last executing test programs: 1.700585437s ago: executing program 4 (id=1594): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 1.687500288s ago: executing program 4 (id=1598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.606403951s ago: executing program 4 (id=1602): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x18022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5fa22dbd7000fddbdf250100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) 1.537761524s ago: executing program 4 (id=1604): socket(0x200000000000011, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1.472584647s ago: executing program 4 (id=1605): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x10, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.472310907s ago: executing program 4 (id=1606): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 808.256435ms ago: executing program 2 (id=1628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x1}, 0x69) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 804.492405ms ago: executing program 0 (id=1630): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) preadv(r0, 0x0, 0x0, 0x1, 0xffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) 786.243196ms ago: executing program 2 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) 730.858819ms ago: executing program 2 (id=1633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) 729.851129ms ago: executing program 0 (id=1635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 671.146721ms ago: executing program 2 (id=1636): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 625.791204ms ago: executing program 2 (id=1638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214", 0xc0}, {&(0x7f0000000380)="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", 0x4ed}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 576.701026ms ago: executing program 0 (id=1639): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 575.631635ms ago: executing program 2 (id=1642): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 558.857606ms ago: executing program 0 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 537.226118ms ago: executing program 1 (id=1645): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 473.75091ms ago: executing program 0 (id=1646): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x80fe, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$tcp_mem(r0, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) 451.890141ms ago: executing program 1 (id=1649): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0xe3) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) 416.732982ms ago: executing program 0 (id=1650): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r0 = socket(0x88bfda00d3fcf023, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 356.610025ms ago: executing program 1 (id=1651): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0xe3) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = dup(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) close_range(r0, r3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 336.185526ms ago: executing program 1 (id=1652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x353}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 309.293917ms ago: executing program 3 (id=1653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 208.317932ms ago: executing program 1 (id=1654): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 207.967732ms ago: executing program 1 (id=1655): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) 207.637862ms ago: executing program 3 (id=1656): prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 181.012253ms ago: executing program 3 (id=1657): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x102, 0x9, 0x0) fallocate(r0, 0x0, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) 128.749015ms ago: executing program 3 (id=1658): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 64.547018ms ago: executing program 3 (id=1659): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xffffdffb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r3, 0x0, 0x4}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 0s ago: executing program 3 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2634a50f25bc43ef7ad3c045942924251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669ca8b2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz0 [ 46.459887][ T4276] fido_id[4276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.576012][ T4284] bridge0: entered promiscuous mode [ 46.581779][ T4284] macsec1: entered promiscuous mode [ 46.588618][ T4284] bridge0: port 3(macsec1) entered blocking state [ 46.595115][ T4284] bridge0: port 3(macsec1) entered disabled state [ 46.602783][ T4284] macsec1: entered allmulticast mode [ 46.608160][ T4284] bridge0: entered allmulticast mode [ 46.614269][ T4284] macsec1: left allmulticast mode [ 46.619432][ T4284] bridge0: left allmulticast mode [ 46.626236][ T4284] bridge0: left promiscuous mode [ 46.643400][ T4286] loop4: detected capacity change from 0 to 512 [ 46.652406][ T4286] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.667057][ T4230] vhci_hcd: connection reset by peer [ 46.699040][ T4286] EXT4-fs (loop4): 1 truncate cleaned up [ 46.704953][ T3739] vhci_hcd: stop threads [ 46.709270][ T3739] vhci_hcd: release socket [ 46.713746][ T3739] vhci_hcd: disconnect device [ 46.719674][ T4286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.265716][ T4303] loop3: detected capacity change from 0 to 512 [ 47.274690][ T4303] EXT4-fs: Ignoring removed bh option [ 47.379889][ T4307] netlink: 'syz.1.306': attribute type 10 has an invalid length. [ 47.409040][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.416288][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.431910][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.439057][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.446372][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.453454][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.464239][ T4307] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 47.575046][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.609276][ T4303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.625766][ T4316] ref_ctr_offset mismatch. inode: 0x110 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 47.645729][ T4303] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.665815][ T4303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.667125][ T4318] loop4: detected capacity change from 0 to 512 [ 47.687388][ T4318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.697215][ T4318] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.299: bg 0: block 248: padding at end of block bitmap is not set [ 47.715806][ T4318] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.299: Failed to acquire dquot type 1 [ 47.735465][ T4318] EXT4-fs (loop4): 1 truncate cleaned up [ 47.742134][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.766345][ T4325] macsec1: entered promiscuous mode [ 47.771703][ T4325] bridge0: entered promiscuous mode [ 47.777486][ T4325] bridge0: port 3(macsec1) entered blocking state [ 47.784115][ T4325] bridge0: port 3(macsec1) entered disabled state [ 47.791153][ T4325] macsec1: entered allmulticast mode [ 47.796561][ T4325] bridge0: entered allmulticast mode [ 47.804371][ T4325] macsec1: left allmulticast mode [ 47.809470][ T4325] bridge0: left allmulticast mode [ 47.815816][ T4325] bridge0: left promiscuous mode [ 47.848311][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.862363][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.869524][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.919835][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.930684][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.969047][ T3714] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.998398][ T3714] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.007368][ T3714] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.034190][ T3714] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.224774][ T4356] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 48.255970][ T4356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 48.270140][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 48.270196][ T29] audit: type=1400 audit(1764920485.962:811): avc: denied { ioctl } for pid=4357 comm="syz.3.311" path="socket:[8445]" dev="sockfs" ino=8445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.307535][ T4358] wireguard0: entered promiscuous mode [ 48.313251][ T4358] wireguard0: entered allmulticast mode [ 48.337126][ T4361] netlink: 'syz.2.313': attribute type 2 has an invalid length. [ 48.465860][ T4369] loop2: detected capacity change from 0 to 512 [ 48.509339][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.534804][ T4369] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.554560][ T29] audit: type=1400 audit(1764920486.242:812): avc: denied { remove_name } for pid=4368 comm="syz.2.316" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.602344][ T4369] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.674347][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.710152][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.717381][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.755080][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.765074][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.794352][ T4377] team1: left promiscuous mode [ 48.799433][ T4377] team1: left allmulticast mode [ 48.804895][ T3676] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.813306][ T3676] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.821755][ T3676] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.830315][ T3676] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.883362][ T29] audit: type=1400 audit(1764920486.572:813): avc: denied { watch } for pid=4385 comm="syz.1.321" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 48.884317][ T4391] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 48.913548][ T4388] macsec1: entered promiscuous mode [ 48.922531][ T4388] bridge0: entered promiscuous mode [ 48.929548][ T4388] bridge0: port 3(macsec1) entered blocking state [ 48.936046][ T4388] bridge0: port 3(macsec1) entered disabled state [ 48.942923][ T29] audit: type=1400 audit(1764920486.572:814): avc: denied { mac_admin } for pid=4385 comm="syz.1.321" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.942964][ T29] audit: type=1400 audit(1764920486.612:815): avc: denied { relabelto } for pid=4385 comm="syz.1.321" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 48.943010][ T29] audit: type=1400 audit(1764920486.612:816): avc: denied { associate } for pid=4385 comm="syz.1.321" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 48.964203][ T4388] macsec1: entered allmulticast mode [ 49.024845][ T4388] bridge0: entered allmulticast mode [ 49.043185][ T4388] macsec1: left allmulticast mode [ 49.048795][ T4388] bridge0: left allmulticast mode [ 49.057762][ T4388] bridge0: left promiscuous mode [ 49.178820][ T4402] loop3: detected capacity change from 0 to 128 [ 49.208396][ T29] audit: type=1400 audit(1764920486.902:817): avc: denied { load_policy } for pid=4403 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.238351][ T4404] SELinux: failed to load policy [ 49.246060][ T4402] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.268238][ T4402] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.343449][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.355865][ T4404] loop1: detected capacity change from 0 to 512 [ 49.404958][ T1043] Process accounting resumed [ 49.412121][ T4420] loop4: detected capacity change from 0 to 512 [ 49.427675][ T29] audit: type=1400 audit(1764920487.112:818): avc: denied { validate_trans } for pid=4417 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.453716][ T4404] EXT4-fs (loop1): 1 orphan inode deleted [ 49.462882][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.478677][ T3676] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.488473][ T3676] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 49.509075][ T4420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.527933][ T4420] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.538484][ T4404] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.598616][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.646754][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.918414][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.925713][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.041957][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.063970][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.142507][ T29] audit: type=1400 audit(1764920487.822:819): avc: denied { watch watch_reads } for pid=4437 comm="syz.3.340" path="/45" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.225682][ T4440] bond1: left promiscuous mode [ 50.230645][ T4440] veth5: left promiscuous mode [ 50.235611][ T4440] bond1: left allmulticast mode [ 50.240682][ T4440] veth5: left allmulticast mode [ 50.294066][ T3683] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.294074][ T3548] syb2: Port: 1 Link DOWN [ 50.318894][ T4457] __nla_validate_parse: 16 callbacks suppressed [ 50.318943][ T4457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 50.342451][ T3683] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.374073][ T3683] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.399594][ T3683] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.587341][ T4471] loop0: detected capacity change from 0 to 128 [ 50.616533][ T4471] syz.0.361: attempt to access beyond end of device [ 50.616533][ T4471] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 50.672763][ T4477] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 50.695073][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 50.734418][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734418][ T4471] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 50.734509][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734509][ T4471] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 50.734561][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734561][ T4471] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 50.734630][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734630][ T4471] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 50.734663][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734663][ T4471] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 50.734780][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734780][ T4471] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 50.734825][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734825][ T4471] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 50.734866][ T4471] syz.0.361: attempt to access beyond end of device [ 50.734866][ T4471] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 50.735055][ T4471] syz.0.361: attempt to access beyond end of device [ 50.735055][ T4471] loop0: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 50.755306][ T4471] Buffer I/O error on dev loop0, logical block 161, async page read [ 50.866445][ T4471] Buffer I/O error on dev loop0, logical block 162, async page read [ 50.866519][ T4471] Buffer I/O error on dev loop0, logical block 163, async page read [ 50.866558][ T4471] Buffer I/O error on dev loop0, logical block 164, async page read [ 50.866578][ T4471] Buffer I/O error on dev loop0, logical block 165, async page read [ 50.866594][ T4471] Buffer I/O error on dev loop0, logical block 166, async page read [ 50.866610][ T4471] Buffer I/O error on dev loop0, logical block 167, async page read [ 50.866625][ T4471] Buffer I/O error on dev loop0, logical block 168, async page read [ 50.866662][ T4471] Buffer I/O error on dev loop0, logical block 161, async page read [ 50.866742][ T4471] Buffer I/O error on dev loop0, logical block 162, async page read [ 50.948897][ T4489] loop2: detected capacity change from 0 to 128 [ 50.962760][ T4489] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.021837][ T4489] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.043725][ T4489] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 51.052200][ T4489] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.052289][ T4489] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.064013][ T4489] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 51.064048][ T4489] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.064151][ T4489] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.106353][ T4489] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 51.106389][ T4489] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.157517][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.201244][ T3375] usb 8-1: device descriptor read/8, error -110 [ 51.307687][ T3375] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 51.328453][ T3375] usb 8-1: enqueue for inactive port 0 [ 51.334681][ T3375] usb 8-1: enqueue for inactive port 0 [ 51.349139][ T3375] usb 8-1: enqueue for inactive port 0 [ 51.478081][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.485421][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.551804][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.562571][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.608745][ T3746] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.637226][ T4529] loop4: detected capacity change from 0 to 128 [ 51.647782][ T3746] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.678648][ T3746] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.687630][ T3746] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.053880][ T4548] wireguard0: entered promiscuous mode [ 52.059605][ T4548] wireguard0: entered allmulticast mode [ 52.211702][ T4554] tipc: Started in network mode [ 52.216842][ T4554] tipc: Node identity ac14140f, cluster identity 4711 [ 52.229021][ T4554] tipc: New replicast peer: 255.255.255.83 [ 52.235086][ T4554] tipc: Enabled bearer , priority 10 [ 52.297188][ T4561] random: crng reseeded on system resumption [ 52.321770][ T4563] loop1: detected capacity change from 0 to 2048 [ 52.387996][ T4563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.401400][ T3375] usb usb8-port1: attempt power cycle [ 52.416314][ T4563] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.445232][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.483247][ T4578] syz_tun: entered allmulticast mode [ 52.491780][ T4577] syz_tun: left allmulticast mode [ 52.693398][ T4593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.165675][ T4623] loop3: detected capacity change from 0 to 512 [ 53.174817][ T4623] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.193995][ T4623] EXT4-fs (loop3): 1 truncate cleaned up [ 53.203525][ T4623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.276995][ T4632] loop4: detected capacity change from 0 to 8192 [ 53.347719][ T3508] tipc: Node number set to 2886997007 [ 53.353207][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 53.353218][ T29] audit: type=1326 audit(1764920491.042:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 53.457099][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.596902][ T4644] netlink: 'syz.4.414': attribute type 39 has an invalid length. [ 53.649072][ T4635] loop2: detected capacity change from 0 to 32768 [ 53.678237][ T3649] loop2: p1 p2 p3 < p5 p6 p7 > [ 53.684589][ T3649] loop2: p2 size 16775168 extends beyond EOD, truncated [ 53.694535][ T3649] loop2: p5 start 4294970168 is beyond EOD, truncated [ 53.710413][ T4635] loop2: p1 p2 p3 < p5 p6 p7 > [ 53.716339][ T4635] loop2: p2 size 16775168 extends beyond EOD, truncated [ 53.726029][ T4635] loop2: p5 start 4294970168 is beyond EOD, truncated [ 53.936480][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 53.938586][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 53.940546][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 53.944398][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 53.960301][ T4659] iso9660: Unknown parameter '€' [ 53.992002][ T4662] udevd[4662]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 54.044103][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 54.045883][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 54.051519][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 54.051816][ T4011] udevd[4011]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 54.051860][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 54.062655][ T29] audit: type=1400 audit(1764920491.752:967): avc: denied { read } for pid=4663 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.077112][ T4664] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.077391][ T4664] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.173246][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.267864][ T3375] usb usb8-port1: unable to enumerate USB device [ 54.318172][ T29] audit: type=1400 audit(1764920492.012:968): avc: denied { bind } for pid=4653 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.368631][ T4668] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 54.500667][ T4676] set_capacity_and_notify: 2 callbacks suppressed [ 54.500686][ T4676] loop2: detected capacity change from 0 to 512 [ 54.581204][ T4676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.600730][ T4680] loop0: detected capacity change from 0 to 164 [ 54.626273][ T4680] ISOFS: unable to read i-node block [ 54.662455][ T4676] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.690685][ T4680] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 54.726409][ T4683] loop4: detected capacity change from 0 to 512 [ 54.775372][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.793967][ T4683] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.807897][ T4683] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.818072][ T4683] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 54.871431][ T4694] bridge: RTM_NEWNEIGH with invalid ether address [ 54.894999][ T4683] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.925078][ T4683] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 54.932537][ T4683] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.429: bg 0: block 40: padding at end of block bitmap is not set [ 54.949715][ T4683] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 54.962459][ T4683] EXT4-fs (loop4): 1 truncate cleaned up [ 54.968918][ T4683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.992269][ T4700] xt_hashlimit: max too large, truncated to 1048576 [ 55.031123][ T29] audit: type=1326 audit(1764920492.722:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 55.066194][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.122062][ T29] audit: type=1326 audit(1764920492.722:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 55.126678][ T4709] team1: entered promiscuous mode [ 55.145541][ T29] audit: type=1326 audit(1764920492.722:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 55.150574][ T4709] team1: entered allmulticast mode [ 55.173772][ T29] audit: type=1326 audit(1764920492.722:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 55.173827][ T29] audit: type=1326 audit(1764920492.722:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 55.225569][ T29] audit: type=1326 audit(1764920492.772:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 55.383075][ T4721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4721 comm=syz.2.443 [ 55.480530][ T4725] __nla_validate_parse: 7 callbacks suppressed [ 55.480549][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 55.495624][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 56.017216][ T4754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 56.103134][ T4759] rdma_op ffff88811e7fd980 conn xmit_rdma 0000000000000000 [ 56.145996][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 56.205711][ T4761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.237739][ T4767] vlan2: entered allmulticast mode [ 56.243002][ T4767] macvtap0: entered allmulticast mode [ 56.339776][ T4767] bond1: (slave vlan2): Opening slave failed [ 56.607983][ T4696] syz.1.433 (4696) used greatest stack depth: 7280 bytes left [ 56.934746][ T4803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 57.050431][ T4806] loop0: detected capacity change from 0 to 1024 [ 57.071896][ T4806] EXT4-fs: Ignoring removed bh option [ 57.077549][ T4806] EXT4-fs: inline encryption not supported [ 57.099497][ T4806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.117220][ T4806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 57.132034][ T4806] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.473: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.134458][ T4814] syzkaller0: entered promiscuous mode [ 57.151586][ T4814] syzkaller0: entered allmulticast mode [ 57.165443][ T4806] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.473: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.180424][ T4806] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.473: Failed to acquire dquot type 0 [ 57.191922][ T4806] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 57.201665][ T4806] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.473: mark_inode_dirty error [ 57.217813][ T4806] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 57.229175][ T4806] EXT4-fs (loop0): 1 orphan inode deleted [ 57.236277][ T4806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.248948][ T3677] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.274231][ T3677] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 57.349142][ T4829] loop2: detected capacity change from 0 to 512 [ 57.363353][ T4806] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.473: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.404139][ T4829] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.415922][ T4829] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 57.426117][ T4829] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.485: Corrupt directory, running e2fsck is recommended [ 57.484103][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.516545][ T4829] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 57.525159][ T4829] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.485: corrupted in-inode xattr: invalid ea_ino [ 57.538915][ T4829] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.485: couldn't read orphan inode 15 (err -117) [ 57.557968][ T4829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.676712][ T4829] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 57.688388][ T4829] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 57.698574][ T4829] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.485: Corrupt directory, running e2fsck is recommended [ 57.756999][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 57.795205][ T4847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.489'. [ 57.821038][ T4829] binfmt_misc: register: failed to install interpreter file ./file0 [ 57.867982][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 57.891332][ T4829] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 57.911923][ T4829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.936310][ T4829] bond1: (slave gretap1): making interface the new active one [ 57.944942][ T4829] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 58.039011][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.097618][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 58.107480][ T4857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.460353][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 58.554662][ T4880] veth2: entered promiscuous mode [ 58.559857][ T4880] veth2: entered allmulticast mode [ 58.578479][ T4879] loop1: detected capacity change from 0 to 4096 [ 58.597218][ T4879] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.609569][ T4879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.636501][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.695420][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 58.695438][ T29] audit: type=1400 audit(1764920496.382:1104): avc: denied { mount } for pid=4884 comm="syz.2.505" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 58.736458][ T29] audit: type=1400 audit(1764920496.392:1105): avc: denied { getopt } for pid=4890 comm="syz.3.508" lport=33875 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 58.760626][ T29] audit: type=1400 audit(1764920496.422:1106): avc: denied { read } for pid=4882 comm="syz.4.504" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.783565][ T29] audit: type=1400 audit(1764920496.422:1107): avc: denied { open } for pid=4882 comm="syz.4.504" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.941500][ T4906] bond1: entered promiscuous mode [ 58.946827][ T4906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.969088][ T4906] bridge2: entered promiscuous mode [ 59.002453][ T4912] capability: warning: `syz.3.516' uses 32-bit capabilities (legacy support in use) [ 59.071124][ T29] audit: type=1326 audit(1764920496.762:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffa92f749 code=0x7ffc0000 [ 59.104286][ T29] audit: type=1326 audit(1764920496.782:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ffa92f749 code=0x7ffc0000 [ 59.127867][ T29] audit: type=1326 audit(1764920496.782:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffa92f749 code=0x7ffc0000 [ 59.151437][ T29] audit: type=1326 audit(1764920496.782:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ffa92f749 code=0x7ffc0000 [ 59.175044][ T29] audit: type=1326 audit(1764920496.782:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffa92f749 code=0x7ffc0000 [ 59.198565][ T29] audit: type=1326 audit(1764920496.782:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ffa92f749 code=0x7ffc0000 [ 59.227968][ T4919] loop2: detected capacity change from 0 to 128 [ 59.342194][ T4933] loop1: detected capacity change from 0 to 1024 [ 59.349234][ T4933] EXT4-fs: inline encryption not supported [ 59.355168][ T4933] EXT4-fs: Ignoring removed orlov option [ 59.504921][ T4933] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 59.648251][ T4933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 59.660135][ T4933] System zones: 0-1, 3-12 [ 59.688228][ T4933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.943950][ T4953] syz.4.531 uses obsolete (PF_INET,SOCK_PACKET) [ 60.160354][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.203151][ T4961] loop3: detected capacity change from 0 to 128 [ 60.243595][ T4961] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.287951][ T4961] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.393783][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.209024][ T5026] __nla_validate_parse: 2 callbacks suppressed [ 61.209038][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.561'. [ 61.290764][ T5027] netlink: 'syz.1.560': attribute type 83 has an invalid length. [ 61.301521][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 61.467489][ T5042] loop4: detected capacity change from 0 to 512 [ 61.531291][ T5043] loop0: detected capacity change from 0 to 4096 [ 61.555102][ T5042] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm ,&#^%: couldn't read orphan inode 26 (err -116) [ 61.571493][ T5045] geneve2: entered promiscuous mode [ 61.576741][ T5045] geneve2: entered allmulticast mode [ 61.586494][ T5043] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 61.637503][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.677820][ T5042] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.712379][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.823744][ T5063] loop3: detected capacity change from 0 to 512 [ 61.843505][ T5063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.855565][ T5063] EXT4-fs (loop3): 1 truncate cleaned up [ 61.862239][ T5063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.942506][ T5074] netlink: 256 bytes leftover after parsing attributes in process `syz.0.578'. [ 61.951528][ T5074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.578'. [ 61.987393][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 61.996355][ T5079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.026245][ T5082] loop1: detected capacity change from 0 to 1024 [ 62.036612][ T5082] EXT4-fs: inline encryption not supported [ 62.048888][ T5082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.104176][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.609695][ T5093] loop0: detected capacity change from 0 to 1024 [ 63.147610][ T5173] loop1: detected capacity change from 0 to 2048 [ 63.262403][ T5200] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 63.271161][ T5200] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 63.953354][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 63.953370][ T29] audit: type=1400 audit(63.928:1238): avc: denied { connect } for pid=5280 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.995944][ T5279] loop2: detected capacity change from 0 to 1024 [ 64.003222][ T5279] EXT4-fs: inline encryption not supported [ 64.010954][ T29] audit: type=1400 audit(63.968:1239): avc: denied { write } for pid=5280 comm="syz.0.608" path="socket:[10224]" dev="sockfs" ino=10224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.034015][ T5279] EXT4-fs: Ignoring removed nobh option [ 64.039664][ T5279] EXT4-fs: Ignoring removed bh option [ 64.177465][ T5294] tipc: Started in network mode [ 64.182459][ T5294] tipc: Node identity ac14140f, cluster identity 4711 [ 64.189545][ T5294] tipc: New replicast peer: 255.255.255.255 [ 64.195738][ T5294] tipc: Enabled bearer , priority 10 [ 64.206645][ T29] audit: type=1326 audit(64.178:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.229344][ T29] audit: type=1326 audit(64.178:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.252385][ T29] audit: type=1326 audit(64.178:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.275332][ T29] audit: type=1326 audit(64.178:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.298041][ T29] audit: type=1326 audit(64.178:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.306507][ T5298] netlink: 76 bytes leftover after parsing attributes in process `syz.0.614'. [ 64.320723][ T29] audit: type=1326 audit(64.178:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.320776][ T29] audit: type=1326 audit(64.178:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.325135][ T29] audit: type=1326 audit(64.248:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 64.573312][ T5308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 64.582329][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 64.591285][ T5308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 64.600488][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 64.866568][ T5331] netlink: zone id is out of range [ 64.871825][ T5331] netlink: zone id is out of range [ 64.879066][ T5331] netlink: zone id is out of range [ 64.884389][ T5331] netlink: zone id is out of range [ 64.890295][ T5331] netlink: zone id is out of range [ 64.895486][ T5331] netlink: zone id is out of range [ 64.901110][ T5331] netlink: zone id is out of range [ 64.911251][ T5331] netlink: zone id is out of range [ 64.917572][ T5331] netlink: zone id is out of range [ 64.923061][ T5331] netlink: zone id is out of range [ 64.968529][ T5333] loop2: detected capacity change from 0 to 512 [ 64.975442][ T5333] EXT4-fs: Ignoring removed bh option [ 65.153658][ T5349] lo: entered allmulticast mode [ 65.159885][ T5349] lo: entered promiscuous mode [ 65.164791][ T5349] lo: left allmulticast mode [ 65.192429][ T5353] loop0: detected capacity change from 0 to 1024 [ 65.209308][ T5351] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 65.221602][ T5353] EXT4-fs: Ignoring removed oldalloc option [ 65.227707][ T5353] EXT4-fs: Ignoring removed bh option [ 65.307731][ T3508] tipc: Node number set to 2886997007 [ 65.449448][ T5374] bridge0: port 3(gretap0) entered blocking state [ 65.455979][ T5374] bridge0: port 3(gretap0) entered disabled state [ 65.476651][ T5374] gretap0: entered allmulticast mode [ 65.484053][ T5374] gretap0: entered promiscuous mode [ 65.492373][ T5374] gretap0: left allmulticast mode [ 65.497498][ T5374] gretap0: left promiscuous mode [ 65.502822][ T5374] bridge0: port 3(gretap0) entered disabled state [ 65.702708][ T5391] loop1: detected capacity change from 0 to 1024 [ 65.721490][ T5391] EXT4-fs: Ignoring removed orlov option [ 65.878408][ T5402] syzkaller0: entered allmulticast mode [ 65.884570][ T5402] syzkaller0: entered promiscuous mode [ 65.892140][ T5402] syzkaller0 (unregistering): left promiscuous mode [ 65.898817][ T5402] syzkaller0 (unregistering): left allmulticast mode [ 66.435176][ T5440] loop0: detected capacity change from 0 to 2048 [ 66.465824][ T5443] __nla_validate_parse: 14 callbacks suppressed [ 66.465842][ T5443] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 66.529295][ T3312] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 66.568023][ T3312] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 66.886143][ T5467] loop1: detected capacity change from 0 to 2048 [ 66.893515][ T5469] veth6: entered promiscuous mode [ 66.898710][ T5469] veth6: entered allmulticast mode [ 66.929781][ T5467] loop1: p2 < > p4 [ 66.938633][ T5467] loop1: p4 size 262144 extends beyond EOD, truncated [ 66.988279][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 66.999389][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.024509][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 67.036302][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 67.064812][ T5477] veth4: entered promiscuous mode [ 67.069938][ T5477] veth4: entered allmulticast mode [ 67.097627][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 67.127218][ T5483] bridge_slave_0: left allmulticast mode [ 67.133058][ T5483] bridge_slave_0: left promiscuous mode [ 67.138865][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.157505][ T5483] bridge_slave_1: left allmulticast mode [ 67.163285][ T5483] bridge_slave_1: left promiscuous mode [ 67.169075][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.181918][ T5486] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 67.190871][ T5483] bond0: (slave bond_slave_0): Releasing backup interface [ 67.193928][ T5488] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 67.199252][ T5486] SELinux: failed to load policy [ 67.205935][ T5488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.680'. [ 67.228830][ T5490] loop2: detected capacity change from 0 to 512 [ 67.238225][ T5483] bond0: (slave bond_slave_1): Releasing backup interface [ 67.267457][ T5483] team0: Port device team_slave_0 removed [ 67.276287][ T5483] team0: Port device team_slave_1 removed [ 67.290481][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.306972][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.314862][ T5488] veth1_vlan: left promiscuous mode [ 67.326109][ T5488] batman_adv: batadv0: Adding interface: veth1_vlan [ 67.332823][ T5488] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.370999][ T5488] batman_adv: batadv0: Interface activated: veth1_vlan [ 67.516698][ T5518] loop4: detected capacity change from 0 to 1024 [ 67.523870][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 67.533598][ T5518] EXT4-fs: Ignoring removed orlov option [ 67.569842][ T5515] wg2: entered promiscuous mode [ 67.574895][ T5515] wg2: entered allmulticast mode [ 67.621109][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 67.746643][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 67.855414][ T5539] syzkaller0: entered promiscuous mode [ 67.861001][ T5539] syzkaller0: entered allmulticast mode [ 67.946863][ T5548] loop3: detected capacity change from 0 to 2048 [ 67.962406][ T5550] tipc: New replicast peer: 255.255.255.83 [ 67.968649][ T5550] tipc: Enabled bearer , priority 10 [ 68.032749][ T3313] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 68.048688][ T3313] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 68.077208][ T5559] wg2: entered promiscuous mode [ 68.082225][ T5559] wg2: entered allmulticast mode [ 68.120761][ T5563] veth4: entered promiscuous mode [ 68.125941][ T5563] veth4: entered allmulticast mode [ 68.203949][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 68.276884][ T5572] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 68.353295][ T5578] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 68.385489][ T5578] bond1: entered promiscuous mode [ 68.390787][ T5578] bond1: entered allmulticast mode [ 68.411407][ T5578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.418881][ T5582] loop3: detected capacity change from 0 to 1024 [ 68.430047][ T5582] EXT4-fs: Ignoring removed oldalloc option [ 68.436007][ T5582] EXT4-fs: Ignoring removed bh option [ 68.448577][ T5578] bridge2: entered promiscuous mode [ 68.454040][ T5578] bridge2: entered allmulticast mode [ 68.460242][ T5578] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 68.521161][ T5591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.080973][ T5602] batman_adv: batadv0: Adding interface: dummy0 [ 69.087261][ T5602] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.112539][ T5602] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 69.156274][ T5604] loop2: detected capacity change from 0 to 2048 [ 69.194061][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 69.194081][ T29] audit: type=1400 audit(69.138:1540): avc: denied { ioctl } for pid=5601 comm="syz.1.735" path="socket:[11726]" dev="sockfs" ino=11726 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.278226][ T3649] loop2: p2 < > p4 [ 69.316939][ T29] audit: type=1326 audit(69.278:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.339669][ T29] audit: type=1326 audit(69.278:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.362327][ T29] audit: type=1326 audit(69.278:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.384930][ T29] audit: type=1326 audit(69.278:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.388079][ T3649] loop2: p4 size 262144 extends beyond EOD, truncated [ 69.407572][ T29] audit: type=1326 audit(69.278:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.437096][ T29] audit: type=1326 audit(69.278:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.459747][ T29] audit: type=1326 audit(69.278:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.482439][ T29] audit: type=1326 audit(69.278:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.505154][ T29] audit: type=1326 audit(69.278:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.4.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 69.534120][ T5604] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 69.667605][ T5616] loop2: detected capacity change from 0 to 1024 [ 69.689129][ T5616] EXT4-fs: Ignoring removed orlov option [ 69.719367][ T5616] EXT4-fs mount: 22 callbacks suppressed [ 69.719386][ T5616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.749798][ T5614] loop1: detected capacity change from 0 to 8192 [ 69.769782][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 69.852819][ T5624] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 69.955134][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.347990][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.024618][ T5674] loop2: detected capacity change from 0 to 2048 [ 71.224273][ T5674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.253419][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.312963][ T5681] loop2: detected capacity change from 0 to 164 [ 71.322070][ T5681] iso9660: Unknown parameter '€' [ 71.417204][ T5683] loop4: detected capacity change from 0 to 2048 [ 71.488796][ T4661] loop4: p2 < > p4 [ 71.493695][ T4661] loop4: p4 size 262144 extends beyond EOD, truncated [ 71.503080][ T5683] loop4: p2 < > p4 [ 71.508366][ T5683] loop4: p4 size 262144 extends beyond EOD, truncated [ 71.541111][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.552613][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.588146][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.602542][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 71.813515][ T3676] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.824600][ T5698] random: crng reseeded on system resumption [ 72.019670][ T5711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.331328][ T5719] xt_hashlimit: max too large, truncated to 1048576 [ 72.790358][ T5730] __nla_validate_parse: 1 callbacks suppressed [ 72.790426][ T5730] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 73.586703][ T5748] loop3: detected capacity change from 0 to 32768 [ 73.648114][ T4661] loop3: p1 p2 p3 < p5 p6 p7 > [ 73.654157][ T4661] loop3: p2 size 16775168 extends beyond EOD, truncated [ 73.662398][ T4661] loop3: p5 start 4294970168 is beyond EOD, truncated [ 73.675533][ T5748] loop3: p1 p2 p3 < p5 p6 p7 > [ 73.681440][ T5748] loop3: p2 size 16775168 extends beyond EOD, truncated [ 73.689968][ T5748] loop3: p5 start 4294970168 is beyond EOD, truncated [ 73.784307][ T4011] udevd[4011]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 73.784609][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 73.805951][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 73.817275][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.827693][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.829309][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 73.872691][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 73.875171][ T4661] udevd[4661]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 73.883789][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 73.909162][ T4011] udevd[4011]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 73.920600][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 73.981852][ T5763] loop2: detected capacity change from 0 to 164 [ 73.994087][ T5764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.005729][ T5763] ISOFS: unable to read i-node block [ 74.029493][ T5763] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 74.929031][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 74.929046][ T29] audit: type=1400 audit(74.908:1609): avc: denied { relabelfrom } for pid=5784 comm="syz.0.792" name="NETLINK" dev="sockfs" ino=13345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.958608][ T29] audit: type=1401 audit(74.908:1610): op=setxattr invalid_context="" [ 74.973686][ T5790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.794'. [ 75.012216][ T5790] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 75.348718][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 75.359632][ T5801] net_ratelimit: 7 callbacks suppressed [ 75.359652][ T5801] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 75.407859][ T5807] netlink: 'syz.1.802': attribute type 2 has an invalid length. [ 75.730109][ T5813] syzkaller0: entered promiscuous mode [ 75.735661][ T5813] syzkaller0: entered allmulticast mode [ 76.099463][ T5821] loop1: detected capacity change from 0 to 512 [ 76.121692][ T5821] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 76.138849][ T5821] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.145485][ T5821] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 76.160267][ T5821] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.195926][ T5821] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 76.204257][ T5821] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.806: bg 0: block 40: padding at end of block bitmap is not set [ 76.219415][ T5821] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 76.228858][ T5821] EXT4-fs (loop1): 1 truncate cleaned up [ 76.235357][ T5821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.277177][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.289861][ T5836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.811'. [ 76.314133][ T5836] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 76.375420][ T29] audit: type=1326 audit(76.348:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.406654][ T29] audit: type=1326 audit(76.378:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.429267][ T29] audit: type=1326 audit(76.378:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.451975][ T29] audit: type=1326 audit(76.378:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.474699][ T29] audit: type=1326 audit(76.378:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.497448][ T29] audit: type=1326 audit(76.378:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.520041][ T29] audit: type=1326 audit(76.378:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 76.598031][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 76.616194][ T5850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.648997][ T5850] vlan2: entered allmulticast mode [ 76.654142][ T5850] macvtap0: entered allmulticast mode [ 76.705325][ T5850] bond2: (slave vlan2): Opening slave failed [ 78.147730][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 78.153945][ T3955] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.210524][ T5862] syzkaller0: entered promiscuous mode [ 78.216067][ T5862] syzkaller0: entered allmulticast mode [ 78.434684][ T5883] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 78.711077][ T5896] loop4: detected capacity change from 0 to 8192 [ 78.721335][ T3375] hid_parser_main: 28 callbacks suppressed [ 78.721355][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.734767][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.735083][ T5896] bio_check_eod: 167 callbacks suppressed [ 78.735101][ T5896] syz.4.838: attempt to access beyond end of device [ 78.735101][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 78.742369][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.747981][ T5896] buffer_io_error: 22 callbacks suppressed [ 78.748013][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 78.783795][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.791400][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.798893][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.806326][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.813799][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.821239][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.828651][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.865993][ T3375] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 78.886667][ T5914] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 78.956008][ T5914] bond2: (slave veth5): Enslaving as an active interface with a down link [ 78.970327][ T5914] bond2: entered promiscuous mode [ 78.971930][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 78.975390][ T5914] bond2: entered allmulticast mode [ 78.990135][ T5914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.992483][ T5896] syz.4.838: attempt to access beyond end of device [ 78.992483][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.010262][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.072677][ T5896] syz.4.838: attempt to access beyond end of device [ 79.072677][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.086212][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.105041][ T5896] syz.4.838: attempt to access beyond end of device [ 79.105041][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.118478][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.126699][ T5895] syz.4.838: attempt to access beyond end of device [ 79.126699][ T5895] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.131701][ T5930] netlink: 'syz.0.849': attribute type 3 has an invalid length. [ 79.140082][ T5895] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.161017][ T5896] syz.4.838: attempt to access beyond end of device [ 79.161017][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.174417][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.189747][ T5896] syz.4.838: attempt to access beyond end of device [ 79.189747][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.203176][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.211918][ T5895] syz.4.838: attempt to access beyond end of device [ 79.211918][ T5895] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.225589][ T5895] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.247862][ T5896] syz.4.838: attempt to access beyond end of device [ 79.247862][ T5896] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.261353][ T5896] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.304404][ T5937] loop3: detected capacity change from 0 to 512 [ 79.312294][ T5895] syz.4.838: attempt to access beyond end of device [ 79.312294][ T5895] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.325830][ T5895] Buffer I/O error on dev loop4, logical block 57847, async page read [ 79.358995][ T5939] loop2: detected capacity change from 0 to 128 [ 79.438403][ T5937] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.450001][ T5937] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 79.460119][ T5937] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.852: Corrupt directory, running e2fsck is recommended [ 79.493028][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 79.513298][ T5937] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 79.521730][ T5937] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.852: corrupted in-inode xattr: invalid ea_ino [ 79.535882][ T5937] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.852: couldn't read orphan inode 15 (err -117) [ 79.563778][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.610294][ T5947] loop1: detected capacity change from 0 to 128 [ 79.675157][ T5951] loop2: detected capacity change from 0 to 512 [ 79.684807][ T5937] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.696352][ T5937] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 79.706545][ T5937] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.852: Corrupt directory, running e2fsck is recommended [ 79.719915][ T5951] journal_path: Non-blockdev passed as './file1' [ 79.726393][ T5951] EXT4-fs: error: could not find journal device path [ 79.751231][ T5953] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 79.808251][ T5937] binfmt_misc: register: failed to install interpreter file ./file0 [ 79.818167][ T5953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.825901][ T5958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.839698][ T5959] bond2: (slave gretap1): making interface the new active one [ 79.848939][ T5959] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 79.941193][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.980282][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 79.980297][ T29] audit: type=1326 audit(79.958:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.012991][ T29] audit: type=1326 audit(79.988:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.035819][ T29] audit: type=1326 audit(79.988:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.058486][ T29] audit: type=1326 audit(79.988:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.081178][ T29] audit: type=1326 audit(79.988:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.107854][ T29] audit: type=1326 audit(79.988:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.130582][ T29] audit: type=1326 audit(80.008:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.153320][ T29] audit: type=1326 audit(80.008:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.175970][ T29] audit: type=1326 audit(80.008:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 80.198617][ T29] audit: type=1326 audit(80.058:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb558d9f783 code=0x7ffc0000 [ 80.392699][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 80.602026][ T6000] loop2: detected capacity change from 0 to 1024 [ 80.618570][ T6000] EXT4-fs: inline encryption not supported [ 80.624482][ T6000] EXT4-fs: Ignoring removed orlov option [ 80.649539][ T6000] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.680175][ T6000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 80.698937][ T6000] System zones: 0-1, 3-12 [ 80.717262][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.911006][ T6011] syzkaller0: entered allmulticast mode [ 80.917308][ T6011] syzkaller0: entered promiscuous mode [ 80.925084][ T6011] syzkaller0 (unregistering): left allmulticast mode [ 80.931829][ T6011] syzkaller0 (unregistering): left promiscuous mode [ 81.040569][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.235865][ T6040] loop1: detected capacity change from 0 to 128 [ 81.247273][ T6040] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.300998][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.382533][ T6053] netlink: 'syz.4.899': attribute type 83 has an invalid length. [ 81.994372][ T6078] loop3: detected capacity change from 0 to 4096 [ 82.022435][ T6078] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 82.090867][ T6085] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 82.422737][ T6110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.920'. [ 82.461457][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.921'. [ 82.489533][ T6112] 9p: Unknown uid 00000000004294967295 [ 82.555245][ T6116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6116 comm=syz.0.923 [ 82.709218][ T6125] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.926'. [ 82.718390][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'. [ 82.831802][ T6129] loop2: detected capacity change from 0 to 1024 [ 82.846108][ T6129] EXT4-fs: inline encryption not supported [ 82.880251][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.933834][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.983444][ T6138] syzkaller0: entered promiscuous mode [ 82.989039][ T6138] syzkaller0: entered allmulticast mode [ 83.004250][ T6145] netlink: 'syz.2.933': attribute type 4 has an invalid length. [ 83.045607][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.932'. [ 83.090888][ T6149] loop2: detected capacity change from 0 to 512 [ 83.116222][ T6149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.173804][ T6149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.183138][ T6149] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.935: bg 0: block 248: padding at end of block bitmap is not set [ 83.257743][ T6149] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.935: Failed to acquire dquot type 1 [ 83.314130][ T6149] EXT4-fs (loop2): 1 truncate cleaned up [ 83.321404][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.355614][ T6163] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 83.364798][ T6163] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.374178][ T6148] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.404297][ T6164] lo: left promiscuous mode [ 83.412896][ T6164] wg2: left promiscuous mode [ 83.417621][ T6164] wg2: left allmulticast mode [ 83.428818][ T6164] veth6: left promiscuous mode [ 83.433638][ T6164] veth6: left allmulticast mode [ 84.470246][ T6212] tipc: New replicast peer: 255.255.255.255 [ 84.477291][ T6212] tipc: Enabled bearer , priority 10 [ 84.580297][ T6211] SELinux: failed to load policy [ 84.887518][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.896663][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.905586][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.914548][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.923538][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.973274][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.982292][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 84.991219][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 85.000108][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 85.009045][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'. [ 85.393289][ T6294] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 85.402112][ T6294] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 85.588125][ T3508] tipc: Node number set to 2434198365 [ 85.600447][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 85.600461][ T29] audit: type=1326 audit(85.578:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.629472][ T29] audit: type=1326 audit(85.578:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.662983][ T29] audit: type=1326 audit(85.638:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.687232][ T29] audit: type=1326 audit(85.658:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.709975][ T29] audit: type=1326 audit(85.658:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.741498][ T29] audit: type=1326 audit(85.658:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.764347][ T29] audit: type=1326 audit(85.658:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.787035][ T29] audit: type=1326 audit(85.668:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.809701][ T29] audit: type=1326 audit(85.668:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 85.832662][ T29] audit: type=1326 audit(85.668:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38cd41f749 code=0x7ffc0000 [ 86.531070][ T6412] loop4: detected capacity change from 0 to 512 [ 86.538045][ T6412] EXT4-fs: Ignoring removed bh option [ 86.555418][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.738434][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.031326][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.554421][ T6491] tipc: Started in network mode [ 88.559488][ T6491] tipc: Node identity ac14140f, cluster identity 4711 [ 88.577810][ T6491] tipc: New replicast peer: 255.255.255.255 [ 88.584149][ T6491] tipc: Enabled bearer , priority 10 [ 88.602134][ T6499] loop3: detected capacity change from 0 to 128 [ 89.591359][ T6533] loop3: detected capacity change from 0 to 1024 [ 89.607677][ T4451] tipc: Node number set to 2886997007 [ 89.623697][ T6533] EXT4-fs: Ignoring removed orlov option [ 89.645178][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.986072][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.321303][ T6557] __nla_validate_parse: 25 callbacks suppressed [ 90.321321][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 90.358409][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.517379][ T6567] loop1: detected capacity change from 0 to 512 [ 90.525112][ T6567] EXT4-fs: Ignoring removed bh option [ 90.559937][ T6567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.648176][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 90.648195][ T29] audit: type=1400 audit(90.628:2068): avc: denied { mounton } for pid=6576 comm="syz.4.1045" path="/209/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 90.793238][ T29] audit: type=1326 audit(90.768:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 90.897665][ T29] audit: type=1326 audit(90.768:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 90.919284][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 90.920530][ T29] audit: type=1326 audit(90.768:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28d476df90 code=0x7ffc0000 [ 90.953600][ T29] audit: type=1326 audit(90.768:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f28d4770f77 code=0x7ffc0000 [ 90.959140][ T6592] netlink: 'syz.2.1062': attribute type 13 has an invalid length. [ 90.977559][ T29] audit: type=1326 audit(90.768:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 91.008113][ T29] audit: type=1326 audit(90.768:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f28d4770f77 code=0x7ffc0000 [ 91.030888][ T29] audit: type=1326 audit(90.768:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f28d476e3aa code=0x7ffc0000 [ 91.053616][ T29] audit: type=1326 audit(90.768:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 91.076575][ T29] audit: type=1326 audit(90.778:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d476f749 code=0x7ffc0000 [ 91.186644][ T6595] loop4: detected capacity change from 0 to 1024 [ 91.198140][ T6595] EXT4-fs: inline encryption not supported [ 91.204072][ T6595] EXT4-fs: Ignoring removed nobh option [ 91.209756][ T6595] EXT4-fs: Ignoring removed bh option [ 91.247594][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.257491][ T6595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.371707][ T6611] bridge0: port 3(gretap0) entered blocking state [ 91.378347][ T6611] bridge0: port 3(gretap0) entered disabled state [ 91.388938][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.421027][ T6611] gretap0: entered allmulticast mode [ 91.436999][ T6611] gretap0: entered promiscuous mode [ 91.447929][ T6616] gretap0: left allmulticast mode [ 91.453027][ T6616] gretap0: left promiscuous mode [ 91.458476][ T6616] bridge0: port 3(gretap0) entered disabled state [ 91.505225][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 91.537618][ T6622] bridge_slave_1: left allmulticast mode [ 91.543414][ T6622] bridge_slave_1: left promiscuous mode [ 91.549291][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.597870][ T6622] bridge_slave_0: left allmulticast mode [ 91.603570][ T6622] bridge_slave_0: left promiscuous mode [ 91.609449][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.783570][ T6618] loop4: detected capacity change from 0 to 1024 [ 91.794813][ T6618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.885842][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.062353][ T6620] Set syz1 is full, maxelem 65536 reached [ 92.196085][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 92.207597][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.252900][ T6637] loop0: detected capacity change from 0 to 512 [ 92.271214][ T6637] EXT4-fs: Ignoring removed bh option [ 92.283033][ T6637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.329188][ T6646] loop1: detected capacity change from 0 to 1024 [ 92.336444][ T6646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.362074][ T6646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.374504][ T6644] loop4: detected capacity change from 0 to 2048 [ 92.443600][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.458861][ T6644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.591156][ T3326] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 92.610422][ T6660] bond0: (slave bridge0): Releasing backup interface [ 92.629001][ T6660] bridge_slave_0: left allmulticast mode [ 92.634701][ T6660] bridge_slave_0: left promiscuous mode [ 92.640470][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.653348][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.662780][ T3326] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 92.671918][ T6660] bridge_slave_1: left allmulticast mode [ 92.677665][ T6660] bridge_slave_1: left promiscuous mode [ 92.683356][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.692843][ T6665] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 92.700833][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1075'. [ 92.714361][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.742960][ T6660] bond0: (slave bond_slave_0): Releasing backup interface [ 92.778356][ T6660] bond0: (slave bond_slave_1): Releasing backup interface [ 92.824347][ T6660] team0: Port device team_slave_0 removed [ 92.839073][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 92.855705][ T6679] loop3: detected capacity change from 0 to 1024 [ 92.857404][ T6660] team0: Port device team_slave_1 removed [ 92.866934][ T6679] EXT4-fs: inline encryption not supported [ 92.869332][ T6660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.877826][ T6679] EXT4-fs: Ignoring removed nobh option [ 92.895405][ T6679] EXT4-fs: Ignoring removed bh option [ 92.913865][ T6682] syzkaller0: entered promiscuous mode [ 92.919432][ T6682] syzkaller0: entered allmulticast mode [ 92.959442][ T6679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.987997][ T6689] loop1: detected capacity change from 0 to 1024 [ 93.007224][ T6689] EXT4-fs: Ignoring removed bh option [ 93.022947][ T6689] EXT4-fs: inline encryption not supported [ 93.039463][ T6689] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.051495][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.061682][ T6689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.091332][ T6689] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1087: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.109785][ T6689] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1087: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.127727][ T6689] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1087: Failed to acquire dquot type 0 [ 93.149331][ T6689] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.159335][ T6689] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1087: mark_inode_dirty error [ 93.170951][ T6689] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 93.181293][ T6689] EXT4-fs (loop1): 1 orphan inode deleted [ 93.187543][ T6689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.200286][ T3727] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.214761][ T3727] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:59: Failed to release dquot type 0 [ 93.259012][ T6689] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1087: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.292869][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.307386][ T6699] loop0: detected capacity change from 0 to 1024 [ 93.314310][ T6699] EXT4-fs: inline encryption not supported [ 93.323701][ T6699] EXT4-fs: Ignoring removed nobh option [ 93.329532][ T6699] EXT4-fs: Ignoring removed bh option [ 93.357757][ T6699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.412748][ T6703] loop4: detected capacity change from 0 to 1024 [ 93.423093][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.442106][ T6707] loop3: detected capacity change from 0 to 512 [ 93.461585][ T6703] EXT4-fs: Ignoring removed bh option [ 93.467043][ T6703] EXT4-fs: inline encryption not supported [ 93.475295][ T6705] loop1: detected capacity change from 0 to 2048 [ 93.483173][ T6707] EXT4-fs: Ignoring removed bh option [ 93.501328][ T6703] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.520280][ T6703] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.521170][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.529484][ T6707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.569021][ T6703] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1103: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.607962][ T6703] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1103: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.622452][ T6703] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1103: Failed to acquire dquot type 0 [ 93.634347][ T6703] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.646288][ T3318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 93.661530][ T6703] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1103: mark_inode_dirty error [ 93.682953][ T6703] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 93.693585][ T3318] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 93.702552][ T6703] EXT4-fs (loop4): 1 orphan inode deleted [ 93.708345][ T6719] EXT4-fs: Ignoring removed orlov option [ 93.715808][ T6703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.731074][ T6719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.744054][ T3677] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.776661][ T3677] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 93.838651][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.858553][ T6703] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1103: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.905822][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.928365][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.182117][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.246553][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 94.547704][ T3479] page_pool_release_retry() stalled pool shutdown: id 24, 1 inflight 60 sec [ 94.559225][ T6748] EXT4-fs: inline encryption not supported [ 94.572717][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.622646][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.663465][ T6752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.736590][ T3318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 94.738513][ T6760] bridge0: port 1(gretap0) entered blocking state [ 94.757844][ T6760] bridge0: port 1(gretap0) entered disabled state [ 94.764686][ T6760] gretap0: entered allmulticast mode [ 94.770623][ T6760] gretap0: entered promiscuous mode [ 94.776940][ T3318] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 94.792383][ T6760] gretap0: left allmulticast mode [ 94.797455][ T6760] gretap0: left promiscuous mode [ 94.802739][ T6760] bridge0: port 1(gretap0) entered disabled state [ 94.812205][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.189084][ T6794] EXT4-fs: Ignoring removed orlov option [ 95.234019][ T6794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.258167][ T6803] EXT4-fs: inline encryption not supported [ 95.339299][ T6803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.477472][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.650896][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.669017][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 95.669034][ T29] audit: type=1326 audit(95.648:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.698131][ T29] audit: type=1326 audit(95.648:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.752466][ T6825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.770442][ T29] audit: type=1326 audit(95.678:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.775382][ T6829] EXT4-fs: Ignoring removed bh option [ 95.793710][ T29] audit: type=1326 audit(95.678:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.822395][ T29] audit: type=1326 audit(95.678:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.845198][ T29] audit: type=1326 audit(95.678:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.867978][ T29] audit: type=1326 audit(95.678:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.890805][ T29] audit: type=1326 audit(95.678:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.913713][ T29] audit: type=1326 audit(95.678:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.936583][ T29] audit: type=1326 audit(95.678:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb558d9f749 code=0x7ffc0000 [ 95.961508][ T3326] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 95.968170][ T6829] EXT4-fs: inline encryption not supported [ 95.983317][ T6829] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.995731][ T3326] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 96.008651][ T6829] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 96.017889][ T6829] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1122: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.032428][ T6829] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1122: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.069103][ T6829] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1122: Failed to acquire dquot type 0 [ 96.081598][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.094736][ T6829] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 96.106056][ T6829] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1122: mark_inode_dirty error [ 96.120589][ T6829] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 96.131415][ T6829] EXT4-fs (loop3): 1 orphan inode deleted [ 96.138231][ T6829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.151191][ T3680] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.165692][ T3680] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 0 [ 96.246489][ T6829] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1122: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.267469][ T6846] EXT4-fs: inline encryption not supported [ 96.273509][ T6846] EXT4-fs: Ignoring removed orlov option [ 96.294095][ T6846] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.325281][ T6846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 96.326002][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.333637][ T6846] System zones: 0-1, 3-12 [ 96.352678][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.530806][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.661177][ T6855] rdma_op ffff8881049ed580 conn xmit_rdma 0000000000000000 [ 96.836751][ T6865] set_capacity_and_notify: 8 callbacks suppressed [ 96.836765][ T6865] loop3: detected capacity change from 0 to 1024 [ 96.857482][ T6865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.883409][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.899000][ T6872] loop0: detected capacity change from 0 to 512 [ 96.907387][ T6872] EXT4-fs: Ignoring removed bh option [ 96.924839][ T6872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.213547][ T6885] loop0: detected capacity change from 0 to 1024 [ 97.220506][ T6885] EXT4-fs: Ignoring removed orlov option [ 97.590057][ T6899] rdma_op ffff88811bdbe980 conn xmit_rdma 0000000000000000 [ 98.107086][ T6908] loop1: detected capacity change from 0 to 1024 [ 98.175835][ T6927] syz.3.1161: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 98.190435][ T6927] CPU: 1 UID: 0 PID: 6927 Comm: syz.3.1161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.190587][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.190604][ T6927] Call Trace: [ 98.190617][ T6927] [ 98.190627][ T6927] __dump_stack+0x1d/0x30 [ 98.190729][ T6927] dump_stack_lvl+0xe8/0x140 [ 98.190751][ T6927] dump_stack+0x15/0x1b [ 98.190770][ T6927] warn_alloc+0x12b/0x1a0 [ 98.190795][ T6927] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 98.190886][ T6927] __vmalloc_node_range_noprof+0x9d/0xed0 [ 98.190916][ T6927] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 98.190958][ T6927] ? slow_avc_audit+0x104/0x140 [ 98.191048][ T6927] ? should_fail_ex+0x30/0x280 [ 98.191083][ T6927] ? xskq_create+0x36/0xe0 [ 98.191167][ T6927] vmalloc_user_noprof+0x7d/0xb0 [ 98.191189][ T6927] ? xskq_create+0x80/0xe0 [ 98.191220][ T6927] xskq_create+0x80/0xe0 [ 98.191253][ T6927] xsk_init_queue+0x95/0xf0 [ 98.191326][ T6927] xsk_setsockopt+0x477/0x640 [ 98.191358][ T6927] ? __pfx_xsk_setsockopt+0x10/0x10 [ 98.191385][ T6927] __sys_setsockopt+0x184/0x200 [ 98.191414][ T6927] __x64_sys_setsockopt+0x64/0x80 [ 98.191443][ T6927] x64_sys_call+0x21d5/0x3000 [ 98.191533][ T6927] do_syscall_64+0xd8/0x2a0 [ 98.191569][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.191590][ T6927] RIP: 0033:0x7f18a87af749 [ 98.191655][ T6927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.191676][ T6927] RSP: 002b:00007f18a7217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.191695][ T6927] RAX: ffffffffffffffda RBX: 00007f18a8a05fa0 RCX: 00007f18a87af749 [ 98.191711][ T6927] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 98.191727][ T6927] RBP: 00007f18a8833f91 R08: 0000000000000004 R09: 0000000000000000 [ 98.191742][ T6927] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 98.191812][ T6927] R13: 00007f18a8a06038 R14: 00007f18a8a05fa0 R15: 00007ffde10f9558 [ 98.191857][ T6927] [ 98.191871][ T6927] Mem-Info: [ 98.400058][ T6927] active_anon:8717 inactive_anon:119 isolated_anon:0 [ 98.400058][ T6927] active_file:18179 inactive_file:2273 isolated_file:0 [ 98.400058][ T6927] unevictable:0 dirty:323 writeback:0 [ 98.400058][ T6927] slab_reclaimable:3292 slab_unreclaimable:37779 [ 98.400058][ T6927] mapped:29298 shmem:262 pagetables:1395 [ 98.400058][ T6927] sec_pagetables:0 bounce:0 [ 98.400058][ T6927] kernel_misc_reclaimable:0 [ 98.400058][ T6927] free:1851410 free_pcp:18221 free_cma:0 [ 98.445222][ T6927] Node 0 active_anon:34984kB inactive_anon:476kB active_file:72716kB inactive_file:9092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117192kB dirty:1292kB writeback:0kB shmem:1048kB kernel_stack:4768kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.472985][ T6927] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.503136][ T6927] lowmem_reserve[]: 0 2880 7859 7859 [ 98.508530][ T6927] Node 0 DMA32 free:2946060kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949588kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 98.539720][ T6927] lowmem_reserve[]: 0 0 4978 4978 [ 98.544808][ T6927] Node 0 Normal free:4446268kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34984kB inactive_anon:476kB active_file:72716kB inactive_file:9092kB unevictable:0kB writepending:1292kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:69076kB local_pcp:8896kB free_cma:0kB [ 98.546186][ T6931] loop1: detected capacity change from 0 to 128 [ 98.578631][ T6927] lowmem_reserve[]: 0 0 0 0 [ 98.589477][ T6927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.602249][ T6927] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 1*32kB (M) 4*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2946060kB [ 98.618543][ T6927] Node 0 Normal: 586*4kB (UME) 293*8kB (UME) 266*16kB (UME) 87*32kB (UME) 205*64kB (UME) 150*128kB (UM) 92*256kB (UM) 72*512kB (UM) 56*1024kB (UM) 30*2048kB (UME) 1031*4096kB (UM) = 4446224kB [ 98.637827][ T6927] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 98.647149][ T6927] 20869 total pagecache pages [ 98.651884][ T6927] 129 pages in swap cache [ 98.656226][ T6927] Free swap = 124352kB [ 98.660433][ T6927] Total swap = 124996kB [ 98.664606][ T6927] 2097051 pages RAM [ 98.668450][ T6927] 0 pages HighMem/MovableOnly [ 98.673285][ T6927] 81254 pages reserved [ 98.741442][ T3740] bio_check_eod: 13271 callbacks suppressed [ 98.741460][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.741460][ T3740] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 98.762627][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.762627][ T3740] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 98.777022][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.777022][ T3740] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 98.791255][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.791255][ T3740] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 98.805524][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.805524][ T3740] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 98.819645][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.819645][ T3740] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 98.833645][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.833645][ T3740] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 98.847916][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.847916][ T3740] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 98.861820][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.861820][ T3740] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 98.886059][ T3740] kworker/u8:64: attempt to access beyond end of device [ 98.886059][ T3740] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 98.907215][ T6948] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 98.965232][ T6948] bond3: (slave veth9): Enslaving as an active interface with a down link [ 98.986519][ T3375] hid_parser_main: 19 callbacks suppressed [ 98.986572][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.999945][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.007365][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.050161][ T6948] bond3: entered promiscuous mode [ 99.055280][ T6948] bond3: entered allmulticast mode [ 99.067847][ T6948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.080673][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.088168][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.095636][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.103110][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.110629][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.118067][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.125456][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 99.194184][ T3375] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 99.339012][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 99.352365][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'. [ 100.028654][ T6989] syzkaller0: entered promiscuous mode [ 100.034176][ T6989] syzkaller0: entered allmulticast mode [ 100.302537][ T7010] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 100.390289][ T7010] bond3: (slave veth7): Enslaving as an active interface with a down link [ 100.468377][ T7010] bond3: entered promiscuous mode [ 100.473667][ T7010] bond3: entered allmulticast mode [ 100.548491][ T7010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.685267][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 100.685300][ T29] audit: type=1400 audit(100.658:2779): avc: denied { create } for pid=7031 comm="syz.0.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 100.711977][ T29] audit: type=1400 audit(100.688:2780): avc: denied { prog_load } for pid=7019 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.730552][ T29] audit: type=1400 audit(100.688:2781): avc: denied { prog_load } for pid=7019 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.781796][ T29] audit: type=1400 audit(100.688:2782): avc: denied { map_create } for pid=7031 comm="syz.0.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.800467][ T29] audit: type=1400 audit(100.688:2783): avc: denied { prog_load } for pid=7031 comm="syz.0.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.819072][ T29] audit: type=1400 audit(100.688:2784): avc: denied { prog_load } for pid=7031 comm="syz.0.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.837557][ T29] audit: type=1400 audit(100.688:2785): avc: denied { create } for pid=7031 comm="syz.0.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 100.857710][ T29] audit: type=1400 audit(100.728:2786): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.925557][ T29] audit: type=1400 audit(100.898:2787): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.970413][ T7040] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 100.970544][ T29] audit: type=1400 audit(100.948:2788): avc: denied { create } for pid=7034 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.650533][ T7078] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 101.792107][ T7082] netlink: 'syz.1.1223': attribute type 12 has an invalid length. [ 102.147949][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 102.167872][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 102.298032][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 102.454908][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 102.477052][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 102.583882][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 103.122657][ T7187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7187 comm=syz.4.1274 [ 103.882258][ T7220] netlink: 'syz.4.1288': attribute type 12 has an invalid length. [ 104.318575][ T7231] netlink: 'syz.0.1291': attribute type 4 has an invalid length. [ 104.705533][ T7255] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.727837][ T29] kauditd_printk_skb: 697 callbacks suppressed [ 105.727854][ T29] audit: type=1400 audit(105.708:3486): avc: denied { map_create } for pid=7311 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.826701][ T29] audit: type=1400 audit(105.748:3487): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.850595][ T29] audit: type=1400 audit(105.758:3488): avc: denied { mounton } for pid=7319 comm="syz.3.1328" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 105.871626][ T29] audit: type=1400 audit(105.758:3489): avc: denied { mounton } for pid=7319 comm="syz.3.1328" path="/file0" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 105.893650][ T29] audit: type=1400 audit(105.768:3490): avc: denied { create } for pid=7319 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 105.913133][ T29] audit: type=1400 audit(105.768:3491): avc: denied { unmount } for pid=7319 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 105.933072][ T29] audit: type=1400 audit(105.788:3492): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.959982][ T29] audit: type=1400 audit(105.938:3493): avc: denied { create } for pid=7316 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 105.979448][ T29] audit: type=1400 audit(105.938:3494): avc: denied { prog_load } for pid=7316 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.216366][ T29] audit: type=1400 audit(105.998:3495): avc: denied { create } for pid=7316 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 106.518490][ T7341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.615835][ T7345] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 106.623646][ T7345] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 106.631546][ T7345] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1339'. [ 106.653789][ T7345] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 106.661582][ T7345] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 106.669360][ T7345] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1339'. [ 107.316771][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 107.479639][ T7399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.625961][ T7409] ip6gre1: entered allmulticast mode [ 107.669083][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 107.794951][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 107.854285][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1372'. [ 108.375817][ T7452] netlink: 'syz.0.1389': attribute type 13 has an invalid length. [ 108.432321][ T7452] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 108.478245][ T7455] ip6gre1: entered allmulticast mode [ 108.716728][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1401'. [ 108.776257][ T7485] ip6gre1: entered allmulticast mode [ 109.519475][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 109.539419][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 110.356500][ T7589] bond0: (slave bond_slave_0): Releasing backup interface [ 110.416345][ T7591] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 110.424264][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 110.542458][ T7589] bond0: (slave bond_slave_1): Releasing backup interface [ 110.558294][ T7589] team0: Port device team_slave_0 removed [ 110.581101][ T7589] team0: Port device team_slave_1 removed [ 110.587118][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.624238][ T7589] bond2: (slave gretap1): Releasing active interface [ 110.644437][ T7589] bond3: (slave veth7): Releasing active interface [ 110.668141][ T7591] veth1_vlan: left promiscuous mode [ 110.677427][ T7591] batman_adv: batadv0: Adding interface: veth1_vlan [ 110.684207][ T7591] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.727041][ T7591] batman_adv: batadv0: Interface activated: veth1_vlan [ 110.738596][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 110.738613][ T29] audit: type=1400 audit(110.718:4171): avc: denied { create } for pid=7607 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 110.767077][ T7609] xt_hashlimit: max too large, truncated to 1048576 [ 110.787417][ T29] audit: type=1400 audit(110.718:4172): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.811114][ T29] audit: type=1400 audit(110.738:4173): avc: denied { execmem } for pid=7607 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 110.829790][ T29] audit: type=1400 audit(110.738:4174): avc: denied { prog_load } for pid=7607 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.848438][ T29] audit: type=1400 audit(110.758:4175): avc: denied { prog_load } for pid=7611 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.866934][ T29] audit: type=1400 audit(110.758:4176): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.892557][ T29] audit: type=1400 audit(110.758:4177): avc: denied { create } for pid=7614 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 110.911568][ T29] audit: type=1400 audit(110.758:4178): avc: denied { map_create } for pid=7614 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.930669][ T29] audit: type=1400 audit(110.758:4179): avc: denied { prog_load } for pid=7614 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.949944][ T29] audit: type=1400 audit(110.758:4180): avc: denied { create } for pid=7614 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 111.063659][ T7629] netlink: 'syz.4.1467': attribute type 13 has an invalid length. [ 111.085587][ T7635] netlink: 'syz.3.1468': attribute type 14 has an invalid length. [ 111.456591][ T7672] netlink: 'syz.4.1484': attribute type 10 has an invalid length. [ 111.466426][ T7672] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.652045][ T7685] netlink: 'syz.4.1491': attribute type 10 has an invalid length. [ 111.673642][ T7685] bond0: (slave dummy0): Releasing backup interface [ 111.682200][ T7685] netlink: 'syz.4.1491': attribute type 10 has an invalid length. [ 111.695632][ T7685] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.806509][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.814193][ T7693] batman_adv: batadv0: Removing interface: dummy0 [ 112.232958][ T7731] __nla_validate_parse: 2 callbacks suppressed [ 112.232978][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 112.256790][ T7731] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 112.395573][ T7741] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 113.173692][ T7761] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 113.196702][ T7761] bond4: (slave bridge4): making interface the new active one [ 113.204940][ T7761] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 113.556023][ T7803] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.817243][ T7833] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 113.832579][ T7833] bond2: entered promiscuous mode [ 113.837743][ T7833] bond2: entered allmulticast mode [ 113.843417][ T7833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.860665][ T7833] bond2: (slave gretap1): making interface the new active one [ 113.868250][ T7833] gretap1: entered promiscuous mode [ 113.873546][ T7833] gretap1: entered allmulticast mode [ 113.879690][ T7833] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 113.896563][ T7833] vlan2: entered allmulticast mode [ 113.902462][ T7833] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 114.596335][ T7877] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1574'. [ 114.867805][ T9] page_pool_release_retry() stalled pool shutdown: id 33, 3 inflight 60 sec [ 115.030929][ T7913] netlink: 'syz.0.1591': attribute type 7 has an invalid length. [ 115.038724][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 115.054744][ T7914] netlink: 'syz.4.1592': attribute type 7 has an invalid length. [ 115.062546][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 115.123136][ T7920] veth10: entered promiscuous mode [ 115.128540][ T7920] veth10: entered allmulticast mode [ 115.275772][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 115.323211][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 115.363815][ T3746] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.474823][ T7960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.724881][ T7974] macsec1: entered allmulticast mode [ 115.730260][ T7974] macvlan1: entered allmulticast mode [ 115.751636][ T29] kauditd_printk_skb: 868 callbacks suppressed [ 115.751651][ T29] audit: type=1400 audit(115.728:5049): avc: denied { prog_load } for pid=7975 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.792402][ T29] audit: type=1400 audit(115.758:5050): avc: denied { prog_load } for pid=7975 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.812229][ T29] audit: type=1400 audit(115.768:5051): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.837503][ T29] audit: type=1400 audit(115.808:5052): avc: denied { create } for pid=7977 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 115.856778][ T29] audit: type=1400 audit(115.808:5053): avc: denied { create } for pid=7977 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 115.888168][ T29] audit: type=1400 audit(115.868:5054): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.920954][ T29] audit: type=1400 audit(115.898:5055): avc: denied { map_create } for pid=7979 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.939804][ T29] audit: type=1400 audit(115.898:5056): avc: denied { prog_load } for pid=7979 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.960333][ T29] audit: type=1400 audit(115.898:5057): avc: denied { prog_load } for pid=7979 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.995219][ T29] audit: type=1400 audit(115.908:5058): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.062818][ T7998] netlink: 'syz.3.1632': attribute type 4 has an invalid length. [ 116.318174][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 116.330058][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'. [ 116.358032][ T8027] kernel profiling enabled (shift: 63) [ 116.363826][ T8027] profiling shift: 63 too large [ 116.620472][ T8049] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 116.858396][ T8030] ================================================================== [ 116.866522][ T8030] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 116.875152][ T8030] [ 116.877482][ T8030] write to 0xffff88812a896ee8 of 8 bytes by task 8018 on cpu 1: [ 116.885122][ T8030] shmem_file_splice_read+0x470/0x600 [ 116.890520][ T8030] splice_direct_to_actor+0x26f/0x680 [ 116.895922][ T8030] do_splice_direct+0xda/0x150 [ 116.900722][ T8030] do_sendfile+0x380/0x650 [ 116.905162][ T8030] __x64_sys_sendfile64+0x105/0x150 [ 116.910378][ T8030] x64_sys_call+0x2db1/0x3000 [ 116.915092][ T8030] do_syscall_64+0xd8/0x2a0 [ 116.919614][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.925535][ T8030] [ 116.927870][ T8030] write to 0xffff88812a896ee8 of 8 bytes by task 8030 on cpu 0: [ 116.935561][ T8030] shmem_file_splice_read+0x470/0x600 [ 116.940966][ T8030] splice_direct_to_actor+0x26f/0x680 [ 116.946566][ T8030] do_splice_direct+0xda/0x150 [ 116.951358][ T8030] do_sendfile+0x380/0x650 [ 116.955790][ T8030] __x64_sys_sendfile64+0x105/0x150 [ 116.961012][ T8030] x64_sys_call+0x2db1/0x3000 [ 116.965714][ T8030] do_syscall_64+0xd8/0x2a0 [ 116.970237][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.976143][ T8030] [ 116.978655][ T8030] value changed: 0x00000000000073c6 -> 0x00000000000073c7 [ 116.985773][ T8030] [ 116.988106][ T8030] Reported by Kernel Concurrency Sanitizer on: [ 116.994268][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.2.1642 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.004006][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.014078][ T8030] ================================================================== [ 117.427687][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 117.427684][ T3955] Bluetooth: hci0: Opcode 0x1003 failed: -110