last executing test programs: 11.782858649s ago: executing program 1 (id=595): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4", 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) close(r1) 11.765704129s ago: executing program 1 (id=597): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') setxattr$security_evm(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), 0x0, 0x0, 0x1) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 11.497399883s ago: executing program 1 (id=599): r0 = socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1008413, &(0x7f0000000300)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@nodelalloc}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}]}, 0x0, 0x526, &(0x7f0000000c00)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0xc040) 11.313822046s ago: executing program 1 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 11.293414776s ago: executing program 1 (id=605): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) getrandom(0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x800000409) 11.227499777s ago: executing program 1 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf8, 0x2, 0x1, 0x9, 0x0, 0x7, 0x40880, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_config_ext={0x81, 0x4}, 0x4, 0x8, 0x89, 0x2, 0x3, 0x2, 0xfff8, 0x0, 0x20, 0x0, 0xe}, 0x0, 0x7, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 11.216324828s ago: executing program 32 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf8, 0x2, 0x1, 0x9, 0x0, 0x7, 0x40880, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_config_ext={0x81, 0x4}, 0x4, 0x8, 0x89, 0x2, 0x3, 0x2, 0xfff8, 0x0, 0x20, 0x0, 0xe}, 0x0, 0x7, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.696334348s ago: executing program 4 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x29}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.517565311s ago: executing program 3 (id=736): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r3, &(0x7f0000000480)='2', 0x1, 0x8080c64) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 2.489851452s ago: executing program 4 (id=737): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x2, 0x6, 0x6, 0x14}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) 2.251190395s ago: executing program 4 (id=738): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) timer_settime(r3, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) close(r1) 1.858701631s ago: executing program 2 (id=742): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) 1.832848771s ago: executing program 4 (id=743): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b68e2", 0x3}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write(r3, 0x0, 0x0) 1.664352685s ago: executing program 3 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(0xee01) truncate(&(0x7f0000000080)='./file1\x00', 0x5) 1.355924859s ago: executing program 3 (id=747): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) sync() r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x40) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000a00)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x6}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.235571841s ago: executing program 3 (id=751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 1.213503641s ago: executing program 5 (id=752): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mprotect(&(0x7f0000c94000/0x3000)=nil, 0x3000, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 1.113283593s ago: executing program 5 (id=753): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 1.036783774s ago: executing program 5 (id=754): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0x1b8, 0x2e0, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1.009459714s ago: executing program 0 (id=755): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 985.022465ms ago: executing program 2 (id=757): unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) 983.764455ms ago: executing program 5 (id=767): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000003c0)=ANY=[]) 929.249166ms ago: executing program 4 (id=758): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$full(0xffffffffffffff9c, 0x0, 0x88000, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 857.995147ms ago: executing program 2 (id=759): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) 760.225529ms ago: executing program 2 (id=760): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) read$snapshot(r1, 0x0, 0x0) 759.724569ms ago: executing program 5 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 717.867749ms ago: executing program 4 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') 700.53171ms ago: executing program 2 (id=763): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) close(r1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) removexattr(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)=@known='system.posix_acl_access\x00') 551.143302ms ago: executing program 2 (id=764): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 549.566452ms ago: executing program 0 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mprotect(&(0x7f0000c94000/0x3000)=nil, 0x3000, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 549.356981ms ago: executing program 5 (id=775): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 403.843094ms ago: executing program 0 (id=766): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 339.659665ms ago: executing program 3 (id=768): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) 0s ago: executing program 0 (id=769): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) kernel console output (not intermixed with test programs): ve_1 (retrying later): interface not active [ 50.508770][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.531968][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.557555][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.564557][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.590509][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.612194][ T3326] hsr_slave_0: entered promiscuous mode [ 50.618082][ T3326] hsr_slave_1: entered promiscuous mode [ 50.623863][ T3326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.631420][ T3326] Cannot create hsr debugfs directory [ 50.640700][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.647725][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.673752][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.684824][ T3328] team0: Port device team_slave_0 added [ 50.710415][ T3328] team0: Port device team_slave_1 added [ 50.742380][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.749440][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.756727][ T3327] bridge_slave_0: entered allmulticast mode [ 50.763035][ T3327] bridge_slave_0: entered promiscuous mode [ 50.773640][ T3319] hsr_slave_0: entered promiscuous mode [ 50.779431][ T3319] hsr_slave_1: entered promiscuous mode [ 50.785360][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.792930][ T3319] Cannot create hsr debugfs directory [ 50.806990][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.814140][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.821423][ T3327] bridge_slave_1: entered allmulticast mode [ 50.827696][ T3327] bridge_slave_1: entered promiscuous mode [ 50.844756][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.851871][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.877789][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.888896][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.895840][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.921790][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.943043][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.967071][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.995931][ T3327] team0: Port device team_slave_0 added [ 51.004067][ T3327] team0: Port device team_slave_1 added [ 51.037158][ T3328] hsr_slave_0: entered promiscuous mode [ 51.043121][ T3328] hsr_slave_1: entered promiscuous mode [ 51.048911][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.056580][ T3328] Cannot create hsr debugfs directory [ 51.067660][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.074725][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.100771][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.123403][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.130350][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.156413][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.213141][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.229048][ T3327] hsr_slave_0: entered promiscuous mode [ 51.235026][ T3327] hsr_slave_1: entered promiscuous mode [ 51.240830][ T3327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.248437][ T3327] Cannot create hsr debugfs directory [ 51.255961][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.274597][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.289918][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.325807][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.334619][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.345981][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.368308][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.397871][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.414042][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.430039][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.441811][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.458509][ T3328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.479281][ T3328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.497567][ T3328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.517125][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.524214][ T3328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.542698][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.555540][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.565081][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.573802][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.586299][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.610179][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.622468][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.629503][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.643514][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.650626][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.665401][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.677378][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.702876][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.715418][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.722525][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.733112][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.740136][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.766118][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.773190][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.783194][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.790223][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.825546][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.842737][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.867675][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.878129][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.895511][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.902671][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.911819][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.918846][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.939745][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.978817][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.997600][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.005917][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.012982][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.034143][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.041317][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.065864][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.076995][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.090591][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.192085][ T3319] veth0_vlan: entered promiscuous mode [ 52.209171][ T3319] veth1_vlan: entered promiscuous mode [ 52.239104][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.259580][ T3316] veth0_vlan: entered promiscuous mode [ 52.265874][ T3319] veth0_macvtap: entered promiscuous mode [ 52.275998][ T3319] veth1_macvtap: entered promiscuous mode [ 52.284489][ T3328] veth0_vlan: entered promiscuous mode [ 52.302495][ T3316] veth1_vlan: entered promiscuous mode [ 52.314452][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.324327][ T3328] veth1_vlan: entered promiscuous mode [ 52.336315][ T3316] veth0_macvtap: entered promiscuous mode [ 52.355759][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.366101][ T3316] veth1_macvtap: entered promiscuous mode [ 52.382177][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.390868][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.399635][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.408447][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.427981][ T3328] veth0_macvtap: entered promiscuous mode [ 52.435018][ T3328] veth1_macvtap: entered promiscuous mode [ 52.461738][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.469666][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.480758][ T3326] veth0_vlan: entered promiscuous mode [ 52.502204][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.519698][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.527769][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.537964][ T3326] veth1_vlan: entered promiscuous mode [ 52.546514][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.555305][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.564057][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.572956][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.590528][ T3328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.599337][ T3328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.608207][ T3328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.616979][ T3328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.636970][ T3327] veth0_vlan: entered promiscuous mode [ 52.650358][ T3326] veth0_macvtap: entered promiscuous mode [ 52.671279][ T3326] veth1_macvtap: entered promiscuous mode [ 52.695310][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.704810][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.712939][ T3327] veth1_vlan: entered promiscuous mode [ 52.756880][ T3326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.765710][ T3326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.774532][ T3326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.783487][ T3326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.839354][ T3327] veth0_macvtap: entered promiscuous mode [ 52.856256][ T3327] veth1_macvtap: entered promiscuous mode [ 52.879177][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.908898][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.942208][ T3327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.951218][ T3327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.959991][ T3327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.968731][ T3327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.981001][ T3502] tipc: Started in network mode [ 52.985901][ T3502] tipc: Node identity ac14140f, cluster identity 4711 [ 53.000450][ T3502] tipc: New replicast peer: 10.1.1.2 [ 53.006025][ T3502] tipc: Enabled bearer , priority 10 [ 53.044880][ T3506] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 53.110430][ T3511] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 53.110430][ T3511] program syz.3.9 not setting count and/or reply_len properly [ 53.142824][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 53.156709][ T3513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3513 comm=syz.0.10 [ 53.204069][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 53.204085][ T29] audit: type=1326 audit(1750257472.827:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.233439][ T29] audit: type=1326 audit(1750257472.827:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.263425][ T29] audit: type=1326 audit(1750257472.827:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.286638][ T29] audit: type=1326 audit(1750257472.827:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.309801][ T29] audit: type=1326 audit(1750257472.827:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.333476][ T29] audit: type=1326 audit(1750257472.877:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.356772][ T29] audit: type=1326 audit(1750257472.877:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.380144][ T29] audit: type=1326 audit(1750257472.877:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3516 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 53.416887][ T29] audit: type=1326 audit(1750257472.977:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6481a9e929 code=0x0 [ 53.467763][ T29] audit: type=1400 audit(1750257473.087:122): avc: denied { read } for pid=3526 comm="syz.0.16" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.508500][ T3524] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14'. [ 53.615234][ T3537] $H: renamed from bond0 (while UP) [ 53.629510][ T3537] $H: entered promiscuous mode [ 53.634798][ T3537] bond_slave_0: entered promiscuous mode [ 53.641055][ T3537] bond_slave_1: entered promiscuous mode [ 53.760629][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 53.779963][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 53.862468][ T3551] GUP no longer grows the stack in syz.0.25 (3551): 200000004000-200000008000 (200000002000) [ 53.872723][ T3551] CPU: 1 UID: 0 PID: 3551 Comm: syz.0.25 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 53.872751][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.872793][ T3551] Call Trace: [ 53.872799][ T3551] [ 53.872805][ T3551] __dump_stack+0x1d/0x30 [ 53.872895][ T3551] dump_stack_lvl+0xe8/0x140 [ 53.872915][ T3551] dump_stack+0x15/0x1b [ 53.872929][ T3551] __get_user_pages+0x199d/0x1fb0 [ 53.872957][ T3551] ? __rcu_read_unlock+0x4f/0x70 [ 53.873002][ T3551] get_user_pages_remote+0x1dc/0x7a0 [ 53.873134][ T3551] __access_remote_vm+0x156/0x560 [ 53.873161][ T3551] access_remote_vm+0x32/0x40 [ 53.873223][ T3551] proc_pid_cmdline_read+0x30f/0x6a0 [ 53.873263][ T3551] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 53.873291][ T3551] vfs_readv+0x3fb/0x690 [ 53.873384][ T3551] __x64_sys_preadv+0xfd/0x1c0 [ 53.873403][ T3551] x64_sys_call+0x1503/0x2fb0 [ 53.873489][ T3551] do_syscall_64+0xd2/0x200 [ 53.873505][ T3551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.873537][ T3551] ? clear_bhb_loop+0x40/0x90 [ 53.873621][ T3551] ? clear_bhb_loop+0x40/0x90 [ 53.873638][ T3551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.873695][ T3551] RIP: 0033:0x7f311052e929 [ 53.873713][ T3551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.873727][ T3551] RSP: 002b:00007f310eb97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 53.873748][ T3551] RAX: ffffffffffffffda RBX: 00007f3110755fa0 RCX: 00007f311052e929 [ 53.873758][ T3551] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000007 [ 53.873768][ T3551] RBP: 00007f31105b0b39 R08: 0000000000000200 R09: 0000000000000000 [ 53.873856][ T3551] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 53.873866][ T3551] R13: 0000000000000000 R14: 00007f3110755fa0 R15: 00007fff2c79aea8 [ 53.873880][ T3551] [ 54.072284][ T1036] tipc: Node number set to 2886997007 [ 54.072316][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 54.146505][ T3563] 9pnet: p9_errstr2errno: server reported unknown error [ 54.237270][ T3572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.253522][ T3575] loop1: detected capacity change from 0 to 512 [ 54.328604][ T3575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.405248][ T3575] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.588656][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.675993][ C0] hrtimer: interrupt took 37967 ns [ 54.744191][ T3609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.47'. [ 54.979270][ T3633] xt_CT: No such helper "pptp" [ 55.155915][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 55.455431][ T3655] loop4: detected capacity change from 0 to 512 [ 55.496701][ T3655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.540482][ T3655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.619621][ T3655] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 55.635786][ T3655] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 55.675829][ T3655] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 55.687516][ T3660] 9pnet: p9_errstr2errno: server reported unknown error [ 55.711373][ T3655] EXT4-fs (loop4): 1 truncate cleaned up [ 55.717599][ T3655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.809538][ T3655] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.850708][ T3663] loop1: detected capacity change from 0 to 2048 [ 55.873336][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.893257][ T3630] syz.2.51 (3630) used greatest stack depth: 6952 bytes left [ 55.931598][ T3310] loop1: p1 < > p4 [ 55.936558][ T3310] loop1: p4 size 8388608 extends beyond EOD, truncated [ 55.946333][ T3663] loop1: p1 < > p4 [ 55.950756][ T3663] loop1: p4 size 8388608 extends beyond EOD, truncated [ 56.068851][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 56.083666][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 56.109773][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 56.114338][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 56.174600][ T3690] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.197937][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 56.199119][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 56.208378][ T3690] loop1: detected capacity change from 0 to 256 [ 56.234127][ T3690] FAT-fs (loop1): bogus number of FAT sectors [ 56.240268][ T3690] FAT-fs (loop1): Can't find a valid FAT filesystem [ 56.302967][ T3696] syz.4.78 uses obsolete (PF_INET,SOCK_PACKET) [ 56.450521][ T3706] netlink: 'syz.1.81': attribute type 13 has an invalid length. [ 56.570727][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.578076][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.644456][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.660985][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.699784][ T3706] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.708823][ T3706] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.717774][ T3706] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.726713][ T3706] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.760318][ T3732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.767589][ T3732] IPv6: NLM_F_CREATE should be set when creating new route [ 56.999359][ T3754] loop1: detected capacity change from 0 to 1024 [ 57.046662][ T3754] ======================================================= [ 57.046662][ T3754] WARNING: The mand mount option has been deprecated and [ 57.046662][ T3754] and is ignored by this kernel. Remove the mand [ 57.046662][ T3754] option from the mount to silence this warning. [ 57.046662][ T3754] ======================================================= [ 57.107681][ T3754] EXT4-fs (loop1): inodes count not valid: 32 vs 1312 [ 57.297735][ T3766] tipc: Started in network mode [ 57.302676][ T3766] tipc: Node identity ce481d80609c, cluster identity 4711 [ 57.309837][ T3766] tipc: Enabled bearer , priority 0 [ 57.321133][ T3766] syzkaller0: MTU too low for tipc bearer [ 57.322948][ T3769] loop3: detected capacity change from 0 to 512 [ 57.327049][ T3766] tipc: Disabling bearer [ 57.354037][ T3769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.366776][ T3769] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.380666][ T3769] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.100: corrupted inode contents [ 57.392890][ T3769] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.100: mark_inode_dirty error [ 57.405540][ T3769] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.100: corrupted inode contents [ 57.423190][ T3769] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.100: corrupted inode contents [ 57.436963][ T3769] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.100: mark_inode_dirty error [ 57.449011][ T3769] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.100: corrupted inode contents [ 57.462756][ T3769] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.100: mark_inode_dirty error [ 57.474414][ T3769] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.100: corrupted inode contents [ 57.489014][ T3769] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.100: mark_inode_dirty error [ 57.515284][ T3775] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.100: corrupted inode contents [ 57.551432][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.597545][ T3782] loop2: detected capacity change from 0 to 512 [ 57.622796][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.654413][ T3782] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.680742][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.719370][ T3797] loop2: detected capacity change from 0 to 512 [ 57.729564][ T3797] ext4: Unknown parameter 'permit_directio' [ 57.797267][ T3801] loop4: detected capacity change from 0 to 1764 [ 57.809661][ T3801] iso9660: Bad value for 'dmode' [ 57.864504][ T3804] loop4: detected capacity change from 0 to 1024 [ 57.893711][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.923184][ T3804] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.956489][ T3804] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.971745][ T3804] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 57.984111][ T3804] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.984111][ T3804] [ 57.993837][ T3804] EXT4-fs (loop4): Total free blocks count 0 [ 57.999843][ T3804] EXT4-fs (loop4): Free/Dirty block details [ 58.005767][ T3804] EXT4-fs (loop4): free_blocks=4293918720 [ 58.011503][ T3804] EXT4-fs (loop4): dirty_blocks=80 [ 58.016610][ T3804] EXT4-fs (loop4): Block reservation details [ 58.022592][ T3804] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 58.069428][ T176] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 58.123416][ T3813] netlink: 14 bytes leftover after parsing attributes in process `syz.4.114'. [ 58.142593][ T3813] hsr_slave_0: left promiscuous mode [ 58.149010][ T3813] hsr_slave_1: left promiscuous mode [ 58.264347][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 58.264365][ T29] audit: type=1400 audit(1750257477.887:330): avc: denied { create } for pid=3819 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.321628][ T29] audit: type=1400 audit(1750257477.947:331): avc: denied { read write } for pid=3819 comm="syz.1.117" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.322164][ T3820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.345050][ T29] audit: type=1400 audit(1750257477.947:332): avc: denied { open } for pid=3819 comm="syz.1.117" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.357314][ T3820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.376734][ T29] audit: type=1400 audit(1750257477.947:333): avc: denied { ioctl } for pid=3819 comm="syz.1.117" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.407043][ T3820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 58.418014][ T3820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 58.451513][ T3824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 58.495166][ T3828] loop3: detected capacity change from 0 to 1024 [ 58.507633][ T3820] ip6gretap0: entered promiscuous mode [ 58.518507][ T3820] syz_tun: entered promiscuous mode [ 58.552918][ T3828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.570070][ T3820] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 58.580395][ T3820] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 58.596879][ T3828] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 58.609399][ T3828] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.609399][ T3828] [ 58.619164][ T3828] EXT4-fs (loop3): Total free blocks count 0 [ 58.625175][ T3828] EXT4-fs (loop3): Free/Dirty block details [ 58.631180][ T3828] EXT4-fs (loop3): free_blocks=0 [ 58.636152][ T3828] EXT4-fs (loop3): dirty_blocks=0 [ 58.641298][ T3828] EXT4-fs (loop3): Block reservation details [ 58.647486][ T3828] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 58.701993][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.746495][ T29] audit: type=1326 audit(1750257478.367:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221805e929 code=0x7ffc0000 [ 58.769840][ T29] audit: type=1326 audit(1750257478.367:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221805e929 code=0x7ffc0000 [ 58.793140][ T29] audit: type=1326 audit(1750257478.367:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f221805e929 code=0x7ffc0000 [ 58.816432][ T29] audit: type=1326 audit(1750257478.367:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221805e929 code=0x7ffc0000 [ 58.839754][ T29] audit: type=1326 audit(1750257478.367:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221805e929 code=0x7ffc0000 [ 58.870872][ T29] audit: type=1326 audit(1750257478.467:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f221805e929 code=0x7ffc0000 [ 58.924688][ T3842] netlink: 'syz.0.126': attribute type 7 has an invalid length. [ 58.932458][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 59.208032][ T3869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.139'. [ 59.230488][ T3873] bridge: RTM_NEWNEIGH with invalid ether address [ 59.238954][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 59.250692][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 59.260141][ T3875] Zero length message leads to an empty skb [ 59.314304][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 59.323278][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 59.330367][ T3883] loop1: detected capacity change from 0 to 128 [ 59.339704][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 59.341885][ T3883] vfat: Bad value for 'gid' [ 59.353080][ T3883] vfat: Bad value for 'gid' [ 59.360602][ T3881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3881 comm=syz.3.144 [ 59.394121][ T3885] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.402910][ T3885] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.411793][ T3885] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.420555][ T3885] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.460260][ T3885] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.469302][ T3885] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.478233][ T3885] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.487126][ T3885] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.599567][ T3900] loop3: detected capacity change from 0 to 128 [ 59.948304][ T3931] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.956635][ T3931] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.043181][ T3943] netlink: 'syz.4.171': attribute type 4 has an invalid length. [ 60.066913][ T3945] loop0: detected capacity change from 0 to 128 [ 60.374225][ T3963] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.383175][ T3963] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.823546][ T3999] bridge: RTM_NEWNEIGH with invalid ether address [ 61.656930][ T4011] loop3: detected capacity change from 0 to 512 [ 61.666470][ T4011] ext4: Unknown parameter 'permit_directio' [ 61.740608][ T4013] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.749627][ T4013] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.758577][ T4013] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.767305][ T4013] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.802705][ T4013] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.811671][ T4013] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.820543][ T4013] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.829528][ T4013] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.874060][ T4016] loop4: detected capacity change from 0 to 512 [ 61.904708][ T4016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.920753][ T4016] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.062890][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.193268][ T4031] loop4: detected capacity change from 0 to 1024 [ 62.216356][ T4031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.235403][ T4031] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 62.247764][ T4031] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.247764][ T4031] [ 62.257454][ T4031] EXT4-fs (loop4): Total free blocks count 0 [ 62.263473][ T4031] EXT4-fs (loop4): Free/Dirty block details [ 62.269420][ T4031] EXT4-fs (loop4): free_blocks=0 [ 62.274413][ T4031] EXT4-fs (loop4): dirty_blocks=0 [ 62.279470][ T4031] EXT4-fs (loop4): Block reservation details [ 62.288255][ T4031] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 62.313993][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.403877][ T4043] loop0: detected capacity change from 0 to 128 [ 62.491452][ T4053] loop3: detected capacity change from 0 to 512 [ 62.502202][ T4053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.510519][ T4053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.211: bg 0: block 248: padding at end of block bitmap is not set [ 62.526453][ T4053] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.211: Failed to acquire dquot type 1 [ 62.538325][ T4053] EXT4-fs (loop3): 1 truncate cleaned up [ 62.544906][ T4053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.561554][ T4053] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 62.581308][ T4053] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 62.598261][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.624138][ T4059] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 62.635359][ T4059] team0: Port device dummy0 added [ 62.644209][ T4059] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 62.652600][ T4059] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.663631][ T4059] team0: Failed to send options change via netlink (err -105) [ 62.671359][ T4059] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.680596][ T4059] team0: Port device dummy0 removed [ 62.688580][ T4059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.752878][ T4065] netlink: 'syz.3.217': attribute type 4 has an invalid length. [ 62.765316][ T4065] netlink: 'syz.3.217': attribute type 4 has an invalid length. [ 62.803543][ T4067] tipc: Started in network mode [ 62.808597][ T4067] tipc: Node identity 3695d59e893d, cluster identity 4711 [ 62.815889][ T4067] tipc: Enabled bearer , priority 0 [ 62.824551][ T4067] syzkaller0: MTU too low for tipc bearer [ 62.830272][ T4067] tipc: Disabling bearer [ 62.883245][ T4069] netlink: 'syz.3.221': attribute type 7 has an invalid length. [ 62.895061][ T4071] loop2: detected capacity change from 0 to 1024 [ 62.921934][ T4073] loop3: detected capacity change from 0 to 512 [ 62.923776][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.950376][ T4071] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 62.962755][ T4071] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.962755][ T4071] [ 62.972463][ T4071] EXT4-fs (loop2): Total free blocks count 0 [ 62.973023][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.978440][ T4071] EXT4-fs (loop2): Free/Dirty block details [ 62.978454][ T4071] EXT4-fs (loop2): free_blocks=0 [ 62.992806][ T4073] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.996896][ T4071] EXT4-fs (loop2): dirty_blocks=0 [ 63.017190][ T4071] EXT4-fs (loop2): Block reservation details [ 63.023206][ T4071] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 63.067316][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.089393][ T4081] loop1: detected capacity change from 0 to 512 [ 63.114639][ T4081] ext4: Unknown parameter 'permit_directio' [ 63.115328][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.144368][ T4083] loop2: detected capacity change from 0 to 128 [ 63.213468][ T4088] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 63.244806][ T4088] team0: Port device dummy0 added [ 63.264101][ T4088] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 63.273237][ T4088] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.284160][ T4088] team0: Failed to send options change via netlink (err -105) [ 63.294393][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 63.294405][ T29] audit: type=1326 audit(1750257738.910:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4d0cd58e7 code=0x7ffc0000 [ 63.310964][ T4088] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.323834][ T29] audit: type=1326 audit(1750257738.910:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4d0c7ab19 code=0x7ffc0000 [ 63.341225][ T4088] team0: Port device dummy0 removed [ 63.355693][ T29] audit: type=1326 audit(1750257738.910:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 63.355959][ T29] audit: type=1326 audit(1750257738.980:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4d0cd58e7 code=0x7ffc0000 [ 63.407172][ T29] audit: type=1326 audit(1750257738.980:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4d0c7ab19 code=0x7ffc0000 [ 63.430417][ T29] audit: type=1326 audit(1750257738.980:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 63.468308][ T4088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.469445][ T29] audit: type=1326 audit(1750257739.080:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4d0cd58e7 code=0x7ffc0000 [ 63.500071][ T29] audit: type=1326 audit(1750257739.080:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4d0c7ab19 code=0x7ffc0000 [ 63.523198][ T29] audit: type=1326 audit(1750257739.080:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe4d0cde929 code=0x7ffc0000 [ 63.546294][ T29] audit: type=1326 audit(1750257739.080:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4d0cd58e7 code=0x7ffc0000 [ 63.597388][ T4095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.637069][ T4102] netlink: 'syz.2.233': attribute type 10 has an invalid length. [ 63.654197][ T4102] bond0: (slave dummy0): Releasing backup interface [ 63.663708][ T4102] team0: Failed to send options change via netlink (err -105) [ 63.671300][ T4102] team0: Port device dummy0 added [ 63.729774][ T4102] netlink: 'syz.2.233': attribute type 10 has an invalid length. [ 63.741835][ T4102] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.752803][ T4102] team0: Failed to send options change via netlink (err -105) [ 63.760375][ T4102] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.769774][ T4102] team0: Port device dummy0 removed [ 63.777276][ T4102] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.821659][ T4108] loop2: detected capacity change from 0 to 512 [ 63.828160][ T4111] loop1: detected capacity change from 0 to 1024 [ 63.830931][ T4109] loop4: detected capacity change from 0 to 512 [ 63.861084][ T4111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.876840][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.878704][ T4111] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 63.893442][ T4108] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.901730][ T4111] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.901730][ T4111] [ 63.914489][ T4109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.921568][ T4111] EXT4-fs (loop1): Total free blocks count 0 [ 63.940050][ T4111] EXT4-fs (loop1): Free/Dirty block details [ 63.944270][ T4109] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.946068][ T4111] EXT4-fs (loop1): free_blocks=0 [ 63.961311][ T4111] EXT4-fs (loop1): dirty_blocks=0 [ 63.963269][ T4108] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.236: corrupted inode contents [ 63.966335][ T4111] EXT4-fs (loop1): Block reservation details [ 63.966349][ T4111] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 63.980071][ T4108] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.236: mark_inode_dirty error [ 64.012744][ T4108] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.236: corrupted inode contents [ 64.049488][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.107213][ T4108] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.236: corrupted inode contents [ 64.125122][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.134459][ T4108] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.236: mark_inode_dirty error [ 64.147022][ T4108] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.236: corrupted inode contents [ 64.197408][ T4108] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.236: mark_inode_dirty error [ 64.199841][ T4127] tipc: Enabled bearer , priority 0 [ 64.216258][ T4108] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.236: corrupted inode contents [ 64.230825][ T4127] syzkaller0: MTU too low for tipc bearer [ 64.236621][ T4127] tipc: Disabling bearer [ 64.241082][ T4108] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.236: mark_inode_dirty error [ 64.258207][ T4125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.236: corrupted inode contents [ 64.274867][ T4134] loop4: detected capacity change from 0 to 512 [ 64.288081][ T4134] ext4: Unknown parameter 'permit_directio' [ 64.326603][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.402011][ T4142] __nla_validate_parse: 6 callbacks suppressed [ 64.402028][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 65.231899][ T4159] loop1: detected capacity change from 0 to 512 [ 65.247975][ T4162] loop3: detected capacity change from 0 to 512 [ 65.259807][ T4159] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.324370][ T4159] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.349243][ T4159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.377782][ T4159] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.260: corrupted inode contents [ 65.390734][ T4159] EXT4-fs (loop1): Remounting filesystem read-only [ 65.397607][ T4159] EXT4-fs (loop1): 1 truncate cleaned up [ 65.403796][ T1707] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.414429][ T1707] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.425270][ T1707] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.436369][ T4159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.463142][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.524106][ T4179] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 65.533486][ T4179] bond0: (slave dummy0): Releasing backup interface [ 65.544947][ T4179] team0: Failed to send options change via netlink (err -105) [ 65.552503][ T4179] team0: Port device dummy0 added [ 65.557416][ T4181] loop1: detected capacity change from 0 to 512 [ 65.573226][ T4181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.591947][ T4181] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.602681][ T4179] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.605151][ T4181] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.257: corrupted inode contents [ 65.623511][ T4179] team0: Failed to send options change via netlink (err -105) [ 65.623980][ T4181] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.257: mark_inode_dirty error [ 65.632263][ T4179] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 65.652704][ T4181] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.257: corrupted inode contents [ 65.666118][ T4179] team0: Port device dummy0 removed [ 65.683020][ T4179] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.689362][ T4181] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.257: corrupted inode contents [ 65.705951][ T4181] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.257: mark_inode_dirty error [ 65.718635][ T4181] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.257: corrupted inode contents [ 65.740387][ T4181] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.257: mark_inode_dirty error [ 65.752554][ T4181] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.257: corrupted inode contents [ 65.764794][ T4181] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.257: mark_inode_dirty error [ 65.778470][ T4185] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.257: corrupted inode contents [ 65.792939][ T4186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 65.826847][ T4186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.835023][ T4186] bond1: (slave bond2): Enslaving as an active interface with an up link [ 65.835340][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.857813][ T4186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 65.869403][ T4186] bond1 (unregistering): (slave bond2): Releasing backup interface [ 65.886580][ T4186] bond1 (unregistering): Released all slaves [ 65.948228][ T4198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 65.999643][ T4198] loop3: detected capacity change from 0 to 512 [ 66.011889][ T4198] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 66.026299][ T4198] EXT4-fs (loop3): 1 truncate cleaned up [ 66.033377][ T4198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.161789][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.264804][ T4220] veth1_to_bond: entered allmulticast mode [ 66.283299][ T4220] veth1_to_bond: entered promiscuous mode [ 66.295187][ T4220] veth1_to_bond: left promiscuous mode [ 66.300780][ T4220] veth1_to_bond: left allmulticast mode [ 66.435094][ T4232] loop2: detected capacity change from 0 to 512 [ 66.467659][ T4232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.511592][ T4232] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.647599][ T4245] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.277: corrupted inode contents [ 66.741436][ T4245] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm syz.2.277: mark_inode_dirty error [ 66.756430][ T4245] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.277: corrupted inode contents [ 66.820059][ T4245] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.277: mark_inode_dirty error [ 66.862837][ T4245] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.277: mark inode dirty (error -117) [ 66.902238][ T4245] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 66.950828][ T4256] loop0: detected capacity change from 0 to 1024 [ 66.957933][ T4256] EXT4-fs: Ignoring removed nobh option [ 66.963586][ T4256] EXT4-fs: Ignoring removed bh option [ 66.982910][ T4256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.997423][ T4256] EXT4-fs (loop0): shut down requested (2) [ 67.016712][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.039491][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.103369][ T4266] loop2: detected capacity change from 0 to 128 [ 67.129409][ T4266] syz.2.288: attempt to access beyond end of device [ 67.129409][ T4266] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 67.158403][ T4269] loop0: detected capacity change from 0 to 512 [ 67.175314][ T4269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.188180][ T4269] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.200703][ T4269] netlink: 52 bytes leftover after parsing attributes in process `syz.0.289'. [ 67.220586][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.244701][ T4273] bridge: RTM_NEWNEIGH with invalid ether address [ 67.276521][ T4275] loop2: detected capacity change from 0 to 512 [ 67.294542][ T4275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.313754][ T4275] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.344372][ T4275] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.291: corrupted inode contents [ 67.378392][ T4275] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.291: mark_inode_dirty error [ 67.408802][ T4275] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.291: corrupted inode contents [ 67.420903][ T4275] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.291: mark_inode_dirty error [ 67.471903][ T4295] loop0: detected capacity change from 0 to 256 [ 67.478613][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.518136][ T4298] loop3: detected capacity change from 0 to 2048 [ 67.518346][ T4295] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 67.558869][ T4298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.812358][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.838841][ T4322] capability: warning: `syz.2.312' uses deprecated v2 capabilities in a way that may be insecure [ 68.507509][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 68.507525][ T29] audit: type=1400 audit(1750257750.121:1450): avc: denied { create } for pid=4356 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.578092][ T4358] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 68.578716][ T29] audit: type=1400 audit(1750257750.191:1451): avc: denied { relabelfrom } for pid=4356 comm="syz.1.323" name="" dev="pipefs" ino=7179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 68.730225][ T29] audit: type=1400 audit(1750257750.211:1452): avc: denied { relabelto } for pid=4356 comm="syz.1.323" name="" dev="pipefs" ino=7179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 68.756980][ T29] audit: type=1400 audit(1750257750.211:1453): avc: denied { write } for pid=4356 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.777067][ T29] audit: type=1400 audit(1750257750.211:1454): avc: denied { nlmsg_write } for pid=4356 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.905093][ T4376] wireguard0: entered promiscuous mode [ 68.910626][ T4376] wireguard0: entered allmulticast mode [ 69.056530][ T4385] validate_nla: 2 callbacks suppressed [ 69.056549][ T4385] netlink: 'syz.3.331': attribute type 4 has an invalid length. [ 69.079719][ T4385] netlink: 'syz.3.331': attribute type 4 has an invalid length. [ 69.169416][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 69.186474][ T4395] loop4: detected capacity change from 0 to 1024 [ 69.199799][ T4395] EXT4-fs: Ignoring removed orlov option [ 69.205561][ T4395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.260825][ T4395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.287710][ T4405] bridge: RTM_NEWNEIGH with invalid ether address [ 69.296829][ T29] audit: type=1326 audit(1750257750.901:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d3b5e929 code=0x7ffc0000 [ 69.305262][ T4406] loop3: detected capacity change from 0 to 1024 [ 69.320214][ T29] audit: type=1326 audit(1750257750.901:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d3b5e929 code=0x7ffc0000 [ 69.350146][ T29] audit: type=1326 audit(1750257750.901:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d3b5e929 code=0x7ffc0000 [ 69.373490][ T29] audit: type=1326 audit(1750257750.901:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28d3b5e929 code=0x7ffc0000 [ 69.384433][ T4406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.396949][ T29] audit: type=1326 audit(1750257750.901:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d3b5e929 code=0x7ffc0000 [ 69.451936][ T4408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.474763][ T4406] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 209:freeing already freed block (bit 13); block bitmap corrupt. [ 69.494811][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.537048][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.558519][ T4408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.580537][ T4425] loop4: detected capacity change from 0 to 512 [ 69.601935][ T4425] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 69.612887][ T4425] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 69.635234][ T4408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.673754][ T4429] netlink: 'syz.0.348': attribute type 39 has an invalid length. [ 69.730072][ T4435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.764533][ T4408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.849261][ T4435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.871992][ T4408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.901701][ T4408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.920497][ T4408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.944032][ T4435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.961215][ T4408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.009072][ T4435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.058287][ T4468] loop0: detected capacity change from 0 to 512 [ 70.080090][ T4468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.088236][ T4435] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.097958][ T4468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.360: bg 0: block 248: padding at end of block bitmap is not set [ 70.100454][ T4435] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.144341][ T4435] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.152072][ T4468] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.360: Failed to acquire dquot type 1 [ 70.164510][ T4468] EXT4-fs (loop0): 1 truncate cleaned up [ 70.173296][ T4435] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.183481][ T4468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.207324][ T4480] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 70.217361][ T4468] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.227017][ T4482] loop2: detected capacity change from 0 to 512 [ 70.235079][ T4480] team0: Port device dummy0 added [ 70.244809][ T4482] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.364: bg 0: block 5: invalid block bitmap [ 70.250337][ T4480] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 70.267672][ T4468] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 70.274642][ T4482] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 70.292483][ T4482] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.364: invalid indirect mapped block 3 (level 2) [ 70.306204][ T4482] EXT4-fs (loop2): 2 truncates cleaned up [ 70.311634][ T4480] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 70.313199][ T4482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.334459][ T4480] team0: Failed to send options change via netlink (err -105) [ 70.342063][ T4480] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 70.342185][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.357288][ T4480] team0: Port device dummy0 removed [ 70.374002][ T4480] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.421049][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 70.442786][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.455739][ T4492] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.464525][ T4492] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.467715][ T4496] 9pnet: p9_errstr2errno: server reported unknown error [ 70.473232][ T4492] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.473383][ T4492] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.587712][ T4505] loop4: detected capacity change from 0 to 2048 [ 70.615767][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.629943][ T4508] : renamed from vlan1 (while UP) [ 70.635929][ T4512] netlink: 'syz.0.376': attribute type 4 has an invalid length. [ 70.663819][ T4505] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.374: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 70.676157][ T4518] loop2: detected capacity change from 0 to 512 [ 70.691328][ T4505] EXT4-fs (loop4): Remounting filesystem read-only [ 70.725933][ T4505] xt_hashlimit: max too large, truncated to 1048576 [ 70.736954][ T4518] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.750012][ T4512] netlink: 'syz.0.376': attribute type 4 has an invalid length. [ 70.750061][ T4518] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.377: bg 0: block 248: padding at end of block bitmap is not set [ 70.750567][ T4518] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.377: Failed to acquire dquot type 1 [ 70.783917][ T4518] EXT4-fs (loop2): 1 truncate cleaned up [ 70.795126][ T4518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.824746][ T4518] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 70.840316][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.854473][ T4518] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 70.904027][ T4534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.384'. [ 70.914809][ T4536] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 70.923974][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.939395][ T4536] team0: Port device dummy0 added [ 70.982196][ T4536] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 70.990452][ T4536] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.022040][ T4536] team0: Failed to send options change via netlink (err -105) [ 71.033709][ T4536] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.048087][ T4536] team0: Port device dummy0 removed [ 71.063064][ T4536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.080417][ T4552] loop1: detected capacity change from 0 to 1024 [ 71.099079][ T4552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.135391][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 71.161130][ T4552] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.184285][ T4552] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.204922][ T4552] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 71.237076][ T4561] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.394'. [ 71.248399][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.319230][ T4569] loop0: detected capacity change from 0 to 1024 [ 71.331335][ T4571] loop4: detected capacity change from 0 to 512 [ 71.333798][ T4569] EXT4-fs: Ignoring removed orlov option [ 71.344905][ T4571] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.351989][ T4571] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.397: bg 0: block 248: padding at end of block bitmap is not set [ 71.376939][ T4571] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.397: Failed to acquire dquot type 1 [ 71.388814][ T4571] EXT4-fs (loop4): 1 truncate cleaned up [ 71.393009][ T4573] loop3: detected capacity change from 0 to 1024 [ 71.406400][ T4571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.421554][ T4573] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.437214][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.444054][ T4569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.448184][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.476583][ T4577] loop1: detected capacity change from 0 to 512 [ 71.492727][ T4573] JBD2: no valid journal superblock found [ 71.498501][ T4573] EXT4-fs (loop3): Could not load journal inode [ 71.508914][ T4571] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 71.522585][ T4577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.538611][ T4577] EXT4-fs (loop1): 1 truncate cleaned up [ 71.545280][ T4577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.557492][ T4571] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 71.581665][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.681421][ T4582] syzkaller1: entered promiscuous mode [ 71.686938][ T4582] syzkaller1: entered allmulticast mode [ 71.800603][ T4592] loop4: detected capacity change from 0 to 512 [ 71.909219][ T4592] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.917598][ T4592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.933800][ T4592] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.402: corrupted inode contents [ 71.951496][ T4592] EXT4-fs (loop4): Remounting filesystem read-only [ 71.958113][ T4592] EXT4-fs (loop4): 1 truncate cleaned up [ 71.964505][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.975100][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 71.985770][ T41] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.275259][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.285003][ T4592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.317301][ T4600] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 72.387312][ T4600] team0: Port device dummy0 added [ 72.404468][ T4603] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 72.441652][ T4603] team0: Failed to send options change via netlink (err -105) [ 72.453072][ T4603] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 72.469135][ T4603] team0: Port device dummy0 removed [ 72.483212][ T4603] dummy0: entered promiscuous mode [ 72.495511][ T4603] $H: (slave dummy0): Enslaving as an active interface with an up link [ 72.527213][ T4613] loop1: detected capacity change from 0 to 128 [ 72.576634][ T4617] $H: (slave dummy0): Releasing backup interface [ 72.585051][ T4617] dummy0: left promiscuous mode [ 72.590123][ T4616] loop1: detected capacity change from 0 to 512 [ 72.593489][ T4617] team0: Failed to send options change via netlink (err -105) [ 72.604032][ T4617] team0: Port device dummy0 added [ 72.616738][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.413'. [ 72.628451][ T4617] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 72.640034][ T4617] team0: Failed to send options change via netlink (err -105) [ 72.640189][ T4616] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.654263][ T4617] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 72.661521][ T4616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.412: bg 0: block 248: padding at end of block bitmap is not set [ 72.669029][ T4617] team0: Port device dummy0 removed [ 72.682321][ T4616] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.412: Failed to acquire dquot type 1 [ 72.684429][ T4617] dummy0: entered promiscuous mode [ 72.699091][ T4617] $H: (slave dummy0): Enslaving as an active interface with an up link [ 72.710859][ T4616] EXT4-fs (loop1): 1 truncate cleaned up [ 72.745157][ T4616] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 72.745424][ T4622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4622 comm=syz.4.413 [ 72.782132][ T4616] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.904478][ T4641] loop1: detected capacity change from 0 to 512 [ 72.914974][ T4641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.927093][ T4645] tipc: Started in network mode [ 72.932055][ T4645] tipc: Node identity 02c998a3023, cluster identity 4711 [ 72.939267][ T4645] tipc: Enabled bearer , priority 0 [ 72.947743][ T4645] syzkaller0: MTU too low for tipc bearer [ 72.949441][ T4643] loop4: detected capacity change from 0 to 128 [ 72.953559][ T4645] tipc: Disabling bearer [ 72.979302][ T4641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.430: bg 0: block 248: padding at end of block bitmap is not set [ 73.010662][ T4648] netlink: 52 bytes leftover after parsing attributes in process `wޣ'. [ 73.016008][ T4641] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.430: Failed to acquire dquot type 1 [ 73.076326][ T4654] $H: (slave dummy0): Releasing backup interface [ 73.084955][ T4654] dummy0: left promiscuous mode [ 73.085349][ T4641] EXT4-fs (loop1): 1 truncate cleaned up [ 73.093531][ T4654] team0: Failed to send options change via netlink (err -105) [ 73.103039][ T4654] team0: Port device dummy0 added [ 73.139868][ T4641] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 73.141782][ T4654] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.159856][ T4658] loop4: detected capacity change from 0 to 128 [ 73.161414][ T4641] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 73.174687][ T4654] team0: Failed to send options change via netlink (err -105) [ 73.191796][ T4654] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.201607][ T4654] team0: Port device dummy0 removed [ 73.208505][ T4654] dummy0: entered promiscuous mode [ 73.214338][ T4654] $H: (slave dummy0): Enslaving as an active interface with an up link [ 73.241478][ T4663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 73.270413][ T4663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.279288][ T4663] bond1: (slave bond2): Enslaving as an active interface with an up link [ 73.282164][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 73.294588][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 73.307305][ T4663] bond1 (unregistering): (slave bond2): Releasing backup interface [ 73.327583][ T4663] bond1 (unregistering): Released all slaves [ 73.342701][ T4672] loop3: detected capacity change from 0 to 512 [ 73.350085][ T4672] EXT4-fs: Ignoring removed i_version option [ 73.368503][ T4672] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.375410][ T4669] loop0: detected capacity change from 0 to 512 [ 73.375690][ T4672] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.435: bg 0: block 131: padding at end of block bitmap is not set [ 73.391181][ T4669] EXT4-fs (loop0): 1 truncate cleaned up [ 73.408091][ T4672] EXT4-fs (loop3): Remounting filesystem read-only [ 73.419799][ T4672] EXT4-fs (loop3): 1 truncate cleaned up [ 73.561578][ T4688] loop4: detected capacity change from 0 to 512 [ 73.600572][ T4688] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.607554][ T4688] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.443: bg 0: block 248: padding at end of block bitmap is not set [ 73.622187][ T4696] $H: (slave dummy0): Releasing backup interface [ 73.623475][ T4688] __quota_error: 125 callbacks suppressed [ 73.623488][ T4688] Quota error (device loop4): write_blk: dquota write failed [ 73.642084][ T4688] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 73.652053][ T4688] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.443: Failed to acquire dquot type 1 [ 73.664210][ T4696] dummy0: left promiscuous mode [ 73.670989][ T4696] team0: Failed to send options change via netlink (err -105) [ 73.678481][ T4696] team0: Port device dummy0 added [ 73.689702][ T4696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.696082][ T4688] EXT4-fs (loop4): 1 truncate cleaned up [ 73.704283][ T4696] team0: Failed to send options change via netlink (err -105) [ 73.711981][ T4696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.721038][ T4696] team0: Port device dummy0 removed [ 73.727974][ T4696] dummy0: entered promiscuous mode [ 73.733532][ T4696] $H: (slave dummy0): Enslaving as an active interface with an up link [ 73.767285][ T4688] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 73.789325][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 73.812087][ T4688] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 73.842631][ T4701] loop1: detected capacity change from 0 to 512 [ 73.854702][ T4707] loop0: detected capacity change from 0 to 512 [ 73.862990][ T4707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.876961][ T4701] EXT4-fs (loop1): 1 truncate cleaned up [ 73.881364][ T4707] EXT4-fs (loop0): 1 truncate cleaned up [ 74.077229][ T4723] syzkaller0: entered promiscuous mode [ 74.082794][ T4723] syzkaller0: entered allmulticast mode [ 74.201108][ T29] audit: type=1400 audit(1750257767.820:1569): avc: denied { create } for pid=4727 comm="syz.2.454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.265933][ T29] audit: type=1400 audit(1750257767.840:1570): avc: denied { write } for pid=4727 comm="syz.2.454" name="file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.288382][ T29] audit: type=1400 audit(1750257767.840:1571): avc: denied { open } for pid=4727 comm="syz.2.454" path="/63/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.311032][ T29] audit: type=1400 audit(1750257767.840:1572): avc: denied { ioctl } for pid=4727 comm="syz.2.454" path="/63/file0" dev="tmpfs" ino=355 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.463186][ T4733] loop0: detected capacity change from 0 to 512 [ 74.495781][ T4733] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.506737][ T4733] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.525591][ T29] audit: type=1400 audit(1750257768.140:1573): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.552073][ T4733] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.455: corrupted inode contents [ 74.569412][ T4733] EXT4-fs (loop0): Remounting filesystem read-only [ 74.578438][ T4733] EXT4-fs (loop0): 1 truncate cleaned up [ 74.584265][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.594945][ T31] Quota error (device loop0): write_blk: dquota write failed [ 74.602424][ T31] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 74.612493][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.623026][ T31] Quota error (device loop0): write_blk: dquota write failed [ 74.712142][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 74.734757][ T4756] validate_nla: 7 callbacks suppressed [ 74.734771][ T4756] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 74.774265][ T4752] infiniband syz!: set active [ 74.777493][ T4756] batman_adv: batadv0: Adding interface: team0 [ 74.779049][ T4752] infiniband syz!: added team_slave_0 [ 74.785239][ T4756] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.815827][ T4756] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.844525][ T4752] RDS/IB: syz!: added [ 74.848900][ T4752] smc: adding ib device syz! with port count 1 [ 74.861094][ T4752] smc: ib device syz! port 1 has pnetid [ 74.873430][ T4760] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 74.884429][ T4762] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 74.896110][ T4762] batman_adv: batadv0: Adding interface: team0 [ 74.902376][ T4762] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.927677][ T4762] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.943592][ T4760] team0: entered promiscuous mode [ 74.943760][ T4754] loop4: detected capacity change from 0 to 764 [ 74.948692][ T4760] team_slave_0: entered promiscuous mode [ 74.960709][ T4760] team_slave_1: entered promiscuous mode [ 74.969186][ T4754] rock: directory entry would overflow storage [ 74.975399][ T4754] rock: sig=0x5850, size=36, remaining=7 [ 74.995198][ T4762] netlink: 'syz.0.468': attribute type 10 has an invalid length. [ 74.995788][ T4760] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.024854][ T4760] batman_adv: batadv0: Interface activated: team0 [ 75.031488][ T4760] batman_adv: batadv0: Interface deactivated: team0 [ 75.038139][ T4760] batman_adv: batadv0: Removing interface: team0 [ 75.045248][ T4760] bridge0: port 3(team0) entered blocking state [ 75.051714][ T4760] bridge0: port 3(team0) entered disabled state [ 75.059659][ T4760] team0: entered allmulticast mode [ 75.065052][ T4760] team_slave_0: entered allmulticast mode [ 75.070832][ T4760] team_slave_1: entered allmulticast mode [ 75.082354][ T4760] bridge0: port 3(team0) entered blocking state [ 75.088639][ T4760] bridge0: port 3(team0) entered forwarding state [ 75.098904][ T4762] team0: entered promiscuous mode [ 75.104175][ T4762] team_slave_0: entered promiscuous mode [ 75.109918][ T4762] team_slave_1: entered promiscuous mode [ 75.123932][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.133868][ T4762] batman_adv: batadv0: Interface activated: team0 [ 75.140388][ T4762] batman_adv: batadv0: Interface deactivated: team0 [ 75.147141][ T4762] batman_adv: batadv0: Removing interface: team0 [ 75.178612][ T4767] loop4: detected capacity change from 0 to 2048 [ 75.185594][ T4762] bridge0: port 3(team0) entered blocking state [ 75.191914][ T4762] bridge0: port 3(team0) entered disabled state [ 75.198689][ T4762] team0: entered allmulticast mode [ 75.205060][ T4769] loop2: detected capacity change from 0 to 256 [ 75.205175][ T4762] team_slave_0: entered allmulticast mode [ 75.217149][ T4762] team_slave_1: entered allmulticast mode [ 75.224666][ T4769] FAT-fs (loop2): bogus number of FAT sectors [ 75.225222][ T4762] bridge0: port 3(team0) entered blocking state [ 75.230750][ T4769] FAT-fs (loop2): Can't find a valid FAT filesystem [ 75.237031][ T4762] bridge0: port 3(team0) entered forwarding state [ 75.268223][ T4767] EXT4-fs (loop4): failed to initialize system zone (-117) [ 75.288064][ T4767] EXT4-fs (loop4): mount failed [ 75.680977][ T4803] loop3: detected capacity change from 0 to 1024 [ 75.701260][ T4806] loop9: detected capacity change from 0 to 7 [ 75.729295][ T4806] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.741910][ T4789] sch_fq: defrate 0 ignored. [ 75.760067][ T4806] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.768087][ T4806] loop9: unable to read partition table [ 75.780702][ T4806] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 75.780702][ T4806] U) failed (rc=-5) [ 75.796194][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.822123][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.842162][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.850127][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.852442][ T4816] loop3: detected capacity change from 0 to 512 [ 75.892678][ T4816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.902396][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.939500][ T4824] loop2: detected capacity change from 0 to 1024 [ 75.951230][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.961110][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 75.963319][ T4816] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.969119][ T3310] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.105346][ T4824] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.491: Allocating blocks 497-513 which overlap fs metadata [ 76.144424][ T4823] EXT4-fs (loop2): pa ffff888105481770: logic 128, phys. 273, len 15 [ 76.152617][ T4823] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 76.282882][ T4838] syz.1.496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.305281][ T4844] __nla_validate_parse: 3 callbacks suppressed [ 76.305295][ T4844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 76.397547][ T4848] process 'syz.1.500' launched './file0' with NULL argv: empty string added [ 76.714497][ T4866] netlink: '+}[@': attribute type 4 has an invalid length. [ 76.878909][ T4885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.517'. [ 76.965224][ T4896] loop2: detected capacity change from 0 to 1024 [ 77.002973][ T4896] EXT4-fs: Ignoring removed orlov option [ 77.118471][ T4904] Cannot find add_set index 0 as target [ 77.169686][ T4915] netlink: 'syz.3.530': attribute type 3 has an invalid length. [ 77.206628][ T4917] tipc: Enabled bearer , priority 0 [ 77.216778][ T4917] syzkaller0: MTU too low for tipc bearer [ 77.222539][ T4917] tipc: Disabling bearer [ 77.285652][ T4925] macvlan2: entered promiscuous mode [ 77.291025][ T4925] macvlan2: entered allmulticast mode [ 77.304063][ T4925] batadv0: entered promiscuous mode [ 77.309477][ T4925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.318641][ T4925] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 77.381733][ T4932] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 77.435820][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 77.449833][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 77.460814][ T4934] loop0: detected capacity change from 0 to 8192 [ 77.478469][ T4941] loop3: detected capacity change from 0 to 512 [ 77.488855][ T4941] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.500780][ T4941] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 77.524643][ T4941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04ec11c, mo2=0002] [ 77.569212][ T4941] System zones: 1-12 [ 77.574257][ T4941] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.539: corrupted in-inode xattr: e_value size too large [ 77.622514][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.539: couldn't read orphan inode 15 (err -117) [ 77.778300][ T4960] serio: Serial port ptm0 [ 77.976903][ T4969] syzkaller0: entered promiscuous mode [ 77.982470][ T4969] syzkaller0: entered allmulticast mode [ 78.003816][ T4971] loop1: detected capacity change from 0 to 128 [ 78.030175][ T4971] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.368626][ T4990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 78.386893][ T4990] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4990 comm=syz.1.560 [ 78.553447][ T4999] vlan2: entered allmulticast mode [ 78.569506][ T5001] netlink: 68 bytes leftover after parsing attributes in process `syz.0.565'. [ 78.758212][ T5022] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 78.878306][ T5028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.578'. [ 78.887996][ T5028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.578'. [ 79.432375][ T5067] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.444758][ T5064] loop4: detected capacity change from 0 to 8192 [ 79.472363][ T5067] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.492027][ T5064] loop4: p1 p3 p4 [ 79.496088][ T5064] loop4: p1 size 8390912 extends beyond EOD, truncated [ 79.504423][ T5064] loop4: p3 size 589824 extends beyond EOD, truncated [ 79.532818][ T5067] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.546170][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.546730][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.557257][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.617342][ T5074] loop1: detected capacity change from 0 to 512 [ 79.632983][ T5074] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.653086][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 79.653099][ T29] audit: type=1400 audit(1750257773.270:1720): avc: denied { remove_name } for pid=5073 comm="syz.1.597" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.653617][ T5067] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.659347][ T29] audit: type=1400 audit(1750257773.270:1721): avc: denied { rename } for pid=5073 comm="syz.1.597" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.714161][ T29] audit: type=1400 audit(1750257773.270:1722): avc: denied { unlink } for pid=5073 comm="syz.1.597" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.749347][ T5081] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.597: corrupted inode contents [ 79.769252][ T5081] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.597: mark_inode_dirty error [ 79.782116][ T5081] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.597: corrupted inode contents [ 79.795014][ T5081] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.597: mark_inode_dirty error [ 79.802108][ T5083] loop4: detected capacity change from 0 to 512 [ 79.814684][ T5081] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.597: mark inode dirty (error -117) [ 79.832872][ T5067] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.842168][ T5081] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 79.842689][ T5083] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 79.862061][ T5083] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.596: invalid indirect mapped block 2683928664 (level 1) [ 79.870839][ T5067] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.877312][ T5083] EXT4-fs (loop4): Remounting filesystem read-only [ 79.888597][ T5067] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.892388][ T5083] EXT4-fs (loop4): 1 truncate cleaned up [ 79.902134][ T5067] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.932532][ T5086] loop1: detected capacity change from 0 to 512 [ 79.963991][ T5086] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 79.996359][ T5089] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.036317][ T29] audit: type=1400 audit(1750257773.650:1723): avc: denied { mounton } for pid=5092 comm="syz.1.603" path="/119/file0" dev="configfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.098640][ T4609] syz_tun (unregistering): left promiscuous mode [ 80.205034][ T29] audit: type=1400 audit(1750257773.820:1724): avc: denied { mounton } for pid=5108 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.300405][ T29] audit: type=1400 audit(1750257773.910:1725): avc: denied { search } for pid=3037 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.321887][ T29] audit: type=1400 audit(1750257773.910:1726): avc: denied { search } for pid=3037 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.343700][ T29] audit: type=1400 audit(1750257773.910:1727): avc: denied { search } for pid=3037 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.366027][ T29] audit: type=1400 audit(1750257773.910:1728): avc: denied { read } for pid=3037 comm="dhcpcd" name="n25" dev="tmpfs" ino=4170 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.388494][ T31] bridge_slave_1: left allmulticast mode [ 80.394305][ T31] bridge_slave_1: left promiscuous mode [ 80.399991][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.401089][ T29] audit: type=1400 audit(1750257773.910:1729): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4170 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.451673][ T31] bridge_slave_0: left promiscuous mode [ 80.457446][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.474757][ T31] ip6gretap0 (unregistering): left promiscuous mode [ 80.592614][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.603380][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.613171][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 80.623132][ T31] bond0 (unregistering): Released all slaves [ 80.632352][ T5106] bond0: (slave dummy0): Releasing backup interface [ 80.677596][ T31] hsr_slave_0: left promiscuous mode [ 80.684178][ T31] hsr_slave_1: left promiscuous mode [ 80.689830][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.698904][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.823286][ T31] team0 (unregistering): Port device team_slave_1 removed [ 80.848263][ T31] team0 (unregistering): Port device team_slave_0 removed [ 80.952087][ T5173] loop0: detected capacity change from 0 to 1024 [ 80.989152][ T5179] hub 9-0:1.0: USB hub found [ 81.002278][ T5179] hub 9-0:1.0: 8 ports detected [ 81.072429][ T5173] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.619: Allocating blocks 497-513 which overlap fs metadata [ 81.112528][ T5171] EXT4-fs (loop0): pa ffff888105481700: logic 128, phys. 273, len 15 [ 81.120679][ T5171] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 81.212403][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 81.303723][ T5202] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.341747][ T5208] loop2: detected capacity change from 0 to 512 [ 81.390346][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.397607][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.405985][ T5108] bridge_slave_0: entered allmulticast mode [ 81.412672][ T5108] bridge_slave_0: entered promiscuous mode [ 81.420473][ T5202] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.432354][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.439492][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.447119][ T5108] bridge_slave_1: entered allmulticast mode [ 81.453864][ T5108] bridge_slave_1: entered promiscuous mode [ 81.472227][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.482774][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.503144][ T5108] team0: Port device team_slave_0 added [ 81.509734][ T5108] team0: Port device team_slave_1 added [ 81.529457][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.536549][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.562579][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.577070][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.584177][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.610246][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.653349][ T5208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.674344][ T5208] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.625: invalid block [ 81.742992][ T5208] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.625: invalid indirect mapped block 4294967295 (level 1) [ 81.779512][ T5208] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.625: invalid indirect mapped block 4294967295 (level 1) [ 81.797039][ T5202] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.811227][ T5208] EXT4-fs (loop2): 2 truncates cleaned up [ 81.824866][ T5108] hsr_slave_0: entered promiscuous mode [ 81.841847][ T5108] hsr_slave_1: entered promiscuous mode [ 81.849694][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 81.884137][ T5202] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.952459][ T5202] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.972125][ T5202] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.028084][ T5202] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.079276][ T5202] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.158928][ T5108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.183285][ T5108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.197853][ T5108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.216238][ T5108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.334967][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.365877][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.386511][ T1853] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.393685][ T1853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.421071][ T1853] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.428194][ T1853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.440472][ T5279] loop4: detected capacity change from 0 to 1024 [ 82.449754][ T5279] ext4: Unknown parameter 'nouser_xattr' [ 82.468897][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.528557][ T5283] loop0: detected capacity change from 0 to 164 [ 82.540596][ T5283] syz.0.640: attempt to access beyond end of device [ 82.540596][ T5283] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 82.562066][ T5283] syz.0.640: attempt to access beyond end of device [ 82.562066][ T5283] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 82.588770][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.729261][ T5301] netlink: 52 bytes leftover after parsing attributes in process `syz.4.642'. [ 82.916151][ T5108] veth0_vlan: entered promiscuous mode [ 82.928695][ T5326] loop0: detected capacity change from 0 to 512 [ 82.928901][ T5108] veth1_vlan: entered promiscuous mode [ 82.968676][ T5326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.976332][ T5108] veth0_macvtap: entered promiscuous mode [ 83.013352][ T5326] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.031836][ T5108] veth1_macvtap: entered promiscuous mode [ 83.060140][ T5338] loop4: detected capacity change from 0 to 512 [ 83.069656][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.092268][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.115774][ T5108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.124632][ T5108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.133368][ T5108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.142083][ T5108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.171329][ T5338] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 83.189645][ T5344] loop0: detected capacity change from 0 to 512 [ 83.211947][ T5344] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 83.318970][ T5348] loop4: detected capacity change from 0 to 512 [ 84.422234][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 84.451094][ T5413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 84.810583][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 84.810598][ T29] audit: type=1326 audit(1750257778.420:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 84.841383][ T29] audit: type=1326 audit(1750257778.430:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f311052d290 code=0x7ffc0000 [ 84.864949][ T29] audit: type=1326 audit(1750257778.430:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 84.884632][ T5435] hub 9-0:1.0: USB hub found [ 84.888279][ T29] audit: type=1326 audit(1750257778.430:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 84.892862][ T5435] hub 9-0:1.0: 8 ports detected [ 84.916068][ T29] audit: type=1326 audit(1750257778.430:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 84.944301][ T29] audit: type=1326 audit(1750257778.430:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 84.967685][ T29] audit: type=1326 audit(1750257778.430:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 84.991031][ T29] audit: type=1326 audit(1750257778.430:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 85.014400][ T29] audit: type=1326 audit(1750257778.430:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 85.037841][ T29] audit: type=1326 audit(1750257778.430:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311052e929 code=0x7ffc0000 [ 85.042736][ T5434] netlink: 'syz.4.669': attribute type 33 has an invalid length. [ 85.068892][ T5434] netlink: 152 bytes leftover after parsing attributes in process `syz.4.669'. [ 85.086229][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 85.099103][ T5434] bond0: (slave dummy0): Releasing backup interface [ 85.262597][ T5451] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.349453][ T5458] loop0: detected capacity change from 0 to 2048 [ 85.359102][ T5458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.409482][ T5458] EXT4-fs mount: 40 callbacks suppressed [ 85.409519][ T5458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.440824][ T5467] loop5: detected capacity change from 0 to 1024 [ 85.447766][ T5467] EXT4-fs: Ignoring removed orlov option [ 85.461239][ T5467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.483339][ T5458] EXT4-fs error (device loop0): ext4_read_inline_dir:1502: inode #12: block 5: comm syz.0.676: path /171/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 85.511609][ T5470] hub 9-0:1.0: USB hub found [ 85.516357][ T5470] hub 9-0:1.0: 8 ports detected [ 85.533682][ T5458] EXT4-fs (loop0): Remounting filesystem read-only [ 85.699473][ T5480] macvlan2: entered promiscuous mode [ 85.704832][ T5480] macvlan2: entered allmulticast mode [ 85.711778][ T5480] batadv0: entered promiscuous mode [ 85.717277][ T5480] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.727626][ T5480] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 85.903257][ T5487] loop3: detected capacity change from 0 to 512 [ 85.911869][ T5487] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 85.920737][ T5487] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 85.975377][ T5489] loop3: detected capacity change from 0 to 1024 [ 85.983976][ T5489] EXT4-fs: Ignoring removed orlov option [ 85.989699][ T5489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.006873][ T5489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.044144][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.307582][ T5495] loop4: detected capacity change from 0 to 512 [ 86.344000][ T5495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.366738][ T5495] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.454946][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.503701][ T5506] loop5: detected capacity change from 0 to 1024 [ 86.533258][ T5506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.639773][ T5503] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.700: corrupted inode contents [ 86.646177][ T5506] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.691: Allocating blocks 497-513 which overlap fs metadata [ 86.657280][ T5503] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.700: mark_inode_dirty error [ 86.701769][ T5503] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.700: corrupted inode contents [ 86.714405][ T5505] EXT4-fs (loop5): pa ffff8881069e12a0: logic 128, phys. 273, len 15 [ 86.722558][ T5505] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 86.738000][ T5503] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.700: mark_inode_dirty error [ 86.750408][ T5503] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.700: mark inode dirty (error -117) [ 86.763187][ T5503] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 86.801936][ T5517] : renamed from vlan1 (while UP) [ 86.803023][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.837485][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.859959][ T5524] loop3: detected capacity change from 0 to 512 [ 86.926513][ T5524] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 86.941654][ T5524] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.702: invalid indirect mapped block 2683928664 (level 1) [ 86.955977][ T5527] loop2: detected capacity change from 0 to 2048 [ 86.965895][ T5524] EXT4-fs (loop3): Remounting filesystem read-only [ 86.972571][ T5524] EXT4-fs (loop3): 1 truncate cleaned up [ 86.978685][ T5524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.996186][ T5527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.024442][ T5527] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.703: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 87.043233][ T5527] EXT4-fs (loop2): Remounting filesystem read-only [ 87.052787][ T5527] xt_hashlimit: max too large, truncated to 1048576 [ 87.138386][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.186619][ T5538] loop4: detected capacity change from 0 to 512 [ 87.205565][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.218415][ T5538] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.244710][ T5538] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.705: corrupted inode contents [ 87.263974][ T5538] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.705: mark_inode_dirty error [ 87.284366][ T5538] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.705: corrupted inode contents [ 87.296505][ T5538] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.705: mark_inode_dirty error [ 87.318168][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.387688][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.408753][ T5549] loop2: detected capacity change from 0 to 512 [ 87.442395][ T5549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.455070][ T5549] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.579509][ T5556] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.711: corrupted inode contents [ 87.594284][ T5556] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.711: mark_inode_dirty error [ 87.626879][ T5556] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.711: corrupted inode contents [ 87.641457][ T5556] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.711: mark_inode_dirty error [ 87.660437][ T5556] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.711: mark inode dirty (error -117) [ 87.673346][ T5556] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 87.695623][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.000019][ T5578] syzkaller1: entered promiscuous mode [ 88.005559][ T5578] syzkaller1: entered allmulticast mode [ 88.185625][ T5590] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 88.194778][ T5590] bridge0: port 3(team0) entered disabled state [ 88.201951][ T5590] team0: left allmulticast mode [ 88.206803][ T5590] team_slave_0: left allmulticast mode [ 88.212354][ T5590] team_slave_1: left allmulticast mode [ 88.217852][ T5590] team0: left promiscuous mode [ 88.222786][ T5590] team_slave_0: left promiscuous mode [ 88.228364][ T5590] team_slave_1: left promiscuous mode [ 88.233981][ T5590] bridge0: port 3(team0) entered disabled state [ 88.240792][ T5591] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 88.248600][ T5591] netlink: 2 bytes leftover after parsing attributes in process `syz.2.724'. [ 88.258776][ T5590] batman_adv: batadv0: Adding interface: team0 [ 88.265047][ T5590] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.290323][ T5590] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 88.309886][ T5591] team0: entered promiscuous mode [ 88.310102][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.316095][ T5591] team_slave_0: entered promiscuous mode [ 88.329783][ T5591] team_slave_1: entered promiscuous mode [ 88.336694][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.351476][ T5591] batman_adv: batadv0: Interface activated: team0 [ 88.358149][ T5591] batman_adv: batadv0: Interface deactivated: team0 [ 88.365141][ T5591] batman_adv: batadv0: Removing interface: team0 [ 88.372465][ T5591] bridge0: port 3(team0) entered blocking state [ 88.378767][ T5591] bridge0: port 3(team0) entered disabled state [ 88.389138][ T5591] team0: entered allmulticast mode [ 88.394704][ T5591] team_slave_0: entered allmulticast mode [ 88.400586][ T5591] team_slave_1: entered allmulticast mode [ 88.410684][ T5591] bridge0: port 3(team0) entered blocking state [ 88.417044][ T5591] bridge0: port 3(team0) entered forwarding state [ 88.440978][ T5597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.451343][ T5597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.513703][ T5597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.524371][ T5597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.574769][ T5597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.585235][ T5597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.604140][ T5605] netlink: 52 bytes leftover after parsing attributes in process `wޣ'. [ 88.631147][ T5597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.641516][ T5597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.667773][ T5613] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.688896][ T5597] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.697316][ T5597] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.709181][ T5597] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.717506][ T5597] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.729555][ T5597] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.737897][ T5597] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.749905][ T5597] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.758266][ T5597] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.874361][ T5625] loop3: detected capacity change from 0 to 1024 [ 88.889879][ T5630] loop4: detected capacity change from 0 to 512 [ 88.901657][ T5630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.917744][ T5630] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.737: invalid indirect mapped block 4294967295 (level 1) [ 88.939112][ T5630] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.737: invalid indirect mapped block 4294967295 (level 1) [ 88.939838][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.961274][ T5630] EXT4-fs (loop4): 2 truncates cleaned up [ 88.995788][ T5630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.033415][ T5625] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.736: Allocating blocks 497-513 which overlap fs metadata [ 89.056617][ T5624] EXT4-fs (loop3): pa ffff888105481850: logic 128, phys. 273, len 15 [ 89.064772][ T5624] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 89.092908][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 89.122171][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.153254][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.192446][ T5646] loop3: detected capacity change from 0 to 512 [ 89.209890][ T5646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.224841][ T5644] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 89.227503][ T5646] EXT4-fs (loop3): 1 truncate cleaned up [ 89.232574][ T5644] netlink: 224 bytes leftover after parsing attributes in process `syz.4.738'. [ 89.238853][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.261750][ T5647] loop0: detected capacity change from 0 to 1024 [ 89.276243][ T5647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.286509][ T5647] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.297523][ T5647] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.310914][ T5647] JBD2: no valid journal superblock found [ 89.316478][ T5650] loop4: detected capacity change from 0 to 512 [ 89.316704][ T5647] EXT4-fs (loop0): Could not load journal inode [ 89.339668][ T5650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.738: bg 0: block 393: padding at end of block bitmap is not set [ 89.379210][ T5650] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 89.408660][ T5650] EXT4-fs (loop4): 2 truncates cleaned up [ 89.431348][ T5650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.540716][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.646102][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.717670][ T5671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.729162][ T5673] loop3: detected capacity change from 0 to 1024 [ 89.736050][ T5673] EXT4-fs: Ignoring removed nobh option [ 89.741730][ T5673] EXT4-fs: Ignoring removed bh option [ 89.764573][ T5673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.780963][ T5671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.794891][ T5673] EXT4-fs (loop3): shut down requested (2) [ 89.808472][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.844035][ T5671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.894324][ T5671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.947118][ T5671] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.958223][ T5671] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.970762][ T5671] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.982219][ T5671] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.028582][ T5682] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.376625][ T5700] loop0: detected capacity change from 0 to 512 [ 90.424123][ T5700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.447200][ T5700] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.537124][ T5711] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 90.559597][ T5713] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm syz.0.755: corrupted inode contents [ 90.577676][ T5713] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #19: comm syz.0.755: mark_inode_dirty error [ 90.593963][ T5713] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm syz.0.755: corrupted inode contents [ 90.629560][ T5713] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.755: mark_inode_dirty error [ 90.641737][ T5713] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.755: mark inode dirty (error -117) [ 90.663649][ T5713] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 90.680333][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 90.680347][ T29] audit: type=1400 audit(1750257784.300:1897): avc: denied { ioctl } for pid=5720 comm="syz.2.763" path="socket:[12801]" dev="sockfs" ino=12801 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.829230][ T5723] loop2: detected capacity change from 0 to 1024 [ 90.837493][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.854031][ T5723] EXT4-fs: Ignoring removed orlov option [ 90.892213][ T5723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.374529][ T5732] ================================================================== [ 91.382660][ T5732] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 91.389778][ T5732] [ 91.392090][ T5732] write to 0xffff88810049cf94 of 4 bytes by task 5723 on cpu 0: [ 91.399711][ T5732] xas_set_mark+0x12b/0x140 [ 91.404214][ T5732] __folio_start_writeback+0x1dd/0x440 [ 91.409667][ T5732] ext4_bio_write_folio+0x5ad/0x9f0 [ 91.414857][ T5732] mpage_submit_folio+0xe4/0x170 [ 91.419789][ T5732] mpage_process_page_bufs+0x39b/0x4a0 [ 91.425251][ T5732] mpage_prepare_extent_to_map+0x741/0xaa0 [ 91.431050][ T5732] ext4_do_writepages+0xa1a/0x21c0 [ 91.436147][ T5732] ext4_writepages+0x176/0x300 [ 91.440905][ T5732] do_writepages+0x1c6/0x310 [ 91.445488][ T5732] file_write_and_wait_range+0x156/0x2c0 [ 91.451117][ T5732] generic_buffers_fsync_noflush+0x45/0x120 [ 91.457011][ T5732] ext4_sync_file+0x1ab/0x690 [ 91.461687][ T5732] vfs_fsync_range+0x10d/0x130 [ 91.466461][ T5732] ext4_buffered_write_iter+0x34f/0x3c0 [ 91.471997][ T5732] ext4_file_write_iter+0x383/0xf00 [ 91.477188][ T5732] iter_file_splice_write+0x5f2/0x970 [ 91.482556][ T5732] direct_splice_actor+0x156/0x2a0 [ 91.487665][ T5732] splice_direct_to_actor+0x312/0x680 [ 91.493032][ T5732] do_splice_direct+0xda/0x150 [ 91.497789][ T5732] do_sendfile+0x380/0x650 [ 91.502195][ T5732] __x64_sys_sendfile64+0x105/0x150 [ 91.507383][ T5732] x64_sys_call+0xb39/0x2fb0 [ 91.511964][ T5732] do_syscall_64+0xd2/0x200 [ 91.516458][ T5732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.522340][ T5732] [ 91.524651][ T5732] read to 0xffff88810049cf94 of 4 bytes by task 5732 on cpu 1: [ 91.532177][ T5732] xas_find_marked+0x5dc/0x620 [ 91.536937][ T5732] find_get_entry+0x5d/0x380 [ 91.541526][ T5732] filemap_get_folios_tag+0x92/0x210 [ 91.546835][ T5732] filemap_fdatawait_range+0x88/0x1d0 [ 91.552209][ T5732] __writeback_single_inode+0xdb/0x7c0 [ 91.557662][ T5732] writeback_single_inode+0x167/0x3e0 [ 91.563024][ T5732] sync_inode_metadata+0x5b/0x90 [ 91.567955][ T5732] generic_buffers_fsync_noflush+0xd9/0x120 [ 91.573845][ T5732] ext4_sync_file+0x1ab/0x690 [ 91.578544][ T5732] vfs_fsync_range+0x10d/0x130 [ 91.583295][ T5732] ext4_buffered_write_iter+0x34f/0x3c0 [ 91.588840][ T5732] ext4_file_write_iter+0x383/0xf00 [ 91.594031][ T5732] iter_file_splice_write+0x5f2/0x970 [ 91.599401][ T5732] direct_splice_actor+0x156/0x2a0 [ 91.604514][ T5732] splice_direct_to_actor+0x312/0x680 [ 91.609881][ T5732] do_splice_direct+0xda/0x150 [ 91.614644][ T5732] do_sendfile+0x380/0x650 [ 91.619053][ T5732] __x64_sys_sendfile64+0x105/0x150 [ 91.624243][ T5732] x64_sys_call+0xb39/0x2fb0 [ 91.628830][ T5732] do_syscall_64+0xd2/0x200 [ 91.633323][ T5732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.639205][ T5732] [ 91.641514][ T5732] value changed: 0x0a000021 -> 0x04000021 [ 91.647216][ T5732] [ 91.649523][ T5732] Reported by Kernel Concurrency Sanitizer on: [ 91.655677][ T5732] CPU: 1 UID: 0 PID: 5732 Comm: syz.2.764 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 91.667997][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.678041][ T5732] ================================================================== [ 91.971622][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.