last executing test programs: 31.969390301s ago: executing program 4 (id=1648): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 31.903224117s ago: executing program 4 (id=1649): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 31.902896457s ago: executing program 4 (id=1650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 31.894098907s ago: executing program 4 (id=1651): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 31.870730869s ago: executing program 4 (id=1652): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x50004, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 31.553539905s ago: executing program 4 (id=1659): r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073796b320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 31.531874346s ago: executing program 32 (id=1659): r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073796b320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23.973723646s ago: executing program 5 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2}, 0x50) 23.91710085s ago: executing program 5 (id=1903): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0) 23.862763475s ago: executing program 5 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 23.849945556s ago: executing program 5 (id=1909): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 23.787617721s ago: executing program 5 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 23.570833148s ago: executing program 5 (id=1914): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 23.534867241s ago: executing program 33 (id=1914): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.38420807s ago: executing program 1 (id=2654): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.327705434s ago: executing program 1 (id=2657): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1.243684411s ago: executing program 2 (id=2660): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x2, 0x44080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xfa9, 0x76c4, 0x7, 0x4}) 1.243417671s ago: executing program 3 (id=2661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x200000000005}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.208738564s ago: executing program 3 (id=2663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 1.208291084s ago: executing program 1 (id=2664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b1800007150511e0845013f2325f004408050b038da1880b25181aa59d943be3", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r1}, &(0x7f0000001040), &(0x7f0000001080)=r0}, 0x20) 1.147486649s ago: executing program 2 (id=2665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.13160132s ago: executing program 1 (id=2667): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/36], 0x30}], 0x1, 0x0) 1.084037024s ago: executing program 1 (id=2668): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 941.720875ms ago: executing program 3 (id=2672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700030400000000000000020003"], 0x58) close(r2) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 889.340369ms ago: executing program 3 (id=2674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 784.346498ms ago: executing program 2 (id=2678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 714.479063ms ago: executing program 0 (id=2683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 708.637954ms ago: executing program 2 (id=2684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000000), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 662.204427ms ago: executing program 3 (id=2685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000000000400048028000380d8fd010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 498.18197ms ago: executing program 0 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 463.569453ms ago: executing program 6 (id=2687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 438.270105ms ago: executing program 2 (id=2688): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 389.587289ms ago: executing program 6 (id=2689): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 374.31707ms ago: executing program 0 (id=2690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000480), &(0x7f0000000300)=""/219}, 0x20) 349.825462ms ago: executing program 1 (id=2691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 279.217667ms ago: executing program 3 (id=2692): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321", 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 273.462828ms ago: executing program 6 (id=2693): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x100000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) shutdown(r0, 0x1) 256.423819ms ago: executing program 0 (id=2694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r2, 0xffffffffffffffff, 0x0) 167.419007ms ago: executing program 6 (id=2695): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 119.28927ms ago: executing program 0 (id=2696): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 69.320154ms ago: executing program 6 (id=2697): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 37.779757ms ago: executing program 0 (id=2698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 19.000449ms ago: executing program 2 (id=2699): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 0s ago: executing program 6 (id=2700): unshare(0x22020600) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): error (device loop3): ext4_free_blocks:6728: comm syz.3.351: Freeing blocks not in datazone - block = 1, count = 5 [ 46.395032][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.451183][ T4392] xt_hashlimit: size too large, truncated to 1048576 [ 46.683230][ T4407] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.912645][ T4050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:62: bg 0: block 112: padding at end of block bitmap is not set [ 46.949292][ T4050] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 46.961820][ T4050] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.961820][ T4050] [ 46.971514][ T4050] EXT4-fs (loop3): Total free blocks count 0 [ 46.972306][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 46.972359][ T29] audit: type=1400 audit(1765700931.857:615): avc: denied { execute } for pid=4431 comm="syz.2.380" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 46.977515][ T4050] EXT4-fs (loop3): Free/Dirty block details [ 47.015562][ T4050] EXT4-fs (loop3): free_blocks=0 [ 47.020618][ T4050] EXT4-fs (loop3): dirty_blocks=64 [ 47.025787][ T4050] EXT4-fs (loop3): Block reservation details [ 47.097508][ T29] audit: type=1400 audit(1765700931.977:616): avc: denied { write } for pid=4433 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.234443][ T4448] xt_hashlimit: size too large, truncated to 1048576 [ 47.348850][ T29] audit: type=1326 audit(1765700932.227:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.444443][ T29] audit: type=1326 audit(1765700932.227:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.467933][ T29] audit: type=1326 audit(1765700932.277:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.491311][ T29] audit: type=1326 audit(1765700932.277:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.514589][ T29] audit: type=1326 audit(1765700932.277:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.540393][ T29] audit: type=1326 audit(1765700932.277:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.563971][ T29] audit: type=1326 audit(1765700932.287:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 47.587536][ T29] audit: type=1326 audit(1765700932.287:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 48.271564][ T4483] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 48.586673][ T4496] loop1: detected capacity change from 0 to 512 [ 48.612102][ T4496] EXT4-fs: Ignoring removed orlov option [ 48.617958][ T4496] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.672255][ T4496] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.407: corrupted in-inode xattr: e_value size too large [ 48.740914][ T4496] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.407: couldn't read orphan inode 15 (err -117) [ 48.798326][ T4496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.853342][ T4506] xt_hashlimit: max too large, truncated to 1048576 [ 48.890884][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.073617][ T4524] loop3: detected capacity change from 0 to 512 [ 49.080354][ T4524] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.471381][ T4553] loop1: detected capacity change from 0 to 1024 [ 49.490448][ T4553] EXT4-fs: Ignoring removed orlov option [ 49.544714][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.712556][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.769371][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 49.944523][ T4586] mmap: syz.0.447 (4586) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.155337][ T4608] loop3: detected capacity change from 0 to 512 [ 50.195759][ T4608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.220836][ T4608] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.238179][ T4617] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 50.306858][ T4608] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.459: corrupted xattr block 6: invalid header [ 50.343421][ T4608] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 50.365107][ T4608] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.459: corrupted xattr block 6: invalid header [ 50.416245][ T4608] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 50.502238][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.652898][ T4643] netlink: 'syz.3.473': attribute type 13 has an invalid length. [ 50.858080][ T4664] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.186520][ T4689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4689 comm=syz.4.494 [ 51.438526][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 51.494141][ T4018] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.503520][ T4018] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.514525][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 51.523793][ T4018] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.541926][ T4018] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.589451][ T4719] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.693959][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 51.797188][ T4739] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 51.805533][ T4739] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 51.822762][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 51.835953][ T4049] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.835981][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 51.908821][ T4049] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.939939][ T4049] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.969893][ T4049] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.985276][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 51.985354][ T29] audit: type=1326 audit(1765700936.867:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.060831][ T29] audit: type=1326 audit(1765700936.897:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.084255][ T29] audit: type=1326 audit(1765700936.897:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.107808][ T29] audit: type=1326 audit(1765700936.897:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.131243][ T29] audit: type=1326 audit(1765700936.897:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.154629][ T29] audit: type=1326 audit(1765700936.897:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.177914][ T29] audit: type=1326 audit(1765700936.897:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.201306][ T29] audit: type=1326 audit(1765700936.897:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.224564][ T29] audit: type=1326 audit(1765700936.897:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.248005][ T29] audit: type=1326 audit(1765700936.897:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 52.378888][ T4776] $Hÿ: renamed from bond0 (while UP) [ 52.387172][ T4776] $Hÿ: entered promiscuous mode [ 52.392399][ T4776] bond_slave_0: entered promiscuous mode [ 52.398148][ T4776] bond_slave_1: entered promiscuous mode [ 52.510482][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 52.519396][ T4786] netem: unknown loss type 0 [ 52.524105][ T4786] netem: change failed [ 53.178223][ T4828] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.299795][ T4844] loop4: detected capacity change from 0 to 512 [ 53.341884][ T4844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.364393][ T4844] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.377996][ T4852] rdma_op ffff888122708d80 conn xmit_rdma 0000000000000000 [ 53.437958][ T4844] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.562: corrupted xattr block 6: invalid header [ 53.500455][ T4844] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 53.520843][ T4844] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.562: corrupted xattr block 6: invalid header [ 53.560289][ T4844] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 53.652024][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.664074][ T4866] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.779166][ T4872] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 53.852747][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 54.058193][ T4896] loop4: detected capacity change from 0 to 4096 [ 54.073659][ T4892] infiniband !yz!: set active [ 54.078394][ T4892] infiniband !yz!: added team_slave_0 [ 54.084874][ T4896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.130587][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.168928][ T4892] RDS/IB: !yz!: added [ 54.186864][ T4892] smc: adding ib device !yz! with port count 1 [ 54.228481][ T4892] smc: ib device !yz! port 1 has no pnetid [ 54.327316][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 54.824954][ T4956] loop3: detected capacity change from 0 to 512 [ 54.842560][ T4956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.855787][ T4956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.878023][ T4971] vlan2: entered allmulticast mode [ 54.885269][ T4956] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.898556][ T4956] EXT4-fs (loop3): 1 truncate cleaned up [ 54.904824][ T4956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.949126][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.016690][ T4987] futex_wake_op: syz.0.625 tries to shift op by -65; fix this program [ 56.192067][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 56.349980][ T5068] veth1_to_bond: Caught tx_queue_len zero misconfig [ 56.359404][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'. [ 56.368465][ T5070] unsupported nla_type 24929 [ 56.422547][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 56.536529][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 56.706622][ T5106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5106 comm=syz.2.677 [ 56.719283][ T5106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5106 comm=syz.2.677 [ 56.846370][ T5118] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 56.863590][ T5118] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 57.027883][ T5134] infiniband syz!: set down [ 57.032500][ T5134] infiniband syz!: added team_slave_0 [ 57.050424][ T5134] RDS/IB: syz!: added [ 57.055919][ T5134] smc: adding ib device syz! with port count 1 [ 57.062321][ T5134] smc: ib device syz! port 1 has no pnetid [ 57.087197][ T5147] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 57.115685][ T5147] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 57.171236][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 57.171252][ T29] audit: type=1400 audit(1765700942.057:981): avc: denied { create } for pid=5152 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.216369][ T29] audit: type=1400 audit(1765700942.057:982): avc: denied { ioctl } for pid=5152 comm="syz.3.698" path="socket:[9492]" dev="sockfs" ino=9492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.263681][ T29] audit: type=1400 audit(1765700942.147:983): avc: denied { create } for pid=5155 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.294372][ T5160] loop3: detected capacity change from 0 to 512 [ 57.318716][ T5160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.331758][ T5160] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.343130][ T29] audit: type=1400 audit(1765700942.227:984): avc: denied { write } for pid=5155 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.362778][ T29] audit: type=1400 audit(1765700942.227:985): avc: denied { ioctl } for pid=5155 comm="syz.0.709" path="socket:[9089]" dev="sockfs" ino=9089 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.389754][ T5160] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.699: corrupted xattr block 6: invalid header [ 57.407781][ T5160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 57.416979][ T5160] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.699: corrupted xattr block 6: invalid header [ 57.417819][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 57.430479][ T5160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 57.439281][ T5166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'. [ 57.448874][ T5160] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.699: corrupted xattr block 6: invalid header [ 57.457228][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 57.471054][ T5160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 57.488903][ T5160] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.699: corrupted xattr block 6: invalid header [ 57.506165][ T29] audit: type=1400 audit(1765700942.387:986): avc: denied { execute } for pid=5167 comm="syz.1.702" path="/126/blkio.bfq.group_wait_time" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.510117][ T5166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'. [ 57.539458][ T5166] netlink: 'syz.2.701': attribute type 6 has an invalid length. [ 57.543624][ T5160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 57.556962][ T5160] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.699: corrupted xattr block 6: invalid header [ 57.570305][ T29] audit: type=1400 audit(1765700942.437:987): avc: denied { add_name } for pid=5157 comm="syz.3.699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.599805][ T5160] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 57.610346][ T5160] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.699: corrupted xattr block 6: invalid header [ 57.624473][ T29] audit: type=1400 audit(1765700942.487:988): avc: denied { create } for pid=5157 comm="syz.3.699" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 57.682851][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.696304][ T29] audit: type=1326 audit(1765700942.577:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9306f749 code=0x7ffc0000 [ 57.740876][ T29] audit: type=1326 audit(1765700942.607:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9306f749 code=0x7ffc0000 [ 57.766096][ T5178] gre0: Caught tx_queue_len zero misconfig [ 57.776720][ T5180] netlink: 'syz.4.707': attribute type 4 has an invalid length. [ 57.832637][ T5189] netlink: 'syz.4.707': attribute type 4 has an invalid length. [ 57.902108][ T5194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 57.968465][ T5200] xt_HMARK: spi-set and port-set can't be combined [ 58.003926][ T5202] bridge: RTM_NEWNEIGH with invalid ether address [ 58.149846][ T5215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5215 comm=syz.0.723 [ 58.162426][ T5215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5215 comm=syz.0.723 [ 58.326525][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 58.337368][ T5239] netlink: 'syz.4.734': attribute type 6 has an invalid length. [ 58.394059][ T5245] syzkaller1: entered promiscuous mode [ 58.399640][ T5245] syzkaller1: entered allmulticast mode [ 59.424836][ T5341] loop3: detected capacity change from 0 to 1024 [ 59.448877][ T5341] EXT4-fs: Ignoring removed orlov option [ 59.465598][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.503594][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.791776][ T5365] ipvlan2: entered promiscuous mode [ 59.803538][ T5365] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 60.227802][ T5392] netlink: 'syz.1.802': attribute type 12 has an invalid length. [ 60.599368][ T5419] bridge0: port 3(batadv0) entered blocking state [ 60.606171][ T5419] bridge0: port 3(batadv0) entered disabled state [ 60.631115][ T5419] batadv0: entered allmulticast mode [ 60.643708][ T5419] batadv0: entered promiscuous mode [ 61.107932][ T4018] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 61.117242][ T4018] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 61.238178][ T5465] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 61.257184][ T5467] __nla_validate_parse: 10 callbacks suppressed [ 61.257202][ T5467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'. [ 61.417041][ T5489] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=5489 comm=syz.0.845 [ 61.550527][ T5504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.851'. [ 62.263882][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 62.263901][ T29] audit: type=1326 audit(1765700947.147:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.296380][ T29] audit: type=1326 audit(1765700947.147:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.319860][ T29] audit: type=1326 audit(1765700947.147:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.343581][ T29] audit: type=1326 audit(1765700947.147:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.366967][ T29] audit: type=1326 audit(1765700947.147:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.390351][ T29] audit: type=1326 audit(1765700947.147:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.413749][ T29] audit: type=1326 audit(1765700947.147:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.437282][ T29] audit: type=1326 audit(1765700947.147:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.460842][ T29] audit: type=1326 audit(1765700947.147:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.484237][ T29] audit: type=1326 audit(1765700947.147:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 62.727784][ T5589] futex_wake_op: syz.2.883 tries to shift op by -65; fix this program [ 63.343312][ T5627] sctp: [Deprecated]: syz.4.903 (pid 5627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.343312][ T5627] Use struct sctp_sack_info instead [ 63.414247][ T5631] loop4: detected capacity change from 0 to 2048 [ 63.458954][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.472241][ T5631] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.486922][ T5631] Direct I/O collision with buffered writes! File: /file1 Comm: syz.4.905 [ 63.511049][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.274670][ T5670] sctp: [Deprecated]: syz.3.921 (pid 5670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.274670][ T5670] Use struct sctp_sack_info instead [ 64.298504][ T5671] bridge_slave_0: left promiscuous mode [ 64.304369][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.322232][ T5671] bridge_slave_1: left allmulticast mode [ 64.327952][ T5671] bridge_slave_1: left promiscuous mode [ 64.333719][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.363261][ T5671] bond0: (slave bond_slave_0): Releasing backup interface [ 64.376671][ T5671] bond0: (slave bond_slave_1): Releasing backup interface [ 64.492722][ T5671] team0: Port device team_slave_0 removed [ 64.502816][ T5671] team0: Port device team_slave_1 removed [ 64.527102][ T5671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.633619][ T5697] bridge0: port 3(batadv1) entered blocking state [ 64.640152][ T5697] bridge0: port 3(batadv1) entered disabled state [ 64.672552][ T5697] batadv1: entered allmulticast mode [ 64.678704][ T5697] batadv1: entered promiscuous mode [ 64.899551][ T5718] futex_wake_op: syz.4.934 tries to shift op by -65; fix this program [ 64.998237][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 65.007317][ T5727] netlink: 'syz.2.945': attribute type 11 has an invalid length. [ 65.018743][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 65.027737][ T5727] netlink: 'syz.2.945': attribute type 11 has an invalid length. [ 65.242836][ T4018] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 65.252182][ T4018] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 65.674899][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 65.685542][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 65.685587][ T4003] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.747233][ T5777] loop4: detected capacity change from 0 to 128 [ 65.782362][ T4003] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.817178][ T4003] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.851633][ T4003] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.993806][ T5777] syz.4.967: attempt to access beyond end of device [ 65.993806][ T5777] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 66.008000][ T5777] syz.4.967: attempt to access beyond end of device [ 66.008000][ T5777] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 66.026533][ T5777] syz.4.967: attempt to access beyond end of device [ 66.026533][ T5777] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 66.086766][ T5777] syz.4.967: attempt to access beyond end of device [ 66.086766][ T5777] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 66.111730][ T5777] syz.4.967: attempt to access beyond end of device [ 66.111730][ T5777] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 66.140298][ T5777] syz.4.967: attempt to access beyond end of device [ 66.140298][ T5777] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 66.154078][ T5777] syz.4.967: attempt to access beyond end of device [ 66.154078][ T5777] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 66.179592][ T5777] syz.4.967: attempt to access beyond end of device [ 66.179592][ T5777] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 66.193957][ T5777] syz.4.967: attempt to access beyond end of device [ 66.193957][ T5777] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 66.207242][ T5818] loop1: detected capacity change from 0 to 512 [ 66.207978][ T5777] syz.4.967: attempt to access beyond end of device [ 66.207978][ T5777] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 66.238292][ T5818] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.985: Parent and EA inode have the same ino 15 [ 66.251349][ T5818] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.985: Parent and EA inode have the same ino 15 [ 66.266488][ T5818] EXT4-fs (loop1): 1 orphan inode deleted [ 66.302244][ T5818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.389622][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.472785][ T5838] loop1: detected capacity change from 0 to 512 [ 66.489664][ T5838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.498480][ T5838] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.529083][ T5838] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.993: Allocating blocks 41-42 which overlap fs metadata [ 66.551573][ T5838] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.993: Failed to acquire dquot type 1 [ 66.583401][ T5838] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 66.617667][ T5838] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.993: corrupted inode contents [ 66.631408][ T5838] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.993: mark_inode_dirty error [ 66.643772][ T5838] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.993: corrupted inode contents [ 66.656082][ T5838] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.993: mark_inode_dirty error [ 66.667878][ T5838] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.993: corrupted inode contents [ 66.680197][ T5838] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 66.690098][ T5838] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.993: corrupted inode contents [ 66.703061][ T5838] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.993: mark_inode_dirty error [ 66.714477][ T5838] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 66.724337][ T5838] EXT4-fs (loop1): 1 truncate cleaned up [ 66.730471][ T5838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.755730][ T5838] syz.1.993 (5838) used greatest stack depth: 9952 bytes left [ 66.790504][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.900693][ T5873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.067635][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 67.076835][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.085137][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.137957][ T5903] loop4: detected capacity change from 0 to 512 [ 67.145196][ T5903] EXT4-fs: Ignoring removed i_version option [ 67.146202][ T5905] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.151732][ T5903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.169336][ T5905] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.173982][ T5903] EXT4-fs (loop4): 1 truncate cleaned up [ 67.182869][ T5903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.219156][ T5908] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1021'. [ 67.252746][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.303243][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 67.303261][ T29] audit: type=1326 audit(67.288:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.362463][ T29] audit: type=1326 audit(67.288:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.385286][ T29] audit: type=1326 audit(67.288:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.408054][ T29] audit: type=1326 audit(67.288:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.430873][ T29] audit: type=1326 audit(67.288:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.453708][ T29] audit: type=1326 audit(67.288:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.476525][ T29] audit: type=1326 audit(67.288:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.499289][ T29] audit: type=1326 audit(67.288:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.522094][ T29] audit: type=1326 audit(67.288:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.544865][ T29] audit: type=1326 audit(67.288:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbc7f749 code=0x7ffc0000 [ 67.773766][ T5952] tipc: Started in network mode [ 67.778727][ T5952] tipc: Node identity ac14140f, cluster identity 4711 [ 67.785903][ T5952] tipc: New replicast peer: 255.255.255.255 [ 67.792106][ T5952] tipc: Enabled bearer , priority 10 [ 67.799262][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 67.808278][ T5952] tipc: Disabling bearer [ 68.359152][ T5975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1050'. [ 68.369858][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 68.393868][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'. [ 68.446158][ T5988] loop4: detected capacity change from 0 to 512 [ 68.467905][ T5988] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.490341][ T5988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.504989][ T5988] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1056: Failed to acquire dquot type 1 [ 68.527872][ T5988] EXT4-fs (loop4): Remounting filesystem read-only [ 68.535007][ T5988] EXT4-fs (loop4): 1 truncate cleaned up [ 68.544583][ T5988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.558826][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 68.569441][ T6001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1060'. [ 68.604578][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.024859][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 69.151082][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 69.171859][ T6049] batadv_slave_0: entered promiscuous mode [ 69.199366][ T6049] ip6gretap0: entered promiscuous mode [ 69.205357][ T6048] ip6gretap0: left promiscuous mode [ 69.210799][ T6048] batadv_slave_0: left promiscuous mode [ 69.356165][ T6062] netlink: 'syz.2.1089': attribute type 2 has an invalid length. [ 69.501308][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.527163][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.566913][ T6090] loop1: detected capacity change from 0 to 512 [ 69.602892][ T6090] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.631435][ T6090] EXT4-fs (loop1): mount failed [ 69.882607][ T6138] netlink: 'syz.1.1122': attribute type 4 has an invalid length. [ 69.896058][ T6138] .`: renamed from bond0 (while UP) [ 70.114136][ T6165] vlan2: entered allmulticast mode [ 70.802066][ T6222] netlink: zone id is out of range [ 70.807250][ T6222] netlink: zone id is out of range [ 70.850891][ T6222] netlink: zone id is out of range [ 70.859552][ T6222] netlink: del zone limit has 8 unknown bytes [ 70.972622][ T6223] loop4: detected capacity change from 0 to 8192 [ 70.986194][ T6234] bridge: RTM_NEWNEIGH with invalid ether address [ 71.021099][ T6223] loop4: p4 < > [ 71.103929][ T6245] netem: change failed [ 71.356952][ T6268] all: renamed from lo (while UP) [ 71.362724][ T6238] xt_TCPMSS: Only works on TCP SYN packets [ 71.535104][ T6279] vlan2: entered allmulticast mode [ 71.664702][ T6294] bridge0: port 3(batadv1) entered blocking state [ 71.671296][ T6294] bridge0: port 3(batadv1) entered disabled state [ 71.691166][ T6296] loop4: detected capacity change from 0 to 1024 [ 71.691614][ T6294] batadv1: entered allmulticast mode [ 71.701579][ T6296] EXT4-fs: inline encryption not supported [ 71.708785][ T6296] EXT4-fs: Ignoring removed orlov option [ 71.718756][ T6294] batadv1: entered promiscuous mode [ 71.724550][ T6296] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 71.752864][ T6296] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 71.769258][ T6296] System zones: 0-1, 3-12 [ 71.774911][ T6296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.133541][ T6327] atomic_op ffff88811ca63528 conn xmit_atomic 0000000000000000 [ 72.170734][ T428] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 72.180079][ T428] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 72.230230][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.269956][ T6337] vlan2: entered allmulticast mode [ 72.336275][ T6342] __nla_validate_parse: 11 callbacks suppressed [ 72.336296][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'. [ 72.351894][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'. [ 72.360895][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'. [ 72.394275][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 72.394300][ T29] audit: type=1326 audit(72.378:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.423267][ T29] audit: type=1326 audit(72.378:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.448864][ T29] audit: type=1326 audit(72.428:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.471677][ T29] audit: type=1326 audit(72.428:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.494399][ T29] audit: type=1326 audit(72.428:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.517221][ T29] audit: type=1326 audit(72.428:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.540038][ T29] audit: type=1326 audit(72.428:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.563504][ T29] audit: type=1400 audit(72.468:2396): avc: denied { mount } for pid=6343 comm="syz.1.1211" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.584622][ T29] audit: type=1326 audit(72.468:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.607384][ T29] audit: type=1326 audit(72.468:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6343 comm="syz.1.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 72.863668][ T6379] loop4: detected capacity change from 0 to 512 [ 72.882763][ T6379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1227: Parent and EA inode have the same ino 15 [ 72.897057][ T6379] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1227: Parent and EA inode have the same ino 15 [ 72.903951][ T6383] vlan0: entered allmulticast mode [ 72.921916][ T6379] EXT4-fs (loop4): 1 orphan inode deleted [ 72.932501][ T6379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.067771][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.130825][ T6406] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 73.168530][ T6410] loop3: detected capacity change from 0 to 512 [ 73.176684][ T6410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.185647][ T6410] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.203063][ T6410] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1240: Allocating blocks 41-42 which overlap fs metadata [ 73.217499][ T6410] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1240: Allocating blocks 41-42 which overlap fs metadata [ 73.231823][ T6410] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1240: Failed to acquire dquot type 1 [ 73.244454][ T6410] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 73.259634][ T6410] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1240: corrupted inode contents [ 73.271944][ T6410] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1240: mark_inode_dirty error [ 73.283940][ T6410] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1240: corrupted inode contents [ 73.296247][ T6410] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1240: mark_inode_dirty error [ 73.308042][ T6410] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1240: corrupted inode contents [ 73.322688][ T6410] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 73.332119][ T6410] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1240: corrupted inode contents [ 73.344705][ T6410] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1240: mark_inode_dirty error [ 73.355894][ T6418] loop4: detected capacity change from 0 to 8192 [ 73.363533][ T6410] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 73.380991][ T6410] EXT4-fs (loop3): 1 truncate cleaned up [ 73.387113][ T6410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.481825][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.494263][ T6433] tipc: Started in network mode [ 73.499179][ T6433] tipc: Node identity ac14140f, cluster identity 4711 [ 73.506162][ T6433] tipc: New replicast peer: 255.255.255.255 [ 73.512336][ T6433] tipc: Enabled bearer , priority 10 [ 73.519345][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 73.528609][ T6433] tipc: Disabling bearer [ 73.706554][ T6461] loop3: detected capacity change from 0 to 1024 [ 73.714327][ T6461] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.725309][ T6461] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.725718][ T6463] vlan2: entered allmulticast mode [ 73.741783][ T6461] JBD2: no valid journal superblock found [ 73.747561][ T6461] EXT4-fs (loop3): Could not load journal inode [ 73.763934][ T6461] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 73.939332][ T6475] tipc: Started in network mode [ 73.944350][ T6475] tipc: Node identity ac14140f, cluster identity 4711 [ 73.951750][ T6475] tipc: New replicast peer: 255.255.255.255 [ 73.957916][ T6475] tipc: Enabled bearer , priority 10 [ 73.965234][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 73.974274][ T6475] tipc: Disabling bearer [ 75.196094][ T6552] sg_write: process 503 (syz.3.1299) changed security contexts after opening file descriptor, this is not allowed. [ 75.212374][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 75.345777][ T6564] loop3: detected capacity change from 0 to 128 [ 75.422572][ T6569] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 76.110782][ T3423] Process accounting resumed [ 77.032086][ T6691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.042463][ T6691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.120619][ T6691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.131993][ T6691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.259004][ T6691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.269459][ T6691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.326654][ T6691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.337177][ T6691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.387224][ T4001] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.395554][ T4001] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.407246][ T4001] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.415580][ T4001] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.426966][ T4001] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.435314][ T4001] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.447446][ T4016] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.455704][ T4016] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.712222][ T6723] netlink: 'syz.4.1369': attribute type 10 has an invalid length. [ 77.735468][ T6723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.773184][ T6723] team0: Port device bond0 added [ 77.829014][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 77.829068][ T29] audit: type=1326 audit(77.808:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 77.838212][ T6730] netlink: 'syz.4.1372': attribute type 3 has an invalid length. [ 77.858246][ T29] audit: type=1326 audit(77.808:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 77.931860][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1375'. [ 77.941123][ T29] audit: type=1326 audit(77.808:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 77.963956][ T29] audit: type=1326 audit(77.808:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 77.987002][ T29] audit: type=1326 audit(77.808:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 78.009850][ T29] audit: type=1326 audit(77.808:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 78.032894][ T29] audit: type=1326 audit(77.848:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 78.055711][ T29] audit: type=1326 audit(77.908:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6729 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 78.088512][ T29] audit: type=1326 audit(78.068:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 78.114471][ T29] audit: type=1326 audit(78.098:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.1.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 78.234017][ T6725] xt_TCPMSS: Only works on TCP SYN packets [ 78.683778][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1409'. [ 78.708657][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1409'. [ 78.755939][ T6817] xt_connbytes: Forcing CT accounting to be enabled [ 78.758815][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1409'. [ 78.972982][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'. [ 78.982242][ T6845] netlink: 'syz.1.1426': attribute type 7 has an invalid length. [ 78.990010][ T6845] netlink: 'syz.1.1426': attribute type 8 has an invalid length. [ 78.997810][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 78.999227][ T6847] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 79.035407][ T6849] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1428'. [ 79.044925][ T6849] xt_time: unknown flags 0xf4 [ 79.226480][ T6874] rdma_op ffff888128f0dd80 conn xmit_rdma 0000000000000000 [ 79.277835][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 79.287050][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.294639][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.302642][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.310091][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.549546][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1453'. [ 79.641195][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1455'. [ 79.678461][ T6915] loop4: detected capacity change from 0 to 1024 [ 79.685351][ T6915] EXT4-fs: Ignoring removed orlov option [ 79.694995][ T6915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.801194][ T6925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.811824][ T6925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.906901][ T6925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.917412][ T6925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.993837][ T6925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.004377][ T6925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.023686][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.087325][ T6925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.097855][ T6925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.195297][ T4027] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.203691][ T4027] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.293184][ T6948] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 80.295248][ T4027] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.311962][ T4027] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.337192][ T4027] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.345584][ T4027] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.363871][ T4027] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.372450][ T4027] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.402763][ T6956] hsr_slave_0: left promiscuous mode [ 80.409535][ T6956] hsr_slave_1: left promiscuous mode [ 80.513944][ T6965] netlink: 'syz.2.1477': attribute type 21 has an invalid length. [ 80.863924][ T6985] atomic_op ffff88814374e128 conn xmit_atomic 0000000000000000 [ 81.280533][ T7001] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.049065][ T7066] netlink: 'syz.3.1521': attribute type 6 has an invalid length. [ 82.147966][ T7080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.310840][ T7104] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 82.408061][ T7123] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 82.429857][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.460436][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.468144][ T7123] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 82.479700][ T7123] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 82.675985][ T7151] SELinux: ebitmap start bit (4044972160) is beyond the end of the bitmap (1472) [ 82.685606][ T7151] SELinux: failed to load policy [ 82.723450][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.731091][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.738522][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.746172][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.753705][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.761239][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.768644][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.776105][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.783534][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.790970][ T3423] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.829656][ T3423] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 82.924581][ T7162] serio: Serial port ttyS3 [ 83.029140][ T7171] ªªªªªª: renamed from wg2 [ 83.053935][ T7173] __nla_validate_parse: 16 callbacks suppressed [ 83.053957][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1570'. [ 83.101536][ T7177] pim6reg1: entered promiscuous mode [ 83.106909][ T7177] pim6reg1: entered allmulticast mode [ 83.154476][ T7185] loop4: detected capacity change from 0 to 2048 [ 83.186736][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.225374][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.263814][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 83.263832][ T29] audit: type=1326 audit(83.243:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9306f749 code=0x7ffc0000 [ 83.295314][ T29] audit: type=1326 audit(83.243:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.318235][ T29] audit: type=1326 audit(83.243:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.340972][ T29] audit: type=1326 audit(83.243:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.356158][ T7205] netlink: 'syz.3.1583': attribute type 2 has an invalid length. [ 83.363768][ T29] audit: type=1326 audit(83.243:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.371594][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1583'. [ 83.403345][ T29] audit: type=1326 audit(83.243:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.426205][ T29] audit: type=1326 audit(83.243:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.449032][ T29] audit: type=1326 audit(83.243:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 83.471790][ T29] audit: type=1326 audit(83.273:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5d9306f749 code=0x7ffc0000 [ 83.494551][ T29] audit: type=1326 audit(83.273:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9306f749 code=0x7ffc0000 [ 83.539899][ T7215] netlink: 'syz.2.1588': attribute type 39 has an invalid length. [ 83.555686][ T7208] loop3: detected capacity change from 0 to 512 [ 83.562444][ T7208] EXT4-fs: Ignoring removed i_version option [ 83.570150][ T7208] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.577342][ T7208] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1587: EA inode hash validation failed [ 83.590091][ T7208] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.604307][ T7208] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.1587: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 83.619944][ T7208] EXT4-fs (loop3): Remounting filesystem read-only [ 83.626603][ T7208] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.1587: ea_inode dec ref err=-117 [ 83.639850][ T7208] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 83.648937][ T7208] EXT4-fs (loop3): 1 orphan inode deleted [ 83.655502][ T7208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.682219][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.758088][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1593'. [ 83.934879][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 83.949514][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 84.046180][ T7272] loop3: detected capacity change from 0 to 2048 [ 84.075305][ T7276] netlink: 'syz.2.1613': attribute type 30 has an invalid length. [ 84.140549][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 84.157569][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 84.173418][ T7288] capability: warning: `syz.3.1619' uses deprecated v2 capabilities in a way that may be insecure [ 84.180129][ T7290] loop4: detected capacity change from 0 to 512 [ 84.191280][ T7290] EXT4-fs: Ignoring removed i_version option [ 84.201750][ T7290] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.204873][ T7288] Falling back ldisc for ttyS3. [ 84.211365][ T7290] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1620: EA inode hash validation failed [ 84.225936][ T7290] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.1620: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 84.241452][ T7290] EXT4-fs (loop4): Remounting filesystem read-only [ 84.248069][ T7290] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.1620: ea_inode dec ref err=-117 [ 84.261185][ T7290] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 84.270318][ T7290] EXT4-fs (loop4): 1 orphan inode deleted [ 84.278572][ T7290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.293874][ T7295] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1622'. [ 84.309156][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.342125][ T7297] loop3: detected capacity change from 0 to 1024 [ 84.349473][ T7297] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 84.361890][ T7297] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.403870][ T7297] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.412516][ T7297] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.420117][ T7297] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1624: Inode bitmap for bg 0 marked uninitialized [ 84.435512][ T7297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.451883][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.464199][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.504836][ T7320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.603829][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.796770][ T7339] loop3: detected capacity change from 0 to 512 [ 84.806267][ T7339] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.839936][ T7339] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1641: Allocating blocks 41-42 which overlap fs metadata [ 84.854609][ T7339] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1641: Allocating blocks 41-42 which overlap fs metadata [ 84.871114][ T7339] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1641: Failed to acquire dquot type 1 [ 84.884058][ T7339] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.898868][ T7339] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1641: corrupted inode contents [ 84.911710][ T7339] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1641: mark_inode_dirty error [ 84.930014][ T7339] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1641: corrupted inode contents [ 84.936714][ T7354] loop4: detected capacity change from 0 to 512 [ 84.946912][ T7339] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1641: mark_inode_dirty error [ 84.959863][ T7339] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1641: corrupted inode contents [ 84.975600][ T7339] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 84.985705][ T7354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.998371][ T7339] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1641: corrupted inode contents [ 85.004649][ T7354] sd 0:0:1:0: device reset [ 85.010991][ T7339] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1641: mark_inode_dirty error [ 85.026326][ T7339] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 85.035757][ T7339] EXT4-fs (loop3): 1 truncate cleaned up [ 85.042077][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.066214][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.104998][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.334817][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 86.025252][ T7499] lo: Caught tx_queue_len zero misconfig [ 86.031015][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 86.040181][ T7499] netem: change failed [ 86.175313][ T7457] chnl_net:caif_netlink_parms(): no params data found [ 86.241837][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.248978][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.256438][ T7457] bridge_slave_0: entered allmulticast mode [ 86.263168][ T7457] bridge_slave_0: entered promiscuous mode [ 86.275403][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.282709][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.290092][ T7457] bridge_slave_1: entered allmulticast mode [ 86.296829][ T7457] bridge_slave_1: entered promiscuous mode [ 86.328084][ T7457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.339746][ T7457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.389643][ T7457] team0: Port device team_slave_0 added [ 86.416796][ T7457] team0: Port device team_slave_1 added [ 86.443169][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.450176][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.476263][ T7457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.488941][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.496005][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.522025][ T7457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.573922][ T7457] hsr_slave_0: entered promiscuous mode [ 86.583346][ T7457] hsr_slave_1: entered promiscuous mode [ 86.598509][ T7457] debugfs: 'hsr0' already exists in 'hsr' [ 86.604331][ T7457] Cannot create hsr debugfs directory [ 86.774951][ T7457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.795411][ T7457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.830924][ T7457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.846932][ T7457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.961625][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.987913][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.010370][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.017511][ T4029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.052030][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.059261][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.188736][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.389252][ T7653] netlink: 'syz.0.1701': attribute type 10 has an invalid length. [ 87.418543][ T7653] team0: Port device dummy0 added [ 87.440024][ T7653] netlink: 'syz.0.1701': attribute type 10 has an invalid length. [ 87.445880][ T7457] veth0_vlan: entered promiscuous mode [ 87.466574][ T7653] team0: Port device dummy0 removed [ 87.491756][ T7653] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.516358][ T7457] veth1_vlan: entered promiscuous mode [ 87.548571][ T7457] veth0_macvtap: entered promiscuous mode [ 87.563319][ T7457] veth1_macvtap: entered promiscuous mode [ 87.585166][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.603030][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.619197][ T4004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.636674][ T4004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.673431][ T4004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.700021][ T4004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.073906][ T7693] __nla_validate_parse: 1 callbacks suppressed [ 88.073924][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 88.244278][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 88.425401][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 88.425418][ T29] audit: type=1326 audit(88.393:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.454428][ T29] audit: type=1326 audit(88.393:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.477204][ T29] audit: type=1326 audit(88.393:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.500119][ T29] audit: type=1326 audit(88.393:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.522908][ T29] audit: type=1326 audit(88.393:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.545679][ T29] audit: type=1326 audit(88.403:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.568486][ T29] audit: type=1326 audit(88.403:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 88.591279][ T29] audit: type=1326 audit(88.403:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdb7abf783 code=0x7ffc0000 [ 88.613879][ T29] audit: type=1326 audit(88.403:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdb7abe1ff code=0x7ffc0000 [ 88.636425][ T29] audit: type=1326 audit(88.403:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7703 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcdb7abf7d7 code=0x7ffc0000 [ 88.859270][ T7737] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 88.898956][ T7737] team0: Port device dummy0 added [ 88.920112][ T7737] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 88.954694][ T7737] team0: Port device dummy0 removed [ 88.982526][ T7737] dummy0: entered promiscuous mode [ 88.992623][ T7737] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 89.149982][ T7773] rdma_op ffff8881291be980 conn xmit_rdma 0000000000000000 [ 89.221768][ T7783] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 89.249742][ T7783] team0: Port device dummy0 added [ 89.258599][ T7783] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 89.269298][ T7783] team0: Port device dummy0 removed [ 89.277789][ T7783] .`: (slave dummy0): Enslaving as an active interface with an up link [ 89.327562][ T7791] loop3: detected capacity change from 0 to 128 [ 89.341410][ T7791] bio_check_eod: 98 callbacks suppressed [ 89.341424][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.341424][ T7791] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 89.360821][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.360821][ T7791] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 89.374679][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.374679][ T7791] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 89.388360][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.388360][ T7791] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 89.402035][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.402035][ T7791] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 89.415610][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.415610][ T7791] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 89.429483][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.429483][ T7791] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 89.443750][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.443750][ T7791] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 89.457398][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.457398][ T7791] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 89.471090][ T7791] syz.3.1758: attempt to access beyond end of device [ 89.471090][ T7791] loop3: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 89.554041][ T7798] ip6tnl0: Caught tx_queue_len zero misconfig [ 89.676589][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1763'. [ 89.691353][ T7806] tipc: New replicast peer: 255.255.255.255 [ 89.697652][ T7806] tipc: Enabled bearer , priority 10 [ 89.705271][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 89.714400][ T7806] tipc: Disabling bearer [ 90.267157][ T7840] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 90.280270][ T7840] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 90.288278][ T7842] netlink: 'syz.0.1781': attribute type 7 has an invalid length. [ 90.296197][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 90.483212][ T7871] veth0_to_bridge: entered promiscuous mode [ 90.490434][ T7868] veth0_to_bridge: left promiscuous mode [ 90.640809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.700258][ T7896] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1805'. [ 90.738348][ T7898] netlink: 'syz.1.1806': attribute type 83 has an invalid length. [ 91.915158][ T7955] netlink: 'syz.3.1831': attribute type 29 has an invalid length. [ 91.928991][ T7955] netlink: 'syz.3.1831': attribute type 29 has an invalid length. [ 91.941661][ T7955] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1831'. [ 92.046685][ T7965] loop3: detected capacity change from 0 to 136 [ 92.145370][ T7976] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1842'. [ 92.247510][ T7992] block device autoloading is deprecated and will be removed. [ 92.301948][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 92.317478][ T7999] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 92.429715][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 92.490264][ T8012] loop5: detected capacity change from 0 to 512 [ 92.502200][ T8012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.565708][ T8023] ..@ÿ: renamed from bond_slave_0 (while UP) [ 92.573628][ T8012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.636783][ T7457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.683894][ T8038] xt_HMARK: spi-set and port-set can't be combined [ 92.748846][ T4029] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.050546][ T8090] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 93.127701][ T8103] netlink: 'syz.0.1898': attribute type 29 has an invalid length. [ 93.517657][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.575031][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.626394][ T8136] __nla_validate_parse: 3 callbacks suppressed [ 93.626416][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1915'. [ 93.666833][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.691760][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 93.701065][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1915'. [ 93.766041][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.890482][ T12] bridge_slave_1: left allmulticast mode [ 93.896243][ T12] bridge_slave_1: left promiscuous mode [ 93.902036][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.924106][ T12] bridge_slave_0: left allmulticast mode [ 93.929796][ T12] bridge_slave_0: left promiscuous mode [ 93.935544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.094009][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.106936][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.117196][ T8166] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 94.125130][ T8166] netlink: 'syz.3.1925': attribute type 19 has an invalid length. [ 94.133044][ T8166] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1925'. [ 94.146972][ T12] bond0 (unregistering): Released all slaves [ 94.158831][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 94.158846][ T29] audit: type=1400 audit(94.133:3874): avc: denied { write } for pid=8169 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.270785][ T29] audit: type=1326 audit(94.233:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.293653][ T29] audit: type=1326 audit(94.233:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.316390][ T29] audit: type=1326 audit(94.233:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.339130][ T29] audit: type=1326 audit(94.233:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.361896][ T29] audit: type=1326 audit(94.233:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.384833][ T29] audit: type=1326 audit(94.233:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.407695][ T29] audit: type=1326 audit(94.233:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.430461][ T29] audit: type=1326 audit(94.233:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.453270][ T29] audit: type=1326 audit(94.233:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8176 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 94.477873][ T12] hsr_slave_0: left promiscuous mode [ 94.499982][ T12] hsr_slave_1: left promiscuous mode [ 94.503234][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 94.520056][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.527661][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.544173][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.551761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.565317][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 94.586685][ T12] veth1_macvtap: left promiscuous mode [ 94.600701][ T12] veth0_macvtap: left promiscuous mode [ 94.606647][ T12] veth1_vlan: left promiscuous mode [ 94.616523][ T12] veth0_vlan: left promiscuous mode [ 94.768426][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.786498][ T12] team0 (unregistering): Port device team_slave_0 removed [ 94.944071][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 95.013043][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.020286][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.032667][ T8137] bridge_slave_0: entered allmulticast mode [ 95.039619][ T8137] bridge_slave_0: entered promiscuous mode [ 95.046755][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.053978][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.061826][ T8137] bridge_slave_1: entered allmulticast mode [ 95.068435][ T8137] bridge_slave_1: entered promiscuous mode [ 95.089401][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.100355][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.153592][ T8137] team0: Port device team_slave_0 added [ 95.160585][ T8137] team0: Port device team_slave_1 added [ 95.181801][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.188895][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.214882][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.226538][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.233586][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.259578][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.312891][ T8137] hsr_slave_0: entered promiscuous mode [ 95.318990][ T8137] hsr_slave_1: entered promiscuous mode [ 95.325363][ T8137] debugfs: 'hsr0' already exists in 'hsr' [ 95.331174][ T8137] Cannot create hsr debugfs directory [ 95.462922][ T8137] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.473411][ T8137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.483526][ T8137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.496169][ T8137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.524294][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.531447][ T8137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.539016][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.546132][ T8137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.599453][ T8254] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 95.625528][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.633829][ T8258] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1962'. [ 95.650417][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.660774][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.678299][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.694064][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.701206][ T4001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.713717][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'. [ 95.714457][ T8267] vlan2: entered allmulticast mode [ 95.734558][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.741728][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.817908][ T8276] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.852238][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.861286][ T8281] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 95.903809][ T8287] rdma_op ffff888131f8b180 conn xmit_rdma 0000000000000000 [ 96.076001][ T8137] veth0_vlan: entered promiscuous mode [ 96.093995][ T8137] veth1_vlan: entered promiscuous mode [ 96.117962][ T8137] veth0_macvtap: entered promiscuous mode [ 96.125524][ T8137] veth1_macvtap: entered promiscuous mode [ 96.137173][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.159702][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.181740][ T4004] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.208423][ T4004] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.235716][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.262841][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.363065][ T8354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8354 comm=syz.0.2001 [ 96.483367][ T8371] uprobe: syz.6.2008:8371 failed to unregister, leaking uprobe [ 96.511244][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'. [ 96.577292][ T8382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2013'. [ 96.810754][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.019025][ T8418] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 97.318218][ T8456] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 97.408663][ T8466] netlink: 'syz.0.2051': attribute type 3 has an invalid length. [ 97.416895][ T8466] netlink: 'syz.0.2051': attribute type 3 has an invalid length. [ 97.479314][ T23] hid_parser_main: 33 callbacks suppressed [ 97.479336][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.537056][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.709237][ T8498] atomic_op ffff88811b134128 conn xmit_atomic 0000000000000000 [ 97.941749][ T8515] IPVS: Error connecting to the multicast addr [ 97.995868][ T8518] all: renamed from team_slave_0 (while UP) [ 98.017518][ T8524] netlink: 'syz.0.2077': attribute type 10 has an invalid length. [ 98.037163][ T8524] bond0: (slave dummy0): Releasing backup interface [ 98.074313][ T8526] vcan0: tx drop: invalid sa for name 0x0000400000000000 [ 98.104133][ T8524] team0: Port device dummy0 added [ 98.131224][ T8524] netlink: 'syz.0.2077': attribute type 10 has an invalid length. [ 98.182637][ T8524] team0: Port device dummy0 removed [ 98.217116][ T8524] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.291492][ T8541] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 98.353853][ T8544] hub 2-0:1.0: USB hub found [ 98.369806][ T8544] hub 2-0:1.0: 8 ports detected [ 98.407935][ T8552] loop6: detected capacity change from 0 to 512 [ 98.415220][ T8552] EXT4-fs: Ignoring removed i_version option [ 98.421349][ T8552] EXT4-fs: Ignoring removed bh option [ 98.571842][ T8552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.859241][ T8137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.949208][ T8568] netlink: 'syz.6.2096': attribute type 3 has an invalid length. [ 99.018585][ T8576] __nla_validate_parse: 1 callbacks suppressed [ 99.018600][ T8576] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2100'. [ 99.240876][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 99.240893][ T29] audit: type=1326 audit(99.223:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 99.289385][ T29] audit: type=1326 audit(99.253:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 99.312355][ T29] audit: type=1326 audit(99.253:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 99.335217][ T29] audit: type=1326 audit(99.253:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.0.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 99.385562][ T8608] erspan0: entered promiscuous mode [ 99.402530][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2115'. [ 99.904138][ T29] audit: type=1326 audit(99.883:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.1.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 99.928821][ T29] audit: type=1326 audit(99.883:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.1.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 99.951725][ T29] audit: type=1326 audit(99.903:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.1.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 99.980871][ T29] audit: type=1326 audit(99.903:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.1.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 100.003730][ T29] audit: type=1326 audit(99.903:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.1.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 100.026523][ T29] audit: type=1326 audit(99.933:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.1.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7abf749 code=0x7ffc0000 [ 100.059090][ T8653] netlink: 'syz.0.2134': attribute type 4 has an invalid length. [ 100.414365][ T8676] ip6tnl1: entered promiscuous mode [ 100.419660][ T8676] ip6tnl1: entered allmulticast mode [ 100.656950][ T8698] !yz!: rxe_newlink: already configured on team_slave_0 [ 100.743448][ T8705] netlink: 'syz.2.2159': attribute type 1 has an invalid length. [ 100.751376][ T8705] netlink: 'syz.2.2159': attribute type 4 has an invalid length. [ 100.759134][ T8705] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2159'. [ 100.792114][ T8709] netlink: 'syz.1.2161': attribute type 4 has an invalid length. [ 100.980019][ T8725] netlink: 'syz.2.2168': attribute type 10 has an invalid length. [ 100.988699][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.996028][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.007337][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.014563][ T8725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.021967][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.027708][ T8727] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 101.029104][ T8725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.052083][ T8725] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.105336][ T8734] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2173'. [ 101.115071][ T8734] netlink: zone id is out of range [ 101.120239][ T8734] netlink: zone id is out of range [ 101.127098][ T8734] netlink: zone id is out of range [ 101.132439][ T8734] netlink: zone id is out of range [ 101.138165][ T8734] netlink: zone id is out of range [ 101.145351][ T8736] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.161562][ T8736] vhci_hcd vhci_hcd.2: invalid port number 96 [ 101.167704][ T8736] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 101.176829][ T8734] netlink: set zone limit has 8 unknown bytes [ 101.300994][ T8748] ip6tnl1: entered promiscuous mode [ 101.306322][ T8748] ip6tnl1: entered allmulticast mode [ 101.421544][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 101.497105][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 101.506139][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'. [ 101.526788][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 101.535816][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'. [ 101.573392][ T8779] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 101.926873][ T4029] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.936762][ T4029] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.013432][ T4029] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.023478][ T4029] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.093236][ T4029] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.103148][ T4029] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.172990][ T4029] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.182845][ T4029] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.197161][ T8832] hub 2-0:1.0: USB hub found [ 102.202534][ T8832] hub 2-0:1.0: 8 ports detected [ 102.214165][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.222723][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.268217][ T4029] batadv1: left allmulticast mode [ 102.273438][ T4029] batadv1: left promiscuous mode [ 102.278628][ T4029] bridge0: port 3(batadv1) entered disabled state [ 102.292483][ T4029] bridge_slave_1: left allmulticast mode [ 102.298241][ T4029] bridge_slave_1: left promiscuous mode [ 102.304084][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.315147][ T4029] bridge_slave_0: left promiscuous mode [ 102.320967][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.532010][ T4029] bond1 (unregistering): (slave gretap1): Releasing active interface [ 102.654811][ T4029] team0: Port device bond0 removed [ 102.682180][ T4029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.810679][ T4029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.875107][ T4029] bond0 (unregistering): Released all slaves [ 102.896782][ T4029] bond1 (unregistering): Released all slaves [ 102.957912][ T4029] tipc: Left network mode [ 103.119673][ T4029] hsr_slave_0: left promiscuous mode [ 103.126723][ T4029] hsr_slave_1: left promiscuous mode [ 103.135403][ T4029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.143129][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.152810][ T4029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.160295][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.185996][ T4029] veth1_macvtap: left promiscuous mode [ 103.191798][ T4029] veth0_macvtap: left promiscuous mode [ 103.197358][ T4029] veth1_vlan: left promiscuous mode [ 103.202696][ T4029] veth0_vlan: left promiscuous mode [ 103.292161][ T4029] team0 (unregistering): Port device team_slave_1 removed [ 103.302605][ T8899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8899 comm=syz.1.2234 [ 103.318849][ T4029] team0 (unregistering): Port device C removed [ 103.590500][ T8932] geneve2: entered promiscuous mode [ 103.595913][ T8932] geneve2: entered allmulticast mode [ 104.084962][ T8953] pimreg: entered allmulticast mode [ 104.092382][ T8953] pimreg: left allmulticast mode [ 104.705800][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 104.705855][ T29] audit: type=1326 audit(104.683:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6538da65e7 code=0x7ffc0000 [ 104.763226][ T29] audit: type=1326 audit(104.733:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6538d4b829 code=0x7ffc0000 [ 104.786041][ T29] audit: type=1326 audit(104.733:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6538da65e7 code=0x7ffc0000 [ 104.808875][ T29] audit: type=1326 audit(104.733:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6538d4b829 code=0x7ffc0000 [ 104.831676][ T29] audit: type=1326 audit(104.733:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 104.854629][ T29] audit: type=1326 audit(104.733:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 104.877479][ T29] audit: type=1326 audit(104.733:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 104.900390][ T29] audit: type=1326 audit(104.733:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 104.923260][ T29] audit: type=1400 audit(104.733:4465): avc: denied { mount } for pid=8988 comm="syz.2.2277" name="/" dev="hugetlbfs" ino=21997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.945637][ T29] audit: type=1326 audit(104.733:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6538da65e7 code=0x7ffc0000 [ 105.002620][ T8997] syz!: rxe_newlink: already configured on team_slave_0 [ 105.264682][ T9030] __nla_validate_parse: 12 callbacks suppressed [ 105.264703][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 105.360856][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.411079][ T9044] netlink: 'syz.1.2303': attribute type 29 has an invalid length. [ 105.490437][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 105.625554][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 105.691427][ T9077] loop6: detected capacity change from 0 to 736 [ 105.721442][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 105.749335][ T9083] loop3: detected capacity change from 0 to 164 [ 105.756981][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 105.780378][ T9083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.812251][ T9083] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.897635][ T3490] kernel write not supported for file bpf-prog (pid: 3490 comm: kworker/1:9) [ 106.061969][ T9098] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2330'. [ 106.126292][ T9101] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 106.647435][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 106.690347][ T9142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2348'. [ 106.766874][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 106.824805][ T9153] loop6: detected capacity change from 0 to 512 [ 106.944496][ T9153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.168683][ T9181] loop3: detected capacity change from 0 to 512 [ 107.191828][ T9153] SELinux: Context @ is not valid (left unmapped). [ 107.238857][ T8137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.268666][ T9181] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.294212][ T9181] EXT4-fs (loop3): mount failed [ 107.678835][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2374'. [ 108.714747][ T9294] loop3: detected capacity change from 0 to 1024 [ 108.742314][ T9294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.801191][ T9294] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 108.843776][ T9313] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in; [ 108.843776][ T9313] program syz.1.2418 not setting count and/or reply_len properly [ 108.869368][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.994611][ T9336] netem: change failed [ 109.020207][ T9334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9334 comm=syz.3.2428 [ 109.384703][ T9371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9371 comm=syz.6.2445 [ 109.397296][ T9371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9371 comm=syz.6.2445 [ 109.439080][ T9376] loop3: detected capacity change from 0 to 128 [ 109.476354][ T9378] ip6gre0: Caught tx_queue_len zero misconfig [ 109.483253][ T9378] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 109.569265][ T9390] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 109.577582][ T9390] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 109.716738][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 109.716757][ T29] audit: type=1326 audit(109.693:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9413 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 109.723506][ T9412] loop3: detected capacity change from 0 to 1024 [ 109.762088][ T9412] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 109.833683][ T29] audit: type=1326 audit(109.693:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9413 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 109.857109][ T29] audit: type=1326 audit(109.693:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9413 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 109.880260][ T29] audit: type=1400 audit(109.743:4587): avc: denied { connect } for pid=9414 comm="syz.6.2466" lport=38579 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 109.904132][ T29] audit: type=1400 audit(109.743:4588): avc: denied { name_connect } for pid=9414 comm="syz.6.2466" dest=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.926283][ T29] audit: type=1326 audit(109.743:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9413 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3844f749 code=0x7ffc0000 [ 109.971215][ T9427] loop3: detected capacity change from 0 to 128 [ 109.979577][ T9427] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.032902][ T29] audit: type=1400 audit(109.993:4590): avc: denied { ioctl } for pid=9426 comm="syz.3.2470" path="/445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.101402][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.241473][ T29] audit: type=1400 audit(110.223:4591): avc: denied { read } for pid=9453 comm="syz.3.2484" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.264268][ T29] audit: type=1400 audit(110.223:4592): avc: denied { open } for pid=9453 comm="syz.3.2484" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.289260][ T29] audit: type=1400 audit(110.273:4593): avc: denied { ioctl } for pid=9453 comm="syz.3.2484" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 110.421322][ T3480] Process accounting resumed [ 110.448059][ T9474] __nla_validate_parse: 9 callbacks suppressed [ 110.448126][ T9474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2490'. [ 110.520086][ T9482] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.685377][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 110.695152][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 110.711467][ T9502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9502 comm=syz.0.2498 [ 110.713674][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 110.723997][ T9502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9502 comm=syz.0.2498 [ 110.748001][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 110.767499][ T9506] loop6: detected capacity change from 0 to 2048 [ 110.785481][ T9506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.842089][ T9506] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2506: bg 0: block 234: padding at end of block bitmap is not set [ 110.926071][ T8137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.019357][ T9541] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 111.075416][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.094378][ T9548] netlink: 'syz.0.2522': attribute type 3 has an invalid length. [ 111.107499][ T9541] bond0: (slave batadv1): making interface the new active one [ 111.117709][ T9541] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 111.128639][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 111.148132][ T9551] bond0 (unregistering): (slave batadv1): Releasing active interface [ 111.187526][ T9551] bond0 (unregistering): Released all slaves [ 111.211713][ T9556] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 111.220607][ T9556] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 111.229443][ T9556] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 111.240759][ T9556] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 111.498632][ T9593] netlink: 'syz.0.2543': attribute type 1 has an invalid length. [ 111.559511][ T9593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.578367][ T9593] bond1: (slave batadv0): making interface the new active one [ 111.595724][ T9593] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 111.618997][ T9593] bond1 (unregistering): (slave batadv0): Releasing active interface [ 111.643118][ T9593] bond1 (unregistering): Released all slaves [ 111.974137][ T9640] loop6: detected capacity change from 0 to 128 [ 112.264426][ T9640] bio_check_eod: 1 callbacks suppressed [ 112.264529][ T9640] syz.6.2558: attempt to access beyond end of device [ 112.264529][ T9640] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.283856][ T9640] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 112.292612][ T9647] syz.6.2558: attempt to access beyond end of device [ 112.292612][ T9647] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.306400][ T9647] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 112.576258][ T9657] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 112.600298][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.613779][ T9657] bond2: (slave batadv0): making interface the new active one [ 112.622783][ T9657] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 112.662381][ T9657] bond2 (unregistering): (slave batadv0): Releasing active interface [ 112.677619][ T9657] bond2 (unregistering): Released all slaves [ 112.753319][ T9667] netlink: 'syz.2.2568': attribute type 10 has an invalid length. [ 112.782920][ T9667] team0: Port device dummy0 added [ 112.808469][ T9667] netlink: 'syz.2.2568': attribute type 10 has an invalid length. [ 112.840963][ T9667] team0: Port device dummy0 removed [ 112.863106][ T9667] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.037602][ T9678] tipc: Started in network mode [ 113.042849][ T9678] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.114136][ T9678] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 113.122682][ T9678] tipc: Enabled bearer , priority 10 [ 113.239992][ T9703] hsr_slave_0: left promiscuous mode [ 113.250426][ T9703] hsr_slave_1: left promiscuous mode [ 113.348271][ T9716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.063588][ T9744] netlink: 'syz.6.2603': attribute type 1 has an invalid length. [ 114.083404][ T9744] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.091856][ T9744] bond1: (slave batadv1): making interface the new active one [ 114.100402][ T9744] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 114.117787][ T9750] netlink: 'syz.0.2613': attribute type 29 has an invalid length. [ 114.126872][ T9750] netlink: 'syz.0.2613': attribute type 29 has an invalid length. [ 114.140048][ T9744] bond1 (unregistering): (slave batadv1): Releasing active interface [ 114.158468][ T9744] bond1 (unregistering): Released all slaves [ 114.220455][ T9761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.240724][ T1038] tipc: Node number set to 1 [ 114.360188][ T9779] Cannot find add_set index 0 as target [ 114.742269][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 114.742289][ T29] audit: type=1326 audit(114.723:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.803443][ T29] audit: type=1326 audit(114.723:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.826442][ T29] audit: type=1326 audit(114.723:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.852250][ T29] audit: type=1326 audit(114.723:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.875169][ T29] audit: type=1326 audit(114.753:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.899196][ T29] audit: type=1326 audit(114.763:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.922300][ T29] audit: type=1326 audit(114.763:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.945364][ T29] audit: type=1326 audit(114.763:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.968272][ T29] audit: type=1326 audit(114.763:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 114.991268][ T29] audit: type=1326 audit(114.763:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9788 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6538daf749 code=0x7ffc0000 [ 115.238532][ T9811] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 115.277837][ T9811] gretap1: entered allmulticast mode [ 115.288821][ T9811] bond1: (slave gretap1): making interface the new active one [ 115.297234][ T9811] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.309380][ T9818] loop6: detected capacity change from 0 to 1024 [ 115.336583][ T9824] bond0: entered promiscuous mode [ 115.341892][ T9824] bond_slave_0: entered promiscuous mode [ 115.347618][ T9824] bond_slave_1: entered promiscuous mode [ 115.388614][ T9818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.400925][ T9824] dummy0: entered promiscuous mode [ 115.407285][ T9824] bond0: left promiscuous mode [ 115.412227][ T9824] bond_slave_0: left promiscuous mode [ 115.417732][ T9824] bond_slave_1: left promiscuous mode [ 115.433165][ T9824] dummy0: left promiscuous mode [ 115.433727][ T9818] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2635: bg 0: block 112: padding at end of block bitmap is not set [ 115.487224][ T8137] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.508087][ T9837] loop3: detected capacity change from 0 to 1024 [ 115.534078][ T9837] EXT4-fs: Ignoring removed oldalloc option [ 115.550365][ T9841] __nla_validate_parse: 21 callbacks suppressed [ 115.550389][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2644'. [ 115.577820][ T9837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.641966][ T9837] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.2643: lblock 0 mapped to illegal pblock 0 (length 1) [ 115.655851][ T9837] EXT4-fs (loop3): Remounting filesystem read-only [ 115.674852][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.688198][ T9859] pim6reg: entered allmulticast mode [ 115.698275][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 115.700724][ T9859] bridge0: entered allmulticast mode [ 115.722282][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2651'. [ 115.739122][ T9859] pim6reg: left allmulticast mode [ 115.754760][ T9859] bridge0: left allmulticast mode [ 115.760345][ T9868] hub 9-0:1.0: USB hub found [ 115.765546][ T9868] hub 9-0:1.0: 8 ports detected [ 115.951534][ T9888] blktrace: Concurrent blktraces are not allowed on loop4 [ 116.057875][ T9899] veth1_to_bond: entered allmulticast mode [ 116.091164][ T9897] veth1_to_bond: left allmulticast mode [ 116.420075][ T9929] nfs: Unknown parameter '0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.420075][ T9929] 0 [ 116.631276][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 116.640315][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2685'. [ 116.670154][ T9936] bridge0: port 4(vlan2) entered blocking state [ 116.676641][ T9936] bridge0: port 4(vlan2) entered disabled state [ 116.692623][ T9936] vlan2: entered allmulticast mode [ 116.697872][ T9936] bridge0: entered allmulticast mode [ 116.706448][ T9936] vlan2: left allmulticast mode [ 116.711615][ T9936] bridge0: left allmulticast mode [ 116.752172][ T9946] loop6: detected capacity change from 0 to 128 [ 116.774039][ T9946] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.834150][ T9951] loop3: detected capacity change from 0 to 128 [ 116.849982][ T8137] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.044494][ T9963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2696'. [ 117.143137][ T4029] ================================================================== [ 117.151318][ T4029] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 117.160822][ T4029] [ 117.163155][ T4029] write to 0xffff888168f1372c of 36 bytes by task 9951 on cpu 0: [ 117.170883][ T4029] copy_folio_from_iter_atomic+0x760/0x1150 [ 117.176797][ T4029] generic_perform_write+0x2c2/0x490 [ 117.182107][ T4029] __generic_file_write_iter+0x9e/0x120 [ 117.187676][ T4029] generic_file_write_iter+0x8d/0x2f0 [ 117.193067][ T4029] iter_file_splice_write+0x66b/0xa20 [ 117.198471][ T4029] direct_splice_actor+0x156/0x2a0 [ 117.203644][ T4029] splice_direct_to_actor+0x312/0x680 [ 117.209039][ T4029] do_splice_direct+0xda/0x150 [ 117.213833][ T4029] do_sendfile+0x380/0x650 [ 117.218276][ T4029] __x64_sys_sendfile64+0x105/0x150 [ 117.223515][ T4029] x64_sys_call+0x2db1/0x3000 [ 117.228256][ T4029] do_syscall_64+0xd8/0x2c0 [ 117.232795][ T4029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.238718][ T4029] [ 117.241057][ T4029] read to 0xffff888168f13600 of 512 bytes by task 4029 on cpu 1: [ 117.248795][ T4029] copy_folio_from_iter_atomic+0x760/0x1150 [ 117.254728][ T4029] generic_perform_write+0x2c2/0x490 [ 117.260132][ T4029] shmem_file_write_iter+0xc5/0xf0 [ 117.265267][ T4029] lo_rw_aio+0x673/0x720 [ 117.269608][ T4029] loop_process_work+0x56d/0xaa0 [ 117.274573][ T4029] loop_workfn+0x31/0x40 [ 117.278832][ T4029] process_scheduled_works+0x4ce/0x9d0 [ 117.284307][ T4029] worker_thread+0x582/0x770 [ 117.288909][ T4029] kthread+0x489/0x510 [ 117.293156][ T4029] ret_from_fork+0x149/0x290 [ 117.297782][ T4029] ret_from_fork_asm+0x1a/0x30 [ 117.302561][ T4029] [ 117.304886][ T4029] Reported by Kernel Concurrency Sanitizer on: [ 117.311058][ T4029] CPU: 1 UID: 0 PID: 4029 Comm: kworker/u8:46 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.321056][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.331125][ T4029] Workqueue: loop3 loop_workfn [ 117.335916][ T4029] ================================================================== [ 117.448884][ T9957] syz.3.2692: attempt to access beyond end of device [ 117.448884][ T9957] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 117.462753][ T9957] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 117.471993][ T9951] syz.3.2692: attempt to access beyond end of device [ 117.471993][ T9951] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 117.485823][ T9951] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 117.494909][ T9951] syz.3.2692: attempt to access beyond end of device [ 117.494909][ T9951] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 117.508642][ T9951] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 121.360879][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!