T6615] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 81.068977][ T6615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 81.085720][ T6615] System zones: 1-12 [ 81.096347][ T6615] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1185: corrupted in-inode xattr: e_value size too large [ 81.130320][ T6615] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1185: couldn't read orphan inode 15 (err -117) [ 81.170035][ T6615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.356861][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.450414][ T6634] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1195'. [ 81.768259][ T6617] Set syz1 is full, maxelem 65536 reached [ 81.783472][ T6644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1200'. [ 81.817290][ T6650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.920257][ T6650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.944934][ T6666] netlink: 'syz.4.1208': attribute type 1 has an invalid length. [ 81.998379][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.007934][ T6666] bond1: (slave batadv1): making interface the new active one [ 82.017332][ T6666] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 82.032023][ T6650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.133246][ T6650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.197045][ T3541] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.209898][ T6697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1219'. [ 82.219728][ T3519] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.235497][ T3519] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.256841][ T6697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1219'. [ 82.266037][ T3519] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.512998][ T6714] tipc: Started in network mode [ 82.517958][ T6714] tipc: Node identity ac14140f, cluster identity 4711 [ 82.541413][ T6714] tipc: New replicast peer: 255.255.255.83 [ 82.547401][ T6714] tipc: Enabled bearer , priority 10 [ 82.588725][ T6712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1225'. [ 82.712540][ T6726] tipc: Enabled bearer , priority 0 [ 82.723376][ T6726] tipc: Disabling bearer [ 82.760534][ T6730] loop4: detected capacity change from 0 to 512 [ 82.767798][ T6730] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.779411][ T6730] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1233: inode has both inline data and extents flags [ 82.792928][ T6730] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1233: couldn't read orphan inode 15 (err -117) [ 82.805968][ T6730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.832713][ T6730] EXT4-fs (loop4): shut down requested (2) [ 82.862162][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.124995][ T6771] ip6tnl0: entered promiscuous mode [ 83.130474][ T6771] ip6tnl0: entered allmulticast mode [ 83.496734][ T6792] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1260'. [ 83.506777][ T6792] netlink: zone id is out of range [ 83.511948][ T6792] netlink: zone id is out of range [ 83.518182][ T6792] netlink: zone id is out of range [ 83.523451][ T6792] netlink: zone id is out of range [ 83.529149][ T6792] netlink: zone id is out of range [ 83.534387][ T6792] netlink: del zone limit has 8 unknown bytes [ 83.567804][ T894] tipc: Node number set to 2886997007 [ 83.853844][ T6800] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1263'. [ 84.527016][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 84.527032][ T29] audit: type=1326 audit(1763383420.821:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.592065][ T29] audit: type=1326 audit(1763383420.821:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.615682][ T29] audit: type=1326 audit(1763383420.821:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.639143][ T29] audit: type=1326 audit(1763383420.821:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.662586][ T29] audit: type=1326 audit(1763383420.821:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.686204][ T29] audit: type=1326 audit(1763383420.821:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.709702][ T29] audit: type=1326 audit(1763383420.821:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.733330][ T29] audit: type=1326 audit(1763383420.821:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.756820][ T29] audit: type=1326 audit(1763383420.831:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.780336][ T29] audit: type=1326 audit(1763383420.831:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 84.950802][ T6849] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.017540][ T6849] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.106604][ T6849] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.262608][ T6849] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.331987][ T6884] loop3: detected capacity change from 0 to 1024 [ 85.342269][ T6884] EXT4-fs: Ignoring removed orlov option [ 85.348078][ T6884] EXT4-fs: Ignoring removed orlov option [ 85.352093][ T3495] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.378130][ T3495] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.386446][ T3495] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.403306][ T6884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.410993][ T3495] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.450451][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.746612][ T6924] __nla_validate_parse: 1 callbacks suppressed [ 85.746628][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 85.819974][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1315'. [ 86.063949][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'. [ 86.268608][ T6969] bond0: (slave dummy0): Releasing backup interface [ 86.279293][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'. [ 86.300621][ T6969] bond0: (slave 30): Releasing backup interface [ 86.358987][ T6969] bond0: (slave bond_slave_1): Releasing backup interface [ 86.398432][ T6969] team0: Port device team_slave_0 removed [ 86.407338][ T6969] team0: Port device team_slave_1 removed [ 86.414269][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.422461][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.431247][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.438729][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.449582][ T6969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.476647][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 86.486050][ T6984] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 86.497642][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 86.527445][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 86.545117][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 86.555995][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'. [ 86.559988][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 86.816775][ T7003] loop1: detected capacity change from 0 to 2048 [ 86.857651][ T7003] loop1: p2 < > p4 [ 86.862113][ T7003] loop1: p4 size 262144 extends beyond EOD, truncated [ 86.971119][ T7012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7012 comm=syz.1.1351 [ 87.055430][ T7016] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.099062][ T7016] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.155764][ T7016] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.210112][ T7016] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.276504][ T3493] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.295727][ T3493] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.321062][ T3493] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.364387][ T3493] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.387678][ T7027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7027 comm=syz.2.1357 [ 87.400296][ T7027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7027 comm=syz.2.1357 [ 87.474645][ T7031] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 87.522377][ T7033] capability: warning: `syz.2.1359' uses 32-bit capabilities (legacy support in use) [ 87.550240][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.568632][ T7037] vlan2: entered allmulticast mode [ 87.573808][ T7037] veth1: entered allmulticast mode [ 87.581214][ T7037] bond0: (slave vlan2): Opening slave failed [ 88.018862][ T7059] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7059 comm=syz.1.1370 [ 88.032167][ T7059] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7059 comm=syz.1.1370 [ 88.218786][ T7070] bond0: (slave dummy0): Releasing backup interface [ 88.248414][ T7070] bond0: (slave bond_slave_0): Releasing backup interface [ 88.258916][ T7070] bond0: (slave bond_slave_1): Releasing backup interface [ 88.273345][ T7070] team0: Port device team_slave_0 removed [ 88.282831][ T7070] team0: Port device team_slave_1 removed [ 88.290199][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.297811][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.308204][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.315722][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.326766][ T7070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.683702][ T7095] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 89.302073][ T7114] $Hÿ: (slave dummy0): Releasing backup interface [ 89.325713][ T7114] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 89.351035][ T7114] bond_slave_0: left promiscuous mode [ 89.368147][ T7114] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 89.411301][ T7114] bond_slave_1: left promiscuous mode [ 89.433086][ T7114] team0: Port device team_slave_0 removed [ 89.448398][ T7114] team0: Port device team_slave_1 removed [ 89.461951][ T7114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.469810][ T7126] netlink: 'syz.4.1393': attribute type 13 has an invalid length. [ 89.478793][ T7114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.538085][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 89.538099][ T29] audit: type=1326 audit(1763383425.830:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff071b81f85 code=0x7ffc0000 [ 89.616209][ T29] audit: type=1326 audit(1763383425.830:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff071b81f85 code=0x7ffc0000 [ 89.640339][ T29] audit: type=1326 audit(1763383425.830:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff071b81f85 code=0x7ffc0000 [ 89.663801][ T29] audit: type=1326 audit(1763383425.830:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff071b81f85 code=0x7ffc0000 [ 89.688182][ T29] audit: type=1326 audit(1763383425.830:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff071b81f85 code=0x7ffc0000 [ 89.711650][ T29] audit: type=1326 audit(1763383425.850:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 89.718890][ T7136] loop3: detected capacity change from 0 to 128 [ 89.735949][ T29] audit: type=1326 audit(1763383425.850:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 89.765484][ T29] audit: type=1326 audit(1763383425.890:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7129 comm="syz.2.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 89.789618][ T29] audit: type=1326 audit(1763383425.890:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7129 comm="syz.2.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 89.813138][ T29] audit: type=1326 audit(1763383425.890:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7129 comm="syz.2.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb3ac9ef6c9 code=0x7ffc0000 [ 90.039690][ T7147] ip6gre1: entered promiscuous mode [ 90.153132][ T7165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7165 comm=syz.0.1412 [ 90.195247][ T7170] netlink: 'syz.4.1424': attribute type 4 has an invalid length. [ 90.196720][ T7172] netlink: 'syz.0.1414': attribute type 13 has an invalid length. [ 91.014846][ T7208] netlink: 'syz.1.1428': attribute type 13 has an invalid length. [ 91.112327][ T7214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.208921][ T7214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.250659][ T7214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.319413][ T7214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.376088][ T3489] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.392149][ T3489] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.404777][ T3489] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.421302][ T3489] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.550464][ T7238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7238 comm=syz.2.1441 [ 91.575640][ T7240] loop1: detected capacity change from 0 to 1024 [ 91.582896][ T7240] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 91.593333][ T7240] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 91.603035][ T7240] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 91.613084][ T7240] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #32: comm syz.1.1439: iget: special inode unallocated [ 91.626715][ T7240] EXT4-fs (loop1): no journal found [ 91.631994][ T7240] EXT4-fs (loop1): can't get journal size [ 91.639309][ T7240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.103212][ T7250] netlink: 'syz.2.1444': attribute type 13 has an invalid length. [ 92.139312][ T7258] __nla_validate_parse: 6 callbacks suppressed [ 92.139330][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 92.420558][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.449642][ T7284] lo: Caught tx_queue_len zero misconfig [ 92.531712][ T7297] loop4: detected capacity change from 0 to 1024 [ 92.565174][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.597405][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 92.611838][ T7303] netlink: 'syz.0.1463': attribute type 13 has an invalid length. [ 92.678322][ T7311] bond0: (slave dummy0): Releasing backup interface [ 92.697902][ T7311] bond0: (slave bond_slave_0): Releasing backup interface [ 92.709372][ T7316] netlink: 'syz.3.1467': attribute type 10 has an invalid length. [ 92.717249][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 92.723211][ T7311] team0: Port device team_slave_0 removed [ 92.735547][ T7311] team0: Port device team_slave_1 removed [ 92.742408][ T7311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.749919][ T7311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.758999][ T7311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.766503][ T7311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.776276][ T7311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.792252][ T7308] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1466'. [ 92.808841][ T7316] batman_adv: batadv0: Adding interface: veth1_vlan [ 92.815571][ T7316] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.853775][ T7316] batman_adv: batadv0: Interface activated: veth1_vlan [ 92.985051][ T7328] loop3: detected capacity change from 0 to 512 [ 93.021270][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.033924][ T7328] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.073305][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.113525][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 93.445032][ T7350] bridge0: entered promiscuous mode [ 93.451026][ T7350] macvtap1: entered allmulticast mode [ 93.456451][ T7350] bridge0: entered allmulticast mode [ 93.463607][ T7350] batman_adv: batadv0: Adding interface: macvtap1 [ 93.470159][ T7350] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.496221][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.509120][ T7350] batman_adv: batadv0: Interface activated: macvtap1 [ 93.536589][ T7354] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1483'. [ 93.605538][ T7360] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1488'. [ 93.807426][ T7374] ip6gre1: entered promiscuous mode [ 94.192101][ T7385] loop4: detected capacity change from 0 to 512 [ 94.199370][ T7385] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 94.222713][ T7385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 94.231121][ T7385] System zones: 1-12 [ 94.235373][ T7385] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1497: corrupted in-inode xattr: e_value size too large [ 94.249817][ T7385] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1497: couldn't read orphan inode 15 (err -117) [ 94.262564][ T7385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.291808][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.489336][ T7399] netlink: 'syz.1.1502': attribute type 4 has an invalid length. [ 94.497129][ T7399] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1502'. [ 94.645440][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 94.645472][ T29] audit: type=1326 audit(1763383430.929:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.678843][ T29] audit: type=1326 audit(1763383430.969:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.702343][ T29] audit: type=1326 audit(1763383430.969:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.725834][ T29] audit: type=1326 audit(1763383430.969:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.797960][ T29] audit: type=1326 audit(1763383430.969:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.821524][ T29] audit: type=1326 audit(1763383430.969:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.844977][ T29] audit: type=1326 audit(1763383430.969:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.868496][ T29] audit: type=1326 audit(1763383430.969:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.891976][ T29] audit: type=1326 audit(1763383431.039:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 94.915392][ T29] audit: type=1326 audit(1763383431.079:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.4.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f8ecf6c9 code=0x7ffc0000 [ 95.352732][ T7441] tipc: New replicast peer: 255.255.255.83 [ 95.358835][ T7441] tipc: Enabled bearer , priority 10 [ 95.385334][ T7444] bridge_slave_0: left allmulticast mode [ 95.391249][ T7444] bridge_slave_0: left promiscuous mode [ 95.396977][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.408787][ T7444] bridge_slave_1: left allmulticast mode [ 95.414616][ T7444] bridge_slave_1: left promiscuous mode [ 95.420387][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.438915][ T7444] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 95.447303][ T7444] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 95.458579][ T7450] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 95.466429][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1520'. [ 95.476737][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.496076][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.508736][ T7444] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.526020][ T7446] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.541944][ T7450] veth1_vlan: left promiscuous mode [ 95.552735][ T7450] batman_adv: batadv0: Adding interface: veth1_vlan [ 95.559499][ T7450] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.591643][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 95.595156][ T7450] batman_adv: batadv0: Interface activated: veth1_vlan [ 95.782408][ T7454] veth9: entered promiscuous mode [ 95.790652][ T7454] veth9: entered allmulticast mode [ 96.010652][ T7498] ip6gre1: entered allmulticast mode [ 96.736957][ T7492] Set syz1 is full, maxelem 65536 reached [ 96.827873][ T7516] netlink: 'syz.0.1558': attribute type 4 has an invalid length. [ 96.931306][ T7535] 0ªX¹¦À: renamed from caif0 [ 96.951808][ T7535] 0ªX¹¦À: entered allmulticast mode [ 96.957205][ T7535] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 97.007413][ T7534] loop4: detected capacity change from 0 to 1024 [ 97.018017][ T7534] EXT4-fs: Ignoring removed bh option [ 97.029990][ T7534] EXT4-fs: inline encryption not supported [ 97.043012][ T7534] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.066859][ T7534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 97.085210][ T7534] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1549: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.105583][ T7534] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1549: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.121018][ T7534] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1549: Failed to acquire dquot type 0 [ 97.132794][ T7534] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 97.153549][ T7534] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1549: mark_inode_dirty error [ 97.168810][ T7534] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 97.184796][ T7534] EXT4-fs (loop4): 1 orphan inode deleted [ 97.191398][ T7534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.205075][ T3505] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.237374][ T3505] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:22: Failed to release dquot type 0 [ 97.256504][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.276828][ T3317] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 97.316817][ T3317] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 97.332602][ T3317] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 98.016949][ T7662] loop1: detected capacity change from 0 to 1024 [ 98.048092][ T7662] EXT4-fs: Ignoring removed orlov option [ 98.054664][ T7662] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.077124][ T7662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.111429][ T7662] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 98.141607][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.250225][ T7689] __nla_validate_parse: 3 callbacks suppressed [ 98.250242][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1559'. [ 98.292576][ T7695] pim6reg1: entered promiscuous mode [ 98.297904][ T7695] pim6reg1: entered allmulticast mode [ 98.424921][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 99.014993][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.023979][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.033371][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.053024][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.062086][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.071240][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.071919][ T7739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.113209][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.122272][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 99.143889][ T7739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.191144][ T7739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.214102][ T7752] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.230578][ T7739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.271012][ T7752] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.316320][ T3504] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.328542][ T3504] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.342422][ T3504] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.357076][ T3504] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.370479][ T7752] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.440313][ T7752] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.516295][ T3557] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.527451][ T3557] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.539451][ T3557] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550818][ T3557] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.918596][ T29] kauditd_printk_skb: 1772 callbacks suppressed [ 99.918614][ T29] audit: type=1326 audit(1763383436.199:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.040485][ T29] audit: type=1326 audit(1763383436.239:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.064295][ T29] audit: type=1326 audit(1763383436.239:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.087807][ T29] audit: type=1326 audit(1763383436.239:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e340cf703 code=0x7ffc0000 [ 100.111135][ T29] audit: type=1326 audit(1763383436.239:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e340cf703 code=0x7ffc0000 [ 100.134462][ T29] audit: type=1326 audit(1763383436.239:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.157892][ T29] audit: type=1326 audit(1763383436.239:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.181478][ T29] audit: type=1326 audit(1763383436.259:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.204999][ T29] audit: type=1326 audit(1763383436.259:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.228829][ T29] audit: type=1326 audit(1763383436.259:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5e340cf6c9 code=0x7ffc0000 [ 100.415166][ T7795] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.460657][ T7795] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.492285][ T7802] netlink: 'syz.1.1606': attribute type 1 has an invalid length. [ 100.506140][ T7802] bond2: entered promiscuous mode [ 100.512052][ T7802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.520657][ T7795] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.541768][ T7802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.559365][ T7802] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 100.569476][ T7802] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 100.581560][ T7802] bond2: (slave gre1): making interface the new active one [ 100.588886][ T7802] gre1: entered promiscuous mode [ 100.595713][ T7802] bond2: (slave gre1): Enslaving as an active interface with an up link [ 100.605563][ T7795] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.675251][ T3557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.687159][ T3557] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.698884][ T3557] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.712374][ T3557] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.097085][ T7835] bridge: RTM_NEWNEIGH with invalid ether address [ 101.170393][ T7837] netlink: 'syz.2.1620': attribute type 4 has an invalid length. [ 101.223144][ T7841] netlink: 'syz.2.1620': attribute type 4 has an invalid length. [ 101.529095][ T7853] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.591236][ T7853] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.710492][ T7853] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.809631][ T7853] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.883783][ T3571] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.902169][ T3571] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.927274][ T3571] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.945798][ T3571] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.413500][ T7877] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.201290][ T7895] team1: entered promiscuous mode [ 103.206734][ T7895] team1: entered allmulticast mode [ 103.222520][ T7895] 8021q: adding VLAN 0 to HW filter on device team1 [ 103.629915][ T7919] lo: Caught tx_queue_len zero misconfig [ 103.666821][ T7921] netlink: 'syz.0.1655': attribute type 3 has an invalid length. [ 103.765437][ T7938] loop3: detected capacity change from 0 to 1024 [ 103.775048][ T7938] EXT4-fs: Ignoring removed nobh option [ 103.775271][ T7935] __nla_validate_parse: 9 callbacks suppressed [ 103.775289][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 103.781664][ T7938] EXT4-fs: Ignoring removed bh option [ 103.804236][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 103.842777][ T7943] loop4: detected capacity change from 0 to 128 [ 103.849677][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.868300][ T7943] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.902601][ T7943] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.004186][ T7962] netlink: 'syz.2.1671': attribute type 15 has an invalid length. [ 104.271208][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.289155][ T7938] loop3: detected capacity change from 1024 to 64 [ 104.296591][ T7956] syz.3.1661: attempt to access beyond end of device [ 104.296591][ T7956] loop3: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 104.309994][ T7956] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 113) [ 104.322150][ T7956] syz.3.1661: attempt to access beyond end of device [ 104.322150][ T7956] loop3: rw=2049, sector=226, nr_sectors = 6 limit=64 [ 104.335643][ T7956] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 113) [ 104.347177][ T7956] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 104.359757][ T7956] Buffer I/O error on device loop3, logical block 113 [ 104.366534][ T7956] Buffer I/O error on device loop3, logical block 114 [ 104.373302][ T7956] Buffer I/O error on device loop3, logical block 115 [ 104.380169][ T7956] Buffer I/O error on device loop3, logical block 113 [ 104.419720][ T7956] syz.3.1661: attempt to access beyond end of device [ 104.419720][ T7956] loop3: rw=2049, sector=232, nr_sectors = 2 limit=64 [ 104.433097][ T7956] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 116) [ 104.444467][ T7956] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 104.457161][ T7956] Buffer I/O error on device loop3, logical block 116 [ 104.569007][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 104.578958][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /317/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 104.599958][ T3312] EXT4-fs (loop3): Remounting filesystem read-only [ 104.616751][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.626396][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 104.645289][ T7944] kmmpd-loop3: attempt to access beyond end of device [ 104.645289][ T7944] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 104.658904][ T7944] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 104.887212][ T7993] loop1: detected capacity change from 0 to 8192 [ 104.963574][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 104.963590][ T29] audit: type=1400 audit(104.936:6698): avc: denied { mounton } for pid=7992 comm="syz.1.1686" path="/375/file2/bus" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 104.991889][ T3314] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 104.999934][ T3314] FAT-fs (loop1): Filesystem has been set read-only [ 105.087902][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 105.117358][ T8020] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 105.137827][ T8020] batman_adv: batadv0: Removing interface: veth1_vlan [ 105.193725][ T29] audit: type=1400 audit(105.166:6699): avc: denied { mounton } for pid=8034 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.425879][ T8076] bridge: RTM_NEWNEIGH with invalid ether address [ 105.485902][ T8084] netlink: 'syz.2.1709': attribute type 7 has an invalid length. [ 105.494039][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 105.586412][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 105.647160][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.654536][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.662334][ T8034] bridge_slave_0: entered allmulticast mode [ 105.668942][ T8034] bridge_slave_0: entered promiscuous mode [ 105.676746][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.683883][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.691405][ T8034] bridge_slave_1: entered allmulticast mode [ 105.698390][ T8034] bridge_slave_1: entered promiscuous mode [ 105.730200][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.752778][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.876567][ T8034] team0: Port device team_slave_0 added [ 105.900374][ T8034] team0: Port device team_slave_1 added [ 105.930172][ T8156] wg2: entered promiscuous mode [ 105.935114][ T8156] wg2: entered allmulticast mode [ 105.958479][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.965586][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.991674][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.004000][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.011045][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.037025][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.073734][ T8034] hsr_slave_0: entered promiscuous mode [ 106.080964][ T8034] hsr_slave_1: entered promiscuous mode [ 106.087066][ T8034] debugfs: 'hsr0' already exists in 'hsr' [ 106.092870][ T8034] Cannot create hsr debugfs directory [ 106.196273][ T8034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.213019][ T8034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.231677][ T8034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.245930][ T8034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.264191][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.271363][ T8034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.278871][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.285977][ T8034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.318651][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.331307][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.348851][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.375252][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.397052][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.404192][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.416685][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.423918][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.507477][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.644234][ T8034] veth0_vlan: entered promiscuous mode [ 106.673631][ T8034] veth1_vlan: entered promiscuous mode [ 106.694700][ T8034] veth0_macvtap: entered promiscuous mode [ 106.734890][ T8034] veth1_macvtap: entered promiscuous mode [ 106.768259][ T8200] netlink: 'syz.2.1737': attribute type 13 has an invalid length. [ 106.784852][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.809831][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.822789][ T3506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.847030][ T3506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.859619][ T29] audit: type=1400 audit(106.826:6700): avc: denied { mounton } for pid=8034 comm="syz-executor" path="/root/syzkaller.rvSZd1/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 106.883881][ T3506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.893496][ T8212] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 106.903682][ T29] audit: type=1400 audit(106.856:6701): avc: denied { mounton } for pid=8034 comm="syz-executor" path="/root/syzkaller.rvSZd1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 106.930014][ T29] audit: type=1400 audit(106.856:6702): avc: denied { mounton } for pid=8034 comm="syz-executor" path="/root/syzkaller.rvSZd1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 106.958295][ T29] audit: type=1400 audit(106.876:6703): avc: denied { mounton } for pid=8034 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 106.989423][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 107.005391][ T8212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.014808][ T3506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.023935][ T8215] wg2: left promiscuous mode [ 107.028763][ T8215] wg2: left allmulticast mode [ 107.075382][ T8218] bond2 (unregistering): Released all slaves [ 107.087303][ T8219] wg2: entered promiscuous mode [ 107.092297][ T8219] wg2: entered allmulticast mode [ 107.103076][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 107.144510][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1735'. [ 107.155481][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1735'. [ 107.173410][ T8229] wg2: entered promiscuous mode [ 107.178352][ T8229] wg2: entered allmulticast mode [ 107.282311][ T29] audit: type=1326 audit(107.256:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 107.305184][ T29] audit: type=1326 audit(107.256:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 107.328038][ T29] audit: type=1326 audit(107.256:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 107.350992][ T29] audit: type=1326 audit(107.256:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff071b4f6c9 code=0x7ffc0000 [ 107.394018][ T8251] loop5: detected capacity change from 0 to 1024 [ 107.406061][ T8251] EXT4-fs: inline encryption not supported [ 107.412117][ T8251] EXT4-fs: Ignoring removed orlov option [ 107.418792][ T8251] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.440621][ T8251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 107.448903][ T8251] System zones: 0-1, 3-12 [ 107.454420][ T8251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.522467][ T8262] loop1: detected capacity change from 0 to 1024 [ 107.530423][ T8034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.530949][ T8262] EXT4-fs: Ignoring removed orlov option [ 107.548279][ T8262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.615768][ T8267] loop5: detected capacity change from 0 to 1024 [ 107.622897][ T8267] EXT4-fs: Ignoring removed nobh option [ 107.628886][ T8267] EXT4-fs: Ignoring removed bh option [ 107.652001][ T8267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.699213][ T8267] loop5: detected capacity change from 1024 to 64 [ 107.707850][ T8267] syz.5.1753: attempt to access beyond end of device [ 107.707850][ T8267] loop5: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 107.721285][ T8267] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 113) [ 107.732824][ T8267] syz.5.1753: attempt to access beyond end of device [ 107.732824][ T8267] loop5: rw=2049, sector=226, nr_sectors = 6 limit=64 [ 107.746238][ T8267] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 113) [ 107.757496][ T8267] EXT4-fs (loop5): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 107.770069][ T8267] Buffer I/O error on device loop5, logical block 113 [ 107.776859][ T8267] Buffer I/O error on device loop5, logical block 114 [ 107.783724][ T8267] Buffer I/O error on device loop5, logical block 115 [ 107.790625][ T8267] Buffer I/O error on device loop5, logical block 113 [ 107.798179][ T8267] syz.5.1753: attempt to access beyond end of device [ 107.798179][ T8267] loop5: rw=2049, sector=232, nr_sectors = 2 limit=64 [ 107.811596][ T8267] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 116) [ 107.822946][ T8267] EXT4-fs (loop5): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 107.835609][ T8267] Buffer I/O error on device loop5, logical block 116 [ 107.920390][ T8280] lo speed is unknown, defaulting to 1000 [ 107.926344][ T8280] lo speed is unknown, defaulting to 1000 [ 107.932616][ T8280] lo speed is unknown, defaulting to 1000 [ 107.939716][ T8280] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.948456][ T8280] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 107.962517][ T8280] lo speed is unknown, defaulting to 1000 [ 107.969781][ T8280] lo speed is unknown, defaulting to 1000 [ 107.971606][ T8034] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /4/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 107.977172][ T8280] lo speed is unknown, defaulting to 1000 [ 107.996694][ T8034] EXT4-fs (loop5): Remounting filesystem read-only [ 108.002143][ T8280] lo speed is unknown, defaulting to 1000 [ 108.014306][ T8280] lo speed is unknown, defaulting to 1000 [ 108.020715][ T8280] lo speed is unknown, defaulting to 1000 [ 108.040321][ T8034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.078908][ T8271] kmmpd-loop5: attempt to access beyond end of device [ 108.078908][ T8271] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 108.092579][ T8271] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 108.136559][ T8285] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 108.145529][ T8285] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 108.208149][ T4230] IPVS: starting estimator thread 0... [ 108.250617][ T8292] netlink: 'syz.4.1765': attribute type 3 has an invalid length. [ 108.319232][ T8288] IPVS: using max 2400 ests per chain, 120000 per kthread [ 108.416684][ T8262] ================================================================== [ 108.424999][ T8262] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 108.433040][ T8262] [ 108.435388][ T8262] write to 0xffff888106f653ec of 4 bytes by task 8270 on cpu 0: [ 108.443038][ T8262] xas_set_mark+0x12b/0x140 [ 108.447573][ T8262] __folio_start_writeback+0x155/0x390 [ 108.453070][ T8262] ext4_bio_write_folio+0x5ad/0x9f0 [ 108.458308][ T8262] mpage_process_page_bufs+0x4a1/0x620 [ 108.463797][ T8262] mpage_prepare_extent_to_map+0x786/0xc00 [ 108.469651][ T8262] ext4_do_writepages+0xa05/0x2750 [ 108.474833][ T8262] ext4_writepages+0x176/0x300 [ 108.479615][ T8262] do_writepages+0x1c6/0x310 [ 108.484229][ T8262] file_write_and_wait_range+0x156/0x2c0 [ 108.489968][ T8262] generic_buffers_fsync_noflush+0x45/0x120 [ 108.495876][ T8262] ext4_sync_file+0x1ab/0x690 [ 108.500566][ T8262] vfs_fsync_range+0x10d/0x130 [ 108.505340][ T8262] ext4_buffered_write_iter+0x34f/0x3c0 [ 108.510897][ T8262] ext4_file_write_iter+0x387/0xf60 [ 108.516102][ T8262] iter_file_splice_write+0x666/0xa60 [ 108.521478][ T8262] direct_splice_actor+0x156/0x2a0 [ 108.526605][ T8262] splice_direct_to_actor+0x312/0x680 [ 108.531987][ T8262] do_splice_direct+0xda/0x150 [ 108.536759][ T8262] do_sendfile+0x380/0x650 [ 108.541196][ T8262] __x64_sys_sendfile64+0x105/0x150 [ 108.546412][ T8262] x64_sys_call+0x2bb4/0x3000 [ 108.551101][ T8262] do_syscall_64+0xd2/0x200 [ 108.555613][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.561512][ T8262] [ 108.563861][ T8262] read to 0xffff888106f653ec of 4 bytes by task 8262 on cpu 1: [ 108.571407][ T8262] file_write_and_wait_range+0x10e/0x2c0 [ 108.577062][ T8262] generic_buffers_fsync_noflush+0x45/0x120 [ 108.582966][ T8262] ext4_sync_file+0x1ab/0x690 [ 108.587651][ T8262] vfs_fsync_range+0x10d/0x130 [ 108.592428][ T8262] ext4_buffered_write_iter+0x34f/0x3c0 [ 108.597982][ T8262] ext4_file_write_iter+0x387/0xf60 [ 108.603187][ T8262] iter_file_splice_write+0x666/0xa60 [ 108.608572][ T8262] direct_splice_actor+0x156/0x2a0 [ 108.613692][ T8262] splice_direct_to_actor+0x312/0x680 [ 108.619079][ T8262] do_splice_direct+0xda/0x150 [ 108.623859][ T8262] do_sendfile+0x380/0x650 [ 108.628294][ T8262] __x64_sys_sendfile64+0x105/0x150 [ 108.633511][ T8262] x64_sys_call+0x2bb4/0x3000 [ 108.638200][ T8262] do_syscall_64+0xd2/0x200 [ 108.642725][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.648640][ T8262] [ 108.650964][ T8262] value changed: 0x0a000021 -> 0x04000021 [ 108.656689][ T8262] [ 108.659021][ T8262] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.665187][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.674920][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.684987][ T8262] ================================================================== [ 109.031119][ T7404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.660528][ T3506] $Hÿ (unregistering): Released all slaves [ 109.669004][ T3506] bond0 (unregistering): Released all slaves [ 109.740695][ T3506] tipc: Disabling bearer [ 109.745665][ T3506] tipc: Left network mode [ 109.751859][ T3506] hsr_slave_0: left promiscuous mode [ 109.757626][ T3506] hsr_slave_1: left promiscuous mode [ 110.051590][ T3506] IPVS: stop unused estimator thread 0... [ 110.093364][ T3506] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.461774][ T3506] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.511971][ T3506] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.571888][ T3506] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.623863][ T3506] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.660631][ T3506] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.710565][ T3506] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.750475][ T3506] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.832301][ T3506] bridge_slave_1: left allmulticast mode [ 110.838026][ T3506] bridge_slave_1: left promiscuous mode [ 110.843855][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.851987][ T3506] bridge_slave_0: left allmulticast mode [ 110.857826][ T3506] bridge_slave_0: left promiscuous mode [ 110.863569][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.011226][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.021356][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.030949][ T3506] bond0 (unregistering): Released all slaves [ 111.053829][ T3506] bond2 (unregistering): (slave gre1): Releasing backup interface [ 111.061721][ T3506] gre1 (unregistering): left promiscuous mode [ 111.071051][ T3506] team0: Port device geneve1 removed [ 111.150404][ T3506] batman_adv: batadv0: Interface deactivated: macvtap1 [ 111.157451][ T3506] bridge0 (unregistering): left allmulticast mode [ 111.165542][ T3506] batman_adv: batadv0: Removing interface: macvtap1 [ 111.440643][ T3506] bond0 (unregistering): Released all slaves [ 111.448867][ T3506] bond1 (unregistering): Released all slaves [ 111.457531][ T3506] bond2 (unregistering): Released all slaves [ 111.492882][ T3506] tipc: Disabling bearer [ 111.498127][ T3506] tipc: Disabling bearer [ 111.503097][ T3506] tipc: Left network mode [ 111.512579][ T3506] hsr_slave_0: left promiscuous mode [ 111.518152][ T3506] hsr_slave_1: left promiscuous mode [ 111.523790][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.531423][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.539202][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.546658][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.554648][ T3506] hsr_slave_0: left promiscuous mode [ 111.560202][ T3506] hsr_slave_1: left promiscuous mode [ 111.568933][ T3506] veth1_macvtap: left promiscuous mode [ 111.574556][ T3506] veth0_macvtap: left promiscuous mode [ 111.580197][ T3506] veth1_vlan: left promiscuous mode [ 111.585411][ T3506] veth0_vlan: left promiscuous mode [ 111.591202][ T3506] veth1_macvtap: left promiscuous mode [ 111.596669][ T3506] veth0_macvtap: left promiscuous mode [ 111.677682][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 111.687347][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 112.220953][ T3506] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.270359][ T3506] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.350099][ T3506] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.410222][ T3506] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.479223][ T3506] team0: Port device geneve1 removed [ 112.740411][ T3506] $Hÿ (unregistering): Released all slaves [ 112.790650][ T3506] tipc: Left network mode [ 112.797905][ T3506] hsr_slave_0: left promiscuous mode [ 112.803807][ T3506] hsr_slave_1: left promiscuous mode [ 112.815926][ T3506] pimreg (unregistering): left allmulticast mode