last executing test programs: 48.692593892s ago: executing program 3 (id=1292): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x9bf5, 0x8, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x80000000, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1) 48.228933451s ago: executing program 3 (id=1301): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000040)='./file0\x00', 0x200000000000000) 48.200511562s ago: executing program 3 (id=1304): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 48.111584764s ago: executing program 3 (id=1305): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 48.046635155s ago: executing program 3 (id=1307): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$snapshot(r1, 0x0, 0x0) 47.971469927s ago: executing program 3 (id=1312): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xd7, 0x0, 0x0, 0x20, 0x3, 0x3, 0xb, 0x2ff, 0x38, 0x0, 0x12, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x1, 0xfffffff6, 0x9, 0xc6, 0x2, 0x8000, 0x2}]}, 0x58) 47.939692317s ago: executing program 32 (id=1312): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xd7, 0x0, 0x0, 0x20, 0x3, 0x3, 0xb, 0x2ff, 0x38, 0x0, 0x12, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x1, 0xfffffff6, 0x9, 0xc6, 0x2, 0x8000, 0x2}]}, 0x58) 2.256700645s ago: executing program 5 (id=2419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) umount2(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.205235776s ago: executing program 5 (id=2422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x24}}, 0x40) 1.753637975s ago: executing program 5 (id=2425): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 1.50430208s ago: executing program 5 (id=2431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 1.424130192s ago: executing program 1 (id=2433): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280)}, 0x121, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, 0x2000000008}, 0x0, 0xa, 0xffffffffffffffff, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x198) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.401027573s ago: executing program 1 (id=2434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(0x0, 0x19) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0x2, 0x41) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100"], 0xfc}}, 0x0) 1.348832363s ago: executing program 4 (id=2436): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES32, @ANYRESDEC=r2, @ANYRES8], 0x119) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pwritev(r4, &(0x7f0000000780)=[{&(0x7f00000001c0)="8b7b0aec79948004bb372b0227fdbd55f6f2402b396957fcdf7791e956bea518d131d3b4f5b2ad5202cecaa6dd14a7055be801b28dc3667777fae21bc49b48e9e755debda8d69c1adf4c80e2acfe21ee668f31134a9f1fd07bbdd69f1e25c4760420d31a2d", 0xffda}, {0x0}], 0x2, 0x0, 0x9) 1.326980324s ago: executing program 1 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.325912704s ago: executing program 2 (id=2447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.274165855s ago: executing program 1 (id=2438): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 1.174090257s ago: executing program 0 (id=2439): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 1.144730727s ago: executing program 1 (id=2440): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 939.351971ms ago: executing program 2 (id=2441): openat(0xffffffffffffffff, 0x0, 0x60000, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) write$eventfd(r0, &(0x7f0000000240)=0x9, 0x8) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x9) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) setuid(0xee01) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x8, 0x0, 0x2}) 917.549922ms ago: executing program 0 (id=2442): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 815.337044ms ago: executing program 0 (id=2443): bpf$ENABLE_STATS(0x20, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@resgid}, {@noblock_validity}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x3, 0x5000000, 0x8000c62) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 668.960037ms ago: executing program 2 (id=2444): openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 571.197409ms ago: executing program 0 (id=2445): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280)}, 0x121, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, 0x2000000008}, 0x0, 0xa, 0xffffffffffffffff, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x198) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 569.097459ms ago: executing program 5 (id=2456): listen(0xffffffffffffffff, 0x5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f00000001c0)='auxv\x00') socket$nl_netfilter(0x10, 0x3, 0xc) lstat(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 543.068949ms ago: executing program 0 (id=2446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 456.980471ms ago: executing program 4 (id=2448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 442.681761ms ago: executing program 2 (id=2459): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) setuid(0xee01) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 224.490035ms ago: executing program 0 (id=2449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x9, 0xc) splice(r3, 0x0, r6, 0x0, 0x80, 0x7) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 224.182046ms ago: executing program 2 (id=2450): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 223.837855ms ago: executing program 4 (id=2451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 223.274876ms ago: executing program 1 (id=2452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x113, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3, 0x10000}, 0x0, 0x0) 199.171146ms ago: executing program 5 (id=2453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 104.973188ms ago: executing program 4 (id=2454): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47bc, 0x2, 0x0, 0x0, 0x0) 104.290398ms ago: executing program 4 (id=2455): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x6d) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) shutdown(r1, 0x1) 103.968698ms ago: executing program 2 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) 0s ago: executing program 4 (id=2458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008179][ T5492] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.022512][ T5492] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.044893][ T5492] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061491][ T5499] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 68.198687][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 68.198706][ T29] audit: type=1326 audit(2000000012.380:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.250982][ T29] audit: type=1326 audit(2000000012.380:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.274373][ T29] audit: type=1326 audit(2000000012.380:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.297743][ T29] audit: type=1326 audit(2000000012.380:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.321021][ T29] audit: type=1326 audit(2000000012.380:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.344189][ T29] audit: type=1326 audit(2000000012.390:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.367521][ T29] audit: type=1326 audit(2000000012.390:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.390881][ T29] audit: type=1326 audit(2000000012.390:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.414218][ T29] audit: type=1326 audit(2000000012.390:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.437617][ T29] audit: type=1326 audit(2000000012.390:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 68.560222][ T5527] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 68.603920][ T5530] loop1: detected capacity change from 0 to 1024 [ 68.611896][ T5530] EXT4-fs: Ignoring removed orlov option [ 68.630001][ T5530] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.642321][ T5530] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm +}[@: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 68.662388][ T5530] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 11 (err -117) [ 68.679601][ T5530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.708680][ T5530] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm +}[@: Invalid block bitmap block 0 in block_group 0 [ 68.779729][ T5530] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 68.813192][ T5546] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.823080][ T5546] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.834539][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.908582][ T5546] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.918445][ T5546] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.001293][ T5546] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.011178][ T5546] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.073113][ T5546] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.083072][ T5546] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.163717][ T5546] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.172110][ T5546] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.203222][ T5546] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.211663][ T5546] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.245026][ T5546] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.253341][ T5546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.283951][ T5546] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.292401][ T5546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.495348][ T5574] loop3: detected capacity change from 0 to 8192 [ 69.742508][ T5602] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.752392][ T5602] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.821802][ T5602] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.831709][ T5602] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.856221][ T5604] loop1: detected capacity change from 0 to 8192 [ 69.901596][ T5602] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.911729][ T5602] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.973132][ T5602] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.983030][ T5602] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.047816][ T5602] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.056161][ T5602] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.072124][ T5602] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.080518][ T5602] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084952][ T5610] netlink: 'syz.3.825': attribute type 13 has an invalid length. [ 70.103524][ T5602] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.111881][ T5602] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.152718][ T5602] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.161230][ T5602] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.691167][ T5627] SELinux: failed to load policy [ 70.720329][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.730408][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.938185][ T5610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.956829][ T5610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.014577][ T5610] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.023146][ T5610] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.031555][ T5610] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.040037][ T5610] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.051877][ T5610] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.060493][ T5610] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.068990][ T5610] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.077482][ T5610] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.188758][ T5647] __nla_validate_parse: 1 callbacks suppressed [ 71.188776][ T5647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 71.222792][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 71.448206][ T5669] syzkaller0: entered promiscuous mode [ 71.453940][ T5669] syzkaller0: entered allmulticast mode [ 71.617875][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.627341][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.676093][ T5680] netlink: 216 bytes leftover after parsing attributes in process `syz.0.854'. [ 71.721303][ T5686] loop1: detected capacity change from 0 to 256 [ 71.783195][ T5685] loop3: detected capacity change from 0 to 8192 [ 71.797221][ T5685] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.970638][ T5707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5707 comm=syz.3.867 [ 72.072382][ T5723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.875'. [ 72.093139][ T5719] netlink: 'syz.2.873': attribute type 13 has an invalid length. [ 72.465130][ T5761] netlink: 156 bytes leftover after parsing attributes in process `syz.1.891'. [ 72.475200][ T5761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'. [ 72.772190][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.783862][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.978888][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.989246][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.024959][ T5719] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.033583][ T5719] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.042035][ T5719] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.050429][ T5719] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.061724][ T5754] netlink: 'syz.4.888': attribute type 12 has an invalid length. [ 73.083206][ T5787] syzkaller1: entered promiscuous mode [ 73.088824][ T5787] syzkaller1: entered allmulticast mode [ 73.117297][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 73.183274][ T5806] ALSA: seq fatal error: cannot create timer (-19) [ 73.257150][ T5817] loop3: detected capacity change from 0 to 1024 [ 73.264349][ T5817] EXT4-fs: Ignoring removed nobh option [ 73.264461][ T5822] loop0: detected capacity change from 0 to 512 [ 73.281966][ T5822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.292400][ T5817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.295008][ T5822] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.342549][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.374946][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.492367][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 73.492384][ T29] audit: type=1326 audit(2000000017.680:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.526239][ T5851] loop3: detected capacity change from 0 to 128 [ 73.539443][ T29] audit: type=1326 audit(2000000017.710:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.562867][ T29] audit: type=1326 audit(2000000017.710:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.586450][ T29] audit: type=1326 audit(2000000017.710:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.599260][ T5851] netlink: 'syz.3.930': attribute type 6 has an invalid length. [ 73.609918][ T29] audit: type=1326 audit(2000000017.710:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.609970][ T29] audit: type=1326 audit(2000000017.710:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.610008][ T29] audit: type=1326 audit(2000000017.710:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.610055][ T29] audit: type=1326 audit(2000000017.710:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.610136][ T29] audit: type=1326 audit(2000000017.710:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.610235][ T29] audit: type=1326 audit(2000000017.710:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.4.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab8e9e929 code=0x7ffc0000 [ 73.616442][ T5854] ALSA: seq fatal error: cannot create timer (-19) [ 73.821608][ T5862] loop0: detected capacity change from 0 to 512 [ 73.828781][ T5862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.856659][ T5862] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.925: casefold flag without casefold feature [ 73.870616][ T5862] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.925: couldn't read orphan inode 15 (err -117) [ 73.883191][ T5862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.907513][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.938985][ T5880] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 73.951959][ T5882] xt_hashlimit: size too large, truncated to 1048576 [ 73.955561][ T5880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.022923][ T5880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.061007][ T5880] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 74.092876][ T5880] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 74.157924][ T5894] ALSA: seq fatal error: cannot create timer (-19) [ 74.188614][ T5895] ip6erspan0: entered promiscuous mode [ 74.208665][ T5895] bond1: (slave ip6erspan0): making interface the new active one [ 74.229804][ T5895] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 74.405786][ T5919] loop0: detected capacity change from 0 to 2048 [ 74.434109][ T5919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.504069][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.538509][ T5926] loop1: detected capacity change from 0 to 512 [ 74.551243][ T5926] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 74.573289][ T5928] loop2: detected capacity change from 0 to 512 [ 74.598501][ T5930] xt_hashlimit: size too large, truncated to 1048576 [ 74.695310][ T5928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.709738][ T5928] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.722554][ T5928] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.950: corrupted inode contents [ 74.736239][ T5928] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.950: mark_inode_dirty error [ 74.777712][ T5928] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.950: corrupted inode contents [ 74.854039][ T5946] loop1: detected capacity change from 0 to 1024 [ 74.875672][ T5928] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.950: corrupted inode contents [ 74.899347][ T5928] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.950: mark_inode_dirty error [ 74.900848][ T5946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.921433][ T5928] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.950: corrupted inode contents [ 74.936047][ T5928] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.950: mark_inode_dirty error [ 74.947526][ T5928] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.950: corrupted inode contents [ 74.957957][ T5946] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 74.975312][ T5928] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.950: mark_inode_dirty error [ 74.993068][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.021792][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.070676][ T5957] loop4: detected capacity change from 0 to 1024 [ 75.135290][ T5967] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.168959][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.299033][ T5957] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.959: Allocating blocks 449-513 which overlap fs metadata [ 75.344929][ T5956] EXT4-fs (loop4): pa ffff888106a30150: logic 48, phys. 177, len 21 [ 75.353143][ T5956] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 75.393343][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.717942][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 75.751398][ T6015] SELinux: Context Ü is not valid (left unmapped). [ 76.292941][ T6046] vlan2: entered promiscuous mode [ 76.298063][ T6046] ip6gretap0: entered promiscuous mode [ 76.335570][ T6048] netlink: 'syz.0.998': attribute type 13 has an invalid length. [ 76.407518][ T6051] loop4: detected capacity change from 0 to 128 [ 76.417917][ T6051] netlink: 'syz.4.999': attribute type 6 has an invalid length. [ 77.054964][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.166074][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.297856][ T6048] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.306899][ T6048] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.316121][ T6048] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.325243][ T6048] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.396434][ T6080] loop2: detected capacity change from 0 to 128 [ 77.408244][ T6080] EXT4-fs: Ignoring removed nobh option [ 77.416601][ T6080] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.438971][ T6080] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.481988][ T6093] all: renamed from lo [ 77.489871][ T6091] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 77.551922][ T4509] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.638296][ T6106] netlink: 'syz.4.1019': attribute type 13 has an invalid length. [ 77.712726][ T6110] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 77.739691][ T6119] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 77.752975][ T6121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6121 comm=syz.0.1023 [ 77.767415][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'. [ 77.931562][ T6106] bridge0: port 3(dummy0) entered disabled state [ 77.938982][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.946925][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.187179][ T6106] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.197005][ T6106] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.206911][ T6106] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.215658][ T6106] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.255989][ T6106] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.264888][ T6106] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.273816][ T6106] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.282546][ T6106] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.313261][ T6110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.334467][ T6119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.380495][ T6122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.387895][ T6122] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 78.399926][ T6122] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 78.414545][ T6123] bond1 (unregistering): Released all slaves [ 78.427366][ T6124] vlan2: entered allmulticast mode [ 78.432672][ T6124] bond2: entered allmulticast mode [ 78.444573][ T6126] ip6erspan0: entered promiscuous mode [ 78.453077][ T6126] bond2: (slave ip6erspan0): making interface the new active one [ 78.461698][ T6126] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 78.521864][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 78.521882][ T29] audit: type=1326 audit(2000000022.711:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.558728][ T29] audit: type=1326 audit(2000000022.741:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.582415][ T29] audit: type=1326 audit(2000000022.741:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.606205][ T29] audit: type=1326 audit(2000000022.741:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.635651][ T29] audit: type=1326 audit(2000000022.821:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.659220][ T29] audit: type=1326 audit(2000000022.821:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.682822][ T29] audit: type=1326 audit(2000000022.821:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6135 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 78.837079][ T10] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 78.844738][ T10] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 78.849163][ T29] audit: type=1326 audit(2000000023.021:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 78.852303][ T10] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 78.875597][ T29] audit: type=1326 audit(2000000023.021:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 78.906390][ T29] audit: type=1326 audit(2000000023.021:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 78.959726][ T10] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 79.198952][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1047'. [ 79.382872][ T6199] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.398512][ T6201] batadv_slave_1: entered promiscuous mode [ 79.405443][ T6201] batadv_slave_1: left promiscuous mode [ 79.421074][ T6199] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.481885][ T6199] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.533407][ T6199] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.587599][ T6199] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.599616][ T6199] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.612036][ T6199] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.624040][ T6199] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.768592][ T6215] ref_ctr increment failed for inode: 0x485 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810437d640 [ 79.834184][ T6214] uprobe: syz.1.1060:6214 failed to unregister, leaking uprobe [ 80.145851][ T6235] netlink: 'syz.1.1078': attribute type 13 has an invalid length. [ 80.192829][ T6240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6240 comm=syz.3.1068 [ 80.354231][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 80.947573][ T6253] loop2: detected capacity change from 0 to 512 [ 80.967218][ T6253] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 80.986661][ T6253] EXT4-fs: error: could not find journal device path [ 81.150102][ T6235] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.158526][ T6235] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.167080][ T6235] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.175523][ T6235] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.206879][ T6257] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1074'. [ 81.241840][ T6261] syzkaller0: entered allmulticast mode [ 81.258991][ T6261] syzkaller0 (unregistering): left allmulticast mode [ 81.685634][ T6293] loop2: detected capacity change from 0 to 1024 [ 81.721109][ T6293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.814564][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.311899][ T6357] loop4: detected capacity change from 0 to 512 [ 82.331678][ T6357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.344539][ T6357] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.360570][ T6357] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 82.373003][ T6362] netlink: 'syz.0.1116': attribute type 12 has an invalid length. [ 82.373260][ T6357] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.761068][ T6394] loop3: detected capacity change from 0 to 164 [ 82.772584][ T6394] bio_check_eod: 100 callbacks suppressed [ 82.772601][ T6394] syz.3.1133: attempt to access beyond end of device [ 82.772601][ T6394] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 82.792542][ T6394] syz.3.1133: attempt to access beyond end of device [ 82.792542][ T6394] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.129626][ T6411] tipc: Enabling of bearer rejected, failed to enable media [ 83.151594][ T6413] loop3: detected capacity change from 0 to 1024 [ 83.170839][ T6413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.243475][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.371363][ T6428] syzkaller0: entered allmulticast mode [ 83.378570][ T6428] syzkaller0 (unregistering): left allmulticast mode [ 83.949460][ T6491] netlink: 'syz.3.1164': attribute type 1 has an invalid length. [ 83.957264][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 84.010087][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 84.010104][ T29] audit: type=1400 audit(2000000028.201:1237): avc: denied { name_connect } for pid=6495 comm="syz.4.1165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 84.047564][ T29] audit: type=1400 audit(2000000028.201:1238): avc: denied { listen } for pid=6495 comm="syz.4.1165" lport=46494 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.070731][ T29] audit: type=1400 audit(2000000028.201:1239): avc: denied { accept } for pid=6495 comm="syz.4.1165" lport=46494 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.094237][ T29] audit: type=1400 audit(2000000028.201:1240): avc: denied { getopt } for pid=6495 comm="syz.4.1165" lport=46494 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.141662][ T29] audit: type=1326 audit(2000000028.321:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 84.165402][ T29] audit: type=1326 audit(2000000028.321:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 84.188944][ T29] audit: type=1326 audit(2000000028.321:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 84.212441][ T29] audit: type=1326 audit(2000000028.331:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 84.236064][ T29] audit: type=1326 audit(2000000028.331:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 84.259566][ T29] audit: type=1326 audit(2000000028.331:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2543fe929 code=0x7ffc0000 [ 84.268730][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 84.296831][ T6513] team1: entered promiscuous mode [ 84.309069][ T6513] team1: entered allmulticast mode [ 84.482607][ T6551] netlink: 'syz.3.1174': attribute type 7 has an invalid length. [ 84.490539][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 84.952440][ T6607] tipc: Started in network mode [ 84.957410][ T6607] tipc: Node identity f213c7312962, cluster identity 4711 [ 84.964854][ T6607] tipc: Enabled bearer , priority 0 [ 84.973832][ T6606] tipc: Resetting bearer [ 84.991739][ T6606] tipc: Disabling bearer [ 85.075694][ T6624] loop2: detected capacity change from 0 to 512 [ 85.093575][ T6624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.099043][ T6629] loop3: detected capacity change from 0 to 512 [ 85.110750][ T6624] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.113122][ T6629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.146078][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.159139][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.174155][ T6629] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.188936][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 85.270146][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.324094][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1194'. [ 85.342422][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 85.708388][ T6672] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 85.716417][ T6672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1205'. [ 85.729490][ T6672] dummy0: entered promiscuous mode [ 86.206312][ T6728] tipc: Started in network mode [ 86.211311][ T6728] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 86.220325][ T6728] tipc: Enabling of bearer rejected, failed to enable media [ 86.336126][ T6737] loop3: detected capacity change from 0 to 8192 [ 86.580096][ T6771] netlink: 'syz.4.1239': attribute type 6 has an invalid length. [ 86.589626][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 86.600300][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 87.081178][ T6790] netlink: 'syz.4.1246': attribute type 1 has an invalid length. [ 87.108585][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.136494][ T6790] bond1: (slave gretap1): making interface the new active one [ 87.184308][ T6790] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.223078][ T6792] vlan2: entered allmulticast mode [ 87.228334][ T6792] bond1: entered allmulticast mode [ 87.233553][ T6792] gretap1: entered allmulticast mode [ 87.259223][ T6792] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 87.349700][ T6794] loop1: detected capacity change from 0 to 1024 [ 87.401561][ T6794] EXT4-fs: Ignoring removed orlov option [ 87.413195][ T6794] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 87.431245][ T6799] syz.3.1249 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.431648][ T6794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.467885][ T6794] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1247: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 87.523585][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.974493][ T6842] loop2: detected capacity change from 0 to 512 [ 87.982328][ T6842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.994347][ T6842] EXT4-fs (loop2): 1 truncate cleaned up [ 88.001205][ T6842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.034094][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.061126][ T6851] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.182127][ T6865] netlink: 'syz.3.1276': attribute type 6 has an invalid length. [ 88.190959][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 88.696384][ T6895] pim6reg1: entered promiscuous mode [ 88.701839][ T6895] pim6reg1: entered allmulticast mode [ 88.826569][ T6901] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 88.897475][ T6901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.907755][ T6906] bond1 (unregistering): Released all slaves [ 88.917956][ T6908] veth0_vlan: entered allmulticast mode [ 88.925686][ T6908] ÿÿÿÿÿÿ: renamed from vlan1 [ 89.037015][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 89.037032][ T29] audit: type=1400 audit(2000000033.221:1391): avc: denied { write } for pid=6916 comm="syz.1.1296" lport=57825 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.067012][ T29] audit: type=1400 audit(2000000033.221:1392): avc: denied { setopt } for pid=6916 comm="syz.1.1296" lport=57825 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.097427][ T29] audit: type=1326 audit(2000000033.281:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.121038][ T29] audit: type=1326 audit(2000000033.281:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.193935][ T29] audit: type=1326 audit(2000000033.291:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.217446][ T29] audit: type=1326 audit(2000000033.291:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.241063][ T29] audit: type=1326 audit(2000000033.291:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.264686][ T29] audit: type=1326 audit(2000000033.291:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.288194][ T29] audit: type=1326 audit(2000000033.291:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.313196][ T29] audit: type=1326 audit(2000000033.291:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 89.784098][ T3454] bridge_slave_1: left allmulticast mode [ 89.789938][ T3454] bridge_slave_1: left promiscuous mode [ 89.795673][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.819198][ T3454] bridge_slave_0: left allmulticast mode [ 89.824905][ T3454] bridge_slave_0: left promiscuous mode [ 89.830863][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.941536][ T3454] bond0 (unregistering): (slave c1ÿ): Releasing backup interface [ 89.951838][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.961371][ T3454] bond0 (unregistering): Released all slaves [ 90.001686][ T3454] tipc: Left network mode [ 90.037767][ T3454] hsr_slave_0: left promiscuous mode [ 90.044173][ T3454] hsr_slave_1: left promiscuous mode [ 90.059397][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.067055][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.103890][ T3454] team0 (unregistering): Port device team_slave_1 removed [ 90.114818][ T3454] team0 (unregistering): Port device team_slave_0 removed [ 90.225416][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 90.271379][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.278577][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.286754][ T6958] bridge_slave_0: entered allmulticast mode [ 90.293586][ T6958] bridge_slave_0: entered promiscuous mode [ 90.304445][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.311629][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.320552][ T6958] bridge_slave_1: entered allmulticast mode [ 90.327193][ T6958] bridge_slave_1: entered promiscuous mode [ 90.350890][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.363912][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.399753][ T6958] team0: Port device team_slave_0 added [ 90.409308][ T6958] team0: Port device team_slave_1 added [ 90.427281][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.434342][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.460405][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.471741][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.478763][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.504765][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.528149][ T7014] loop2: detected capacity change from 0 to 512 [ 90.535381][ T7014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.547804][ T7014] EXT4-fs (loop2): 1 truncate cleaned up [ 90.554053][ T7014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.578042][ T6958] hsr_slave_0: entered promiscuous mode [ 90.584135][ T7014] EXT4-fs error (device loop2): ext4_lookup:1787: inode #16: comm syz.2.1334: iget: bad i_size value: 5497558147880 [ 90.584616][ T6958] hsr_slave_1: entered promiscuous mode [ 90.602802][ T6958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.610485][ T6958] Cannot create hsr debugfs directory [ 90.707321][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.735026][ T6958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.745016][ T6958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.754702][ T6958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.763970][ T6958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.805623][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.820579][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.830775][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.837894][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.851888][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.859069][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.883681][ T6958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.894304][ T6958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.010174][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.019878][ T7042] loop1: detected capacity change from 0 to 8192 [ 91.207641][ T7059] netlink: 'syz.0.1341': attribute type 2 has an invalid length. [ 91.215616][ T7059] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 91.223421][ T7059] __nla_validate_parse: 3 callbacks suppressed [ 91.223438][ T7059] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1341'. [ 91.263087][ T6958] veth0_vlan: entered promiscuous mode [ 91.271667][ T6958] veth1_vlan: entered promiscuous mode [ 91.289727][ T6958] veth0_macvtap: entered promiscuous mode [ 91.306918][ T6958] veth1_macvtap: entered promiscuous mode [ 91.324490][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.337218][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.348148][ T6958] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.357133][ T6958] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.365977][ T6958] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.374824][ T6958] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.437887][ T7065] loop5: detected capacity change from 0 to 512 [ 91.445316][ T7065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.470722][ T7065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.492473][ T7065] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.516449][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.533369][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.678884][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.716730][ T7078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.991013][ T7081] pim6reg1: entered promiscuous mode [ 91.996473][ T7081] pim6reg1: entered allmulticast mode [ 92.117845][ T7083] loop2: detected capacity change from 0 to 2048 [ 92.143977][ T7085] loop1: detected capacity change from 0 to 128 [ 92.158921][ T7083] loop2: p1 < > p4 [ 92.163619][ T7083] loop2: p4 size 8388608 extends beyond EOD, truncated [ 92.286178][ T7097] pim6reg1: entered promiscuous mode [ 92.291746][ T7097] pim6reg1: entered allmulticast mode [ 92.418193][ T7111] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 92.443937][ T7111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.465881][ T7111] bond1: (slave gretap1): making interface the new active one [ 92.474454][ T7111] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 92.493449][ T7111] vlan2: entered allmulticast mode [ 92.498767][ T7111] bond1: entered allmulticast mode [ 92.503914][ T7111] gretap1: entered allmulticast mode [ 92.510023][ T7111] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 92.535784][ T7115] loop1: detected capacity change from 0 to 2048 [ 92.592037][ T7115] loop1: p1 < > p4 [ 92.599151][ T7115] loop1: p4 size 8388608 extends beyond EOD, truncated [ 93.053123][ T7139] pim6reg1: entered promiscuous mode [ 93.058703][ T7139] pim6reg1: entered allmulticast mode [ 93.383869][ T7152] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 93.407803][ T7152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.427608][ T7152] bond3: (slave gretap1): making interface the new active one [ 93.436129][ T7152] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 93.453671][ T7152] vlan2: entered allmulticast mode [ 93.458925][ T7152] bond3: entered allmulticast mode [ 93.464124][ T7152] gretap1: entered allmulticast mode [ 93.470154][ T7152] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 94.104546][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 94.104564][ T29] audit: type=1326 audit(2000000551.289:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.137033][ T29] audit: type=1326 audit(2000000551.289:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.142759][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.160526][ T29] audit: type=1326 audit(2000000551.289:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.191214][ T29] audit: type=1326 audit(2000000551.289:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.214660][ T29] audit: type=1326 audit(2000000551.289:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.238175][ T29] audit: type=1326 audit(2000000551.289:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.239888][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.261734][ T29] audit: type=1326 audit(2000000551.289:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.261774][ T29] audit: type=1326 audit(2000000551.319:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.322543][ T29] audit: type=1326 audit(2000000551.319:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.346101][ T29] audit: type=1326 audit(2000000551.319:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 94.521886][ T7207] loop2: detected capacity change from 0 to 512 [ 94.540994][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.558364][ T7207] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.595994][ T7216] xt_connbytes: Forcing CT accounting to be enabled [ 94.604441][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.616348][ T7216] xt_bpf: check failed: parse error [ 94.852363][ T7242] netlink: 'syz.2.1417': attribute type 11 has an invalid length. [ 95.032413][ T7269] loop1: detected capacity change from 0 to 512 [ 95.081057][ T7269] EXT4-fs (loop1): 1 orphan inode deleted [ 95.089505][ T7269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.105989][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 95.146284][ T7269] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.167640][ T7269] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.179236][ T7283] wg2: entered promiscuous mode [ 95.184214][ T7283] wg2: entered allmulticast mode [ 95.224083][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.247003][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 95.494555][ T7294] loop2: detected capacity change from 0 to 128 [ 96.035673][ T7303] loop2: detected capacity change from 0 to 256 [ 96.075419][ T7305] syzkaller0: entered promiscuous mode [ 96.081001][ T7305] syzkaller0: entered allmulticast mode [ 96.206189][ T7323] loop5: detected capacity change from 0 to 164 [ 96.217298][ T7323] syz.5.1454: attempt to access beyond end of device [ 96.217298][ T7323] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 96.232531][ T7323] syz.5.1454: attempt to access beyond end of device [ 96.232531][ T7323] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.285567][ T7332] tmpfs: Bad value for 'mpol' [ 96.934434][ T7356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1466'. [ 96.961738][ T7356] netlink: zone id is out of range [ 96.979344][ T7356] netlink: zone id is out of range [ 96.984535][ T7356] netlink: zone id is out of range [ 96.989721][ T7356] netlink: zone id is out of range [ 96.994846][ T7356] netlink: zone id is out of range [ 97.000052][ T7356] netlink: zone id is out of range [ 97.011224][ T7356] netlink: zone id is out of range [ 97.028099][ T7356] netlink: del zone limit has 8 unknown bytes [ 97.081216][ T7358] loop1: detected capacity change from 0 to 512 [ 97.120062][ T7358] EXT4-fs (loop1): 1 orphan inode deleted [ 97.126264][ T7358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.152105][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 97.158166][ T7358] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.177097][ T7358] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1467'. [ 97.186365][ T7358] netlink: 'syz.1.1467': attribute type 9 has an invalid length. [ 97.194212][ T7358] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1467'. [ 97.203335][ T7358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1467'. [ 97.224834][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.255244][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.264437][ T7368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.392678][ T7382] loop1: detected capacity change from 0 to 164 [ 97.410214][ T7382] syz.1.1477: attempt to access beyond end of device [ 97.410214][ T7382] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.430518][ T7382] syz.1.1477: attempt to access beyond end of device [ 97.430518][ T7382] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.431574][ T7384] loop5: detected capacity change from 0 to 512 [ 97.471195][ T7384] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 97.479784][ T7384] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1479: invalid indirect mapped block 2683928664 (level 1) [ 97.497963][ T7384] EXT4-fs (loop5): Remounting filesystem read-only [ 97.519918][ T7384] EXT4-fs (loop5): 1 truncate cleaned up [ 97.535258][ T7384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.590783][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.664951][ T7397] loop1: detected capacity change from 0 to 2048 [ 97.705348][ T7397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.766158][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.984214][ T7434] loop2: detected capacity change from 0 to 128 [ 98.009387][ T7434] syz.2.1499: attempt to access beyond end of device [ 98.009387][ T7434] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 98.024668][ T7434] syz.2.1499: attempt to access beyond end of device [ 98.024668][ T7434] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 98.039957][ T7434] syz.2.1499: attempt to access beyond end of device [ 98.039957][ T7434] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 98.054328][ T7434] syz.2.1499: attempt to access beyond end of device [ 98.054328][ T7434] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 98.069043][ T7434] syz.2.1499: attempt to access beyond end of device [ 98.069043][ T7434] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 98.082773][ T7434] syz.2.1499: attempt to access beyond end of device [ 98.082773][ T7434] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 98.151130][ T7433] Buffer I/O error on dev loop2, logical block 305, async page read [ 98.159654][ T7433] Buffer I/O error on dev loop2, logical block 306, async page read [ 98.177778][ T7433] Buffer I/O error on dev loop2, logical block 307, async page read [ 98.186561][ T7433] Buffer I/O error on dev loop2, logical block 308, async page read [ 98.194708][ T7433] Buffer I/O error on dev loop2, logical block 309, async page read [ 98.202949][ T7433] Buffer I/O error on dev loop2, logical block 310, async page read [ 98.212895][ T7433] Buffer I/O error on dev loop2, logical block 311, async page read [ 98.221662][ T7433] Buffer I/O error on dev loop2, logical block 312, async page read [ 98.230903][ T7433] Buffer I/O error on dev loop2, logical block 305, async page read [ 98.232774][ T7450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7450 comm=syz.4.1506 [ 98.239146][ T7433] Buffer I/O error on dev loop2, logical block 306, async page read [ 98.332811][ T7458] xt_hashlimit: size too large, truncated to 1048576 [ 98.505361][ T7463] loop2: detected capacity change from 0 to 1024 [ 98.522267][ T7463] EXT4-fs: Ignoring removed nobh option [ 98.528038][ T7463] EXT4-fs: Ignoring removed nobh option [ 98.558357][ T7463] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 98.592427][ T7463] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1508: inode #4294967295: comm syz.2.1508: iget: illegal inode # [ 98.639486][ T7463] EXT4-fs (loop2): no journal found [ 98.644775][ T7463] EXT4-fs (loop2): can't get journal size [ 98.685838][ T7463] EXT4-fs (loop2): failed to initialize system zone (-22) [ 98.706334][ T7463] EXT4-fs (loop2): mount failed [ 98.883462][ T7470] usb usb8: usbfs: process 7470 (syz.5.1512) did not claim interface 0 before use [ 98.985594][ T7477] syzkaller1: entered promiscuous mode [ 98.991176][ T7477] syzkaller1: entered allmulticast mode [ 99.016847][ T7479] loop1: detected capacity change from 0 to 128 [ 99.025260][ T7479] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.037697][ T7479] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.117662][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.235970][ T7493] tipc: Started in network mode [ 99.241007][ T7493] tipc: Node identity ac14140f, cluster identity 4711 [ 99.248450][ T7493] tipc: New replicast peer: 255.255.255.255 [ 99.254585][ T7493] tipc: Enabled bearer , priority 10 [ 99.280791][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 99.361356][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 99.361375][ T29] audit: type=1400 audit(2000000556.549:1691): avc: denied { write } for pid=7503 comm="syz.5.1526" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.444810][ T29] audit: type=1326 audit(2000000556.629:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.468691][ T29] audit: type=1326 audit(2000000556.629:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.492552][ T29] audit: type=1326 audit(2000000556.629:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.516036][ T29] audit: type=1326 audit(2000000556.629:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.539662][ T29] audit: type=1326 audit(2000000556.629:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.563289][ T29] audit: type=1326 audit(2000000556.679:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.586966][ T29] audit: type=1326 audit(2000000556.679:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.610813][ T29] audit: type=1326 audit(2000000556.699:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.634253][ T29] audit: type=1326 audit(2000000556.699:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 99.746206][ T7528] 9pnet_fd: Insufficient options for proto=fd [ 99.824972][ T7532] syzkaller0: entered promiscuous mode [ 99.830694][ T7532] syzkaller0: entered allmulticast mode [ 100.086165][ T7560] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1551'. [ 100.095709][ T7560] netlink: zone id is out of range [ 100.101548][ T7560] netlink: zone id is out of range [ 100.263841][ T7574] loop2: detected capacity change from 0 to 2048 [ 100.288267][ T7574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.323621][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.367963][ T10] tipc: Node number set to 2886997007 [ 100.403466][ T7586] netlink: 'syz.2.1561': attribute type 2 has an invalid length. [ 100.413259][ T7586] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 100.422565][ T7586] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1561'. [ 100.469886][ T7594] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1563'. [ 100.598359][ T7599] loop2: detected capacity change from 0 to 2048 [ 100.609548][ T7599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.634857][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.990258][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 102.284538][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 102.293525][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 102.302595][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 102.352957][ T7668] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.661677][ T7691] netlink: 'syz.4.1605': attribute type 10 has an invalid length. [ 102.669990][ T7691] team0: Device hsr_slave_0 failed to register rx_handler [ 102.848645][ T7708] bridge_slave_0: left allmulticast mode [ 102.854409][ T7708] bridge_slave_0: left promiscuous mode [ 102.860346][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.870732][ T7708] bridge_slave_1: left allmulticast mode [ 102.876560][ T7708] bridge_slave_1: left promiscuous mode [ 102.882493][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.892567][ T7708] bond0: (slave bond_slave_0): Releasing backup interface [ 102.901934][ T7708] bond0: (slave bond_slave_1): Releasing backup interface [ 102.911899][ T7708] team0: Port device team_slave_0 removed [ 102.919665][ T7708] team0: Port device team_slave_1 removed [ 102.928774][ T7708] team1: left promiscuous mode [ 102.933728][ T7708] team1: left allmulticast mode [ 102.956967][ T7708] bond1: (slave gretap1): Releasing active interface [ 102.963844][ T7708] gretap1: left allmulticast mode [ 103.223029][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 103.318796][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 103.327922][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 103.336865][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 103.466908][ T7744] xt_hashlimit: size too large, truncated to 1048576 [ 103.612435][ T7753] loop1: detected capacity change from 0 to 512 [ 103.619316][ T7753] EXT4-fs: Ignoring removed nobh option [ 103.638547][ T7753] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1632: corrupted inode contents [ 103.658673][ T7753] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.1632: mark_inode_dirty error [ 103.670528][ T7753] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1632: corrupted inode contents [ 103.682865][ T7753] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1632: mark_inode_dirty error [ 103.695101][ T7753] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1632: Failed to acquire dquot type 0 [ 103.716947][ T7753] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1632: corrupted inode contents [ 103.732153][ T7753] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1632: mark_inode_dirty error [ 103.747713][ T7753] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1632: corrupted inode contents [ 103.760068][ T7753] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1632: mark_inode_dirty error [ 103.772993][ T7753] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1632: corrupted inode contents [ 103.786926][ T7753] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 103.795927][ T7753] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1632: corrupted inode contents [ 103.800174][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 103.816832][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 103.818006][ T7753] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1632: mark_inode_dirty error [ 103.858768][ T7753] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 103.884525][ T7753] EXT4-fs (loop1): 1 truncate cleaned up [ 103.891156][ T7753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.905940][ T7753] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.969481][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.104060][ T7798] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.214511][ T7807] pim6reg1: entered promiscuous mode [ 104.219905][ T7807] pim6reg1: entered allmulticast mode [ 104.245034][ T7798] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.335670][ T7798] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.391307][ T7798] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.406777][ T7816] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 104.428596][ T7816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.436908][ T7816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.445289][ T7816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.453656][ T7816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.500091][ T7808] loop1: detected capacity change from 0 to 1024 [ 104.531652][ T7808] EXT4-fs: Ignoring removed nobh option [ 104.537469][ T7808] EXT4-fs: Ignoring removed nobh option [ 104.555642][ T29] kauditd_printk_skb: 686 callbacks suppressed [ 104.555663][ T29] audit: type=1326 audit(2000000561.739:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.585380][ T29] audit: type=1326 audit(2000000561.739:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.585783][ T7808] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 104.608850][ T29] audit: type=1326 audit(2000000561.739:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.631401][ T7808] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.1645: inode #4294967295: comm syz.1.1645: iget: illegal inode # [ 104.641818][ T29] audit: type=1326 audit(2000000561.739:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.641854][ T29] audit: type=1326 audit(2000000561.739:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.641880][ T29] audit: type=1326 audit(2000000561.739:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.657345][ T7816] team0: Port device geneve1 added [ 104.687747][ T29] audit: type=1326 audit(2000000561.749:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.756411][ T29] audit: type=1326 audit(2000000561.749:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.797258][ T7808] EXT4-fs (loop1): no journal found [ 104.803316][ T7808] EXT4-fs (loop1): can't get journal size [ 104.817775][ T29] audit: type=1326 audit(2000000561.889:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.842048][ T29] audit: type=1326 audit(2000000561.919:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 104.884961][ T7798] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.893829][ T7808] EXT4-fs (loop1): failed to initialize system zone (-22) [ 104.897132][ T7798] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.909512][ T7808] EXT4-fs (loop1): mount failed [ 104.913390][ T7798] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.932242][ T7798] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.439724][ T7859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=917 sclass=netlink_route_socket pid=7859 comm=syz.4.1673 [ 105.485110][ T7863] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 105.589616][ T7877] ip6gre2: entered allmulticast mode [ 105.849336][ T7891] tipc: New replicast peer: 255.255.255.255 [ 105.855499][ T7891] tipc: Enabled bearer , priority 10 [ 106.968395][ T3395] tipc: Node number set to 1 [ 107.004225][ T7948] __nla_validate_parse: 14 callbacks suppressed [ 107.004246][ T7948] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1712'. [ 107.042302][ T7950] wg2: entered promiscuous mode [ 107.047244][ T7950] wg2: entered allmulticast mode [ 107.319848][ T7976] ip6gre1: entered allmulticast mode [ 107.385335][ T7983] pim6reg1: entered promiscuous mode [ 107.391407][ T7983] pim6reg1: entered allmulticast mode [ 107.518710][ T7990] tipc: Enabling of bearer rejected, already enabled [ 107.565935][ T7992] loop1: detected capacity change from 0 to 256 [ 108.321634][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 108.497320][ T8053] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1758'. [ 108.507246][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1758'. [ 108.873793][ T8061] loop1: detected capacity change from 0 to 764 [ 109.141764][ T8077] loop1: detected capacity change from 0 to 256 [ 109.166356][ T8079] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 109.174342][ T8079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1770'. [ 109.183746][ T8079] dummy0: entered promiscuous mode [ 109.191341][ T8079] bridge0: port 1(dummy0) entered blocking state [ 109.197770][ T8079] bridge0: port 1(dummy0) entered disabled state [ 109.204442][ T8079] dummy0: entered allmulticast mode [ 109.300947][ T8091] tipc: Started in network mode [ 109.305975][ T8091] tipc: Node identity 2253ffd480de, cluster identity 4711 [ 109.313263][ T8091] tipc: Enabled bearer , priority 0 [ 109.328371][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 109.352387][ T8089] tipc: Resetting bearer [ 109.390995][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 109.401156][ T8089] tipc: Disabling bearer [ 109.425755][ T8098] wg2: entered promiscuous mode [ 109.430812][ T8098] wg2: entered allmulticast mode [ 109.480526][ T8110] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1784'. [ 109.497104][ T8111] wg2: entered promiscuous mode [ 109.502149][ T8111] wg2: entered allmulticast mode [ 109.558102][ T8117] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.582769][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 109.582805][ T29] audit: type=1326 audit(2000000566.770:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.628453][ T8117] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.652908][ T29] audit: type=1400 audit(2000000566.780:2448): avc: denied { ioctl } for pid=8114 comm="syz.4.1788" path="socket:[22997]" dev="sockfs" ino=22997 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.679120][ T29] audit: type=1326 audit(2000000566.810:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.702623][ T29] audit: type=1326 audit(2000000566.810:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.727437][ T29] audit: type=1326 audit(2000000566.810:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.751837][ T29] audit: type=1326 audit(2000000566.830:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.775338][ T29] audit: type=1326 audit(2000000566.830:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.800342][ T29] audit: type=1326 audit(2000000566.830:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.823849][ T29] audit: type=1326 audit(2000000566.830:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.848702][ T29] audit: type=1326 audit(2000000566.830:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5b91e929 code=0x7ffc0000 [ 109.901593][ T8117] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.917836][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1792'. [ 109.979048][ T8117] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.053260][ T8117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.070053][ T8117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.111065][ T8117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.124818][ T8117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.259023][ T8149] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 110.284249][ T8149] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 110.353324][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'. [ 110.353374][ T8156] serio: Serial port ttyS3 [ 110.421157][ T8159] ÿÿÿÿÿÿ: renamed from vlan1 [ 110.641746][ T8168] syzkaller0: entered promiscuous mode [ 110.647411][ T8168] syzkaller0: entered allmulticast mode [ 110.946443][ T8164] hub 9-0:1.0: USB hub found [ 110.981307][ T8164] hub 9-0:1.0: 8 ports detected [ 111.415421][ T8224] loop2: detected capacity change from 0 to 512 [ 111.422564][ T8224] EXT4-fs: inline encryption not supported [ 111.429711][ T8224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.612944][ T8244] hsr_slave_0 (unregistering): left promiscuous mode [ 111.897919][ T8258] netlink: 'syz.5.1847': attribute type 10 has an invalid length. [ 111.905877][ T8258] netlink: 'syz.5.1847': attribute type 19 has an invalid length. [ 112.506157][ T8286] wg2: entered promiscuous mode [ 112.511699][ T8286] wg2: entered allmulticast mode [ 112.737970][ T8301] netlink: 'syz.1.1865': attribute type 10 has an invalid length. [ 112.748592][ T8301] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 112.951122][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 112.958655][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 112.966109][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 112.973613][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 112.981245][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 112.988760][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 112.996201][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x4 [ 113.003697][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.011247][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.018692][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.026195][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x2 [ 113.033664][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.041115][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.048596][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x4 [ 113.056132][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.063646][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.071077][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x2 [ 113.078581][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.085989][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.093466][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.100912][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.108391][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.115860][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.123356][ T10] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 113.155802][ T8321] tipc: Enabling of bearer rejected, failed to enable media [ 113.171522][ T10] hid-generic 0006:0000:0000.0005: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 113.198809][ T8326] sit0: entered allmulticast mode [ 113.227400][ T8326] sit0: entered promiscuous mode [ 113.285109][ T8329] Invalid ELF header magic: != ELF [ 114.067798][ T8360] __nla_validate_parse: 6 callbacks suppressed [ 114.067819][ T8360] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1889'. [ 114.181641][ T8368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8368 comm=syz.0.1894 [ 114.203154][ T8370] loop5: detected capacity change from 0 to 512 [ 114.212303][ T8370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.224953][ T8370] EXT4-fs (loop5): 1 truncate cleaned up [ 114.232476][ T8370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.276679][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.331705][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1891'. [ 114.457987][ T8400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.465273][ T8400] IPv6: NLM_F_CREATE should be set when creating new route [ 114.528622][ T8406] tipc: Can't bind to reserved service type 1 [ 114.589262][ T8414] loop2: detected capacity change from 0 to 2048 [ 114.599028][ T8414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.615200][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 114.615217][ T29] audit: type=1400 audit(2000000571.800:2839): avc: denied { module_load } for pid=8413 comm="syz.2.1914" path="/262/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 114.645688][ T8414] Invalid ELF header magic: != ELF [ 114.709719][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.826530][ T8422] loop2: detected capacity change from 0 to 1024 [ 114.839052][ T8422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.869028][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.907881][ T29] audit: type=1400 audit(2000000572.090:2840): avc: denied { bind } for pid=8429 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 115.042217][ T8444] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1926'. [ 115.422132][ T29] audit: type=1326 audit(2000000572.610:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.446528][ T29] audit: type=1326 audit(2000000572.610:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.470743][ T29] audit: type=1326 audit(2000000572.610:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.494393][ T29] audit: type=1326 audit(2000000572.610:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.518525][ T29] audit: type=1326 audit(2000000572.610:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.542096][ T29] audit: type=1326 audit(2000000572.610:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.566568][ T29] audit: type=1326 audit(2000000572.610:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.590805][ T29] audit: type=1326 audit(2000000572.640:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 115.620774][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 115.766717][ T8464] sch_fq: defrate 2048 ignored. [ 115.859846][ T8469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8469 comm=syz.5.1937 [ 116.882047][ T8511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1953'. [ 117.198624][ T8522] 9pnet: p9_errstr2errno: server reported unknown error [ 117.459242][ T8540] loop2: detected capacity change from 0 to 512 [ 117.478240][ T8540] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 117.493927][ T8540] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.1965: bad orphan inode 15 [ 117.506812][ T8540] ext4_test_bit(bit=14, block=18) = 1 [ 117.512388][ T8540] is_bad_inode(inode)=0 [ 117.516605][ T8540] NEXT_ORPHAN(inode)=1023 [ 117.521042][ T8540] max_ino=32 [ 117.524280][ T8540] i_nlink=0 [ 117.527998][ T8540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 117.546983][ T8540] ext2 filesystem being mounted at /283/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 117.573099][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 117.586714][ T8549] netlink: '+}[@': attribute type 13 has an invalid length. [ 117.604646][ T8549] bridge0: port 1(dummy0) entered blocking state [ 117.611189][ T8549] bridge0: port 1(dummy0) entered forwarding state [ 117.619498][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.629550][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.640688][ T8549] net_ratelimit: 14 callbacks suppressed [ 117.640699][ T8549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.371450][ T8603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8603 comm=syz.5.1992 [ 118.504605][ T8610] loop5: detected capacity change from 0 to 512 [ 118.511447][ T8610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.523974][ T8612] netem: change failed [ 118.532520][ T8610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.545498][ T8610] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.807716][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.932017][ T8644] loop2: detected capacity change from 0 to 512 [ 118.947496][ T8644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.968864][ T8644] EXT4-fs (loop2): 1 orphan inode deleted [ 118.974648][ T8644] EXT4-fs (loop2): 1 truncate cleaned up [ 118.997507][ T8644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.241717][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.308440][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2018'. [ 119.389217][ T8672] tipc: Started in network mode [ 119.394216][ T8672] tipc: Node identity ba293e52b651, cluster identity 4711 [ 119.402127][ T8672] tipc: Enabled bearer , priority 0 [ 119.411472][ T8670] tipc: Resetting bearer [ 119.429870][ T8670] tipc: Disabling bearer [ 119.510414][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 119.579933][ T8701] serio: Serial port ttyS3 [ 119.626207][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 119.797377][ T8720] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 119.804101][ T8720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.811732][ T8720] vhci_hcd vhci_hcd.0: Device attached [ 119.829347][ T8720] netlink: 'syz.2.2042': attribute type 4 has an invalid length. [ 119.840382][ T8721] vhci_hcd: connection closed [ 119.840831][ T37] vhci_hcd: stop threads [ 119.850511][ T37] vhci_hcd: release socket [ 119.854967][ T37] vhci_hcd: disconnect device [ 120.255389][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 120.255406][ T29] audit: type=1400 audit(2000000577.440:3000): avc: denied { listen } for pid=8749 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.302751][ T29] audit: type=1400 audit(2000000577.470:3001): avc: denied { accept } for pid=8749 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.414360][ T8752] pim6reg1: entered promiscuous mode [ 120.419835][ T8752] pim6reg1: entered allmulticast mode [ 120.507930][ T8754] loop2: detected capacity change from 0 to 512 [ 120.523482][ T8754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.536478][ T8754] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.538637][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2058'. [ 120.572773][ T29] audit: type=1326 audit(2000000577.750:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.596490][ T29] audit: type=1326 audit(2000000577.750:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.620121][ T29] audit: type=1326 audit(2000000577.750:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.643125][ T29] audit: type=1326 audit(2000000577.750:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.666748][ T29] audit: type=1326 audit(2000000577.750:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.690586][ T29] audit: type=1326 audit(2000000577.750:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.713584][ T29] audit: type=1326 audit(2000000577.750:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.737776][ T29] audit: type=1326 audit(2000000577.750:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8753 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51952ae929 code=0x7ffc0000 [ 120.776039][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'. [ 120.794945][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'. [ 120.888203][ T8777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8777 comm=syz.0.2065 [ 120.900883][ T8777] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8777 comm=syz.0.2065 [ 120.933158][ T8781] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 120.941196][ T8781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2067'. [ 120.950386][ T8781] dummy0: entered promiscuous mode [ 120.956423][ T8781] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 121.076414][ T8789] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 121.084441][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2070'. [ 121.094567][ T8789] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.103486][ T8789] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.111776][ T8789] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.120141][ T8789] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.138083][ T8789] team0: Port device geneve1 added [ 121.143867][ T8793] loop5: detected capacity change from 0 to 512 [ 121.161708][ T8793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.174847][ T8793] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.276171][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #19: comm syz.5.2072: corrupted inode contents [ 121.305851][ T8800] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #19: comm syz.5.2072: mark_inode_dirty error [ 121.318363][ T8800] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #19: comm syz.5.2072: corrupted inode contents [ 121.336513][ T8800] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.2072: mark_inode_dirty error [ 121.357403][ T8800] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.2072: mark inode dirty (error -117) [ 121.371179][ T8800] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 121.371517][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.414816][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.431675][ T8807] loop2: detected capacity change from 0 to 128 [ 121.448810][ T8807] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.459034][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2077'. [ 121.481630][ T8807] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.491438][ T8810] loop1: detected capacity change from 0 to 512 [ 121.504925][ T8812] netlink: 'syz.5.2078': attribute type 10 has an invalid length. [ 121.534150][ T8810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.557001][ T8810] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.559803][ T8812] team0: Port device dummy0 added [ 121.574443][ T8815] netlink: 'syz.5.2078': attribute type 10 has an invalid length. [ 121.584022][ T8815] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.584549][ T4509] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.640093][ T8815] team0: Failed to send options change via netlink (err -105) [ 121.686956][ T8815] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 121.696254][ T8815] team0: Port device dummy0 removed [ 121.705869][ T8815] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.747198][ T8819] gtp0: entered promiscuous mode [ 121.797976][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.840293][ T8836] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2089'. [ 121.874964][ T8842] loop2: detected capacity change from 0 to 512 [ 121.882338][ T8842] EXT4-fs: Ignoring removed bh option [ 121.888443][ T8842] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.897800][ T8842] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 121.914489][ T8842] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 121.925490][ T8842] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 121.937441][ T8842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.032388][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.218010][ T8877] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 122.798956][ T8938] netlink: 'syz.4.2132': attribute type 7 has an invalid length. [ 122.887635][ T8948] loop5: detected capacity change from 0 to 128 [ 123.132469][ T8948] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.145360][ T8948] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.324675][ T6958] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.335179][ T8977] veth1_to_bond: entered allmulticast mode [ 123.342166][ T8977] veth1_to_bond: left allmulticast mode [ 123.784455][ T8984] cgroup: fork rejected by pids controller in /syz4 [ 123.822500][ T9086] loop2: detected capacity change from 0 to 2048 [ 123.854559][ T9086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.904629][ T9086] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.936003][ T9086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2153: bg 0: block 345: padding at end of block bitmap is not set [ 124.003030][ T9211] loop5: detected capacity change from 0 to 512 [ 124.014660][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.023093][ T9211] EXT4-fs: Ignoring removed nobh option [ 124.054249][ T9211] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 124.094899][ T9211] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2158: attempt to clear invalid blocks 2 len 1 [ 124.131263][ T9211] EXT4-fs (loop5): Remounting filesystem read-only [ 124.177017][ T9211] EXT4-fs (loop5): 1 truncate cleaned up [ 124.206978][ T9211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.300305][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.300800][ T9491] loop1: detected capacity change from 0 to 128 [ 124.322090][ T9491] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.344745][ T9491] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.503068][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.524641][ T9510] __nla_validate_parse: 5 callbacks suppressed [ 124.524657][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 124.865923][ T9525] loop5: detected capacity change from 0 to 256 [ 125.028454][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.039041][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.063812][ T9538] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 125.110426][ T9544] loop5: detected capacity change from 0 to 128 [ 125.119159][ T9544] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.131882][ T9544] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.135799][ T9548] netlink: 'syz.4.2187': attribute type 10 has an invalid length. [ 125.150703][ T9548] dummy0: left allmulticast mode [ 125.155690][ T9548] dummy0: left promiscuous mode [ 125.161536][ T9548] bridge0: port 3(dummy0) entered disabled state [ 125.170358][ T9548] team0: Port device dummy0 added [ 125.186560][ T9548] netlink: 'syz.4.2187': attribute type 10 has an invalid length. [ 125.195772][ T9548] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.214193][ T9548] team0: Failed to send options change via netlink (err -105) [ 125.228817][ T9548] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.238039][ T9548] team0: Port device dummy0 removed [ 125.244102][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 125.245133][ T9548] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.300171][ T6958] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.334733][ T9554] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.2190'. [ 125.448223][ T9566] wg2: left promiscuous mode [ 125.452910][ T9566] wg2: left allmulticast mode [ 125.470697][ T9566] wg2: entered promiscuous mode [ 125.475693][ T9566] wg2: entered allmulticast mode [ 125.504138][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2194'. [ 125.519707][ T9571] loop1: detected capacity change from 0 to 1024 [ 125.529189][ T9571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.625002][ T9581] wg2: left promiscuous mode [ 125.629803][ T9581] wg2: left allmulticast mode [ 125.646896][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 125.646912][ T29] audit: type=1326 audit(2000000582.831:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.690828][ T9581] wg2: entered promiscuous mode [ 125.695772][ T9581] wg2: entered allmulticast mode [ 125.800440][ T29] audit: type=1326 audit(2000000582.901:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.824221][ T29] audit: type=1326 audit(2000000582.901:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.848036][ T29] audit: type=1326 audit(2000000582.901:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.872448][ T29] audit: type=1326 audit(2000000582.901:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.896128][ T29] audit: type=1326 audit(2000000582.901:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.920459][ T29] audit: type=1326 audit(2000000582.901:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.944220][ T29] audit: type=1326 audit(2000000582.901:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 125.944817][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2207'. [ 125.968619][ T29] audit: type=1326 audit(2000000582.901:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 126.001166][ T29] audit: type=1326 audit(2000000582.901:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 126.385103][ T9610] loop5: detected capacity change from 0 to 1024 [ 126.392366][ T9610] EXT4-fs: Ignoring removed nobh option [ 126.417236][ T9610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.526865][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.538602][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.826218][ T9634] netlink: 'syz.2.2225': attribute type 1 has an invalid length. [ 126.834087][ T9634] netlink: 'syz.2.2225': attribute type 2 has an invalid length. [ 126.849512][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 126.907984][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2229'. [ 126.920465][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2229'. [ 127.027041][ T9656] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 127.165089][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2240'. [ 127.292560][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2243'. [ 127.608141][ T9696] netlink: 'syz.0.2253': attribute type 10 has an invalid length. [ 127.624290][ T9696] dummy0: left promiscuous mode [ 127.639095][ T9696] team0: Port device dummy0 added [ 127.680608][ T9696] netlink: 'syz.0.2253': attribute type 10 has an invalid length. [ 127.707670][ T9696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 127.738052][ T9696] team0: Failed to send options change via netlink (err -105) [ 127.745679][ T9696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 127.759085][ T9696] team0: Port device dummy0 removed [ 127.765693][ T9696] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.991089][ T9701] loop5: detected capacity change from 0 to 512 [ 128.006871][ T9701] EXT4-fs: inline encryption not supported [ 128.013252][ T9701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.708703][ T9754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9754 comm=syz.5.2276 [ 129.136268][ T1044] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 129.144582][ T1044] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.214589][ T9790] loop1: detected capacity change from 0 to 512 [ 129.250254][ T9790] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.278173][ T9790] EXT4-fs (loop1): invalid journal inode [ 129.737076][ T9816] wg2: left promiscuous mode [ 129.741762][ T9816] wg2: left allmulticast mode [ 129.906731][ T9816] wg2: entered promiscuous mode [ 129.911674][ T9816] wg2: entered allmulticast mode [ 129.987738][ T9827] __nla_validate_parse: 6 callbacks suppressed [ 129.987753][ T9827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2312'. [ 130.255474][ T9830] vhci_hcd: invalid port number 236 [ 130.260808][ T9830] vhci_hcd: invalid port number 236 [ 130.557066][ T9854] veth1_to_bond: entered allmulticast mode [ 130.577694][ T9854] veth1_to_bond: left allmulticast mode [ 130.651635][ T9864] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 130.651635][ T9864] The task syz.1.2326 (9864) triggered the difference, watch for misbehavior. [ 130.680437][ T9865] bond1: entered promiscuous mode [ 130.685618][ T9865] bond1: entered allmulticast mode [ 130.701323][ T9865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.725046][ T9865] bond1 (unregistering): Released all slaves [ 130.740036][ T9871] loop1: detected capacity change from 0 to 256 [ 130.750560][ T9873] loop2: detected capacity change from 0 to 128 [ 130.757859][ T9871] vfat: Unknown parameter 'shortname' [ 130.780322][ T9873] bio_check_eod: 165 callbacks suppressed [ 130.780341][ T9873] syz.2.2333: attempt to access beyond end of device [ 130.780341][ T9873] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 130.860127][ T298] kworker/u8:4: attempt to access beyond end of device [ 130.860127][ T298] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 130.898107][ T9884] netlink: 'syz.2.2336': attribute type 10 has an invalid length. [ 130.907828][ T9884] team0: Port device dummy0 added [ 130.915935][ T9884] netlink: 'syz.2.2336': attribute type 10 has an invalid length. [ 130.924901][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2338'. [ 130.925383][ T9884] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 130.949643][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 130.949657][ T29] audit: type=1326 audit(2000000588.141:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 130.980272][ T29] audit: type=1326 audit(2000000588.141:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.004033][ T9884] team0: Failed to send options change via netlink (err -105) [ 131.012478][ T9884] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 131.056096][ T29] audit: type=1326 audit(2000000588.201:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.080355][ T29] audit: type=1326 audit(2000000588.201:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.103887][ T29] audit: type=1326 audit(2000000588.201:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.128035][ T29] audit: type=1326 audit(2000000588.201:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.151510][ T29] audit: type=1326 audit(2000000588.201:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.175856][ T29] audit: type=1326 audit(2000000588.201:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.199981][ T29] audit: type=1326 audit(2000000588.201:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.223515][ T29] audit: type=1326 audit(2000000588.201:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86fcb6e929 code=0x7ffc0000 [ 131.248019][ T9884] team0: Port device dummy0 removed [ 131.255986][ T9884] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.384698][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2340'. [ 131.407508][ T9897] loop2: detected capacity change from 0 to 1024 [ 131.434783][ T9897] EXT4-fs: inline encryption not supported [ 131.455167][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 131.477605][ T9897] EXT4-fs: Ignoring removed bh option [ 131.496361][ T9906] loop1: detected capacity change from 0 to 256 [ 131.543918][ T9897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.626406][ T9897] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2342: Allocating blocks 497-513 which overlap fs metadata [ 131.719945][ T9897] EXT4-fs (loop2): Remounting filesystem read-only [ 131.843362][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.966881][ T9936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2358'. [ 131.975924][ T9936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2358'. [ 132.643529][ T9952] IPv6: Can't replace route, no match found [ 132.676734][ T9960] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 132.685705][ T9960] bridge0: port 1(dummy0) entered disabled state [ 132.702598][ T9960] dummy0: left allmulticast mode [ 132.711042][ T9960] dummy0: left promiscuous mode [ 132.716245][ T9960] bridge0: port 1(dummy0) entered disabled state [ 132.734796][ T9960] team0: Port device dummy0 added [ 132.758702][ T9960] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 132.768471][ T9960] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 132.786977][ T9960] team0: Failed to send options change via netlink (err -105) [ 132.803983][ T9960] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 132.813100][ T9960] team0: Port device dummy0 removed [ 132.822102][ T9960] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.847364][ T9975] pimreg: entered allmulticast mode [ 132.867021][ T9977] loop5: detected capacity change from 0 to 512 [ 132.874062][ T9975] pimreg: left allmulticast mode [ 132.889081][ T9977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.901746][ T9977] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.953981][ T9987] netlink: 'syz.0.2380': attribute type 12 has an invalid length. [ 133.188088][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.211142][ T9995] loop5: detected capacity change from 0 to 128 [ 133.220231][ T9995] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.233350][ T9995] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.282941][ T6958] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.529484][T10014] netlink: 'syz.2.2391': attribute type 10 has an invalid length. [ 133.547860][T10014] bond0: (slave dummy0): Releasing backup interface [ 133.556888][T10014] team0: Failed to send options change via netlink (err -105) [ 133.564516][T10014] team0: Port device dummy0 added [ 133.575786][T10014] netlink: 'syz.2.2391': attribute type 10 has an invalid length. [ 133.584947][T10014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 133.612381][T10014] team0: Failed to send options change via netlink (err -105) [ 133.620483][T10014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 133.629623][T10014] team0: Port device dummy0 removed [ 133.638174][T10014] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.179040][T10119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.271492][T10128] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 135.280224][T10128] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2415'. [ 135.675565][T10147] loop2: detected capacity change from 0 to 512 [ 135.688040][T10147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.701286][T10147] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.821218][ T4509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.911085][T10162] futex_wake_op: syz.2.2428 tries to shift op by -1; fix this program [ 136.182994][T10178] loop1: detected capacity change from 0 to 128 [ 136.236740][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'. [ 136.328407][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 136.328425][ T29] audit: type=1326 audit(2000000593.521:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.358978][ T29] audit: type=1326 audit(2000000593.521:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.431746][ T29] audit: type=1326 audit(2000000593.581:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.456024][ T29] audit: type=1326 audit(2000000593.581:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.479747][ T29] audit: type=1326 audit(2000000593.581:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.503980][ T29] audit: type=1326 audit(2000000593.591:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.528248][ T29] audit: type=1326 audit(2000000593.591:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.551787][ T29] audit: type=1326 audit(2000000593.591:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.576114][ T29] audit: type=1326 audit(2000000593.591:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.599679][ T29] audit: type=1326 audit(2000000593.591:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.1.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35415e929 code=0x7ffc0000 [ 136.603508][T10198] loop2: detected capacity change from 0 to 128 [ 136.642484][T10198] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.663884][T10198] ext4 filesystem being mounted at /378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.912900][ T4509] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.055327][T10214] loop5: detected capacity change from 0 to 2048 [ 137.118180][T10214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.164455][T10214] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.306209][T10214] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2456: bg 0: block 345: padding at end of block bitmap is not set [ 137.375067][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.410143][T10234] loop5: detected capacity change from 0 to 1024 [ 137.417031][T10234] EXT4-fs: Ignoring removed bh option [ 137.422657][T10234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.438937][T10234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.881661][T10245] ================================================================== [ 137.889827][T10245] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 137.897968][T10245] [ 137.900319][T10245] write to 0xffff88810406e0a8 of 8 bytes by task 10234 on cpu 1: [ 137.908063][T10245] filemap_splice_read+0x47e/0x6b0 [ 137.913214][T10245] ext4_file_splice_read+0x8f/0xb0 [ 137.918365][T10245] splice_direct_to_actor+0x26c/0x680 [ 137.923796][T10245] do_splice_direct+0xda/0x150 [ 137.928606][T10245] do_sendfile+0x380/0x650 [ 137.933066][T10245] __x64_sys_sendfile64+0x105/0x150 [ 137.938311][T10245] x64_sys_call+0xb39/0x2fb0 [ 137.942921][T10245] do_syscall_64+0xd2/0x200 [ 137.947441][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.953383][T10245] [ 137.955732][T10245] write to 0xffff88810406e0a8 of 8 bytes by task 10245 on cpu 0: [ 137.963473][T10245] filemap_splice_read+0x47e/0x6b0 [ 137.968639][T10245] ext4_file_splice_read+0x8f/0xb0 [ 137.973777][T10245] splice_direct_to_actor+0x26c/0x680 [ 137.979220][T10245] do_splice_direct+0xda/0x150 [ 137.984036][T10245] do_sendfile+0x380/0x650 [ 137.988493][T10245] __x64_sys_sendfile64+0x105/0x150 [ 137.993719][T10245] x64_sys_call+0xb39/0x2fb0 [ 137.998423][T10245] do_syscall_64+0xd2/0x200 [ 138.002950][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.008880][T10245] [ 138.011222][T10245] value changed: 0x00000000000004c8 -> 0x00000000000004c9 [ 138.018361][T10245] [ 138.020709][T10245] Reported by Kernel Concurrency Sanitizer on: [ 138.026880][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.5.2453 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 138.039414][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.049507][T10245] ================================================================== [ 138.144736][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 138.375336][ T6958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.