last executing test programs: 2m51.524240564s ago: executing program 3 (id=35): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) iopl(0xfe) 2m51.409862639s ago: executing program 3 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mlockall(0x2) 2m51.346047801s ago: executing program 3 (id=41): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m51.241600636s ago: executing program 3 (id=45): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 2m50.831225594s ago: executing program 3 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2m49.321807168s ago: executing program 3 (id=91): r0 = io_uring_setup(0x53fb, &(0x7f00000000c0)={0x0, 0xdad1, 0x1000, 0xfffffffd, 0x15c}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) accept(r1, 0xfffffffffffffffd, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.321604828s ago: executing program 32 (id=91): r0 = io_uring_setup(0x53fb, &(0x7f00000000c0)={0x0, 0xdad1, 0x1000, 0xfffffffd, 0x15c}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) accept(r1, 0xfffffffffffffffd, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.121945551s ago: executing program 5 (id=1543): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 2m9.078167742s ago: executing program 5 (id=1545): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.008700774s ago: executing program 5 (id=1546): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 2m8.937280636s ago: executing program 5 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x1a}, @void, @eth={@link_local, @local, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@generic={0x8906}}}}, 0x16) 2m8.78061944s ago: executing program 5 (id=1554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m8.565662526s ago: executing program 5 (id=1559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x14}], 0x1) 1m53.372749046s ago: executing program 33 (id=1559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x14}], 0x1) 1m52.452436092s ago: executing program 0 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1m52.428215752s ago: executing program 0 (id=1718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) 1m52.273736836s ago: executing program 0 (id=1722): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) 1m52.200811738s ago: executing program 0 (id=1733): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@bsdgroups}, {@sysvgroups}, {@barrier_val}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 1m51.400921441s ago: executing program 0 (id=1746): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m51.365448381s ago: executing program 0 (id=1738): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6e, 0x0, 0x0) close(r1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m51.289008724s ago: executing program 2 (id=1741): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) 1m51.201356006s ago: executing program 2 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4af584f715520309) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) 1m51.115117249s ago: executing program 2 (id=1745): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180)=0xdee4, 0x4) 1m51.017901751s ago: executing program 2 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x26, "c023edfab182b58276a5d6768983aa0a051868f7fb80dd273b43e0df41ce75b6d6e6424b0238"}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1m50.947778903s ago: executing program 2 (id=1753): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m50.882882615s ago: executing program 2 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x2c, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0xa, [{@multicast2, 0x8}, {@multicast1, 0x8000}, {@broadcast, 0x2}]}]}}, {{0x4624, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0xfff7}}}}}}, 0x0) 1m36.350735536s ago: executing program 34 (id=1738): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6e, 0x0, 0x0) close(r1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m35.846146361s ago: executing program 35 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x2c, 0x44, 0x65, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0xa, [{@multicast2, 0x8}, {@multicast1, 0x8000}, {@broadcast, 0x2}]}]}}, {{0x4624, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0xfff7}}}}}}, 0x0) 1.675092104s ago: executing program 7 (id=5307): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r1, 0x0, 0x80000}, 0x18) msgsnd(0x0, 0x0, 0x7f, 0x800) 1.638213275s ago: executing program 7 (id=5309): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810da}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x0, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.596827286s ago: executing program 8 (id=5312): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) 1.590438627s ago: executing program 7 (id=5313): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x70, &(0x7f00000007c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x3a, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x3a, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}, "473a9fdab1c5ad62449bf08aa817c6d7515da110cc3b70226ac7c34c2d7e5a79bb9167a4b5e424f91371e763ee04"}}}}}}}, 0x0) 1.520468048s ago: executing program 7 (id=5314): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x20000000f}, 0x18) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) 1.476942439s ago: executing program 7 (id=5315): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.405705132s ago: executing program 1 (id=5321): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a0, &(0x7f0000000e00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 1.389093622s ago: executing program 8 (id=5322): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000600)={[{@sysvgroups}, {@grpjquota}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.376763462s ago: executing program 1 (id=5324): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r2, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.345603083s ago: executing program 1 (id=5327): write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080), 0x2000011a) 1.316286034s ago: executing program 7 (id=5328): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)="38aa282645", 0x5) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.198130258s ago: executing program 1 (id=5335): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x20000000f}, 0x18) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) 1.147475579s ago: executing program 1 (id=5337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r1, 0x0, 0x80000}, 0x18) msgsnd(0x0, 0x0, 0x7f, 0x800) 1.056733431s ago: executing program 4 (id=5339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x18) 945.313794ms ago: executing program 8 (id=5341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 881.810556ms ago: executing program 1 (id=5343): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @loopback}, 0x2}}, 0x2e) 813.676578ms ago: executing program 4 (id=5344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 777.348779ms ago: executing program 4 (id=5345): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 654.712822ms ago: executing program 4 (id=5346): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) 635.892773ms ago: executing program 4 (id=5347): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x2000, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60108114009c110000000000000000000000000000000000ff02000000000000000000000000000140000e22009c90"], 0x0) 616.731313ms ago: executing program 4 (id=5348): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 580.616684ms ago: executing program 8 (id=5349): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 0s ago: executing program 6 (id=5363): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 155.317490][T11154] loop6: partition table partially beyond EOD, truncated [ 155.352672][T11154] loop6: p1 start 16777216 is beyond EOD, truncated [ 155.359321][T11154] loop6: p2 size 515840 extends beyond EOD, truncated [ 155.379941][T11154] loop6: p4 start 16777216 is beyond EOD, truncated [ 155.424377][ C1] hrtimer: interrupt took 37329 ns [ 155.634084][T11190] __nla_validate_parse: 17 callbacks suppressed [ 155.634168][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3215'. [ 155.731733][T11193] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 156.132622][T11200] loop8: detected capacity change from 0 to 1024 [ 156.174925][T11200] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.3219: Allocating blocks 497-513 which overlap fs metadata [ 156.232187][ T4232] Bluetooth: hci0: command 0x1003 tx timeout [ 156.233831][ T3691] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.319000][T11212] vhci_hcd: invalid port number 96 [ 156.324376][T11212] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 156.373945][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 156.373964][ T29] audit: type=1400 audit(1763537177.615:3870): avc: denied { create } for pid=11209 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.720552][T11250] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 156.770986][ T29] audit: type=1400 audit(1763537178.005:3871): avc: denied { write } for pid=11252 comm="syz.4.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.947568][ T29] audit: type=1400 audit(1763537178.185:3872): avc: denied { connect } for pid=11269 comm="syz.4.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.008578][T11268] loop7: detected capacity change from 0 to 8192 [ 157.022251][ T29] audit: type=1400 audit(1763537178.235:3873): avc: denied { setopt } for pid=11269 comm="syz.4.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.048944][ T29] audit: type=1400 audit(1763537178.285:3874): avc: denied { write } for pid=11269 comm="syz.4.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.281186][ T29] audit: type=1400 audit(1763537178.515:3875): avc: denied { create } for pid=11286 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.300926][ T29] audit: type=1400 audit(1763537178.515:3876): avc: denied { ioctl } for pid=11286 comm="syz.1.3253" path="socket:[33186]" dev="sockfs" ino=33186 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.364508][ T31] bridge0: port 3(batadv0) entered disabled state [ 157.396894][ T31] bridge_slave_1: left allmulticast mode [ 157.402675][ T31] bridge_slave_1: left promiscuous mode [ 157.408394][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.436752][ T31] bridge_slave_0: left allmulticast mode [ 157.442879][ T31] bridge_slave_0: left promiscuous mode [ 157.444867][ T29] audit: type=1400 audit(1763537178.515:3877): avc: denied { write } for pid=11286 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.448688][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.467956][ T29] audit: type=1326 audit(1763537178.585:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11291 comm="syz.6.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 157.478738][T11289] loop1: detected capacity change from 0 to 8192 [ 157.498423][ T29] audit: type=1326 audit(1763537178.585:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11291 comm="syz.6.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 157.545871][T11289] loop1: p1 p2 p4 < > [ 157.549991][T11289] loop1: partition table partially beyond EOD, truncated [ 157.564520][T11289] loop1: p1 start 16777216 is beyond EOD, truncated [ 157.571194][T11289] loop1: p2 size 515840 extends beyond EOD, truncated [ 157.597821][T11289] loop1: p4 start 16777216 is beyond EOD, truncated [ 157.704672][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.714971][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.725007][ T31] bond0 (unregistering): Released all slaves [ 157.810550][ T31] hsr_slave_0: left promiscuous mode [ 157.827641][ T31] hsr_slave_1: left promiscuous mode [ 157.837577][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.845053][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.875915][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.883391][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.893693][T11316] loop1: detected capacity change from 0 to 1024 [ 157.912922][T11316] EXT4-fs: Ignoring removed bh option [ 157.921689][T11316] EXT4-fs: inline encryption not supported [ 157.929187][ T31] veth1_macvtap: left promiscuous mode [ 157.936083][T11316] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.943346][ T31] veth0_macvtap: left promiscuous mode [ 157.952057][ T31] veth1_vlan: left promiscuous mode [ 157.977308][ T31] veth0_vlan: left promiscuous mode [ 157.984006][T11316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 158.010481][T11316] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3265: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.042530][T11316] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3265: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.067096][T11316] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3265: Failed to acquire dquot type 0 [ 158.089049][T11316] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 158.098824][T11316] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3265: mark_inode_dirty error [ 158.113529][T11316] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 158.142152][T11316] EXT4-fs (loop1): 1 orphan inode deleted [ 158.152065][ T52] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.187229][ T31] team0 (unregistering): Port device team_slave_1 removed [ 158.196881][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 158.221622][ T31] team0 (unregistering): Port device team_slave_0 removed [ 158.233818][T11316] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 159.636355][T11431] loop8: detected capacity change from 0 to 128 [ 159.656729][T11431] EXT4-fs mount: 4 callbacks suppressed [ 159.656754][T11431] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.724299][T11431] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.874381][ T7824] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.233081][T11452] blktrace: Concurrent blktraces are not allowed on loop2 [ 160.809832][T11510] loop7: detected capacity change from 0 to 8192 [ 160.836087][T11519] loop6: detected capacity change from 0 to 512 [ 160.848290][T11519] EXT4-fs: Ignoring removed i_version option [ 160.854372][T11519] EXT4-fs: Ignoring removed bh option [ 160.901812][T11519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.936407][T11519] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.118486][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.160210][T11529] loop7: detected capacity change from 0 to 8192 [ 161.267806][T11554] loop1: detected capacity change from 0 to 512 [ 161.286832][T11554] EXT4-fs: Ignoring removed oldalloc option [ 161.292942][T11556] loop8: detected capacity change from 0 to 1024 [ 161.303872][T11554] EXT4-fs (loop1): 1 truncate cleaned up [ 161.314643][T11554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.332704][T11556] EXT4-fs: inline encryption not supported [ 161.353616][T11556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.385119][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 161.385135][ T29] audit: type=1107 audit(1763537182.615:3943): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='֊' [ 161.435653][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.485717][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.529774][ T29] audit: type=1326 audit(1763537182.765:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.597118][ T29] audit: type=1326 audit(1763537182.765:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.620803][ T29] audit: type=1326 audit(1763537182.805:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.644281][ T29] audit: type=1326 audit(1763537182.805:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.667919][ T29] audit: type=1326 audit(1763537182.805:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.691453][ T29] audit: type=1326 audit(1763537182.815:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.715126][ T29] audit: type=1326 audit(1763537182.815:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.738642][ T29] audit: type=1326 audit(1763537182.815:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.762221][ T29] audit: type=1326 audit(1763537182.815:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.8.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 161.933411][T11612] smc: net device bond0 applied user defined pnetid SYZ0 [ 161.940968][T11612] smc: net device bond0 erased user defined pnetid SYZ0 [ 162.164831][T11632] loop7: detected capacity change from 0 to 1024 [ 162.171977][T11632] EXT4-fs: inline encryption not supported [ 162.202111][T11632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.269058][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.594580][T11695] loop8: detected capacity change from 0 to 764 [ 162.799367][T11720] loop1: detected capacity change from 0 to 1024 [ 162.814378][T11720] EXT4-fs: Ignoring removed bh option [ 162.819917][T11720] EXT4-fs: inline encryption not supported [ 162.841922][T11720] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.855935][T11720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 162.872693][T11729] xt_connbytes: Forcing CT accounting to be enabled [ 162.879451][T11729] set match dimension is over the limit! [ 162.885664][T11720] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3441: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.900056][T11720] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3441: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.914482][T11720] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3441: Failed to acquire dquot type 0 [ 162.926450][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3446'. [ 162.937563][T11731] IPVS: Error connecting to the multicast addr [ 162.947969][T11720] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 162.957647][ C0] ip6_tnl_xmit_ctl: 91 callbacks suppressed [ 162.957667][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.971671][T11720] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3441: mark_inode_dirty error [ 162.983369][T11720] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 162.993888][T11720] EXT4-fs (loop1): 1 orphan inode deleted [ 163.000014][T11720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.012639][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.027386][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 163.049793][T11720] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 163.079758][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.190278][T11756] loop1: detected capacity change from 0 to 256 [ 163.203198][T11756] FAT-fs (loop1): Directory bread(block 64) failed [ 163.209868][T11756] FAT-fs (loop1): Directory bread(block 65) failed [ 163.216561][T11756] FAT-fs (loop1): Directory bread(block 66) failed [ 163.223446][T11756] FAT-fs (loop1): Directory bread(block 67) failed [ 163.230107][T11756] FAT-fs (loop1): Directory bread(block 68) failed [ 163.237036][T11756] FAT-fs (loop1): Directory bread(block 69) failed [ 163.243900][T11756] FAT-fs (loop1): Directory bread(block 70) failed [ 163.250509][T11756] FAT-fs (loop1): Directory bread(block 71) failed [ 163.257202][T11756] FAT-fs (loop1): Directory bread(block 72) failed [ 163.263863][T11756] FAT-fs (loop1): Directory bread(block 73) failed [ 163.297601][T11756] bio_check_eod: 25 callbacks suppressed [ 163.297620][T11756] syz.1.3458: attempt to access beyond end of device [ 163.297620][T11756] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 163.318656][T11756] syz.1.3458: attempt to access beyond end of device [ 163.318656][T11756] loop1: rw=34817, sector=1224, nr_sectors = 2 limit=256 [ 163.342959][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.436124][T11776] loop1: detected capacity change from 0 to 512 [ 163.443546][T11776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.454929][T11776] EXT4-fs (loop1): 1 truncate cleaned up [ 163.461149][T11776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.486861][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.574584][ T3649] hid_parser_main: 8 callbacks suppressed [ 163.574605][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.587829][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.595284][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.602762][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.610247][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.617677][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.625108][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.632529][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.639950][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.647468][ T3649] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.655862][ T3649] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 164.116034][T11804] xt_connbytes: Forcing CT accounting to be enabled [ 164.122944][T11804] set match dimension is over the limit! [ 164.188238][T11818] netlink: 'syz.6.3485': attribute type 21 has an invalid length. [ 164.196236][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3485'. [ 164.208179][T11818] netlink: 'syz.6.3485': attribute type 21 has an invalid length. [ 164.216146][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3485'. [ 164.556025][T11847] loop6: detected capacity change from 0 to 512 [ 164.572998][T11847] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 164.599350][T11847] EXT4-fs (loop6): 1 truncate cleaned up [ 164.605642][T11847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.633808][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.830232][T11865] tipc: Started in network mode [ 164.835214][T11865] tipc: Node identity ac14140f, cluster identity 4711 [ 164.842492][T11865] tipc: New replicast peer: 255.255.255.255 [ 164.848772][T11865] tipc: Enabled bearer , priority 10 [ 164.902483][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 164.950547][T11875] loop1: detected capacity change from 0 to 512 [ 164.957666][T11875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.972746][T11875] EXT4-fs (loop1): 1 truncate cleaned up [ 164.978901][T11875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.012167][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.044992][T11887] loop8: detected capacity change from 0 to 256 [ 165.059138][T11887] FAT-fs (loop8): Directory bread(block 64) failed [ 165.066242][T11887] FAT-fs (loop8): Directory bread(block 65) failed [ 165.072925][T11887] FAT-fs (loop8): Directory bread(block 66) failed [ 165.079744][T11887] FAT-fs (loop8): Directory bread(block 67) failed [ 165.086435][T11887] FAT-fs (loop8): Directory bread(block 68) failed [ 165.093172][T11887] FAT-fs (loop8): Directory bread(block 69) failed [ 165.099755][T11887] FAT-fs (loop8): Directory bread(block 70) failed [ 165.107051][T11887] FAT-fs (loop8): Directory bread(block 71) failed [ 165.114176][T11887] FAT-fs (loop8): Directory bread(block 72) failed [ 165.120846][T11887] FAT-fs (loop8): Directory bread(block 73) failed [ 165.151495][T11887] syz.8.3516: attempt to access beyond end of device [ 165.151495][T11887] loop8: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 165.166806][T11887] syz.8.3516: attempt to access beyond end of device [ 165.166806][T11887] loop8: rw=34817, sector=1224, nr_sectors = 2 limit=256 [ 165.221674][T11893] tipc: Started in network mode [ 165.226681][T11893] tipc: Node identity ac14140f, cluster identity 4711 [ 165.234918][T11893] tipc: New replicast peer: 255.255.255.255 [ 165.241230][T11893] tipc: Enabled bearer , priority 10 [ 165.269148][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 165.362157][ T4232] Bluetooth: hci0: command 0x1003 tx timeout [ 165.368329][ T3691] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.441744][T11902] loop7: detected capacity change from 0 to 512 [ 165.453275][T11902] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 165.480280][T11902] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3523: invalid indirect mapped block 4294967295 (level 0) [ 165.496606][T11902] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3523: invalid indirect mapped block 4294967295 (level 1) [ 165.521322][T11902] EXT4-fs (loop7): 1 orphan inode deleted [ 165.527130][T11902] EXT4-fs (loop7): 1 truncate cleaned up [ 165.549385][T11902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.582717][T11914] Set syz1 is full, maxelem 14 reached [ 165.612192][T11902] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 165.673978][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.752883][T11921] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 165.835005][T11950] Set syz1 is full, maxelem 14 reached [ 165.848004][ T3422] tipc: Node number set to 2886997007 [ 166.297651][T11978] Set syz1 is full, maxelem 14 reached [ 166.352203][ T3395] tipc: Node number set to 2886997007 [ 166.390146][T11993] loop6: detected capacity change from 0 to 512 [ 166.400493][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 166.400509][ T29] audit: type=1326 audit(1763537187.635:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.441275][T11993] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 166.451499][ T29] audit: type=1326 audit(1763537187.665:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.475084][ T29] audit: type=1326 audit(1763537187.665:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.498604][ T29] audit: type=1326 audit(1763537187.665:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.522124][ T29] audit: type=1326 audit(1763537187.665:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.545646][ T29] audit: type=1326 audit(1763537187.665:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.569309][ T29] audit: type=1326 audit(1763537187.665:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.592860][ T29] audit: type=1326 audit(1763537187.665:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.616427][ T29] audit: type=1326 audit(1763537187.665:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11994 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 166.629159][T11993] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3562: invalid indirect mapped block 4294967295 (level 0) [ 166.639997][ T29] audit: type=1326 audit(1763537187.665:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11995 comm="syz.7.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 166.655536][T11993] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3562: invalid indirect mapped block 4294967295 (level 1) [ 166.706639][T11993] EXT4-fs (loop6): 1 orphan inode deleted [ 166.712461][T11993] EXT4-fs (loop6): 1 truncate cleaned up [ 166.720046][T11993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.779781][T11993] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 166.816059][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.855982][T12028] loop6: detected capacity change from 0 to 512 [ 166.872924][T12028] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 166.894183][T12028] EXT4-fs (loop6): 1 truncate cleaned up [ 166.900367][T12028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.965466][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.009318][T12037] loop6: detected capacity change from 0 to 128 [ 167.010611][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'. [ 167.024691][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'. [ 167.031226][T12037] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 167.060754][T12037] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 167.068938][T12037] FAT-fs (loop6): Filesystem has been set read-only [ 167.091003][T12037] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 167.221125][T12045] 9pnet_fd: Insufficient options for proto=fd [ 167.239322][T12047] loop8: detected capacity change from 0 to 256 [ 167.253108][T12049] loop1: detected capacity change from 0 to 512 [ 167.306713][T12049] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.333777][T12049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3586: invalid indirect mapped block 4294967295 (level 0) [ 167.358093][T12049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3586: invalid indirect mapped block 4294967295 (level 1) [ 167.382890][T12049] EXT4-fs (loop1): 1 orphan inode deleted [ 167.388743][T12049] EXT4-fs (loop1): 1 truncate cleaned up [ 167.394929][T12049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.416464][T12049] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 167.453309][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.516635][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3594'. [ 167.941386][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 168.305232][T12135] 9pnet_fd: Insufficient options for proto=fd [ 168.579683][T12152] loop1: detected capacity change from 0 to 128 [ 168.604175][T12152] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 168.635265][T12152] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 168.643494][T12152] FAT-fs (loop1): Filesystem has been set read-only [ 168.652599][T12152] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 168.890822][T12161] loop1: detected capacity change from 0 to 512 [ 168.915490][T12161] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3634: bad orphan inode 11862016 [ 168.929033][T12161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 168.942191][T12161] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.056550][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 169.129726][T12192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12192 comm=syz.7.3648 [ 169.142369][T12192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12192 comm=syz.7.3648 [ 169.538184][T12282] loop8: detected capacity change from 0 to 1024 [ 169.549537][T12282] EXT4-fs: inline encryption not supported [ 169.570282][T12282] journal_path: Lookup failure for './file1/file0' [ 169.576951][T12282] EXT4-fs: error: could not find journal device path [ 169.990442][ T3402] IPVS: starting estimator thread 0... [ 170.082995][T12318] IPVS: using max 1920 ests per chain, 96000 per kthread [ 170.225983][T12334] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 170.306077][T12344] loop8: detected capacity change from 0 to 2048 [ 170.388665][T12356] loop8: detected capacity change from 0 to 1024 [ 170.414681][T12356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.545280][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.577238][T12375] loop8: detected capacity change from 0 to 512 [ 170.596423][T12375] EXT4-fs (loop8): 1 orphan inode deleted [ 170.613704][T12247] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:46: Failed to release dquot type 1 [ 170.619617][T12375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.644011][T12375] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.698775][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.909360][T12404] loop6: detected capacity change from 0 to 1024 [ 170.926255][T12404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.984786][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.271193][T12439] loop8: detected capacity change from 0 to 256 [ 171.278189][T12439] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.418118][T12457] loop1: detected capacity change from 0 to 1024 [ 171.426345][T12457] EXT4-fs: Ignoring removed bh option [ 171.433780][T12457] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.454760][T12457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.489455][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 171.489473][ T29] audit: type=1400 audit(1763537192.725:4277): avc: denied { mounton } for pid=12456 comm="syz.1.3730" path="/253/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.519066][ T29] audit: type=1400 audit(1763537192.725:4278): avc: denied { mount } for pid=12456 comm="syz.1.3730" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.549151][ T29] audit: type=1400 audit(1763537192.785:4279): avc: denied { unmount } for pid=9386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.549830][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.612782][T12466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3734'. [ 171.658690][T12473] tmpfs: Unknown parameter 'nolazytime' [ 171.658681][ T29] audit: type=1400 audit(1763537192.895:4280): avc: denied { mounton } for pid=12472 comm="syz.4.3736" path="/253/file0" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.938919][ T29] audit: type=1326 audit(1763537193.175:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.8.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 171.962496][ T29] audit: type=1326 audit(1763537193.175:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.8.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 171.986033][ T29] audit: type=1326 audit(1763537193.175:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.8.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 172.009689][ T29] audit: type=1326 audit(1763537193.175:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.8.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 172.033250][ T29] audit: type=1326 audit(1763537193.175:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.8.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 172.056772][ T29] audit: type=1326 audit(1763537193.175:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12493 comm="syz.8.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30961af6c9 code=0x7ffc0000 [ 172.312734][T12522] netlink: 87 bytes leftover after parsing attributes in process `syz.6.3758'. [ 172.450401][T12535] tmpfs: Unknown parameter 'nolazytime' [ 172.476741][T12539] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.541067][T12548] loop7: detected capacity change from 0 to 1024 [ 172.548076][T12548] EXT4-fs: Ignoring removed bh option [ 172.576631][T12548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.609519][T12548] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.3769: Allocating blocks 385-513 which overlap fs metadata [ 172.624071][T12548] EXT4-fs (loop7): Remounting filesystem read-only [ 172.632004][T12547] EXT4-fs (loop7): pa ffff888106e4c7e0: logic 16, phys. 129, len 24 [ 172.701693][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.754504][T12235] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.022769][T12572] loop7: detected capacity change from 0 to 2048 [ 173.072408][T12572] loop7: p3 < > p4 < > [ 173.076631][T12572] loop7: partition table partially beyond EOD, truncated [ 173.084109][T12572] loop7: p3 start 4284289 is beyond EOD, truncated [ 173.186583][T12576] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 173.493258][T12604] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.568669][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3805'. [ 173.577841][T12608] netlink: 'syz.4.3805': attribute type 7 has an invalid length. [ 173.585605][T12608] netlink: 'syz.4.3805': attribute type 8 has an invalid length. [ 173.593401][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 174.379485][T12666] xt_hashlimit: max too large, truncated to 1048576 [ 174.546413][T12684] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 174.596064][T12694] xt_hashlimit: max too large, truncated to 1048576 [ 174.606531][T12698] xt_hashlimit: max too large, truncated to 1048576 [ 174.734252][T12721] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 174.792323][ T4232] Bluetooth: hci0: command 0x1003 tx timeout [ 174.798465][ T3691] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.893141][T12748] 9pnet_fd: Insufficient options for proto=fd [ 174.939405][T12752] netlink: 'syz.4.3864': attribute type 21 has an invalid length. [ 174.947596][T12752] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3864'. [ 174.984462][T12761] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3869'. [ 175.051463][T12771] macvtap0: entered promiscuous mode [ 175.065783][T12771] macvtap0: left promiscuous mode [ 175.067700][T12764] SELinux: failed to load policy [ 175.079606][T12774] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3874'. [ 175.113267][ T1035] kernel read not supported for file /vcs (pid: 1035 comm: kworker/1:2) [ 175.254151][T12785] loop6: detected capacity change from 0 to 8192 [ 175.284384][ T3402] kernel read not supported for file /vcs (pid: 3402 comm: kworker/0:3) [ 175.483895][T12794] loop7: detected capacity change from 0 to 32768 [ 175.543596][T12794] loop7: p1 p3 < p5 p6 > [ 175.548043][T12794] loop7: partition table partially beyond EOD, truncated [ 175.642505][T12843] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3907'. [ 175.779749][T12858] IPv6: Can't replace route, no match found [ 175.921370][T12872] loop7: detected capacity change from 0 to 2048 [ 175.972655][T12872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 176.034280][T12868] loop1: detected capacity change from 0 to 32768 [ 176.063672][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3924'. [ 176.073284][T12868] loop1: p1 p3 < p5 p6 > [ 176.077663][T12868] loop1: partition table partially beyond EOD, truncated [ 176.099958][T12889] IPv6: Can't replace route, no match found [ 176.361194][T12914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3937'. [ 176.370284][T12914] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3937'. [ 176.379834][T12914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3937'. [ 176.527127][T12927] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 176.752800][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 176.991562][T12954] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 177.000476][T12954] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.056874][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 177.056893][ T29] audit: type=1326 audit(1763537198.295:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.116005][ T29] audit: type=1326 audit(1763537198.295:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.138734][ T29] audit: type=1326 audit(1763537198.325:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.161550][ T29] audit: type=1326 audit(1763537198.325:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.184356][ T29] audit: type=1326 audit(1763537198.325:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.207107][ T29] audit: type=1326 audit(1763537198.325:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.229787][ T29] audit: type=1326 audit(1763537198.325:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.252580][ T29] audit: type=1326 audit(1763537198.325:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12961 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 177.372261][ T29] audit: type=1400 audit(1763537198.605:4525): avc: granted { setsecparam } for pid=12979 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 177.447919][T12992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 177.466597][ T29] audit: type=1326 audit(1763537198.705:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.7.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 177.491867][T12992] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.701282][T13014] SELinux: security_context_str_to_sid () failed with errno=-22 [ 178.074672][T13056] netlink: 'syz.6.4003': attribute type 4 has an invalid length. [ 178.083971][T13056] .`: renamed from bond0 [ 178.189745][T13066] Restarting kernel threads ... [ 178.203154][T13066] Done restarting kernel threads. [ 178.320301][T13088] openvswitch: netlink: Missing key (keys=40, expected=80) [ 178.365965][T13097] netlink: 'syz.4.4020': attribute type 13 has an invalid length. [ 178.395655][T13097] gretap0: refused to change device tx_queue_len [ 178.402067][T13097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.496609][T13113] loop8: detected capacity change from 0 to 1024 [ 178.517065][T13113] EXT4-fs: Ignoring removed bh option [ 178.534862][T13113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.560331][T13113] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.4028: Allocating blocks 385-513 which overlap fs metadata [ 178.577938][T13128] __nla_validate_parse: 12 callbacks suppressed [ 178.578012][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'. [ 178.595451][T13113] EXT4-fs (loop8): Remounting filesystem read-only [ 178.613903][T13112] EXT4-fs (loop8): pa ffff888106e4c7e0: logic 16, phys. 129, len 24 [ 178.657132][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4037'. [ 178.702806][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.808352][T13157] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.886899][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.895747][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.184403][T13212] loop6: detected capacity change from 0 to 1024 [ 179.191127][T13212] EXT4-fs: inline encryption not supported [ 179.197186][T13212] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.214800][T13212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.261760][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.300345][T13225] netlink: 'syz.1.4080': attribute type 13 has an invalid length. [ 179.321248][T13225] gretap0: refused to change device tx_queue_len [ 179.327705][T13225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.485814][T13249] loop7: detected capacity change from 0 to 1024 [ 179.492763][T13249] EXT4-fs: inline encryption not supported [ 179.498695][T13249] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.525125][T13249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.567425][T13239] Restarting kernel threads ... [ 179.572602][T13239] Done restarting kernel threads. [ 179.624130][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.863561][T13286] loop8: detected capacity change from 0 to 1024 [ 179.870384][T13286] EXT4-fs: inline encryption not supported [ 179.876637][T13286] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.914101][T13286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.945546][T13284] Restarting kernel threads ... [ 179.954930][T13284] Done restarting kernel threads. [ 180.008650][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.089331][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 180.278982][T13321] netlink: 'syz.4.4120': attribute type 4 has an invalid length. [ 180.286866][T13321] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4120'. [ 180.312215][T13321] .`: renamed from bond0 (while UP) [ 180.442042][T13337] serio: Serial port ttyS3 [ 180.456983][T13340] Restarting kernel threads ... [ 180.466972][T13340] Done restarting kernel threads. [ 180.467501][T13339] loop1: detected capacity change from 0 to 1024 [ 180.488858][T13339] EXT4-fs: inline encryption not supported [ 180.503295][T13339] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.527400][T13339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.609727][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4142'. [ 180.657724][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4131'. [ 180.667414][T13355] netlink: 312 bytes leftover after parsing attributes in process `syz.8.4131'. [ 180.676536][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4131'. [ 180.695348][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.736548][T13358] loop6: detected capacity change from 0 to 512 [ 180.748655][T13358] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.775799][T13358] EXT4-fs (loop6): 1 truncate cleaned up [ 180.783915][T13358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.813193][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4141'. [ 180.837493][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.847639][T13377] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13377 comm=syz.8.4146 [ 180.852441][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4141'. [ 180.870520][T13368] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 180.885905][T13378] loop7: detected capacity change from 0 to 1024 [ 180.893455][T13378] EXT4-fs: inline encryption not supported [ 180.900669][T13378] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.936948][T13378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.004300][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.265015][T13434] loop7: detected capacity change from 0 to 512 [ 181.286309][T13434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 181.299400][T13434] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.314326][T13434] EXT4-fs (loop7): shut down requested (1) [ 181.321761][T13434] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 181.342856][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 181.475788][T13457] loop1: detected capacity change from 0 to 256 [ 181.487966][T13457] FAT-fs (loop1): Directory bread(block 64) failed [ 181.494718][T13457] FAT-fs (loop1): Directory bread(block 65) failed [ 181.501338][T13457] FAT-fs (loop1): Directory bread(block 66) failed [ 181.508020][T13457] FAT-fs (loop1): Directory bread(block 67) failed [ 181.515418][T13457] FAT-fs (loop1): Directory bread(block 68) failed [ 181.522031][T13457] FAT-fs (loop1): Directory bread(block 69) failed [ 181.528842][T13457] FAT-fs (loop1): Directory bread(block 70) failed [ 181.535458][T13457] FAT-fs (loop1): Directory bread(block 71) failed [ 181.542063][T13457] FAT-fs (loop1): Directory bread(block 72) failed [ 181.548838][T13457] FAT-fs (loop1): Directory bread(block 73) failed [ 181.562238][T13457] syz.1.4182: attempt to access beyond end of device [ 181.562238][T13457] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 181.576122][T13457] syz.1.4182: attempt to access beyond end of device [ 181.576122][T13457] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 181.693121][T13477] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 181.869919][T13499] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 182.042827][T13522] loop1: detected capacity change from 0 to 256 [ 182.203368][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 182.203382][ T29] audit: type=1400 audit(1763537203.445:4709): avc: denied { mounton } for pid=13542 comm="syz.8.4221" path="/501/file1" dev="tmpfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 182.255777][ T29] audit: type=1326 audit(1763537203.495:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.279547][ T29] audit: type=1326 audit(1763537203.495:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.303092][ T29] audit: type=1326 audit(1763537203.495:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.326846][ T29] audit: type=1326 audit(1763537203.495:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.350585][ T29] audit: type=1326 audit(1763537203.495:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.374345][ T29] audit: type=1326 audit(1763537203.495:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.398040][ T29] audit: type=1326 audit(1763537203.495:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.425698][T13554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13554 comm=syz.6.4223 [ 182.438677][T13553] loop7: detected capacity change from 0 to 512 [ 182.444995][ T29] audit: type=1326 audit(1763537203.665:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.468623][ T29] audit: type=1326 audit(1763537203.675:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.4.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6f68f6c9 code=0x7ffc0000 [ 182.515315][T13553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.532217][T13553] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.554350][T13553] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4224: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 182.576170][T13553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 182.585245][T13553] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4224: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 182.603996][T13553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 182.615047][T13553] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4224: bg 0: block 18: invalid block bitmap [ 182.627728][T13553] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4224: Failed to acquire dquot type 1 [ 182.662738][T13570] loop1: detected capacity change from 0 to 512 [ 182.669908][T13570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.680465][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.690997][T13570] EXT4-fs (loop1): 1 truncate cleaned up [ 182.698851][T13570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.748410][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.761975][T13580] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 182.790823][T13584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13584 comm=syz.1.4235 [ 182.918264][T13603] loop6: detected capacity change from 0 to 256 [ 183.386178][T13662] loop1: detected capacity change from 0 to 512 [ 183.404440][T13662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.417451][T13662] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.435273][T13662] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4273: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 183.452793][T13662] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 183.472230][T13662] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4273: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 183.494564][T13662] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 183.508251][T13662] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4273: bg 0: block 18: invalid block bitmap [ 183.524129][T13662] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4273: Failed to acquire dquot type 1 [ 183.556585][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.581615][T13686] loop7: detected capacity change from 0 to 1024 [ 183.600534][T13686] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.622426][T13686] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 183.630564][T13686] EXT4-fs (loop7): orphan cleanup on readonly fs [ 183.637160][T13685] loop8: detected capacity change from 0 to 8192 [ 183.648613][T13686] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.4280: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.662885][T13690] loop1: detected capacity change from 0 to 512 [ 183.679335][T13686] EXT4-fs (loop7): 1 orphan inode deleted [ 183.688457][T13686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.744142][T13690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.769275][T13690] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.818399][T13703] loop8: detected capacity change from 0 to 512 [ 183.849029][T13703] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 183.873140][T13703] EXT4-fs (loop8): 1 truncate cleaned up [ 184.363978][T13754] loop1: detected capacity change from 0 to 512 [ 184.373782][T13754] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.387377][T13754] EXT4-fs (loop1): shut down requested (1) [ 184.396778][T13754] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 184.439198][T13764] loop7: detected capacity change from 0 to 512 [ 184.466791][T13764] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.533162][T13772] loop7: detected capacity change from 0 to 8192 [ 184.625468][T13786] loop7: detected capacity change from 0 to 764 [ 184.633801][T13786] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 184.642413][T13784] loop1: detected capacity change from 0 to 4096 [ 184.649004][T13786] Symlink component flag not implemented [ 184.655049][T13786] Symlink component flag not implemented (7) [ 184.740392][T13797] loop1: detected capacity change from 0 to 128 [ 184.797740][T13801] $H: renamed from bond0 [ 184.812350][T13801] $H: entered promiscuous mode [ 184.817548][T13801] bond_slave_0: entered promiscuous mode [ 184.823342][T13801] bond_slave_1: entered promiscuous mode [ 184.909165][T13815] loop7: detected capacity change from 0 to 164 [ 184.915590][T13813] loop6: detected capacity change from 0 to 4096 [ 184.925660][T13815] ISOFS: unable to read i-node block [ 184.931340][T13815] isofs_fill_super: get root inode failed [ 185.200130][T13866] loop6: detected capacity change from 0 to 128 [ 185.601739][T13905] loop6: detected capacity change from 0 to 512 [ 185.615279][T13905] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.634548][T13905] EXT4-fs error (device loop6): ext4_empty_dir:3086: inode #12: block 32: comm syz.6.4378: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 185.655466][T13905] EXT4-fs (loop6): Remounting filesystem read-only [ 185.662225][T13905] EXT4-fs warning (device loop6): ext4_empty_dir:3089: inode #12: comm syz.6.4378: directory missing '.' [ 185.702864][ T3649] hid_parser_main: 22 callbacks suppressed [ 185.702883][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.716192][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.722214][T13229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.723654][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.739451][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.746906][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.754355][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.761798][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.769219][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.776725][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.784218][ T3649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.792453][ T3649] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 185.916606][T13929] loop9: detected capacity change from 0 to 7 [ 185.943292][T13929] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.973558][T13929] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.981508][T13929] loop9: unable to read partition table [ 185.996492][T13929] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.996492][T13929] ) failed (rc=-5) [ 186.114538][T13941] loop1: detected capacity change from 0 to 164 [ 186.137257][T13941] ISOFS: unable to read i-node block [ 186.148781][T13941] isofs_fill_super: get root inode failed [ 186.157223][T13951] __nla_validate_parse: 7 callbacks suppressed [ 186.157252][T13951] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 186.182188][T13229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.276095][T13970] sch_fq: defrate 6 ignored. [ 186.340955][T13977] loop6: detected capacity change from 0 to 164 [ 186.364130][T13977] ISOFS: unable to read i-node block [ 186.384848][T13977] isofs_fill_super: get root inode failed [ 186.401237][T13983] loop8: detected capacity change from 0 to 512 [ 186.410433][T13985] loop1: detected capacity change from 0 to 2048 [ 186.418311][T13983] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.455991][T13983] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.477783][T13985] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 186.536718][T14003] loop1: detected capacity change from 0 to 512 [ 186.565168][T14003] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.593753][T14003] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz.1.4423: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 186.623681][T14003] EXT4-fs (loop1): Remounting filesystem read-only [ 186.630242][T14003] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #12: comm syz.1.4423: directory missing '.' [ 186.714614][T14021] loop7: detected capacity change from 0 to 1024 [ 186.853777][T14040] 9pnet: Could not find request transport:  [ 186.885297][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4444'. [ 187.157423][T14096] xt_hashlimit: max too large, truncated to 1048576 [ 187.274496][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 187.274514][ T29] audit: type=1326 audit(1763537208.515:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.7.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.316715][T14106] infiniband syz!: set active [ 187.321447][T14106] infiniband syz!: added team_slave_0 [ 187.368797][T14106] RDS/IB: syz!: added [ 187.377258][ T29] audit: type=1326 audit(1763537208.515:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.7.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.400928][ T29] audit: type=1326 audit(1763537208.515:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.7.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.424454][ T29] audit: type=1326 audit(1763537208.515:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.7.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.448119][ T29] audit: type=1326 audit(1763537208.515:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.7.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.448129][T14106] smc: adding ib device syz! with port count 1 [ 187.448148][T14106] smc: ib device syz! port 1 has no pnetid [ 187.478918][T14125] atomic_op ffff88811a434528 conn xmit_atomic 0000000000000000 [ 187.484300][ T29] audit: type=1326 audit(1763537208.605:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="syz.7.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.515344][ T29] audit: type=1326 audit(1763537208.605:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="syz.7.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.538886][ T29] audit: type=1326 audit(1763537208.605:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="syz.7.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.562390][ T29] audit: type=1326 audit(1763537208.605:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="syz.7.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.585965][ T29] audit: type=1326 audit(1763537208.615:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="syz.7.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 187.871877][T14150] loop1: detected capacity change from 0 to 1024 [ 188.150689][T14191] xt_hashlimit: max too large, truncated to 1048576 [ 188.254575][T14207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14207 comm=syz.8.4514 [ 188.267362][T14207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14207 comm=syz.8.4514 [ 188.301771][T14209] loop7: detected capacity change from 0 to 256 [ 188.319375][T14209] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.345799][T14217] atomic_op ffff888120e77528 conn xmit_atomic 0000000000000000 [ 188.418548][T14228] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 188.425124][T14228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.432647][T14228] vhci_hcd vhci_hcd.0: Device attached [ 188.444752][T14229] vhci_hcd: connection closed [ 188.445086][ T37] vhci_hcd: stop threads [ 188.454060][ T37] vhci_hcd: release socket [ 188.458498][ T37] vhci_hcd: disconnect device [ 188.631237][T14243] loop7: detected capacity change from 0 to 164 [ 188.643460][T14245] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4530'. [ 188.693572][T14247] loop1: detected capacity change from 0 to 128 [ 188.710826][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4533'. [ 188.737316][T14247] ext4 filesystem being mounted at /420 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.936660][T14282] loop1: detected capacity change from 0 to 256 [ 188.943898][T14282] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.959850][T14282] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.046046][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 189.205575][T14329] loop6: detected capacity change from 0 to 256 [ 189.218512][T14329] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.453444][T14368] loop1: detected capacity change from 0 to 256 [ 189.461788][T14368] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.614881][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'. [ 189.667813][T14406] loop8: detected capacity change from 0 to 256 [ 189.685723][T14406] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.712708][T14411] 9pnet_fd: Insufficient options for proto=fd [ 189.750734][T14418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14418 comm=syz.1.4606 [ 189.763454][T14418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14418 comm=syz.1.4606 [ 189.767563][T14416] loop6: detected capacity change from 0 to 1024 [ 189.819420][T14423] loop7: detected capacity change from 0 to 256 [ 189.833316][T14423] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.851902][T14416] EXT4-fs mount: 26 callbacks suppressed [ 189.851971][T14416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.872370][T14423] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.943775][T14437] loop8: detected capacity change from 0 to 128 [ 189.966841][T14437] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.993375][T14437] ext4 filesystem being mounted at /561 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.035175][ T7824] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.183940][T14467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4628'. [ 190.477942][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.635835][T14501] loop8: detected capacity change from 0 to 256 [ 190.660763][T14501] FAT-fs (loop8): Directory bread(block 64) failed [ 190.668300][T14501] FAT-fs (loop8): Directory bread(block 65) failed [ 190.675359][T14501] FAT-fs (loop8): Directory bread(block 66) failed [ 190.728469][T14501] FAT-fs (loop8): Directory bread(block 67) failed [ 190.745547][T14501] FAT-fs (loop8): Directory bread(block 68) failed [ 190.753563][T14501] FAT-fs (loop8): Directory bread(block 69) failed [ 190.770359][T14501] FAT-fs (loop8): Directory bread(block 70) failed [ 190.795165][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4646'. [ 190.804681][T14501] FAT-fs (loop8): Directory bread(block 71) failed [ 190.811258][T14501] FAT-fs (loop8): Directory bread(block 72) failed [ 190.828624][T14501] FAT-fs (loop8): Directory bread(block 73) failed [ 191.448759][T14531] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4654'. [ 191.548321][T14542] loop1: detected capacity change from 0 to 128 [ 191.566531][T14542] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 191.739676][T14550] loop6: detected capacity change from 0 to 1024 [ 191.757327][T14550] EXT4-fs: Ignoring removed orlov option [ 191.757343][T14501] syz.8.4641 (14501) used greatest stack depth: 6936 bytes left [ 191.804014][T14550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.989163][T14571] loop7: detected capacity change from 0 to 1024 [ 192.013888][T14571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.063361][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.111421][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.137802][T14583] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4678'. [ 192.288346][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 192.288364][ T29] audit: type=1326 audit(1763537213.525:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.378932][ T29] audit: type=1326 audit(1763537213.525:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.402789][ T29] audit: type=1326 audit(1763537213.525:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.426408][ T29] audit: type=1326 audit(1763537213.525:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.450043][ T29] audit: type=1326 audit(1763537213.525:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.473680][ T29] audit: type=1326 audit(1763537213.525:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.497239][ T29] audit: type=1326 audit(1763537213.525:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.520801][ T29] audit: type=1326 audit(1763537213.525:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.544309][ T29] audit: type=1326 audit(1763537213.525:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.567943][ T29] audit: type=1326 audit(1763537213.525:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14596 comm="syz.6.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 192.643469][T14619] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 192.806506][T14635] SELinux: failed to load policy [ 192.935379][T14659] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4712'. [ 193.009449][T14664] SELinux: failed to load policy [ 193.032157][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.064918][T14678] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4721'. [ 193.083675][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4719'. [ 193.148695][T14685] loop7: detected capacity change from 0 to 128 [ 193.171534][T14685] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 193.321330][T14701] SELinux: failed to load policy [ 193.340879][T14703] loop7: detected capacity change from 0 to 512 [ 193.347728][T14703] journal_path: Non-blockdev passed as './file2' [ 193.354235][T14703] EXT4-fs: error: could not find journal device path [ 193.386229][T14707] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4733'. [ 193.507463][T14721] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.4743'. [ 193.538001][T14723] atomic_op ffff888118c9c128 conn xmit_atomic 0000000000000000 [ 193.606267][T14733] loop7: detected capacity change from 0 to 512 [ 193.613917][T14733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.642629][T14737] loop8: detected capacity change from 0 to 1024 [ 193.650808][T14737] EXT4-fs: Ignoring removed orlov option [ 193.657552][T14733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.670488][T14733] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.695319][T14737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.708604][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.825290][T14749] loop1: detected capacity change from 0 to 512 [ 193.835659][T14749] journal_path: Non-blockdev passed as './file2' [ 193.842264][T14749] EXT4-fs: error: could not find journal device path [ 193.892542][T14757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4756'. [ 193.901585][T14757] netem: unknown loss type 13 [ 193.906368][T14757] netem: change failed [ 193.923746][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.020825][T14770] ALSA: seq fatal error: cannot create timer (-16) [ 194.040927][T14772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4761'. [ 194.107643][T14782] loop1: detected capacity change from 0 to 1024 [ 194.117591][T14782] EXT4-fs: Ignoring removed orlov option [ 194.136042][T14782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.179486][T14794] loop8: detected capacity change from 0 to 128 [ 194.200933][ T37] kworker/u8:2: attempt to access beyond end of device [ 194.200933][ T37] loop8: rw=1, sector=138, nr_sectors = 2 limit=128 [ 194.214448][ T37] Buffer I/O error on dev loop8, logical block 69, lost async page write [ 194.262578][T14794] syz.8.4773: attempt to access beyond end of device [ 194.262578][T14794] loop8: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 194.276150][T14794] Buffer I/O error on dev loop8, logical block 70, lost async page write [ 194.284983][T14794] syz.8.4773: attempt to access beyond end of device [ 194.284983][T14794] loop8: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 194.290406][T14801] atomic_op ffff88812c2e5528 conn xmit_atomic 0000000000000000 [ 194.299244][T14794] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 194.299359][T14794] syz.8.4773: attempt to access beyond end of device [ 194.299359][T14794] loop8: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 194.328893][T14794] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 194.337728][T14794] syz.8.4773: attempt to access beyond end of device [ 194.337728][T14794] loop8: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 194.372772][ T9386] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.439555][T14807] ALSA: seq fatal error: cannot create timer (-16) [ 194.506947][T14818] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.4784'. [ 194.516552][T14818] netlink: zone id is out of range [ 194.521707][T14818] netlink: zone id is out of range [ 194.527167][T14818] netlink: zone id is out of range [ 194.543220][T14818] netlink: set zone limit has 8 unknown bytes [ 194.605343][T14820] loop8: detected capacity change from 0 to 8192 [ 194.650664][ T7824] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 194.658588][ T7824] FAT-fs (loop8): Filesystem has been set read-only [ 194.730486][T14841] syz_tun: tun_chr_ioctl cmd 2147767520 [ 194.819625][T14831] futex_wake_op: syz.7.4789 tries to shift op by -1; fix this program [ 195.090487][T14874] loop6: detected capacity change from 0 to 256 [ 195.116138][T14874] FAT-fs (loop6): Directory bread(block 64) failed [ 195.132331][T14874] FAT-fs (loop6): Directory bread(block 65) failed [ 195.152446][T14874] FAT-fs (loop6): Directory bread(block 66) failed [ 195.167544][T14874] FAT-fs (loop6): Directory bread(block 67) failed [ 195.181248][T14874] FAT-fs (loop6): Directory bread(block 68) failed [ 195.184965][T14858] futex_wake_op: syz.8.4810 tries to shift op by -1; fix this program [ 195.193343][T14874] FAT-fs (loop6): Directory bread(block 69) failed [ 195.203442][T14874] FAT-fs (loop6): Directory bread(block 70) failed [ 195.210380][T14874] FAT-fs (loop6): Directory bread(block 71) failed [ 195.222216][T14874] FAT-fs (loop6): Directory bread(block 72) failed [ 195.229146][T14874] FAT-fs (loop6): Directory bread(block 73) failed [ 195.592676][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 195.624407][T14895] syz.7.4818 (14895) used greatest stack depth: 3592 bytes left [ 195.736845][T14909] loop7: detected capacity change from 0 to 1024 [ 195.758410][T14909] EXT4-fs: Ignoring removed orlov option [ 195.784580][T14909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.150125][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.918524][T14996] loop6: detected capacity change from 0 to 512 [ 196.927587][T14998] loop7: detected capacity change from 0 to 1024 [ 196.934459][T14996] EXT4-fs: Ignoring removed bh option [ 196.954160][T14998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.973860][T14996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.006566][T14996] ext4 filesystem being mounted at /675/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.062785][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.551434][T15048] xt_policy: output policy not valid in PREROUTING and INPUT [ 197.581587][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.587105][T15050] smc: net device bond0 applied user defined pnetid SYZ0 [ 197.620399][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 197.620413][ T29] audit: type=1326 audit(1763537226.853:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.662764][ T29] audit: type=1326 audit(1763537226.853:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.686345][ T29] audit: type=1326 audit(1763537226.853:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.710323][ T29] audit: type=1326 audit(1763537226.853:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.723688][T15064] __nla_validate_parse: 8 callbacks suppressed [ 197.723780][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4890'. [ 197.733910][ T29] audit: type=1326 audit(1763537226.853:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.759262][T15064] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 197.772748][ T29] audit: type=1326 audit(1763537226.853:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.772786][ T29] audit: type=1326 audit(1763537226.863:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.7.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 197.963397][T15082] wireguard0: entered promiscuous mode [ 197.968957][T15082] wireguard0: entered allmulticast mode [ 198.023454][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4903'. [ 198.032704][T15093] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 198.083187][ T29] audit: type=1326 audit(1763537227.323:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad563f6c9 code=0x7ffc0000 [ 198.120232][ T29] audit: type=1326 audit(1763537227.353:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcad563f6c9 code=0x7ffc0000 [ 198.143659][ T29] audit: type=1326 audit(1763537227.353:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15098 comm="syz.1.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad563f6c9 code=0x7ffc0000 [ 198.401943][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4917'. [ 198.411216][T15124] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 198.500559][T15129] wireguard0: entered promiscuous mode [ 198.506148][T15129] wireguard0: entered allmulticast mode [ 198.657821][T15148] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4929'. [ 198.666863][T15148] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4929'. [ 199.568616][T15164] syz.1.4937 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 199.582965][T15164] CPU: 0 UID: 0 PID: 15164 Comm: syz.1.4937 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.583003][T15164] Tainted: [W]=WARN [ 199.583012][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.583033][T15164] Call Trace: [ 199.583045][T15164] [ 199.583055][T15164] __dump_stack+0x1d/0x30 [ 199.583080][T15164] dump_stack_lvl+0xe8/0x140 [ 199.583170][T15164] dump_stack+0x15/0x1b [ 199.583194][T15164] dump_header+0x81/0x220 [ 199.583218][T15164] oom_kill_process+0x342/0x400 [ 199.583300][T15164] out_of_memory+0x979/0xb80 [ 199.583335][T15164] try_charge_memcg+0x610/0xa10 [ 199.583395][T15164] obj_cgroup_charge_pages+0xa6/0x150 [ 199.583424][T15164] __memcg_kmem_charge_page+0x9f/0x170 [ 199.583507][T15164] __alloc_frozen_pages_noprof+0x188/0x360 [ 199.583553][T15164] alloc_pages_mpol+0xb3/0x260 [ 199.583581][T15164] ? alloc_pages_noprof+0xf4/0x130 [ 199.583612][T15164] alloc_pages_noprof+0x90/0x130 [ 199.583677][T15164] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 199.583730][T15164] __kvmalloc_node_noprof+0x483/0x670 [ 199.583767][T15164] ? ip_set_alloc+0x24/0x30 [ 199.583815][T15164] ? ip_set_alloc+0x24/0x30 [ 199.583855][T15164] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 199.583898][T15164] ip_set_alloc+0x24/0x30 [ 199.583972][T15164] hash_netiface_create+0x282/0x740 [ 199.584016][T15164] ? __pfx_hash_netiface_create+0x10/0x10 [ 199.584049][T15164] ip_set_create+0x3cc/0x970 [ 199.584076][T15164] ? __nla_parse+0x40/0x60 [ 199.584177][T15164] nfnetlink_rcv_msg+0x4c6/0x590 [ 199.584227][T15164] netlink_rcv_skb+0x123/0x220 [ 199.584333][T15164] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 199.584428][T15164] nfnetlink_rcv+0x167/0x16c0 [ 199.584462][T15164] ? kmem_cache_free+0xe4/0x3d0 [ 199.584499][T15164] ? __kfree_skb+0x109/0x150 [ 199.584533][T15164] ? nlmon_xmit+0x4f/0x60 [ 199.584619][T15164] ? consume_skb+0x49/0x150 [ 199.584658][T15164] ? nlmon_xmit+0x4f/0x60 [ 199.584761][T15164] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 199.584842][T15164] ? __dev_queue_xmit+0x1200/0x2000 [ 199.584860][T15164] ? __dev_queue_xmit+0x182/0x2000 [ 199.584876][T15164] ? merge_sched_in+0x605/0xa30 [ 199.584912][T15164] ? ref_tracker_free+0x37d/0x3e0 [ 199.585074][T15164] ? __netlink_deliver_tap+0x4dc/0x500 [ 199.585100][T15164] netlink_unicast+0x5c0/0x690 [ 199.585186][T15164] netlink_sendmsg+0x58b/0x6b0 [ 199.585211][T15164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.585233][T15164] __sock_sendmsg+0x145/0x180 [ 199.585339][T15164] ____sys_sendmsg+0x31e/0x4e0 [ 199.585364][T15164] ___sys_sendmsg+0x17b/0x1d0 [ 199.585399][T15164] __x64_sys_sendmsg+0xd4/0x160 [ 199.585499][T15164] x64_sys_call+0x191e/0x3000 [ 199.585527][T15164] do_syscall_64+0xd2/0x200 [ 199.585551][T15164] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.585584][T15164] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.585663][T15164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.585711][T15164] RIP: 0033:0x7fcad563f6c9 [ 199.585732][T15164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.585756][T15164] RSP: 002b:00007fcad409f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.585807][T15164] RAX: ffffffffffffffda RBX: 00007fcad5895fa0 RCX: 00007fcad563f6c9 [ 199.585825][T15164] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 199.585842][T15164] RBP: 00007fcad56c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.585854][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.585866][T15164] R13: 00007fcad5896038 R14: 00007fcad5895fa0 R15: 00007ffcb635dd28 [ 199.585889][T15164] [ 199.585903][T15164] memory: usage 307200kB, limit 307200kB, failcnt 340 [ 199.770516][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4951'. [ 199.774073][T15164] memory+swap: usage 307712kB, limit 9007199254740988kB, failcnt 0 [ 199.964823][T15164] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 199.972181][T15164] Memory cgroup stats for /syz1: [ 199.972573][T15164] cache 4096 [ 199.980774][T15164] rss 4096 [ 199.983846][T15164] shmem 0 [ 199.986804][T15164] mapped_file 4096 [ 199.990643][T15164] dirty 0 [ 199.993624][T15164] writeback 0 [ 199.996917][T15164] workingset_refault_anon 930 [ 200.001582][T15164] workingset_refault_file 315 [ 200.006270][T15164] swap 524288 [ 200.009555][T15164] swapcached 8192 [ 200.013217][T15164] pgpgin 149436 [ 200.016667][T15164] pgpgout 149432 [ 200.020205][T15164] pgfault 221128 [ 200.023772][T15164] pgmajfault 145 [ 200.027317][T15164] inactive_anon 0 [ 200.030961][T15164] active_anon 8192 [ 200.034706][T15164] inactive_file 0 [ 200.038347][T15164] active_file 8192 [ 200.042064][T15164] unevictable 0 [ 200.045567][T15164] hierarchical_memory_limit 314572800 [ 200.050929][T15164] hierarchical_memsw_limit 9223372036854771712 [ 200.057158][T15164] total_cache 4096 [ 200.060870][T15164] total_rss 4096 [ 200.064425][T15164] total_shmem 0 [ 200.067894][T15164] total_mapped_file 4096 [ 200.072445][T15164] total_dirty 0 [ 200.075940][T15164] total_writeback 0 [ 200.079825][T15164] total_workingset_refault_anon 930 [ 200.085143][T15164] total_workingset_refault_file 315 [ 200.090340][T15164] total_swap 524288 [ 200.094220][T15164] total_swapcached 8192 [ 200.098379][T15164] total_pgpgin 149436 [ 200.102371][T15164] total_pgpgout 149432 [ 200.106460][T15164] total_pgfault 221128 [ 200.110519][T15164] total_pgmajfault 145 [ 200.114606][T15164] total_inactive_anon 0 [ 200.118792][T15164] total_active_anon 8192 [ 200.123058][T15164] total_inactive_file 0 [ 200.127211][T15164] total_active_file 8192 [ 200.131453][T15164] total_unevictable 0 [ 200.135437][T15164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4937,pid=15163,uid=0 [ 200.150137][T15164] Memory cgroup out of memory: Killed process 15163 (syz.1.4937) total-vm:95872kB, anon-rss:1136kB, file-rss:22208kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 200.175143][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'. [ 200.184178][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4952'. [ 200.208107][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'. [ 200.217153][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4952'. [ 200.308664][T15213] loop7: detected capacity change from 0 to 512 [ 200.340988][T15213] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 200.372788][T15213] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4955: Invalid block bitmap block 0 in block_group 0 [ 200.397571][T15213] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 200.430683][T15213] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.4955: attempt to clear invalid blocks 983261 len 1 [ 200.471282][T15213] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4955: Invalid inode table block 0 in block_group 0 [ 200.496803][T15213] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 200.516909][T15213] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 200.545120][T15213] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4955: Invalid inode table block 0 in block_group 0 [ 200.564383][T15213] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 200.575340][T15213] EXT4-fs error (device loop7): ext4_truncate:4637: inode #11: comm syz.7.4955: mark_inode_dirty error [ 200.632736][T15213] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 200.659903][T15213] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4955: Invalid inode table block 0 in block_group 0 [ 200.673036][T15213] EXT4-fs (loop7): 1 truncate cleaned up [ 200.679103][T15213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.728678][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.928524][T15286] netlink: 'syz.8.4988': attribute type 1 has an invalid length. [ 200.984580][T15294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.245023][T15330] ip6gre3: entered allmulticast mode [ 201.272781][T15328] netlink: 'syz.1.5006': attribute type 6 has an invalid length. [ 201.340629][T15335] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 201.489791][T15345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.894176][T15382] loop6: detected capacity change from 0 to 1024 [ 201.911180][T15382] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.922323][T15382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.964428][T15382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.002837][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 202.178094][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.397524][T15432] loop6: detected capacity change from 0 to 1024 [ 202.434634][T15432] EXT4-fs: inline encryption not supported [ 202.446153][T15432] EXT4-fs: Ignoring removed orlov option [ 202.459702][T15432] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 202.512902][T15432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.577023][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.690247][T15463] loop7: detected capacity change from 0 to 128 [ 202.699138][T15463] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.711839][T15463] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.775199][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 202.775218][ T29] audit: type=1326 audit(1763537232.013:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.6.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.805494][T12266] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.823868][ T29] audit: type=1326 audit(1763537232.013:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.6.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.847546][ T29] audit: type=1326 audit(1763537232.063:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.6.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.871101][ T29] audit: type=1326 audit(1763537232.063:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.894259][ T29] audit: type=1326 audit(1763537232.063:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.921494][ T29] audit: type=1326 audit(1763537232.083:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.944495][ T29] audit: type=1326 audit(1763537232.083:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.967639][ T29] audit: type=1326 audit(1763537232.083:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 202.990547][ T29] audit: type=1326 audit(1763537232.133:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 203.013465][ T29] audit: type=1326 audit(1763537232.133:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 203.079082][T15490] __nla_validate_parse: 8 callbacks suppressed [ 203.079100][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5076'. [ 203.094304][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5076'. [ 203.105286][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5076'. [ 203.114361][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5076'. [ 203.303540][T15515] loop6: detected capacity change from 0 to 1024 [ 203.338980][T15515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.445597][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.513342][T15532] xt_CT: No such helper "netbios-ns" [ 203.720260][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5106'. [ 203.730500][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5106'. [ 203.811301][T15571] loop7: detected capacity change from 0 to 1024 [ 203.818273][T15571] EXT4-fs: inline encryption not supported [ 203.824468][T15571] EXT4-fs: Ignoring removed orlov option [ 203.831144][T15571] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 203.856730][T15571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.899816][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.922403][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5116'. [ 203.961172][T15580] xt_CT: No such helper "netbios-ns" [ 203.971254][T15582] hsr_slave_1 (unregistering): left promiscuous mode [ 204.117024][T15601] loop6: detected capacity change from 0 to 1024 [ 204.129468][T15601] EXT4-fs: Ignoring removed orlov option [ 204.146151][T15601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.319241][T15622] xt_CT: No such helper "netbios-ns" [ 204.350602][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5134'. [ 204.370816][T15628] hsr_slave_1 (unregistering): left promiscuous mode [ 204.487574][T15639] loop7: detected capacity change from 0 to 1024 [ 204.524812][T15639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.577011][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.631098][T15650] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 205.027668][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.436688][T15704] Dead loop on virtual device ipvlan1, fix it urgently! [ 205.451286][T15705] xt_l2tp: wrong L2TP version: 1 [ 205.477598][T15704] syz.7.5167 (15704) used greatest stack depth: 1600 bytes left [ 205.942045][T15742] xt_l2tp: wrong L2TP version: 1 [ 206.504775][T15809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15809 comm=syz.7.5222 [ 206.517831][T15800] loop8: detected capacity change from 0 to 1024 [ 206.534843][T15800] EXT4-fs: Ignoring removed orlov option [ 206.556397][T15800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.453820][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.649948][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5246'. [ 207.680297][T15888] loop8: detected capacity change from 0 to 512 [ 207.687474][T15888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.695857][T15888] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 207.707386][T15888] EXT4-fs (loop8): 1 truncate cleaned up [ 207.713533][T15888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.743605][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.826462][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 207.826480][ T29] audit: type=1326 audit(1763537237.063:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 207.858460][ T29] audit: type=1326 audit(1763537237.103:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 207.882142][ T29] audit: type=1326 audit(1763537237.103:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 207.905862][ T29] audit: type=1326 audit(1763537237.103:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 207.929382][ T29] audit: type=1326 audit(1763537237.103:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 207.952997][ T29] audit: type=1326 audit(1763537237.103:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 207.976578][ T29] audit: type=1326 audit(1763537237.103:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa4e8f6c9 code=0x7ffc0000 [ 208.000186][ T29] audit: type=1400 audit(1763537237.103:5622): avc: denied { ioctl } for pid=15910 comm="syz.6.5257" path="socket:[48480]" dev="sockfs" ino=48480 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 208.052581][ T29] audit: type=1326 audit(1763537237.283:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 208.076318][ T29] audit: type=1326 audit(1763537237.283:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15919 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf699f6c9 code=0x7ffc0000 [ 208.104537][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5272'. [ 208.136299][T15927] loop7: detected capacity change from 0 to 512 [ 208.143021][T15927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.151928][T15927] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 208.171851][T15927] EXT4-fs (loop7): 1 truncate cleaned up [ 208.178007][T15927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.203738][ T7801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.293793][T15951] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 208.430829][T15969] dvmrp1: entered allmulticast mode [ 208.462348][T15969] dvmrp1: left allmulticast mode [ 208.996139][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5303'. [ 209.336641][T16033] loop6: detected capacity change from 0 to 512 [ 209.383520][T16033] EXT4-fs (loop6): too many log groups per flexible block group [ 209.391331][T16033] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 209.408456][T16033] EXT4-fs (loop6): mount failed [ 209.521939][T16045] loop6: detected capacity change from 0 to 1024 [ 209.528968][T16045] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.543319][T16045] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #11: comm GPL: iget: bogus i_mode (1) [ 209.555812][T16045] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 11 (err -117) [ 209.567830][T16045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.585954][T16045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.745591][T16072] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 209.760122][T16066] loop8: detected capacity change from 0 to 1024 [ 209.767600][T16066] EXT4-fs: Ignoring removed nobh option [ 209.795558][T16066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.825139][T16066] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.912816][T16066] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.5322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 209.932239][T16066] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.5322: couldn't read orphan inode 11 (err -117) [ 209.958736][T16066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.971732][T16098] loop6: detected capacity change from 0 to 512 [ 209.994241][T16098] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.6.5336: corrupted xattr block 95: invalid header [ 210.001925][T16066] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5322: Invalid block bitmap block 0 in block_group 0 [ 210.021973][T16098] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5336: bg 0: block 7: invalid block bitmap [ 210.022604][T16066] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5322: Failed to acquire dquot type 0 [ 210.047865][T16098] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 210.057014][T16098] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2967: inode #11: comm syz.6.5336: corrupted xattr block 95: invalid header [ 210.079184][T16098] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 210.089001][T16098] EXT4-fs (loop6): 1 orphan inode deleted [ 210.095560][T16098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.123188][ T7580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.143225][T16111] loop6: detected capacity change from 0 to 128 [ 210.156050][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.249565][T16094] chnl_net:caif_netlink_parms(): no params data found [ 210.335142][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.342313][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.349544][T16094] bridge_slave_0: entered allmulticast mode [ 210.356196][T16094] bridge_slave_0: entered promiscuous mode [ 210.363781][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.370878][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.378106][T16094] bridge_slave_1: entered allmulticast mode [ 210.384567][T16094] bridge_slave_1: entered promiscuous mode [ 210.404253][T16094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.415704][T16094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.447112][T16094] team0: Port device team_slave_0 added [ 210.466489][T16094] team0: Port device team_slave_1 added [ 210.524837][T16094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.531824][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.557863][T16094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.572975][T16094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.579944][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.605953][T16094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.689712][T16094] hsr_slave_0: entered promiscuous mode [ 210.698095][T16094] hsr_slave_1: entered promiscuous mode [ 210.704275][T16094] debugfs: 'hsr0' already exists in 'hsr' [ 210.708957][T16148] loop8: detected capacity change from 0 to 512 [ 210.710026][T16094] Cannot create hsr debugfs directory [ 210.727220][T16148] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.8.5351: corrupted xattr block 95: invalid header [ 210.741654][T16148] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5351: bg 0: block 7: invalid block bitmap [ 210.754932][T16148] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 210.767159][T16148] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2967: inode #11: comm syz.8.5351: corrupted xattr block 95: invalid header [ 210.787609][T16148] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 210.796866][T16148] EXT4-fs (loop8): 1 orphan inode deleted [ 210.803453][T16148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.885508][T16118] chnl_net:caif_netlink_parms(): no params data found [ 210.898943][T16094] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.909357][T16094] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.953694][T16118] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.960875][T16118] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.971512][T16118] bridge_slave_0: entered allmulticast mode [ 210.993689][T16118] bridge_slave_0: entered promiscuous mode [ 211.003972][T16094] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.014364][T16094] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.030483][T16118] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.037737][T16118] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.072191][T16118] bridge_slave_1: entered allmulticast mode [ 211.083360][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.093176][T16118] bridge_slave_1: entered promiscuous mode [ 211.108729][T16094] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.112616][T16177] loop7: detected capacity change from 0 to 16384 [ 211.119121][T16094] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.149300][T16118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.160333][T16118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.181803][T16118] team0: Port device team_slave_0 added [ 211.189584][T16118] team0: Port device team_slave_1 added [ 211.199501][T16094] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.209824][T16094] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.234150][T16118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.241162][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.267177][T16118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.278666][T16118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.285661][T16118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.311604][T16118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.359918][T16176] ================================================================== [ 211.368044][T16176] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 211.375442][T16176] [ 211.377773][T16176] read-write to 0xffff88811a1dad98 of 8 bytes by interrupt on cpu 0: [ 211.385842][T16176] __xa_clear_mark+0xf5/0x1e0 [ 211.390520][T16176] __folio_end_writeback+0xf7/0x3b0 [ 211.395725][T16176] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 211.401974][T16176] folio_end_writeback+0x1c/0x70 [ 211.406916][T16176] end_buffer_async_write+0x156/0x1f0 [ 211.412290][T16176] end_bio_bh_io_sync+0x79/0xa0 [ 211.417147][T16176] bio_endio+0x37e/0x420 [ 211.421398][T16176] blk_update_request+0x336/0x730 [ 211.426430][T16176] blk_mq_end_request+0x26/0x50 [ 211.431305][T16176] lo_complete_rq+0x98/0x140 [ 211.435901][T16176] blk_done_softirq+0x77/0xb0 [ 211.440575][T16176] handle_softirqs+0xba/0x290 [ 211.445255][T16176] run_ksoftirqd+0x1c/0x30 [ 211.449677][T16176] smpboot_thread_fn+0x32b/0x530 [ 211.454612][T16176] kthread+0x489/0x510 [ 211.458678][T16176] ret_from_fork+0x122/0x1b0 [ 211.463267][T16176] ret_from_fork_asm+0x1a/0x30 [ 211.468029][T16176] [ 211.470343][T16176] read to 0xffff88811a1dad98 of 8 bytes by task 16176 on cpu 1: [ 211.477973][T16176] xas_find_marked+0x218/0x620 [ 211.482736][T16176] find_get_entry+0x5d/0x380 [ 211.487331][T16176] filemap_get_folios_tag+0x13b/0x210 [ 211.492706][T16176] filemap_write_and_wait_range+0x1d3/0x340 [ 211.498603][T16176] bdev_release+0xeb/0x3d0 [ 211.503014][T16176] blkdev_release+0x15/0x20 [ 211.507516][T16176] __fput+0x29b/0x650 [ 211.511521][T16176] ____fput+0x1c/0x30 [ 211.515497][T16176] task_work_run+0x131/0x1a0 [ 211.520089][T16176] exit_to_user_mode_loop+0xed/0x110 [ 211.525374][T16176] do_syscall_64+0x1d6/0x200 [ 211.529962][T16176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.535852][T16176] [ 211.538171][T16176] value changed: 0xffff800000000000 -> 0xff80000000000000 [ 211.545274][T16176] [ 211.547594][T16176] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.553757][T16176] CPU: 1 UID: 0 PID: 16176 Comm: syz.6.5363 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.565129][T16176] Tainted: [W]=WARN [ 211.568928][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.578977][T16176] ================================================================== [ 211.595970][T16118] hsr_slave_0: entered promiscuous mode [ 211.610735][T16118] hsr_slave_1: entered promiscuous mode [ 211.623056][T16118] debugfs: 'hsr0' already exists in 'hsr' [ 211.628826][T16118] Cannot create hsr debugfs directory [ 211.863934][ T37] bridge_slave_1: left allmulticast mode [ 211.869626][ T37] bridge_slave_1: left promiscuous mode [ 211.875394][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.883995][ T37] bridge_slave_0: left allmulticast mode [ 211.889669][ T37] bridge_slave_0: left promiscuous mode [ 211.895495][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.954878][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.974956][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.985261][ T37] bond0 (unregistering): Released all slaves [ 212.070944][ T37] hsr_slave_0: left promiscuous mode [ 212.076751][ T37] hsr_slave_1: left promiscuous mode [ 212.082318][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.089817][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.115710][ T37] team0 (unregistering): Port device team_slave_1 removed [ 212.126106][ T37] team0 (unregistering): Port device team_slave_0 removed [ 212.463901][ T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.523484][ T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.603324][ T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.663214][ T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.907080][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.917462][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.944813][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.955324][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.014768][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.025083][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.084904][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.095328][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.166178][ T37] bridge_slave_1: left allmulticast mode [ 213.171951][ T37] bridge_slave_1: left promiscuous mode [ 213.177678][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.185404][ T37] bridge_slave_0: left allmulticast mode [ 213.191060][ T37] bridge_slave_0: left promiscuous mode [ 213.196818][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.205393][ T37] bridge_slave_1: left allmulticast mode [ 213.211182][ T37] bridge_slave_1: left promiscuous mode [ 213.216918][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.224818][ T37] bridge_slave_0: left allmulticast mode [ 213.230455][ T37] bridge_slave_0: left promiscuous mode [ 213.236274][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.244871][ T37] bridge_slave_1: left allmulticast mode [ 213.250586][ T37] bridge_slave_1: left promiscuous mode [ 213.256354][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.264264][ T37] bridge_slave_0: left allmulticast mode [ 213.269903][ T37] bridge_slave_0: left promiscuous mode [ 213.275674][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.404140][ T37] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.412834][ T37] bond_slave_0: left promiscuous mode [ 213.418895][ T37] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.427746][ T37] bond_slave_1: left promiscuous mode [ 213.433646][ T37] $H (unregistering): Released all slaves [ 213.442600][ T37] bond1 (unregistering): (slave batadv1): Releasing active interface [ 213.451252][ T37] bond1 (unregistering): Released all slaves [ 213.484469][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.494069][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.503373][ T37] bond0 (unregistering): Released all slaves [ 213.574822][ T37] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.584601][ T37] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.593970][ T37] .` (unregistering): Released all slaves [ 213.635994][ T37] tipc: Disabling bearer [ 213.641262][ T37] tipc: Left network mode [ 213.694551][ T37] hsr_slave_0: left promiscuous mode [ 213.700319][ T37] hsr_slave_1: left promiscuous mode [ 213.706053][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.713709][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.722937][ T37] hsr_slave_0: left promiscuous mode [ 213.728528][ T37] hsr_slave_1: left promiscuous mode [ 213.734562][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.742038][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.751562][ T37] hsr_slave_0: left promiscuous mode [ 213.757220][ T37] hsr_slave_1: left promiscuous mode [ 213.762848][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.770316][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.777971][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.785433][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.796403][ T37] veth1_macvtap: left promiscuous mode [ 213.801994][ T37] veth0_macvtap: left promiscuous mode [ 213.807650][ T37] veth1_vlan: left promiscuous mode [ 213.812978][ T37] veth0_vlan: left promiscuous mode [ 213.871627][ T37] team0 (unregistering): Port device team_slave_1 removed [ 213.882828][ T37] team0 (unregistering): Port device team_slave_0 removed [ 213.936269][ T37] team0 (unregistering): Port device team_slave_1 removed [ 213.946787][ T37] team0 (unregistering): Port device team_slave_0 removed [ 213.998481][ T37] team0 (unregistering): Port device team_slave_1 removed [ 214.008205][ T37] team0 (unregistering): Port device team_slave_0 removed [ 214.015879][ T3452] smc: removing ib device syz! [ 214.770231][ T37] IPVS: stop unused estimator thread 0...