last executing test programs: 58.003826891s ago: executing program 3 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 57.941713732s ago: executing program 3 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000eeb0000636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 57.873179173s ago: executing program 3 (id=279): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) 57.764467745s ago: executing program 3 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 57.412887142s ago: executing program 3 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 55.076517768s ago: executing program 3 (id=316): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28e287654e53e062, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 55.049438898s ago: executing program 32 (id=316): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28e287654e53e062, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.304822084s ago: executing program 4 (id=1740): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) 1.279815715s ago: executing program 4 (id=1741): socket(0x2b, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)="5cdd30", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000300)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.181377016s ago: executing program 4 (id=1745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 1.134250708s ago: executing program 4 (id=1749): syz_usb_connect(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1404}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 904.141272ms ago: executing program 2 (id=1757): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 847.360443ms ago: executing program 0 (id=1760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r2, 0x1004}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) 824.534384ms ago: executing program 2 (id=1761): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 804.464404ms ago: executing program 2 (id=1762): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c6173740000000010000180090001"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 743.588985ms ago: executing program 0 (id=1763): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 743.434175ms ago: executing program 2 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0), 0x1000000000000001) 743.213775ms ago: executing program 5 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="016f1800010027000000270000a862f1"], 0xfd6c) 712.420906ms ago: executing program 0 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 710.476606ms ago: executing program 2 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r2, 0x1004}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) 202.057636ms ago: executing program 1 (id=1767): socketpair(0x28, 0x80000, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x1ca) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) io_submit(0x0, 0x0, 0x0) close_range(r0, r0, 0x0) 201.851026ms ago: executing program 2 (id=1768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 201.715636ms ago: executing program 4 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 200.978046ms ago: executing program 0 (id=1779): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 200.681296ms ago: executing program 5 (id=1780): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 171.217306ms ago: executing program 0 (id=1770): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) 161.817486ms ago: executing program 4 (id=1771): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ec", 0x73}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9a1", 0x2e}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb", 0x39}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 148.992147ms ago: executing program 5 (id=1773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 140.557177ms ago: executing program 1 (id=1774): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 134.886627ms ago: executing program 0 (id=1775): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) 126.729237ms ago: executing program 5 (id=1776): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c6173740000000010000180090001"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 83.027858ms ago: executing program 1 (id=1778): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x402) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 82.533478ms ago: executing program 5 (id=1781): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x18) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 63.429589ms ago: executing program 1 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 62.917308ms ago: executing program 5 (id=1783): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) sync() 419.03µs ago: executing program 1 (id=1784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c53}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='itimer_state\x00', r3}, 0x18) setitimer(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1785): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) kernel console output (not intermixed with test programs): _dirty error [ 53.875599][ T6121] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.337: corrupted inode contents [ 53.887932][ T6121] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.337: mark_inode_dirty error [ 53.899622][ T6121] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.337: corrupted inode contents [ 53.912354][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.922050][ T6121] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 53.932120][ T6121] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.337: corrupted inode contents [ 53.944188][ T6121] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.337: mark_inode_dirty error [ 53.944441][ T3617] team0 (unregistering): Port device team_slave_1 removed [ 53.957011][ T6121] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 53.986585][ T6121] EXT4-fs (loop1): 1 truncate cleaned up [ 53.993051][ T3617] team0 (unregistering): Port device team_slave_0 removed [ 53.994192][ T6121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.024741][ C0] hrtimer: interrupt took 37594 ns [ 54.046031][ T6129] netlink: 96 bytes leftover after parsing attributes in process `syz.4.342'. [ 54.057914][ T6141] syz_tun: entered allmulticast mode [ 54.086179][ T6151] dvmrp1: entered allmulticast mode [ 54.154262][ T6139] syz_tun: left allmulticast mode [ 54.211450][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.232462][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 54.241345][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 54.241362][ T29] audit: type=1400 audit(1758648429.765:589): avc: denied { add_name } for pid=6158 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.270268][ T29] audit: type=1400 audit(1758648429.765:590): avc: denied { create } for pid=6158 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.292796][ T29] audit: type=1400 audit(1758648429.765:591): avc: denied { write } for pid=6158 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.318973][ T29] audit: type=1400 audit(1758648429.765:592): avc: denied { append } for pid=6158 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.373769][ T29] audit: type=1400 audit(1758648429.805:593): avc: denied { remove_name } for pid=6245 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.397297][ T29] audit: type=1400 audit(1758648429.805:594): avc: denied { unlink } for pid=6245 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.420361][ T29] audit: type=1400 audit(1758648429.885:595): avc: denied { create } for pid=6251 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.440033][ T29] audit: type=1400 audit(1758648429.885:596): avc: denied { create } for pid=6251 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.460530][ T29] audit: type=1400 audit(1758648429.885:597): avc: denied { ioctl } for pid=6251 comm="syz.0.349" path="socket:[9456]" dev="sockfs" ino=9456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.485914][ T29] audit: type=1400 audit(1758648429.885:598): avc: denied { bind } for pid=6251 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.608989][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.616461][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.691563][ T5965] bridge_slave_0: entered allmulticast mode [ 54.717346][ T5965] bridge_slave_0: entered promiscuous mode [ 54.734993][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.742229][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.750307][ T5965] bridge_slave_1: entered allmulticast mode [ 54.757077][ T5965] bridge_slave_1: entered promiscuous mode [ 54.821124][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.835509][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.865979][ T5965] team0: Port device team_slave_0 added [ 54.873419][ T5965] team0: Port device team_slave_1 added [ 54.917852][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.925131][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.951186][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.974964][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.982021][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.008089][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.038851][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 55.103404][ T5965] hsr_slave_0: entered promiscuous mode [ 55.121840][ T5965] hsr_slave_1: entered promiscuous mode [ 55.127789][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 55.133677][ T5965] Cannot create hsr debugfs directory [ 55.181551][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 55.338457][ T5965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.349728][ T5965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.362449][ T5965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.384802][ T5965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.473532][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.491086][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.501004][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.508114][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.533462][ T6558] hub 6-0:1.0: USB hub found [ 55.544280][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.551465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.559765][ T6558] hub 6-0:1.0: 8 ports detected [ 55.681810][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.917594][ T5965] veth0_vlan: entered promiscuous mode [ 55.926327][ T5965] veth1_vlan: entered promiscuous mode [ 55.940125][ T6626] hub 6-0:1.0: USB hub found [ 55.949249][ T6626] hub 6-0:1.0: 8 ports detected [ 55.951844][ T5965] veth0_macvtap: entered promiscuous mode [ 55.961927][ T5965] veth1_macvtap: entered promiscuous mode [ 55.978461][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.001136][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.017764][ T3614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.033033][ T3614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.050393][ T6637] syz_tun: entered allmulticast mode [ 56.066877][ T6637] dvmrp1: entered allmulticast mode [ 56.074537][ T3614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.100397][ T3614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.109746][ T6636] syz_tun: left allmulticast mode [ 56.128211][ T6645] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.182631][ T6645] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.242337][ T6645] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.305101][ T6645] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.770465][ T6711] syz_tun: entered allmulticast mode [ 56.782155][ T6711] dvmrp1: entered allmulticast mode [ 56.794924][ T6709] syz_tun: left allmulticast mode [ 57.016063][ T6735] netlink: 204 bytes leftover after parsing attributes in process `syz.2.395'. [ 57.025529][ T6735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.395'. [ 57.036197][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 57.635227][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.646874][ T3617] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.658064][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.669544][ T3617] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.694096][ T6767] syz_tun: entered allmulticast mode [ 57.709594][ T6767] dvmrp1: entered allmulticast mode [ 57.740555][ T6765] syz_tun: left allmulticast mode [ 57.756420][ T6775] hub 6-0:1.0: USB hub found [ 57.761477][ T6775] hub 6-0:1.0: 8 ports detected [ 57.885218][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 57.915717][ T6824] netlink: 240 bytes leftover after parsing attributes in process `syz.1.406'. [ 58.012459][ T6854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.120476][ T6854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.186236][ T6854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.263839][ T6854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.344407][ T6844] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.370276][ T6844] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.387420][ T6844] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.417507][ T6844] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.566985][ T6906] loop2: detected capacity change from 0 to 1024 [ 58.672081][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.736458][ T6906] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.428: Allocating blocks 465-513 which overlap fs metadata [ 58.752328][ T6906] EXT4-fs (loop2): pa ffff888106e53150: logic 256, phys. 369, len 9 [ 58.760438][ T6906] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 58.771657][ T6906] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 58.858458][ T6944] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.876839][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.890400][ T6944] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 59.209305][ T6998] loop4: detected capacity change from 0 to 1024 [ 59.253829][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.271974][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 59.271993][ T29] audit: type=1326 audit(1758648434.805:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.303417][ T29] audit: type=1326 audit(1758648434.805:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.308937][ T6998] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.445: Allocating blocks 465-513 which overlap fs metadata [ 59.327049][ T29] audit: type=1400 audit(1758648434.805:911): avc: denied { name_bind } for pid=7013 comm="syz.2.449" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.344233][ T6998] EXT4-fs (loop4): pa ffff888106e53150: logic 256, phys. 369, len 9 [ 59.362753][ T29] audit: type=1400 audit(1758648434.805:912): avc: denied { node_bind } for pid=7013 comm="syz.2.449" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.371287][ T29] audit: type=1326 audit(1758648434.835:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.391758][ T6998] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, [ 59.414998][ T29] audit: type=1400 audit(1758648434.835:914): avc: denied { create } for pid=7019 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.423456][ T6998] free 0, pa_free 3 [ 59.427823][ T6998] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, [ 59.443166][ T29] audit: type=1326 audit(1758648434.835:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.446863][ T6998] inode 18: block 113: [ 59.454489][ T29] audit: type=1326 audit(1758648434.835:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.477855][ T6998] freeing already freed block (bit 7); block bitmap corrupt. [ 59.481872][ T29] audit: type=1326 audit(1758648434.905:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.536081][ T29] audit: type=1326 audit(1758648434.905:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 59.565004][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.704357][ T7056] IPv4: Oversized IP packet from 127.202.26.0 [ 59.764128][ T7085] netlink: 'syz.4.456': attribute type 1 has an invalid length. [ 59.778649][ T7085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.797009][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 59.819516][ T7085] bond1 (unregistering): Released all slaves [ 60.053417][ T7203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7203 comm=syz.1.464 [ 60.122852][ T7210] loop4: detected capacity change from 0 to 128 [ 60.221224][ T7234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7234 comm=syz.0.472 [ 60.234340][ T7234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.472'. [ 60.267029][ T7210] syz.4.468: attempt to access beyond end of device [ 60.267029][ T7210] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 60.283830][ T7210] syz.4.468: attempt to access beyond end of device [ 60.283830][ T7210] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 60.334666][ T7210] syz.4.468: attempt to access beyond end of device [ 60.334666][ T7210] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 60.353287][ T7210] syz.4.468: attempt to access beyond end of device [ 60.353287][ T7210] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 60.416957][ T7260] IPv4: Oversized IP packet from 127.202.26.0 [ 60.901869][ T7338] loop2: detected capacity change from 0 to 128 [ 61.001145][ T7359] syz.2.491: attempt to access beyond end of device [ 61.001145][ T7359] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.049655][ T7359] syz.2.491: attempt to access beyond end of device [ 61.049655][ T7359] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.063338][ T7359] syz.2.491: attempt to access beyond end of device [ 61.063338][ T7359] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 61.117617][ T7359] syz.2.491: attempt to access beyond end of device [ 61.117617][ T7359] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 61.693975][ T7478] loop5: detected capacity change from 0 to 128 [ 61.734258][ T7478] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.752967][ T7478] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.810432][ T5965] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.878835][ T7502] tipc: Enabling of bearer rejected, already enabled [ 61.954225][ T7511] veth3: entered promiscuous mode [ 62.084916][ T7545] pim6reg1: entered promiscuous mode [ 62.090340][ T7545] pim6reg1: entered allmulticast mode [ 62.204039][ T7562] tipc: Started in network mode [ 62.209176][ T7562] tipc: Node identity ac14140f, cluster identity 4711 [ 62.218284][ T7562] tipc: New replicast peer: 255.255.255.255 [ 62.224588][ T7562] tipc: Enabled bearer , priority 10 [ 62.300969][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 62.344568][ T7589] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 62.365092][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.371976][ T7588] loop4: detected capacity change from 0 to 512 [ 62.383442][ T7588] EXT4-fs: Ignoring removed orlov option [ 62.385670][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 62.402089][ T7588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.402923][ T7589] bond1 (unregistering): Released all slaves [ 62.415216][ T7588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.435388][ T7588] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.550: bad orphan inode 32 [ 62.449072][ T7588] ext4_test_bit(bit=31, block=4) = 0 [ 62.454422][ T7588] EXT4-fs (loop4): 1 orphan inode deleted [ 62.463221][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.493054][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.516321][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.523912][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.531418][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.538858][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.546578][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.554213][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.561832][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.569362][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.576778][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.584315][ T3384] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.598429][ T3384] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.903573][ T7731] vhci_hcd: invalid port number 96 [ 62.908835][ T7731] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 62.978013][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 63.050281][ T7748] loop4: detected capacity change from 0 to 256 [ 63.080748][ T7748] FAT-fs (loop4): codepage cp874 not found [ 63.171576][ T7764] loop5: detected capacity change from 0 to 128 [ 63.228100][ T7771] loop2: detected capacity change from 0 to 512 [ 63.244067][ T7771] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.251540][ T7771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.264721][ T7764] syz.5.580: attempt to access beyond end of device [ 63.264721][ T7764] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 63.278491][ T7764] syz.5.580: attempt to access beyond end of device [ 63.278491][ T7764] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 63.280786][ T7771] EXT4-fs (loop2): 1 truncate cleaned up [ 63.298295][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.339084][ T3398] tipc: Node number set to 2886997007 [ 63.402574][ T7784] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.540906][ T7784] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.561519][ T7803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7803 comm=syz.5.592 [ 63.642955][ T7784] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.709353][ T7784] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.802105][ T6843] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.831681][ T6843] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.847984][ T3441] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856615][ T3441] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.047891][ T7862] geneve2: entered promiscuous mode [ 64.053207][ T7862] geneve2: entered allmulticast mode [ 64.086035][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.105667][ T7873] loop2: detected capacity change from 0 to 512 [ 64.122167][ T7875] loop4: detected capacity change from 0 to 512 [ 64.131398][ T7873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.155374][ T7873] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.168448][ T7875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.183820][ T7875] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.209562][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.291284][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.355780][ T7909] ref_ctr_offset mismatch. inode: 0x160 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000400 [ 64.566391][ T7925] loop2: detected capacity change from 0 to 512 [ 64.593998][ T7925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.594255][ T7933] hub 8-0:1.0: USB hub found [ 64.613148][ T7925] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.626805][ T7933] hub 8-0:1.0: 8 ports detected [ 64.670691][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.705952][ T7951] loop1: detected capacity change from 0 to 128 [ 64.723689][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 64.723768][ T29] audit: type=1400 audit(1758648440.255:1048): avc: denied { getopt } for pid=7950 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.829856][ T7961] tipc: Enabled bearer , priority 0 [ 64.846330][ T7961] tipc: Disabling bearer [ 64.956326][ T29] audit: type=1326 audit(1758648440.475:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 64.979897][ T29] audit: type=1326 audit(1758648440.475:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 65.003329][ T29] audit: type=1326 audit(1758648440.475:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 65.026789][ T29] audit: type=1326 audit(1758648440.475:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 65.050192][ T29] audit: type=1326 audit(1758648440.475:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 65.073627][ T29] audit: type=1326 audit(1758648440.475:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 65.097083][ T29] audit: type=1326 audit(1758648440.475:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a23eeec9 code=0x7ffc0000 [ 65.129307][ T7986] loop1: detected capacity change from 0 to 512 [ 65.155554][ T7988] geneve2: entered promiscuous mode [ 65.161067][ T7988] geneve2: entered allmulticast mode [ 65.182092][ T7986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.199630][ T7986] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.242158][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.272798][ T29] audit: type=1326 audit(1758648440.805:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 65.296234][ T29] audit: type=1326 audit(1758648440.805:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 65.685498][ T8026] loop5: detected capacity change from 0 to 1024 [ 65.701404][ T8032] loop0: detected capacity change from 0 to 128 [ 65.725455][ T8033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8033 comm=syz.2.655 [ 65.737996][ T8033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8033 comm=syz.2.655 [ 65.738998][ T8026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.769910][ T8026] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.786682][ T8041] loop1: detected capacity change from 0 to 256 [ 65.805457][ T8032] bio_check_eod: 390 callbacks suppressed [ 65.805476][ T8032] syz.0.653: attempt to access beyond end of device [ 65.805476][ T8032] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 65.825978][ T8026] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.656: lblock 0 mapped to illegal pblock 0 (length 1) [ 65.830159][ T8032] syz.0.653: attempt to access beyond end of device [ 65.830159][ T8032] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 65.861072][ T8026] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 65.873669][ T8026] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.873669][ T8026] [ 65.874922][ T8041] FAT-fs (loop1): codepage cp874 not found [ 65.902019][ T8032] syz.0.653: attempt to access beyond end of device [ 65.902019][ T8032] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 65.991941][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.048143][ T8061] loop5: detected capacity change from 0 to 512 [ 66.074437][ T8061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.087210][ T8061] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.111276][ T8074] loop2: detected capacity change from 0 to 512 [ 66.118054][ T8074] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.125044][ T8074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.133983][ T8074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.138721][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.142566][ T8074] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.169612][ T8081] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 66.185156][ T8081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.202638][ T8074] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.667: Allocating blocks 41-42 which overlap fs metadata [ 66.220444][ T8086] vlan2: entered allmulticast mode [ 66.225647][ T8086] dummy0: entered allmulticast mode [ 66.237353][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 66.245509][ T8074] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.667: Failed to acquire dquot type 1 [ 66.258448][ T8074] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 66.273276][ T8074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.667: corrupted inode contents [ 66.287944][ T8081] bond1 (unregistering): Released all slaves [ 66.294747][ T8074] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.667: mark_inode_dirty error [ 66.306896][ T8074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.667: corrupted inode contents [ 66.319594][ T8074] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.667: mark_inode_dirty error [ 66.332522][ T8074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.667: corrupted inode contents [ 66.344729][ T8074] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 66.355578][ T8074] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.667: corrupted inode contents [ 66.382433][ T8074] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.667: mark_inode_dirty error [ 66.394231][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 66.404368][ T8074] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 66.420043][ T8165] team1: entered promiscuous mode [ 66.425301][ T8165] team1: entered allmulticast mode [ 66.439570][ T8074] EXT4-fs (loop2): 1 truncate cleaned up [ 66.445611][ T8074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.505683][ T8074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.540792][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.624534][ T8217] vlan2: entered allmulticast mode [ 66.640533][ T8217] dummy0: entered allmulticast mode [ 66.684049][ T8225] loop4: detected capacity change from 0 to 128 [ 66.714947][ T8225] syz.4.684: attempt to access beyond end of device [ 66.714947][ T8225] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 66.764509][ T6858] kworker/u8:66: attempt to access beyond end of device [ 66.764509][ T6858] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 66.840595][ T8249] loop1: detected capacity change from 0 to 128 [ 66.941565][ T8267] syz.1.690: attempt to access beyond end of device [ 66.941565][ T8267] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 66.955673][ T8267] syz.1.690: attempt to access beyond end of device [ 66.955673][ T8267] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 66.979144][ T8267] syz.1.690: attempt to access beyond end of device [ 66.979144][ T8267] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 66.998284][ T8270] ªªªªªª: renamed from vlan0 (while UP) [ 67.011976][ T8275] 9pnet: p9_errstr2errno: server reported unknown error [ 67.029146][ T8267] syz.1.690: attempt to access beyond end of device [ 67.029146][ T8267] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 67.040771][ T8276] syzkaller0: entered allmulticast mode [ 67.057007][ T8267] syz.1.690: attempt to access beyond end of device [ 67.057007][ T8267] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 67.062019][ T8276] syzkaller0: entered promiscuous mode [ 67.086047][ T8283] loop0: detected capacity change from 0 to 512 [ 67.097529][ T8276] syzkaller0 (unregistering): left allmulticast mode [ 67.104394][ T8276] syzkaller0 (unregistering): left promiscuous mode [ 67.121036][ T8283] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.130389][ T8283] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.144883][ T8283] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.698: corrupted inode contents [ 67.158186][ T8283] EXT4-fs (loop0): Remounting filesystem read-only [ 67.166000][ T8283] EXT4-fs (loop0): 1 truncate cleaned up [ 67.171841][ T6843] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.182598][ T6843] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 67.194487][ T6843] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 67.209861][ T8283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.248249][ T8283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.361075][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'. [ 67.453305][ T8373] loop4: detected capacity change from 0 to 128 [ 67.557057][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.564417][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.606865][ T8395] loop2: detected capacity change from 0 to 512 [ 67.615102][ T8395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.631025][ T8395] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.645827][ T8395] EXT4-fs (loop2): 1 truncate cleaned up [ 67.651972][ T8395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.664771][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.676077][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.694086][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.717097][ T36] syz0: Port: 1 Link DOWN [ 67.722548][ T3441] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.742336][ T3441] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.752005][ T3441] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.760871][ T3441] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.811496][ T8422] loop7: detected capacity change from 0 to 16384 [ 67.877897][ T8430] pim6reg: entered allmulticast mode [ 67.894404][ T8430] pim6reg: left allmulticast mode [ 67.934491][ T8440] netlink: 96 bytes leftover after parsing attributes in process `syz.2.722'. [ 68.300722][ T8494] loop5: detected capacity change from 0 to 512 [ 68.306753][ T8484] SELinux: failed to load policy [ 68.308056][ T8494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.324884][ T8494] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.736: invalid indirect mapped block 4294967295 (level 0) [ 68.342362][ T8494] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.736: invalid indirect mapped block 4294967295 (level 1) [ 68.357586][ T8494] EXT4-fs (loop5): 1 orphan inode deleted [ 68.363411][ T8494] EXT4-fs (loop5): 1 truncate cleaned up [ 68.370492][ T8494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.411898][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.623309][ T8546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.753'. [ 68.706897][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 68.720718][ T8556] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 68.770256][ T8560] netlink: 'syz.0.759': attribute type 7 has an invalid length. [ 68.778029][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 68.816092][ T8565] loop0: detected capacity change from 0 to 128 [ 68.982144][ T8565] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 68.991616][ T8583] netlink: 40 bytes leftover after parsing attributes in process `'. [ 69.007053][ T8583] loop5: detected capacity change from 0 to 512 [ 69.025501][ T8583] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.046420][ T8590] loop0: detected capacity change from 0 to 512 [ 69.056082][ T8583] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm : Failed to acquire dquot type 1 [ 69.077643][ T8583] EXT4-fs (loop5): 1 truncate cleaned up [ 69.094848][ T8583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.113384][ T8590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.146000][ T8590] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.166616][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.248555][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.296102][ T8609] 9pnet: Could not find request transport: fdo_remap [ 69.328939][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 69.348909][ T8624] loop0: detected capacity change from 0 to 512 [ 69.361024][ T8624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.373762][ T8624] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.396209][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.591993][ T8663] @: renamed from vlan0 (while UP) [ 69.751463][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 69.751480][ T29] audit: type=1400 audit(1758648445.285:1226): avc: denied { listen } for pid=8682 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.803448][ T29] audit: type=1400 audit(1758648445.285:1227): avc: denied { accept } for pid=8682 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.911347][ T29] audit: type=1400 audit(1758648445.445:1228): avc: denied { connect } for pid=8692 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.058929][ T29] audit: type=1400 audit(1758648445.585:1229): avc: denied { create } for pid=8702 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.110771][ T29] audit: type=1400 audit(1758648445.615:1230): avc: denied { cmd } for pid=8702 comm="syz.4.801" path="socket:[13835]" dev="sockfs" ino=13835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.133915][ T29] audit: type=1400 audit(1758648445.615:1231): avc: denied { setopt } for pid=8702 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.153870][ T29] audit: type=1400 audit(1758648445.615:1232): avc: denied { create } for pid=8704 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.173479][ T29] audit: type=1400 audit(1758648445.615:1233): avc: denied { write } for pid=8704 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.192948][ T29] audit: type=1400 audit(1758648445.615:1234): avc: denied { ioctl } for pid=8704 comm="syz.0.802" path="socket:[14430]" dev="sockfs" ino=14430 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.355290][ T29] audit: type=1400 audit(1758648445.855:1235): avc: denied { create } for pid=8711 comm="syz.4.806" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.445030][ T8724] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 70.452922][ T8724] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.810'. [ 70.504215][ T8734] loop5: detected capacity change from 0 to 512 [ 70.542631][ T8734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.652621][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.861103][ T8774] loop4: detected capacity change from 0 to 128 [ 70.893822][ T8774] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.906664][ T8774] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.958575][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.835'. [ 71.004448][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.021991][ T8798] 9pnet: Could not find request transport: 0xffffffffffffffff [ 71.219106][ T8867] syzkaller0: entered promiscuous mode [ 71.224633][ T8867] syzkaller0: entered allmulticast mode [ 71.305962][ T8878] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 71.335698][ T8878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.357736][ T8878] __nla_validate_parse: 3 callbacks suppressed [ 71.357752][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 71.384483][ T8916] tipc: Started in network mode [ 71.389469][ T8916] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 71.398630][ T8916] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 71.407161][ T8916] tipc: Enabled bearer , priority 10 [ 71.416125][ T8878] bond2 (unregistering): Released all slaves [ 71.476905][ T8954] team_slave_0: entered promiscuous mode [ 71.484440][ T8954] team_slave_0: left promiscuous mode [ 71.692427][ T8981] SELinux: failed to load policy [ 71.843765][ T8991] loop5: detected capacity change from 0 to 1024 [ 71.862445][ T8991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.908762][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.934100][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 71.943165][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 71.954078][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 71.963130][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 72.041501][ T9017] netlink: 64 bytes leftover after parsing attributes in process `syz.2.871'. [ 72.152974][ T9040] netlink: 96 bytes leftover after parsing attributes in process `syz.1.881'. [ 72.248386][ T9060] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 72.267371][ T9060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.281249][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 72.300626][ T9060] bond1 (unregistering): Released all slaves [ 72.519361][ T3398] tipc: Node number set to 1 [ 72.615488][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.648751][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.658770][ T9139] netlink: 64 bytes leftover after parsing attributes in process `syz.1.893'. [ 72.707712][ T9149] loop4: detected capacity change from 0 to 2048 [ 72.731228][ T9149] loop4: p1 < > p4 [ 72.735770][ T9149] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.861770][ T9170] loop4: detected capacity change from 0 to 512 [ 72.880841][ T9170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.893757][ T9170] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.907347][ T9170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.901: corrupted inode contents [ 72.920128][ T9170] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.901: mark_inode_dirty error [ 72.932529][ T9170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.901: corrupted inode contents [ 72.945210][ T9170] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.901: mark_inode_dirty error [ 72.960981][ T9170] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.971376][ T9170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.901: corrupted inode contents [ 72.983668][ T9170] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.901: mark_inode_dirty error [ 72.995638][ T9170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.901: corrupted inode contents [ 73.009839][ T9170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.901: corrupted inode contents [ 73.021966][ T9170] EXT4-fs error (device loop4): add_dirent_to_buf:2153: inode #2: comm syz.4.901: mark_inode_dirty error [ 73.034754][ T9170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.901: corrupted inode contents [ 73.068413][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.561078][ T9258] netlink: 96 bytes leftover after parsing attributes in process `syz.1.932'. [ 73.674212][ T9270] loop1: detected capacity change from 0 to 128 [ 73.692515][ T9268] loop5: detected capacity change from 0 to 512 [ 73.717546][ T9274] netlink: 'syz.0.938': attribute type 7 has an invalid length. [ 73.727056][ T9268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.750640][ T9268] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.775845][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.791056][ T9285] netlink: 'syz.0.940': attribute type 21 has an invalid length. [ 73.990730][ T9294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9294 comm=syz.4.943 [ 74.093871][ T9296] loop4: detected capacity change from 0 to 512 [ 74.112912][ T9290] Set syz1 is full, maxelem 65536 reached [ 74.122296][ T9296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.134953][ T9296] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.234664][ T9302] vlan2: entered allmulticast mode [ 74.249336][ T9302] dummy0: entered allmulticast mode [ 74.703131][ T9327] loop1: detected capacity change from 0 to 1024 [ 74.712315][ T9327] EXT4-fs: inline encryption not supported [ 74.718704][ T9327] EXT4-fs: Ignoring removed bh option [ 74.759556][ T9328] syzkaller0: entered promiscuous mode [ 74.765090][ T9328] syzkaller0: entered allmulticast mode [ 74.839442][ T9327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.898163][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.928361][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 74.928379][ T29] audit: type=1326 audit(1758648450.455:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 74.985664][ T29] audit: type=1326 audit(1758648450.455:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.009193][ T29] audit: type=1326 audit(1758648450.465:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.032524][ T29] audit: type=1326 audit(1758648450.465:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.055994][ T29] audit: type=1326 audit(1758648450.465:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.079377][ T29] audit: type=1326 audit(1758648450.465:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.103113][ T29] audit: type=1326 audit(1758648450.465:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.126646][ T29] audit: type=1326 audit(1758648450.465:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.150122][ T29] audit: type=1326 audit(1758648450.465:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.173606][ T29] audit: type=1326 audit(1758648450.465:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 75.202895][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.650431][ T9434] netlink: 'syz.5.976': attribute type 4 has an invalid length. [ 75.664521][ T9434] .`: renamed from bond0 (while UP) [ 75.876873][ T9454] SELinux: failed to load policy [ 76.316041][ T9482] loop2: detected capacity change from 0 to 512 [ 76.331513][ T9482] EXT4-fs: Ignoring removed nobh option [ 76.365266][ T9482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.390889][ T9493] loop4: detected capacity change from 0 to 1024 [ 76.417611][ T9493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.443989][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.479338][ T9493] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1000: Allocating blocks 449-513 which overlap fs metadata [ 76.494288][ T9506] loop5: detected capacity change from 0 to 1024 [ 76.506211][ T9493] EXT4-fs (loop4): pa ffff888106e06930: logic 48, phys. 177, len 21 [ 76.514435][ T9493] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 76.537932][ T9506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.540880][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.566435][ T9506] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.1007: reserved inode found cleared - inode=18 [ 76.614973][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.679974][ T9537] loop2: detected capacity change from 0 to 256 [ 76.697297][ T9537] FAT-fs (loop2): Directory bread(block 64) failed [ 76.709075][ T9537] FAT-fs (loop2): Directory bread(block 65) failed [ 76.716001][ T9537] FAT-fs (loop2): Directory bread(block 66) failed [ 76.725599][ T9537] FAT-fs (loop2): Directory bread(block 67) failed [ 76.732586][ T9537] FAT-fs (loop2): Directory bread(block 68) failed [ 76.762055][ T9537] FAT-fs (loop2): Directory bread(block 69) failed [ 76.768745][ T9537] FAT-fs (loop2): Directory bread(block 70) failed [ 76.781194][ T9537] FAT-fs (loop2): Directory bread(block 71) failed [ 76.787869][ T9537] FAT-fs (loop2): Directory bread(block 72) failed [ 76.794648][ T9537] FAT-fs (loop2): Directory bread(block 73) failed [ 76.837340][ T9549] loop5: detected capacity change from 0 to 764 [ 76.850429][ T9537] bio_check_eod: 162 callbacks suppressed [ 76.850448][ T9537] syz.2.1015: attempt to access beyond end of device [ 76.850448][ T9537] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 76.890350][ T9549] rock: directory entry would overflow storage [ 76.896562][ T9549] rock: sig=0x4f50, size=4, remaining=3 [ 76.902200][ T9549] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.928535][ T9556] loop2: detected capacity change from 0 to 1024 [ 76.944684][ T9556] EXT4-fs: Ignoring removed orlov option [ 76.994277][ T9556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.365004][ T9590] loop1: detected capacity change from 0 to 164 [ 77.414008][ T9590] gtp: attempt to access beyond end of device [ 77.414008][ T9590] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.468731][ T9590] gtp: attempt to access beyond end of device [ 77.468731][ T9590] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.529167][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.702702][ T9630] __nla_validate_parse: 10 callbacks suppressed [ 77.702724][ T9630] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1052'. [ 77.755912][ T9643] loop5: detected capacity change from 0 to 512 [ 77.767471][ T9645] wg2: entered promiscuous mode [ 77.767659][ T9643] EXT4-fs (loop5): orphan cleanup on readonly fs [ 77.772444][ T9645] wg2: entered allmulticast mode [ 77.788462][ T9643] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1057: bg 0: block 248: padding at end of block bitmap is not set [ 77.804621][ T9643] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1057: Failed to acquire dquot type 1 [ 77.843371][ T9643] EXT4-fs (loop5): 1 truncate cleaned up [ 77.846135][ T9652] bridge0: entered promiscuous mode [ 77.854651][ T9652] macvtap1: entered allmulticast mode [ 77.854905][ T9643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.860175][ T9652] bridge0: entered allmulticast mode [ 77.884256][ T9652] bridge0: port 3(macvtap1) entered blocking state [ 77.890932][ T9652] bridge0: port 3(macvtap1) entered disabled state [ 77.900429][ T9652] bridge0: left allmulticast mode [ 77.905519][ T9652] bridge0: left promiscuous mode [ 77.912293][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 77.938673][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.084376][ T9691] SELinux: failed to load policy [ 78.188039][ T9711] mmap: syz.4.1079 (9711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.232051][ T9719] loop5: detected capacity change from 0 to 512 [ 78.241703][ T9719] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.263365][ T9719] EXT4-fs (loop5): 1 truncate cleaned up [ 78.269647][ T9719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.307328][ T9732] loop2: detected capacity change from 0 to 512 [ 78.314286][ T9732] ext2: Unknown parameter 'smackfsroot' [ 78.339606][ T9732] bridge_slave_0: left allmulticast mode [ 78.345333][ T9732] bridge_slave_0: left promiscuous mode [ 78.351185][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.365485][ T9732] bridge_slave_1: left allmulticast mode [ 78.371382][ T9732] bridge_slave_1: left promiscuous mode [ 78.377537][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.410589][ T9732] bond0: (slave bond_slave_0): Releasing backup interface [ 78.421122][ T9732] bond0: (slave bond_slave_1): Releasing backup interface [ 78.434058][ T9732] team0: Port device team_slave_0 removed [ 78.443932][ T9732] team0: Port device team_slave_1 removed [ 78.451261][ T9732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.458697][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.468255][ T9732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.475835][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.581520][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.638195][ T9762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9762 comm=syz.4.1097 [ 78.655559][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 78.714385][ T9764] syzkaller0: entered promiscuous mode [ 78.720063][ T9764] syzkaller0: entered allmulticast mode [ 78.884672][ T9813] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1103'. [ 78.962635][ T9825] loop5: detected capacity change from 0 to 128 [ 78.971261][ T9825] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.983736][ T9825] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.034678][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 79.058027][ T5965] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.197466][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'. [ 79.267424][ T9861] netlink: 588 bytes leftover after parsing attributes in process `syz.5.1120'. [ 79.404912][ T9871] loop5: detected capacity change from 0 to 164 [ 79.416858][ T9871] syz.5.1124: attempt to access beyond end of device [ 79.416858][ T9871] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 79.431167][ T9871] syz.5.1124: attempt to access beyond end of device [ 79.431167][ T9871] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 79.467624][ T9878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9878 comm=syz.0.1126 [ 79.480303][ T9878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9878 comm=syz.0.1126 [ 79.561720][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 79.599260][ T9895] loop4: detected capacity change from 0 to 128 [ 79.632231][ T9895] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.696548][ T9895] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.825573][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.929844][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 79.929859][ T29] audit: type=1400 audit(1758648455.465:1575): avc: denied { sys_module } for pid=9933 comm="syz.0.1158" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.962139][ T9941] hub 8-0:1.0: USB hub found [ 79.989240][ T9941] hub 8-0:1.0: 8 ports detected [ 80.000896][ T9954] netlink: 588 bytes leftover after parsing attributes in process `syz.0.1149'. [ 80.055019][ T29] audit: type=1326 audit(1758648455.585:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.078080][ T29] audit: type=1326 audit(1758648455.585:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.080235][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'. [ 80.101361][ T29] audit: type=1326 audit(1758648455.585:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.133186][ T29] audit: type=1326 audit(1758648455.585:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.156216][ T29] audit: type=1326 audit(1758648455.585:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.179965][ T29] audit: type=1326 audit(1758648455.585:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.202965][ T29] audit: type=1326 audit(1758648455.585:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.225975][ T29] audit: type=1326 audit(1758648455.585:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.249002][ T29] audit: type=1326 audit(1758648455.585:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9958 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 80.317443][ T9973] loop0: detected capacity change from 0 to 128 [ 80.348858][ T9973] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.361340][ T9973] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.448747][ T4070] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.461460][ T9981] loop2: detected capacity change from 0 to 164 [ 80.470177][ T9981] syz.2.1162: attempt to access beyond end of device [ 80.470177][ T9981] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.484554][ T9981] syz.2.1162: attempt to access beyond end of device [ 80.484554][ T9981] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 80.581720][T10002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10002 comm=syz.4.1169 [ 80.594399][T10002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10002 comm=syz.4.1169 [ 80.776428][T10018] loop2: detected capacity change from 0 to 128 [ 80.784209][T10018] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.797825][T10018] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.852938][T10022] loop4: detected capacity change from 0 to 164 [ 80.864224][T10022] syz.4.1177: attempt to access beyond end of device [ 80.864224][T10022] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.883691][T10022] syz.4.1177: attempt to access beyond end of device [ 80.883691][T10022] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 80.928363][ T5197] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.941005][T10035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10035 comm=syz.0.1184 [ 80.953687][T10035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10035 comm=syz.0.1184 [ 80.972897][T10037] vlan2: entered allmulticast mode [ 80.978344][T10037] dummy0: entered allmulticast mode [ 81.006541][T10043] tipc: Started in network mode [ 81.011527][T10043] tipc: Node identity ae162379487e, cluster identity 4711 [ 81.018701][T10043] tipc: Enabled bearer , priority 0 [ 81.031222][T10043] tipc: Disabling bearer [ 81.107090][T10058] team1: entered promiscuous mode [ 81.112236][T10058] team1: entered allmulticast mode [ 81.157730][T10095] loop4: detected capacity change from 0 to 512 [ 81.192964][T10095] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.202028][T10095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.212959][T10095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.221577][T10095] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.283178][T10095] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1190: Allocating blocks 41-42 which overlap fs metadata [ 81.298805][T10095] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1190: Allocating blocks 41-42 which overlap fs metadata [ 81.313530][T10095] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1190: Failed to acquire dquot type 1 [ 81.334401][T10095] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 81.370306][T10095] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1190: corrupted inode contents [ 81.405233][T10095] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.1190: mark_inode_dirty error [ 81.416939][T10119] loop0: detected capacity change from 0 to 128 [ 81.425792][T10122] netlink: 'syz.5.1197': attribute type 1 has an invalid length. [ 81.427219][T10095] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1190: corrupted inode contents [ 81.454697][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.478488][T10095] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1190: mark_inode_dirty error [ 81.498089][T10122] bond0 (unregistering): Released all slaves [ 81.520323][T10119] syz.0.1195: attempt to access beyond end of device [ 81.520323][T10119] loop0: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 81.540739][T10095] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1190: corrupted inode contents [ 81.568998][T10095] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 81.596541][T10095] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1190: corrupted inode contents [ 81.616615][T10203] tipc: Enabled bearer , priority 0 [ 81.628141][T10203] tipc: Disabling bearer [ 81.638507][T10095] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.1190: mark_inode_dirty error [ 81.672428][T10095] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 81.682948][T10095] EXT4-fs (loop4): 1 truncate cleaned up [ 81.710606][T10095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.761155][T10213] loop0: detected capacity change from 0 to 1024 [ 81.773790][T10095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.793810][T10213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.820880][T10213] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.834809][T10213] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1205: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.848402][T10213] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 81.860841][T10213] EXT4-fs (loop0): This should not happen!! Data will be lost [ 81.860841][T10213] [ 81.873572][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.886570][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.888101][T10222] syzkaller0: entered allmulticast mode [ 81.905239][T10226] vlan2: entered allmulticast mode [ 81.950776][T10222] syzkaller0: entered promiscuous mode [ 81.965065][T10222] syzkaller0 (unregistering): left allmulticast mode [ 81.971858][T10222] syzkaller0 (unregistering): left promiscuous mode [ 81.983169][T10248] loop1: detected capacity change from 0 to 128 [ 82.011129][T10248] bio_check_eod: 1 callbacks suppressed [ 82.011188][T10248] syz.1.1214: attempt to access beyond end of device [ 82.011188][T10248] loop1: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 82.052666][ T178] kworker/u8:5: attempt to access beyond end of device [ 82.052666][ T178] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 82.079385][T10265] 9pnet: p9_errstr2errno: server reported unknown error [ 82.100909][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.108216][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.118737][T10269] loop0: detected capacity change from 0 to 512 [ 82.126494][T10269] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.135069][T10269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.143245][T10269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.151893][T10269] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.182782][T10269] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1219: Allocating blocks 41-42 which overlap fs metadata [ 82.203049][T10277] loop2: detected capacity change from 0 to 1024 [ 82.211981][T10269] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1219: Failed to acquire dquot type 1 [ 82.225028][T10269] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 82.239855][T10269] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1219: corrupted inode contents [ 82.241586][T10277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 82.255707][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.268027][T10269] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.1219: mark_inode_dirty error [ 82.274275][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.305640][T10277] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.321987][T10269] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1219: corrupted inode contents [ 82.343575][ T178] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.346901][T10277] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1222: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.359137][ T178] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.367296][T10269] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1219: mark_inode_dirty error [ 82.373907][ T178] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.393719][ T178] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.403297][T10277] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 82.406911][T10269] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1219: corrupted inode contents [ 82.415655][T10277] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.415655][T10277] [ 82.460624][T10269] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 82.480753][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.491983][T10302] ªªªªªª: renamed from vlan0 [ 82.496833][T10269] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.1219: corrupted inode contents [ 82.514509][T10269] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.1219: mark_inode_dirty error [ 82.555924][T10269] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 82.570815][T10307] tipc: Started in network mode [ 82.575722][T10307] tipc: Node identity 0a4dc2223d16, cluster identity 4711 [ 82.582992][T10307] tipc: Enabled bearer , priority 0 [ 82.590470][T10269] EXT4-fs (loop0): 1 truncate cleaned up [ 82.596728][T10269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.617514][T10313] pim6reg: entered allmulticast mode [ 82.632687][T10307] tipc: Disabling bearer [ 82.661349][T10313] pim6reg: left allmulticast mode [ 82.674768][T10261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.731411][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.915110][T10355] 9pnet: p9_errstr2errno: server reported unknown error [ 83.083597][ T6822] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.100150][ T6822] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.109402][ T6822] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.118436][ T6822] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.172122][T10378] syzkaller0: entered allmulticast mode [ 83.173044][T10382] loop5: detected capacity change from 0 to 512 [ 83.182966][T10378] syzkaller0: entered promiscuous mode [ 83.189993][T10383] tipc: Enabled bearer , priority 0 [ 83.198153][T10383] tipc: Disabling bearer [ 83.208808][T10378] syzkaller0 (unregistering): left allmulticast mode [ 83.215988][T10378] syzkaller0 (unregistering): left promiscuous mode [ 83.224802][T10382] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.239858][T10382] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.247551][T10382] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1245: corrupted inode contents [ 83.262670][T10382] EXT4-fs (loop5): Remounting filesystem read-only [ 83.271704][T10382] EXT4-fs (loop5): 1 truncate cleaned up [ 83.277574][ T6822] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.288174][ T6822] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.301076][ T6822] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.312219][T10382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.326409][T10382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.397160][T10428] loop1: detected capacity change from 0 to 512 [ 83.404082][T10428] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.411269][T10428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.418363][T10428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.426973][T10428] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.457513][T10428] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1248: Allocating blocks 41-42 which overlap fs metadata [ 83.494295][T10428] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1248: Failed to acquire dquot type 1 [ 83.518517][T10428] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 83.533522][T10428] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1248: corrupted inode contents [ 83.546167][T10428] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.1248: mark_inode_dirty error [ 83.563032][T10428] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1248: corrupted inode contents [ 83.584636][T10428] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.1248: mark_inode_dirty error [ 83.597297][T10428] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1248: corrupted inode contents [ 83.611614][T10428] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 83.622647][T10428] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.1248: corrupted inode contents [ 83.658225][T10428] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.1248: mark_inode_dirty error [ 83.679432][T10428] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 83.689650][T10428] EXT4-fs (loop1): 1 truncate cleaned up [ 83.702454][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.709695][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.736103][T10428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.788838][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.804646][T10405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.811500][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.847876][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.884958][ T178] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.894505][T10488] __nla_validate_parse: 6 callbacks suppressed [ 83.894523][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 83.920422][ T178] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.928976][ T178] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.970736][ T178] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.005235][T10498] loop2: detected capacity change from 0 to 512 [ 84.036454][T10498] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.049211][T10498] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.057612][T10498] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1272: corrupted inode contents [ 84.071744][T10498] EXT4-fs (loop2): Remounting filesystem read-only [ 84.078734][T10498] EXT4-fs (loop2): 1 truncate cleaned up [ 84.085693][ T6822] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.096370][ T6822] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.123594][ T6822] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 84.135334][T10498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.168218][T10511] loop4: detected capacity change from 0 to 512 [ 84.175841][T10511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.176323][T10498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.195862][T10511] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1275: invalid indirect mapped block 4294967295 (level 0) [ 84.221554][T10511] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1275: invalid indirect mapped block 4294967295 (level 1) [ 84.237762][T10511] EXT4-fs (loop4): 1 orphan inode deleted [ 84.243862][T10511] EXT4-fs (loop4): 1 truncate cleaned up [ 84.252748][T10511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.265012][T10520] loop5: detected capacity change from 0 to 512 [ 84.272203][T10520] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.278733][T10520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.286255][T10520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.294811][T10520] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.329234][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.377389][T10520] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1277: Allocating blocks 41-42 which overlap fs metadata [ 84.411062][T10520] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1277: Failed to acquire dquot type 1 [ 84.422950][T10520] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.437797][T10520] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1277: corrupted inode contents [ 84.451725][T10520] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #12: comm syz.5.1277: mark_inode_dirty error [ 84.465256][T10520] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1277: corrupted inode contents [ 84.481214][T10520] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1277: mark_inode_dirty error [ 84.493295][T10520] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1277: corrupted inode contents [ 84.507408][T10520] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 84.531467][T10520] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1277: corrupted inode contents [ 84.548357][T10520] EXT4-fs error (device loop5): ext4_truncate:4666: inode #12: comm syz.5.1277: mark_inode_dirty error [ 84.560326][T10520] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 84.565535][T10583] @: renamed from vlan0 [ 84.572047][T10520] EXT4-fs (loop5): 1 truncate cleaned up [ 84.580417][T10520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.606000][T10520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.626235][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.699768][T10594] loop5: detected capacity change from 0 to 512 [ 84.723663][T10594] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.730890][T10594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.740107][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.747492][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.760719][T10594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.769569][T10594] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.807727][T10594] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1292: Allocating blocks 41-42 which overlap fs metadata [ 84.838276][T10602] SELinux: failed to load policy [ 84.863898][T10594] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1292: Failed to acquire dquot type 1 [ 84.873047][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.889204][T10594] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.892897][T10611] loop4: detected capacity change from 0 to 512 [ 84.904032][T10594] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1292: corrupted inode contents [ 84.930065][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.930689][T10594] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #12: comm syz.5.1292: mark_inode_dirty error [ 84.963347][T10611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.978099][T10594] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1292: corrupted inode contents [ 84.990318][T10611] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.990898][T10594] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1292: mark_inode_dirty error [ 85.018157][T10594] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1292: corrupted inode contents [ 85.033882][ T6813] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.044145][T10594] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 85.053166][T10594] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1292: corrupted inode contents [ 85.065182][ T6813] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.065742][T10594] EXT4-fs error (device loop5): ext4_truncate:4666: inode #12: comm syz.5.1292: mark_inode_dirty error [ 85.084273][ T6813] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.086397][T10594] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 85.099603][ T6813] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.103857][T10594] EXT4-fs (loop5): 1 truncate cleaned up [ 85.111331][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.117199][T10594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.185351][T10594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.212781][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.255527][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 85.327428][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 85.327444][ T29] audit: type=1326 audit(1758648460.855:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.365787][ T29] audit: type=1326 audit(1758648460.895:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.389599][ T29] audit: type=1326 audit(1758648460.895:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.413195][ T29] audit: type=1326 audit(1758648460.895:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.436867][ T29] audit: type=1326 audit(1758648460.895:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.460435][ T29] audit: type=1326 audit(1758648460.895:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.483992][ T29] audit: type=1326 audit(1758648460.895:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.507699][ T29] audit: type=1326 audit(1758648460.895:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.531300][ T29] audit: type=1326 audit(1758648460.895:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.555351][ T29] audit: type=1326 audit(1758648460.945:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10640 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ae571eec9 code=0x7ffc0000 [ 85.847100][T10694] netlink: 'syz.2.1308': attribute type 7 has an invalid length. [ 85.855041][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 85.861318][T10696] loop5: detected capacity change from 0 to 512 [ 85.872710][T10696] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.880028][T10696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.887476][T10696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.896039][T10696] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.914156][T10696] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1309: Allocating blocks 41-42 which overlap fs metadata [ 85.928733][T10696] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1309: Allocating blocks 41-42 which overlap fs metadata [ 85.942821][T10696] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1309: Failed to acquire dquot type 1 [ 85.956861][T10696] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.977329][T10696] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1309: corrupted inode contents [ 85.990639][T10696] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #12: comm syz.5.1309: mark_inode_dirty error [ 86.011666][T10696] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1309: corrupted inode contents [ 86.028474][T10696] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1309: mark_inode_dirty error [ 86.057895][T10696] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1309: corrupted inode contents [ 86.071356][T10696] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 86.081700][T10696] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.1309: corrupted inode contents [ 86.093831][T10696] EXT4-fs error (device loop5): ext4_truncate:4666: inode #12: comm syz.5.1309: mark_inode_dirty error [ 86.105266][T10696] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 86.114629][T10696] EXT4-fs (loop5): 1 truncate cleaned up [ 86.122041][T10696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.167877][T10696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.191387][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.238421][T10723] netlink: 40 bytes leftover after parsing attributes in process `'. [ 86.252148][T10723] loop4: detected capacity change from 0 to 512 [ 86.261467][T10723] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.288311][T10723] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm : Failed to acquire dquot type 1 [ 86.309793][T10723] EXT4-fs (loop4): 1 truncate cleaned up [ 86.327970][T10723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.350509][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 86.361054][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'. [ 86.370680][T10738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1332'. [ 86.412330][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.450809][T10750] netlink: 'syz.4.1323': attribute type 7 has an invalid length. [ 86.458609][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 86.639704][T10767] SELinux: failed to load policy [ 86.772797][T10787] loop0: detected capacity change from 0 to 128 [ 86.791096][T10787] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.806416][T10787] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.868285][ T4070] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.906560][T10795] tipc: Enabling of bearer rejected, failed to enable media [ 86.973592][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 87.006213][T10808] syzkaller0: entered promiscuous mode [ 87.011880][T10808] syzkaller0: entered allmulticast mode [ 87.151265][T10825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1358'. [ 87.151445][T10828] loop1: detected capacity change from 0 to 512 [ 87.172428][T10828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.185241][T10828] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.285510][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.626577][T10880] loop2: detected capacity change from 0 to 512 [ 87.673136][T10880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.686529][T10880] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.850566][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.162031][T10961] loop2: detected capacity change from 0 to 512 [ 88.169478][T10961] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.201868][T10961] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm : Failed to acquire dquot type 1 [ 88.213861][T10961] EXT4-fs (loop2): 1 truncate cleaned up [ 88.220789][T10961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.284083][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.792806][T11023] loop1: detected capacity change from 0 to 128 [ 88.801954][T11023] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.813514][T11022] 9pnet: Could not find request transport: 0xffffffffffffffff [ 88.900487][T11038] __nla_validate_parse: 9 callbacks suppressed [ 88.900505][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 88.916403][T11038] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1424'. [ 88.983038][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 89.042031][T11086] netlink: 'syz.1.1431': attribute type 7 has an invalid length. [ 89.049919][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 89.299531][T11104] netlink: 'syz.1.1441': attribute type 21 has an invalid length. [ 89.321137][T11104] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1441'. [ 89.330349][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 89.412701][T11113] loop4: detected capacity change from 0 to 128 [ 89.429878][T11116] netlink: 40 bytes leftover after parsing attributes in process `'. [ 89.455536][T11116] loop0: detected capacity change from 0 to 512 [ 89.471455][T11116] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.490978][T11116] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm : Failed to acquire dquot type 1 [ 89.503158][T11116] EXT4-fs (loop0): 1 truncate cleaned up [ 89.535350][T11126] loop1: detected capacity change from 0 to 512 [ 89.555978][T11126] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.333307][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 90.333325][ T29] audit: type=1326 audit(1758648465.865:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.362075][T11144] syzkaller0: entered promiscuous mode [ 90.368742][T11144] syzkaller0: entered allmulticast mode [ 90.397535][ T29] audit: type=1326 audit(1758648465.865:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.421133][ T29] audit: type=1326 audit(1758648465.865:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.444741][ T29] audit: type=1326 audit(1758648465.865:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.468253][ T29] audit: type=1326 audit(1758648465.865:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.491885][ T29] audit: type=1326 audit(1758648465.865:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.515680][ T29] audit: type=1326 audit(1758648465.865:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.539347][ T29] audit: type=1326 audit(1758648465.865:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.562932][ T29] audit: type=1326 audit(1758648465.865:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.586554][ T29] audit: type=1326 audit(1758648465.865:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.5.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 90.651545][T11165] tipc: Enabling of bearer rejected, failed to enable media [ 90.770761][T11178] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 90.791817][T11178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.804175][T11176] SELinux: failed to load policy [ 90.806711][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 90.820234][T11178] bond2 (unregistering): Released all slaves [ 90.892197][T11247] loop0: detected capacity change from 0 to 1024 [ 91.493966][T11272] loop4: detected capacity change from 0 to 1024 [ 91.525789][T11272] EXT4-fs: inline encryption not supported [ 91.536331][T11272] EXT4-fs: Ignoring removed bh option [ 91.687330][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 91.868513][T11315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11315 comm=syz.1.1476 [ 91.929391][T11321] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1479'. [ 92.948857][T11357] loop1: detected capacity change from 0 to 512 [ 92.975031][T11357] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.994520][T11357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.009220][T11357] EXT4-fs (loop1): 1 truncate cleaned up [ 93.274253][T11385] syzkaller0: entered promiscuous mode [ 93.279966][T11385] syzkaller0: entered allmulticast mode [ 93.524438][T11425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11425 comm=syz.0.1500 [ 94.326052][T11497] syzkaller0: entered promiscuous mode [ 94.331654][T11497] syzkaller0: entered allmulticast mode [ 94.650650][T11512] loop0: detected capacity change from 0 to 512 [ 94.658597][T11512] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.667823][T11512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.681578][T11512] EXT4-fs (loop0): 1 truncate cleaned up [ 95.228616][T11552] loop5: detected capacity change from 0 to 512 [ 95.255563][T11552] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.271397][T11552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1537: corrupted inode contents [ 95.283983][T11552] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1537: mark_inode_dirty error [ 95.300462][T11552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1537: corrupted inode contents [ 95.337895][T11566] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1527'. [ 95.350624][T11552] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1537: mark_inode_dirty error [ 95.365917][T11552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1537: corrupted inode contents [ 95.382301][T11552] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1537: mark_inode_dirty error [ 95.410382][T11552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1537: corrupted inode contents [ 95.425965][T11552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1537: corrupted inode contents [ 95.438025][T11552] EXT4-fs error (device loop5): add_dirent_to_buf:2153: inode #2: comm syz.5.1537: mark_inode_dirty error [ 95.477568][T11552] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1537: corrupted inode contents [ 95.606279][T11585] loop5: detected capacity change from 0 to 2048 [ 95.620160][T11592] loop4: detected capacity change from 0 to 256 [ 95.635024][T11592] FAT-fs (loop4): Directory bread(block 64) failed [ 95.641912][T11592] FAT-fs (loop4): Directory bread(block 65) failed [ 95.642304][T11585] loop5: p1 < > p4 [ 95.648546][T11592] FAT-fs (loop4): Directory bread(block 66) failed [ 95.657391][T11585] loop5: p4 size 8388608 extends beyond EOD, truncated [ 95.659104][T11592] FAT-fs (loop4): Directory bread(block 67) failed [ 95.673110][T11592] FAT-fs (loop4): Directory bread(block 68) failed [ 95.679822][T11592] FAT-fs (loop4): Directory bread(block 69) failed [ 95.686397][T11592] FAT-fs (loop4): Directory bread(block 70) failed [ 95.693022][T11592] FAT-fs (loop4): Directory bread(block 71) failed [ 95.699996][T11592] FAT-fs (loop4): Directory bread(block 72) failed [ 95.706653][T11592] FAT-fs (loop4): Directory bread(block 73) failed [ 95.725397][T11592] syz.4.1535: attempt to access beyond end of device [ 95.725397][T11592] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 96.472973][T11653] loop4: detected capacity change from 0 to 512 [ 96.473025][T11655] loop0: detected capacity change from 0 to 512 [ 96.481574][T11653] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.499193][T11653] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.513031][T11653] EXT4-fs (loop4): 1 truncate cleaned up [ 96.541538][T11655] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.557768][T11655] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1547: corrupted inode contents [ 96.570411][T11655] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1547: mark_inode_dirty error [ 96.583537][T11655] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1547: corrupted inode contents [ 96.596101][T11655] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1547: mark_inode_dirty error [ 96.612374][T11655] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1547: corrupted inode contents [ 96.625572][T11655] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1547: mark_inode_dirty error [ 96.670069][T11655] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1547: corrupted inode contents [ 96.687834][T11662] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1547: corrupted inode contents [ 96.701458][T11662] EXT4-fs error (device loop0): add_dirent_to_buf:2153: inode #2: comm syz.0.1547: mark_inode_dirty error [ 96.716939][T11655] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1547: corrupted inode contents [ 97.006358][T11671] loop2: detected capacity change from 0 to 1024 [ 97.304484][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 97.304501][ T29] audit: type=1326 audit(1758648472.835:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.413604][ T29] audit: type=1326 audit(1758648472.865:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.437738][ T29] audit: type=1326 audit(1758648472.895:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.461357][ T29] audit: type=1326 audit(1758648472.895:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.485122][ T29] audit: type=1326 audit(1758648472.895:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.508937][ T29] audit: type=1326 audit(1758648472.895:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.532590][ T29] audit: type=1326 audit(1758648472.895:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.556133][ T29] audit: type=1326 audit(1758648472.895:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.579875][ T29] audit: type=1326 audit(1758648472.895:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 97.603605][ T29] audit: type=1326 audit(1758648472.895:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcaceeeec9 code=0x7ffc0000 [ 98.567416][T11734] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1571'. [ 98.655884][T11740] netlink: 'syz.2.1574': attribute type 7 has an invalid length. [ 98.663867][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 98.685305][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.712145][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.721285][T11746] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1578'. [ 98.749861][T11758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11758 comm=syz.5.1581 [ 98.767150][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1581'. [ 98.843684][T11806] macvtap1: entered allmulticast mode [ 98.849255][T11806] bridge0: entered allmulticast mode [ 98.855258][T11806] bridge0: port 3(macvtap1) entered blocking state [ 98.862043][T11806] bridge0: port 3(macvtap1) entered disabled state [ 98.871159][T11806] bridge0: left allmulticast mode [ 99.380675][T11831] syzkaller0: entered promiscuous mode [ 99.386302][T11831] syzkaller0: entered allmulticast mode [ 100.177525][T11840] SELinux: failed to load policy [ 100.192130][T11846] vlan2: entered allmulticast mode [ 100.218381][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 100.224695][T11856] loop0: detected capacity change from 0 to 1024 [ 100.235784][T11856] EXT4-fs: inline encryption not supported [ 100.243184][T11856] EXT4-fs: Ignoring removed bh option [ 100.327294][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.336217][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.336409][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1617'. [ 100.345080][T11866] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1603'. [ 100.444991][T11885] loop5: detected capacity change from 0 to 1024 [ 100.452785][T11885] EXT4-fs: inline encryption not supported [ 100.458739][T11885] EXT4-fs: Ignoring removed bh option [ 100.896878][T11920] loop1: detected capacity change from 0 to 1024 [ 100.932854][T11920] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1634: Allocating blocks 449-513 which overlap fs metadata [ 100.956633][T11920] EXT4-fs (loop1): pa ffff888106e06e70: logic 48, phys. 177, len 21 [ 100.964891][T11920] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 101.297357][T11932] loop1: detected capacity change from 0 to 1024 [ 101.324968][T11932] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.1627: reserved inode found cleared - inode=18 [ 101.453784][T11956] loop5: detected capacity change from 0 to 512 [ 101.484577][T11956] EXT4-fs: Ignoring removed nobh option [ 101.546569][T11968] loop2: detected capacity change from 0 to 764 [ 101.580786][T11968] rock: directory entry would overflow storage [ 101.587033][T11968] rock: sig=0x4f50, size=4, remaining=3 [ 101.592650][T11968] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 101.660391][T11976] loop1: detected capacity change from 0 to 256 [ 101.688775][T11976] FAT-fs (loop1): Directory bread(block 64) failed [ 101.709413][T11976] FAT-fs (loop1): Directory bread(block 65) failed [ 101.716801][T11976] FAT-fs (loop1): Directory bread(block 66) failed [ 101.742372][T11976] FAT-fs (loop1): Directory bread(block 67) failed [ 101.752047][T11976] FAT-fs (loop1): Directory bread(block 68) failed [ 101.758961][T11976] FAT-fs (loop1): Directory bread(block 69) failed [ 101.767554][T11976] FAT-fs (loop1): Directory bread(block 70) failed [ 101.774825][T11976] FAT-fs (loop1): Directory bread(block 71) failed [ 101.782930][T11976] FAT-fs (loop1): Directory bread(block 72) failed [ 101.789611][T11976] FAT-fs (loop1): Directory bread(block 73) failed [ 101.806537][T11976] syz.1.1654: attempt to access beyond end of device [ 101.806537][T11976] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 101.830900][T11986] loop0: detected capacity change from 0 to 1024 [ 101.863892][T11986] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.1646: reserved inode found cleared - inode=18 [ 101.888578][ T4070] EXT4-fs unmount: 33 callbacks suppressed [ 101.888596][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.965291][T12002] loop5: detected capacity change from 0 to 512 [ 101.982659][T12002] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.997581][T12002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.019652][T12002] EXT4-fs (loop5): 1 truncate cleaned up [ 102.027510][T12002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.077515][T12014] loop1: detected capacity change from 0 to 764 [ 102.086799][T12016] loop0: detected capacity change from 0 to 164 [ 102.097287][T12016] gtp: attempt to access beyond end of device [ 102.097287][T12016] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.111129][T12016] gtp: attempt to access beyond end of device [ 102.111129][T12016] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.136904][T12014] rock: directory entry would overflow storage [ 102.143418][T12014] rock: sig=0x4f50, size=4, remaining=3 [ 102.149091][T12014] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 102.797129][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 102.797145][ T29] audit: type=1326 audit(1758648478.325:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 102.847386][ T29] audit: type=1326 audit(1758648478.375:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 102.969293][ T29] audit: type=1326 audit(1758648478.375:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 102.993157][ T29] audit: type=1326 audit(1758648478.375:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.016819][ T29] audit: type=1326 audit(1758648478.375:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.040415][ T29] audit: type=1326 audit(1758648478.375:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.064047][ T29] audit: type=1326 audit(1758648478.375:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.087626][ T29] audit: type=1326 audit(1758648478.375:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.111219][ T29] audit: type=1326 audit(1758648478.375:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.134892][ T29] audit: type=1326 audit(1758648478.385:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.2.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e214eec9 code=0x7ffc0000 [ 103.285476][T12050] loop2: detected capacity change from 0 to 1024 [ 103.330599][T12050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.355783][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.388301][T12050] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1668: Allocating blocks 449-513 which overlap fs metadata [ 103.420682][T12050] EXT4-fs (loop2): pa ffff888106e537e0: logic 48, phys. 177, len 21 [ 103.428740][T12050] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 103.444357][T12063] loop0: detected capacity change from 0 to 512 [ 103.454443][T12065] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1672'. [ 103.460814][T12063] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.484095][T12063] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.484719][ T5197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.522151][T12063] EXT4-fs (loop0): 1 truncate cleaned up [ 103.530540][T12063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.613656][T12088] loop4: detected capacity change from 0 to 1024 [ 103.627046][T12086] SELinux: failed to load policy [ 103.634862][T12088] EXT4-fs: Ignoring removed orlov option [ 103.642626][T12088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.127059][T12118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12118 comm=syz.2.1688 [ 104.151891][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.219807][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 104.372128][T12161] wg2: left promiscuous mode [ 104.376858][T12161] wg2: left allmulticast mode [ 104.422126][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.435946][T12161] wg2: entered promiscuous mode [ 104.440923][T12161] wg2: entered allmulticast mode [ 104.462346][T12169] 9pnet_fd: p9_fd_create_tcp (12169): problem connecting socket to 127.0.0.1 [ 104.514496][T12176] loop0: detected capacity change from 0 to 512 [ 104.540645][T12176] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.547491][T12176] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.559513][T12176] EXT4-fs (loop0): 1 truncate cleaned up [ 104.565679][T12176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.312115][T12197] loop1: detected capacity change from 0 to 128 [ 105.381484][T12197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.394482][T12197] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.614053][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.625250][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.638371][T12220] 9pnet_fd: p9_fd_create_tcp (12220): problem connecting socket to 127.0.0.1 [ 105.674792][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 105.812861][T12257] loop1: detected capacity change from 0 to 1024 [ 105.827609][T12257] EXT4-fs: Ignoring removed orlov option [ 105.838306][T12267] loop2: detected capacity change from 0 to 128 [ 105.838256][T12257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.847142][T12267] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.869956][T12267] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.961140][ T5197] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.062268][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 106.130034][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.208701][T12310] loop4: detected capacity change from 0 to 164 [ 106.220815][T12310] syz.4.1748: attempt to access beyond end of device [ 106.220815][T12310] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 106.234784][T12310] syz.4.1748: attempt to access beyond end of device [ 106.234784][T12310] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.529792][T12322] loop5: detected capacity change from 0 to 1024 [ 106.545635][T12322] EXT4-fs: Ignoring removed orlov option [ 106.556923][T12322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.786495][T12357] loop0: detected capacity change from 0 to 128 [ 106.794573][T12357] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.806931][T12357] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.862700][ T5965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.872366][T12286] 9pnet_fd: p9_fd_create_tcp (12286): problem connecting socket to 127.0.0.1 [ 106.893186][ T4070] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.109543][T12404] loop0: detected capacity change from 0 to 1024 [ 107.116360][T12404] EXT4-fs: Ignoring removed orlov option [ 107.124676][T12404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.342740][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.621983][T12419] 9pnet_fd: p9_fd_create_tcp (12419): problem connecting socket to 127.0.0.1 [ 107.790921][T12432] ================================================================== [ 107.799154][T12432] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes [ 107.807187][T12432] [ 107.809543][T12432] read-write to 0xffff888100699758 of 4 bytes by task 6812 on cpu 0: [ 107.817613][T12432] move_expired_inodes+0x17a/0x400 [ 107.822747][T12432] queue_io+0xd9/0x2c0 [ 107.827096][T12432] wb_writeback+0x226/0x5c0 [ 107.831633][T12432] wb_workfn+0x194/0x910 [ 107.835895][T12432] process_scheduled_works+0x4cb/0x9d0 [ 107.841374][T12432] worker_thread+0x582/0x770 [ 107.846008][T12432] kthread+0x489/0x510 [ 107.850092][T12432] ret_from_fork+0x11f/0x1b0 [ 107.854695][T12432] ret_from_fork_asm+0x1a/0x30 [ 107.859644][T12432] [ 107.861974][T12432] read to 0xffff888100699758 of 4 bytes by task 12432 on cpu 1: [ 107.869609][T12432] __mark_inode_dirty+0x191/0x750 [ 107.874696][T12432] mark_buffer_dirty+0x133/0x210 [ 107.879648][T12432] block_page_mkwrite+0x287/0x3d0 [ 107.884708][T12432] ext4_page_mkwrite+0x859/0xb90 [ 107.889690][T12432] do_wp_page+0xddb/0x24e0 [ 107.894128][T12432] handle_mm_fault+0x77d/0x2c20 [ 107.899084][T12432] do_user_addr_fault+0x636/0x1090 [ 107.904314][T12432] exc_page_fault+0x62/0xa0 [ 107.908835][T12432] asm_exc_page_fault+0x26/0x30 [ 107.913699][T12432] [ 107.916052][T12432] value changed: 0x00000028 -> 0x0001002a [ 107.921864][T12432] [ 107.924189][T12432] Reported by Kernel Concurrency Sanitizer on: [ 107.930355][T12432] CPU: 1 UID: 0 PID: 12432 Comm: syz.0.1775 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.940172][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.950244][T12432] ================================================================== [ 107.970379][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 107.970398][ T29] audit: type=1326 audit(1758648483.505:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000 [ 108.010567][ T29] audit: type=1326 audit(1758648483.535:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.5.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224a15eec9 code=0x7ffc0000