last executing test programs: 2.046379671s ago: executing program 0 (id=1953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 1.976883942s ago: executing program 0 (id=1957): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.916092183s ago: executing program 3 (id=1959): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.59037146s ago: executing program 3 (id=1964): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 1.232128956s ago: executing program 3 (id=1971): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000400)="2ec8425d4ce2ef", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2000000000000116}}, 0x40) 1.122106918s ago: executing program 4 (id=1973): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 1.087400149s ago: executing program 1 (id=1974): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) 1.002344501s ago: executing program 3 (id=1975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 978.330091ms ago: executing program 4 (id=1976): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 929.256602ms ago: executing program 3 (id=1977): r0 = syz_clone(0x1802180, 0x0, 0x56, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_open_procfs(r0, &(0x7f0000001080)='smaps\x00') 755.655076ms ago: executing program 3 (id=1978): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000d9bffc), 0x4) 727.048546ms ago: executing program 1 (id=1979): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5300000007000046009d4063"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 695.479047ms ago: executing program 2 (id=1981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 669.186997ms ago: executing program 0 (id=1982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x3014850, &(0x7f0000000280)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}, {@errors_remount}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 659.674567ms ago: executing program 2 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 575.323879ms ago: executing program 1 (id=1984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 573.483249ms ago: executing program 4 (id=1985): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 424.471642ms ago: executing program 2 (id=1986): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x31ec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 352.305424ms ago: executing program 1 (id=1987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) 291.335635ms ago: executing program 2 (id=1988): unshare(0x2a020400) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 236.349445ms ago: executing program 0 (id=1989): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 236.065896ms ago: executing program 4 (id=1990): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 221.375836ms ago: executing program 2 (id=1991): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r1, &(0x7f0000000040)='\x00', 0x1, 0x1300) 219.153736ms ago: executing program 1 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158805000300000008000d000400000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_extract_tcp_res(0x0, 0x4, 0x1) 92.682208ms ago: executing program 1 (id=1993): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 92.158858ms ago: executing program 0 (id=2003): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x6a1e) 54.888539ms ago: executing program 4 (id=1994): creat(&(0x7f0000000000)='./file0\x00', 0x143) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[]) 29.94392ms ago: executing program 0 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000003000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 330.35µs ago: executing program 2 (id=1996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) 0s ago: executing program 4 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.830328][ T29] audit: type=1400 audit(1757359793.591:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.837921][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.855139][ T29] audit: type=1400 audit(1757359793.591:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.887164][ T29] audit: type=1400 audit(1757359793.671:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.976421][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.035398][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.056750][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.077452][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.139971][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.154513][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.161709][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.168987][ T3307] bridge_slave_0: entered allmulticast mode [ 35.175648][ T3307] bridge_slave_0: entered promiscuous mode [ 35.201925][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.209045][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.216309][ T3307] bridge_slave_1: entered allmulticast mode [ 35.222715][ T3307] bridge_slave_1: entered promiscuous mode [ 35.229420][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.236577][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.243718][ T3302] bridge_slave_0: entered allmulticast mode [ 35.250193][ T3302] bridge_slave_0: entered promiscuous mode [ 35.274439][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.281556][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.288776][ T3302] bridge_slave_1: entered allmulticast mode [ 35.295357][ T3302] bridge_slave_1: entered promiscuous mode [ 35.311920][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.319173][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.326377][ T3314] bridge_slave_0: entered allmulticast mode [ 35.332816][ T3314] bridge_slave_0: entered promiscuous mode [ 35.351933][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.359050][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.366214][ T3303] bridge_slave_0: entered allmulticast mode [ 35.372612][ T3303] bridge_slave_0: entered promiscuous mode [ 35.379339][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.386494][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.393780][ T3314] bridge_slave_1: entered allmulticast mode [ 35.400247][ T3314] bridge_slave_1: entered promiscuous mode [ 35.412700][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.429736][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.436850][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.444052][ T3303] bridge_slave_1: entered allmulticast mode [ 35.450541][ T3303] bridge_slave_1: entered promiscuous mode [ 35.467302][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.477600][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.488056][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.498111][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.535649][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.554021][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.561338][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.568809][ T3309] bridge_slave_0: entered allmulticast mode [ 35.575365][ T3309] bridge_slave_0: entered promiscuous mode [ 35.582923][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.592070][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.599227][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.606465][ T3309] bridge_slave_1: entered allmulticast mode [ 35.613021][ T3309] bridge_slave_1: entered promiscuous mode [ 35.619759][ T3307] team0: Port device team_slave_0 added [ 35.626231][ T3307] team0: Port device team_slave_1 added [ 35.637349][ T3314] team0: Port device team_slave_0 added [ 35.649217][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.659150][ T3302] team0: Port device team_slave_0 added [ 35.680865][ T3314] team0: Port device team_slave_1 added [ 35.688556][ T3302] team0: Port device team_slave_1 added [ 35.700011][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.738637][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.748411][ T3303] team0: Port device team_slave_0 added [ 35.759605][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.766663][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.792742][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.804189][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.811185][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.837327][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.848625][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.855685][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.881647][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.892727][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.899738][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.925680][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.937286][ T3303] team0: Port device team_slave_1 added [ 35.947927][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.954946][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.980891][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.996962][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.003930][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.029941][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.051149][ T3309] team0: Port device team_slave_0 added [ 36.057960][ T3309] team0: Port device team_slave_1 added [ 36.075074][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.082044][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.108240][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.133764][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.140883][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.166889][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.181092][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.188259][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.214266][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.225827][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.232847][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.259086][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.281941][ T3307] hsr_slave_0: entered promiscuous mode [ 36.288122][ T3307] hsr_slave_1: entered promiscuous mode [ 36.316498][ T3302] hsr_slave_0: entered promiscuous mode [ 36.322395][ T3302] hsr_slave_1: entered promiscuous mode [ 36.328302][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.334036][ T3302] Cannot create hsr debugfs directory [ 36.342328][ T3314] hsr_slave_0: entered promiscuous mode [ 36.348467][ T3314] hsr_slave_1: entered promiscuous mode [ 36.354414][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.360167][ T3314] Cannot create hsr debugfs directory [ 36.393480][ T3303] hsr_slave_0: entered promiscuous mode [ 36.399699][ T3303] hsr_slave_1: entered promiscuous mode [ 36.405558][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.411278][ T3303] Cannot create hsr debugfs directory [ 36.423975][ T3309] hsr_slave_0: entered promiscuous mode [ 36.430234][ T3309] hsr_slave_1: entered promiscuous mode [ 36.436143][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 36.441901][ T3309] Cannot create hsr debugfs directory [ 36.657920][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.666977][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.676206][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.687264][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.711683][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.721161][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.734315][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.747118][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.785536][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.795376][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.808983][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.823671][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.843932][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.870814][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.879889][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.894187][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.907030][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.916067][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.928976][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.936066][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.963949][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.971143][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.987026][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.003428][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.014665][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.023855][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.033669][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.043320][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.063122][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.075793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.082865][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.094400][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.101505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.130590][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.152351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.159587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.183398][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.192078][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.199227][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.229570][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.254760][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.270961][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.278115][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.297766][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.313056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.320172][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.333105][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.368486][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.384578][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.391880][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.400686][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.407778][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.440059][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.463738][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.495383][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.532250][ T3307] veth0_vlan: entered promiscuous mode [ 37.554946][ T3307] veth1_vlan: entered promiscuous mode [ 37.614400][ T3307] veth0_macvtap: entered promiscuous mode [ 37.628654][ T3303] veth0_vlan: entered promiscuous mode [ 37.636343][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.644327][ T3307] veth1_macvtap: entered promiscuous mode [ 37.660011][ T3309] veth0_vlan: entered promiscuous mode [ 37.668683][ T3303] veth1_vlan: entered promiscuous mode [ 37.682144][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.695817][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.711159][ T3303] veth0_macvtap: entered promiscuous mode [ 37.721507][ T3309] veth1_vlan: entered promiscuous mode [ 37.729497][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.744235][ T3303] veth1_macvtap: entered promiscuous mode [ 37.757531][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.769767][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.793200][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.810877][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.833449][ T3309] veth0_macvtap: entered promiscuous mode [ 37.848422][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.856273][ T3309] veth1_macvtap: entered promiscuous mode [ 37.874102][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.885799][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.900913][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.917305][ T3441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.939415][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.947810][ T3441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999170][ T3314] veth0_vlan: entered promiscuous mode [ 38.006435][ T3302] veth0_vlan: entered promiscuous mode [ 38.014425][ T3302] veth1_vlan: entered promiscuous mode [ 38.047893][ T3441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.075784][ T3314] veth1_vlan: entered promiscuous mode [ 38.088858][ T3441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.114675][ T3441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.138398][ T3441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.150939][ T3441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.161315][ T3441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.175578][ T3302] veth0_macvtap: entered promiscuous mode [ 38.215442][ T3302] veth1_macvtap: entered promiscuous mode [ 38.228993][ T3314] veth0_macvtap: entered promiscuous mode [ 38.241325][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.251615][ T3314] veth1_macvtap: entered promiscuous mode [ 38.271801][ T3490] bond0: entered promiscuous mode [ 38.276991][ T3490] bond_slave_0: entered promiscuous mode [ 38.282976][ T3490] bond_slave_1: entered promiscuous mode [ 38.308096][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.326099][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.340561][ T3492] syz.3.13 (3492) used greatest stack depth: 10552 bytes left [ 38.352353][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.378146][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.394993][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.414322][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 38.414342][ T29] audit: type=1326 audit(1757359798.251:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 38.420016][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.420654][ T29] audit: type=1326 audit(1757359798.251:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 38.453941][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.475701][ T29] audit: type=1326 audit(1757359798.251:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 38.475733][ T29] audit: type=1326 audit(1757359798.251:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 38.508266][ T3500] loop3: detected capacity change from 0 to 4096 [ 38.530794][ T29] audit: type=1326 audit(1757359798.261:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 38.530830][ T29] audit: type=1326 audit(1757359798.261:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 38.601316][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.628738][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.652987][ T3500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.672348][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.705167][ T29] audit: type=1400 audit(1757359798.551:140): avc: denied { mount } for pid=3499 comm="syz.3.16" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.727251][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.766538][ T3514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 38.793823][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.819799][ T29] audit: type=1326 audit(1757359798.661:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 38.843255][ T29] audit: type=1326 audit(1757359798.661:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 38.866441][ T29] audit: type=1326 audit(1757359798.661:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 38.895461][ T3522] openvswitch: netlink: Message has 6 unknown bytes. [ 39.042272][ T3525] loop4: detected capacity change from 0 to 8192 [ 39.065705][ T3535] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.27'. [ 39.090144][ T3525] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.146523][ T3543] mmap: syz.1.33 (3543): VmData 29003776 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 39.158571][ T3546] sctp: [Deprecated]: syz.2.32 (pid 3546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.158571][ T3546] Use struct sctp_sack_info instead [ 39.356083][ T3563] pim6reg1: entered promiscuous mode [ 39.361543][ T3563] pim6reg1: entered allmulticast mode [ 39.405822][ T3573] xt_HMARK: spi-set and port-set can't be combined [ 39.678124][ T3610] 9pnet: Could not find request transport: f [ 39.737970][ T3623] netlink: 'syz.4.70': attribute type 27 has an invalid length. [ 39.747681][ T3625] loop3: detected capacity change from 0 to 256 [ 39.778022][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.785324][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.794138][ T3625] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 39.802053][ T3625] FAT-fs (loop3): Filesystem has been set read-only [ 39.808772][ T3625] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 39.841142][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.851025][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.897523][ T3627] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 39.914226][ T3441] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.924485][ T3441] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.943961][ T3629] syz.4.72 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.952628][ T3441] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.979610][ T3441] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.322277][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 40.331219][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 40.619362][ T9] Process accounting resumed [ 40.875126][ T3714] netlink: 204 bytes leftover after parsing attributes in process `syz.3.111'. [ 40.889060][ T3703] infiniband syz!: set down [ 40.893612][ T3703] infiniband syz!: added team_slave_0 [ 40.925623][ T3703] RDS/IB: syz!: added [ 40.948895][ T3703] smc: adding ib device syz! with port count 1 [ 40.963548][ T3703] smc: ib device syz! port 1 has pnetid [ 41.065506][ T3737] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 41.073225][ T3737] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.121'. [ 41.265280][ T3759] geneve2: entered promiscuous mode [ 41.270638][ T3759] geneve2: entered allmulticast mode [ 41.765676][ T3787] Illegal XDP return value 3086088797 on prog (id 96) dev syz_tun, expect packet loss! [ 41.863297][ T3793] netlink: 9 bytes leftover after parsing attributes in process `syz.2.145'. [ 41.872652][ T3793] 0: renamed from hsr0 (while UP) [ 41.880265][ T3793] 0: entered allmulticast mode [ 41.885259][ T3793] hsr_slave_0: entered allmulticast mode [ 41.891082][ T3793] hsr_slave_1: entered allmulticast mode [ 41.899085][ T3793] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 42.103124][ T3817] capability: warning: `syz.2.157' uses deprecated v2 capabilities in a way that may be insecure [ 42.221935][ T3838] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 42.470466][ T3887] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 42.554761][ T3893] loop4: detected capacity change from 0 to 512 [ 42.604098][ T3893] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.631843][ T3893] EXT4-fs (loop4): mount failed [ 42.640271][ T3902] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 42.687643][ T3902] SELinux: failed to load policy [ 42.767236][ T3925] loop4: detected capacity change from 0 to 512 [ 42.839752][ T3934] loop2: detected capacity change from 0 to 512 [ 42.859201][ T3934] ======================================================= [ 42.859201][ T3934] WARNING: The mand mount option has been deprecated and [ 42.859201][ T3934] and is ignored by this kernel. Remove the mand [ 42.859201][ T3934] option from the mount to silence this warning. [ 42.859201][ T3934] ======================================================= [ 42.914797][ T3934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.961225][ T3934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.988704][ T3934] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.023794][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.287869][ T3989] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 43.338754][ T3994] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.359669][ T3994] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 43.441386][ T4010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.227'. [ 43.500364][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 43.500381][ T29] audit: type=1400 audit(1757359803.351:411): avc: denied { write } for pid=4019 comm="syz.1.232" path="socket:[5888]" dev="sockfs" ino=5888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 43.664207][ T29] audit: type=1400 audit(1757359803.511:412): avc: denied { ioctl } for pid=4039 comm="syz.4.242" path="socket:[6786]" dev="sockfs" ino=6786 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.747520][ T4048] netlink: 7 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.773845][ T29] audit: type=1400 audit(1757359803.621:413): avc: denied { read } for pid=4044 comm="syz.2.245" lport=34502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.787149][ T4048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.803139][ T4048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.838865][ T29] audit: type=1400 audit(1757359803.671:414): avc: denied { execmem } for pid=4055 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.859872][ T4048] netlink: 7 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.884985][ T4048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.893948][ T4048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.933039][ T4048] netlink: 7 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.943245][ T4048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.952232][ T4048] netlink: 60 bytes leftover after parsing attributes in process `syz.4.246'. [ 43.979322][ T4072] program syz.1.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.980065][ T4070] : renamed from bond0 (while UP) [ 44.056782][ T29] audit: type=1400 audit(1757359803.911:415): avc: denied { create } for pid=4082 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.081185][ T4084] unsupported nla_type 52263 [ 44.102771][ T29] audit: type=1400 audit(1757359803.931:416): avc: denied { write } for pid=4082 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.123123][ T29] audit: type=1400 audit(1757359803.931:417): avc: denied { nlmsg_write } for pid=4082 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.169408][ T4090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.262'. [ 44.271533][ T29] audit: type=1326 audit(1757359804.121:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 44.346751][ T29] audit: type=1326 audit(1757359804.131:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 44.370104][ T29] audit: type=1326 audit(1757359804.131:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e885ebe9 code=0x7ffc0000 [ 44.568030][ T4131] loop2: detected capacity change from 0 to 764 [ 44.776806][ T4157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4157 comm=syz.2.294 [ 44.844570][ T4164] loop0: detected capacity change from 0 to 764 [ 44.959668][ T4176] Zero length message leads to an empty skb [ 44.970328][ T4175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.302'. [ 45.004178][ T4175] batadv1: entered promiscuous mode [ 45.009639][ T4175] batadv1: entered allmulticast mode [ 45.115526][ T4195] netlink: 7 bytes leftover after parsing attributes in process `syz.0.311'. [ 45.723165][ T4271] openvswitch: netlink: Message has 6 unknown bytes. [ 45.859110][ T4293] loop0: detected capacity change from 0 to 128 [ 45.870309][ T4293] FAT-fs (loop0): Directory bread(block 32) failed [ 45.878318][ T4293] FAT-fs (loop0): Directory bread(block 33) failed [ 45.888229][ T4293] FAT-fs (loop0): Directory bread(block 34) failed [ 45.896180][ T4293] FAT-fs (loop0): Directory bread(block 35) failed [ 45.902968][ T4293] FAT-fs (loop0): Directory bread(block 36) failed [ 45.909868][ T4293] FAT-fs (loop0): Directory bread(block 37) failed [ 45.941670][ T4293] FAT-fs (loop0): Directory bread(block 38) failed [ 45.955168][ T4293] FAT-fs (loop0): Directory bread(block 39) failed [ 45.962147][ T4293] FAT-fs (loop0): Directory bread(block 40) failed [ 45.970708][ T4293] FAT-fs (loop0): Directory bread(block 41) failed [ 46.017614][ T4304] loop2: detected capacity change from 0 to 512 [ 46.037837][ T4304] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.354: bg 0: block 248: padding at end of block bitmap is not set [ 46.062337][ T4304] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.354: Failed to acquire dquot type 1 [ 46.124300][ T4304] EXT4-fs (loop2): 1 truncate cleaned up [ 46.130743][ T4304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.143666][ T4304] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.188643][ T4304] syz.2.354 (4304) used greatest stack depth: 9472 bytes left [ 46.197797][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.207794][ T4323] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 46.218324][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 46.292507][ T4358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.303980][ T4358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.577349][ T4408] loop4: detected capacity change from 0 to 128 [ 46.593703][ T4408] FAT-fs (loop4): Directory bread(block 32) failed [ 46.606805][ T4408] FAT-fs (loop4): Directory bread(block 33) failed [ 46.641338][ T4408] FAT-fs (loop4): Directory bread(block 34) failed [ 46.664265][ T4408] FAT-fs (loop4): Directory bread(block 35) failed [ 46.739213][ T4408] FAT-fs (loop4): Directory bread(block 36) failed [ 46.757065][ T4408] FAT-fs (loop4): Directory bread(block 37) failed [ 46.788876][ T4408] FAT-fs (loop4): Directory bread(block 38) failed [ 46.806167][ T4408] FAT-fs (loop4): Directory bread(block 39) failed [ 46.828415][ T4408] FAT-fs (loop4): Directory bread(block 40) failed [ 46.851693][ T4408] FAT-fs (loop4): Directory bread(block 41) failed [ 46.983413][ T4421] openvswitch: netlink: Message has 6 unknown bytes. [ 47.195679][ T4439] batadv1: entered promiscuous mode [ 47.200955][ T4439] batadv1: entered allmulticast mode [ 47.257755][ T4451] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.261737][ T4448] ipvlan2: entered promiscuous mode [ 47.300454][ T4448] bridge0: port 3(ipvlan2) entered blocking state [ 47.306997][ T4448] bridge0: port 3(ipvlan2) entered disabled state [ 47.318452][ T4448] ipvlan2: entered allmulticast mode [ 47.323878][ T4448] bridge0: entered allmulticast mode [ 47.336476][ T4448] ipvlan2: left allmulticast mode [ 47.341671][ T4448] bridge0: left allmulticast mode [ 47.662643][ T4501] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 47.686327][ T4499] syz.1.418 uses obsolete (PF_INET,SOCK_PACKET) [ 47.699653][ T4504] ipvlan2: entered promiscuous mode [ 47.708963][ T4506] loop3: detected capacity change from 0 to 512 [ 47.717221][ T4504] bridge0: port 3(ipvlan2) entered blocking state [ 47.723739][ T4504] bridge0: port 3(ipvlan2) entered disabled state [ 47.735492][ T4504] ipvlan2: entered allmulticast mode [ 47.740849][ T4504] bridge0: entered allmulticast mode [ 47.752799][ T4504] ipvlan2: left allmulticast mode [ 47.757922][ T4504] bridge0: left allmulticast mode [ 47.784699][ T4506] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.421: bg 0: block 248: padding at end of block bitmap is not set [ 47.850816][ T4506] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.421: Failed to acquire dquot type 1 [ 47.870949][ T4506] EXT4-fs (loop3): 1 truncate cleaned up [ 47.877495][ T4506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.890366][ T4506] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.976048][ T4506] syz.3.421 (4506) used greatest stack depth: 9200 bytes left [ 48.010047][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.019328][ T4344] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:22: Failed to release dquot type 1 [ 48.038724][ T4526] loop1: detected capacity change from 0 to 128 [ 48.050907][ T4526] FAT-fs (loop1): Directory bread(block 32) failed [ 48.062963][ T4526] FAT-fs (loop1): Directory bread(block 33) failed [ 48.082853][ T4526] FAT-fs (loop1): Directory bread(block 34) failed [ 48.108080][ T4526] FAT-fs (loop1): Directory bread(block 35) failed [ 48.132099][ T4526] FAT-fs (loop1): Directory bread(block 36) failed [ 48.153180][ T4538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.167453][ T4526] FAT-fs (loop1): Directory bread(block 37) failed [ 48.175678][ T4538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.188485][ T4526] FAT-fs (loop1): Directory bread(block 38) failed [ 48.204537][ T4526] FAT-fs (loop1): Directory bread(block 39) failed [ 48.211449][ T4526] FAT-fs (loop1): Directory bread(block 40) failed [ 48.218541][ T4526] FAT-fs (loop1): Directory bread(block 41) failed [ 48.336449][ T4556] loop1: detected capacity change from 0 to 512 [ 48.367151][ T4556] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.442: bg 0: block 248: padding at end of block bitmap is not set [ 48.383368][ T4556] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.442: Failed to acquire dquot type 1 [ 48.417666][ T4556] EXT4-fs (loop1): 1 truncate cleaned up [ 48.429740][ T4556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.466388][ T4556] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.513294][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.525392][ T4337] __quota_error: 216 callbacks suppressed [ 48.525407][ T4337] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 48.540397][ T4337] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:17: Failed to release dquot type 1 [ 48.733140][ T4580] loop3: detected capacity change from 0 to 128 [ 48.744294][ T29] audit: type=1400 audit(1757359808.591:629): avc: denied { setopt } for pid=4579 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.790924][ T4585] mmap: syz.4.456 (4585) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.812126][ T29] audit: type=1400 audit(1757359808.601:630): avc: denied { bind } for pid=4582 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.813255][ T4589] loop1: detected capacity change from 0 to 256 [ 48.831330][ T29] audit: type=1400 audit(1757359808.651:631): avc: denied { connect } for pid=4586 comm="syz.0.457" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.848603][ T4580] FAT-fs (loop3): Directory bread(block 32) failed [ 48.865335][ T4580] FAT-fs (loop3): Directory bread(block 33) failed [ 48.873362][ T4580] FAT-fs (loop3): Directory bread(block 34) failed [ 48.904922][ T4580] FAT-fs (loop3): Directory bread(block 35) failed [ 48.921662][ T4580] FAT-fs (loop3): Directory bread(block 36) failed [ 48.931688][ T4589] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 48.939701][ T4589] FAT-fs (loop1): Filesystem has been set read-only [ 48.949108][ T4580] FAT-fs (loop3): Directory bread(block 37) failed [ 48.956174][ T4589] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 48.965028][ T4589] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 48.972962][ T4589] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 48.980919][ T4580] FAT-fs (loop3): Directory bread(block 38) failed [ 48.995782][ T4580] FAT-fs (loop3): Directory bread(block 39) failed [ 49.002519][ T4580] FAT-fs (loop3): Directory bread(block 40) failed [ 49.015582][ T4580] FAT-fs (loop3): Directory bread(block 41) failed [ 49.036807][ T29] audit: type=1326 audit(1757359808.891:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 49.060196][ T29] audit: type=1326 audit(1757359808.891:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 49.086086][ T29] audit: type=1326 audit(1757359808.891:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 49.109727][ T29] audit: type=1326 audit(1757359808.891:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 49.133129][ T29] audit: type=1326 audit(1757359808.891:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 49.156516][ T29] audit: type=1326 audit(1757359808.891:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.1.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 49.244433][ T4609] loop4: detected capacity change from 0 to 512 [ 49.290422][ T4609] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.468: bg 0: block 248: padding at end of block bitmap is not set [ 49.312705][ T4609] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.468: Failed to acquire dquot type 1 [ 49.324980][ T4609] EXT4-fs (loop4): 1 truncate cleaned up [ 49.331125][ T4609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.346138][ T4609] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.406223][ T4622] loop2: detected capacity change from 0 to 1024 [ 49.408807][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.434749][ T4337] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:17: Failed to release dquot type 1 [ 49.487096][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.561455][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.710757][ T4663] syzkaller1: entered promiscuous mode [ 49.717356][ T4663] syzkaller1: entered allmulticast mode [ 49.819122][ C0] hrtimer: interrupt took 48095 ns [ 50.171269][ T4723] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 50.283749][ T4739] loop3: detected capacity change from 0 to 256 [ 50.419584][ T4739] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 50.427532][ T4739] FAT-fs (loop3): Filesystem has been set read-only [ 50.481150][ T4739] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 50.501045][ T4757] loop4: detected capacity change from 0 to 764 [ 50.517683][ T4739] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 50.540551][ T4757] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.554995][ T4739] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 50.570767][ T4757] Symlink component flag not implemented [ 50.585021][ T4757] Symlink component flag not implemented (7) [ 50.688008][ T4768] process 'syz.3.535' launched './file1' with NULL argv: empty string added [ 50.708333][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.715906][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.723597][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.756158][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.763801][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.771294][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.778872][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.786398][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.793837][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.801281][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.860390][ T1037] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 50.937820][ T4785] fido_id[4785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.953042][ T4787] loop2: detected capacity change from 0 to 256 [ 51.038974][ T4787] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 51.046966][ T4787] FAT-fs (loop2): Filesystem has been set read-only [ 51.082253][ T4787] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 51.096551][ T4787] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 51.114092][ T4787] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 51.293329][ T4818] __nla_validate_parse: 38 callbacks suppressed [ 51.293345][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 51.343518][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 51.388465][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 51.408592][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 51.489794][ T4827] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 51.746451][ T4837] loop4: detected capacity change from 0 to 256 [ 51.837617][ T4837] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.845568][ T4837] FAT-fs (loop4): Filesystem has been set read-only [ 51.871131][ T4837] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.879303][ T4344] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.895390][ T4344] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 52.390802][ T4892] loop0: detected capacity change from 0 to 1024 [ 52.399030][ T4892] EXT4-fs: Ignoring removed nobh option [ 52.404844][ T4892] EXT4-fs: Ignoring removed bh option [ 52.436730][ T4892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.521071][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 52.538408][ T4903] netlink: 2 bytes leftover after parsing attributes in process `syz.4.595'. [ 52.556521][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.921469][ T4931] loop2: detected capacity change from 0 to 1024 [ 52.928748][ T4931] EXT4-fs: Ignoring removed nobh option [ 52.934391][ T4931] EXT4-fs: Ignoring removed bh option [ 52.950439][ T4931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.004679][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.050299][ T4946] loop3: detected capacity change from 0 to 128 [ 53.108124][ T4955] 9pnet_fd: Insufficient options for proto=fd [ 53.128742][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 53.133275][ T4951] loop2: detected capacity change from 0 to 4096 [ 53.137626][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 53.153010][ T4957] netlink: 'syz.1.620': attribute type 20 has an invalid length. [ 53.165334][ T4951] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.190920][ T4351] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.203428][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 53.212327][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 53.221999][ T4957] netlink: 'syz.1.620': attribute type 20 has an invalid length. [ 53.233361][ T4351] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.246464][ T4351] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.247036][ T4951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.255328][ T4351] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.310592][ T4962] loop4: detected capacity change from 0 to 1024 [ 53.334359][ T4962] EXT4-fs: Ignoring removed nobh option [ 53.374388][ T4962] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.419251][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.439446][ T4962] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.622: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 53.461988][ T4976] random: crng reseeded on system resumption [ 53.527283][ T4962] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.622: couldn't read orphan inode 11 (err -117) [ 53.570348][ T4962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.588612][ T4982] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 53.837805][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.854258][ T5004] loop2: detected capacity change from 0 to 1024 [ 53.866438][ T5004] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.877420][ T5004] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.886529][ T5010] netlink: 'syz.4.643': attribute type 20 has an invalid length. [ 53.902693][ T5004] JBD2: no valid journal superblock found [ 53.908536][ T5004] EXT4-fs (loop2): Could not load journal inode [ 53.947295][ T5004] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 53.957462][ T5010] netlink: 'syz.4.643': attribute type 20 has an invalid length. [ 53.960299][ T418] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.980156][ T418] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.008767][ T418] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.018994][ T418] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.040610][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 54.040628][ T29] audit: type=1326 audit(1757359813.891:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 54.163179][ T29] audit: type=1326 audit(1757359813.931:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 54.186518][ T29] audit: type=1326 audit(1757359813.931:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 54.210058][ T29] audit: type=1326 audit(1757359813.931:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 54.233366][ T29] audit: type=1326 audit(1757359813.931:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 54.310001][ T29] audit: type=1400 audit(1757359814.161:770): avc: denied { create } for pid=5042 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 54.335650][ T29] audit: type=1326 audit(1757359814.191:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 54.359310][ T29] audit: type=1326 audit(1757359814.191:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 54.435311][ T29] audit: type=1326 audit(1757359814.191:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 54.458488][ T29] audit: type=1326 audit(1757359814.221:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 54.554317][ T5064] loop1: detected capacity change from 0 to 1024 [ 54.567323][ T5064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.627532][ T5070] loop3: detected capacity change from 0 to 164 [ 54.641068][ T5064] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.670: Allocating blocks 497-513 which overlap fs metadata [ 54.698270][ T5070] syz.3.682: attempt to access beyond end of device [ 54.698270][ T5070] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 54.712274][ T5070] syz.3.682: attempt to access beyond end of device [ 54.712274][ T5070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.726334][ T5063] EXT4-fs (loop1): pa ffff88810725c150: logic 64, phys. 209, len 19 [ 54.734461][ T5063] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 54.781356][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.920179][ T5096] loop4: detected capacity change from 0 to 512 [ 54.986549][ T5096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.025746][ T5096] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.153581][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.362095][ T5150] loop0: detected capacity change from 0 to 512 [ 55.394161][ T5150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.444325][ T5150] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.514072][ T5150] syz.0.706 (5150) used greatest stack depth: 8960 bytes left [ 55.535554][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.675307][ T5183] Falling back ldisc for ttyS3. [ 55.772531][ T5197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.822498][ T5203] loop1: detected capacity change from 0 to 512 [ 55.871367][ T5203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.885117][ T5203] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.971536][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.091112][ T5241] SELinux: Context @ is not valid (left unmapped). [ 56.128061][ T5243] openvswitch: netlink: Message has 6 unknown bytes. [ 56.417239][ T5282] tipc: Started in network mode [ 56.422173][ T5282] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 56.471597][ T5282] tipc: Enabled bearer , priority 10 [ 56.478524][ T5287] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 56.752972][ T5308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.966142][ T5334] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5334 comm=syz.4.793 [ 57.210811][ T5362] sd 0:0:1:0: device reset [ 57.330232][ T5381] __nla_validate_parse: 11 callbacks suppressed [ 57.330247][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'. [ 57.463047][ T5395] sd 0:0:1:0: device reset [ 57.494923][ T3384] tipc: Node number set to 4269801488 [ 57.714859][ T5416] loop4: detected capacity change from 0 to 1024 [ 57.738173][ T5416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.791650][ T5423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.831'. [ 57.813901][ T5416] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.829: Allocating blocks 497-513 which overlap fs metadata [ 57.848756][ T5415] EXT4-fs (loop4): pa ffff88810725c1c0: logic 192, phys. 337, len 11 [ 57.857027][ T5415] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 57.904007][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.108353][ T5455] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 58.225194][ T5466] loop2: detected capacity change from 0 to 128 [ 58.247219][ T5466] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 58.255516][ T5466] FAT-fs (loop2): Filesystem has been set read-only [ 58.394479][ T5482] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.439266][ T5478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.567181][ T5507] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.656823][ T5518] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.761477][ T5534] netlink: 'syz.4.878': attribute type 10 has an invalid length. [ 58.769415][ T5534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.878'. [ 58.803274][ T5534] team0: Port device geneve1 added [ 58.809290][ T418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.821430][ T418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.829636][ T5530] loop1: detected capacity change from 0 to 8192 [ 58.877426][ T418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.908409][ T418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.980592][ T5544] netlink: 'syz.0.884': attribute type 5 has an invalid length. [ 59.089524][ T5556] netlink: 332 bytes leftover after parsing attributes in process `syz.4.889'. [ 59.129701][ T5561] capability: warning: `syz.1.892' uses 32-bit capabilities (legacy support in use) [ 59.163709][ T5564] IPVS: stopping master sync thread 5566 ... [ 59.170269][ T5566] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 59.210538][ T5571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 59.222120][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 59.222135][ T29] audit: type=1326 audit(1757359819.071:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.251869][ T29] audit: type=1326 audit(1757359819.071:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.278140][ T29] audit: type=1326 audit(1757359819.071:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.301533][ T29] audit: type=1326 audit(1757359819.071:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.324849][ T29] audit: type=1326 audit(1757359819.071:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.348230][ T29] audit: type=1326 audit(1757359819.071:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.371626][ T29] audit: type=1326 audit(1757359819.131:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.394895][ T29] audit: type=1326 audit(1757359819.131:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.418220][ T29] audit: type=1326 audit(1757359819.131:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.441467][ T29] audit: type=1326 audit(1757359819.131:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 59.530760][ T5584] loop4: detected capacity change from 0 to 128 [ 59.551308][ T5584] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 59.559663][ T5584] FAT-fs (loop4): Filesystem has been set read-only [ 59.637942][ T5596] netlink: 332 bytes leftover after parsing attributes in process `syz.3.907'. [ 59.705299][ T5605] IPVS: Error connecting to the multicast addr [ 60.072981][ T5601] loop1: detected capacity change from 0 to 32768 [ 60.127731][ T3291] loop1: p1 p3 < > [ 60.127847][ T5625] loop3: detected capacity change from 0 to 128 [ 60.158533][ T5625] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 60.166809][ T5625] FAT-fs (loop3): Filesystem has been set read-only [ 60.187158][ T5601] loop1: p1 p3 < > [ 60.227227][ T2993] loop1: p1 p3 < > [ 60.248038][ T5631] netlink: 348 bytes leftover after parsing attributes in process `syz.2.920'. [ 60.369398][ T5643] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.385254][ T5641] IPVS: stopping master sync thread 5643 ... [ 60.513492][ T5651] loop4: detected capacity change from 0 to 1024 [ 60.543419][ T5651] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.554458][ T5651] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.565656][ T5655] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 60.579672][ T5592] syz.1.906 (5592) used greatest stack depth: 7304 bytes left [ 60.605104][ T5651] JBD2: no valid journal superblock found [ 60.610986][ T5651] EXT4-fs (loop4): Could not load journal inode [ 60.633018][ T5651] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 60.786643][ T5672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.942'. [ 60.853368][ T5681] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.871596][ T5680] IPVS: stopping master sync thread 5681 ... [ 60.892073][ T5687] netlink: 14 bytes leftover after parsing attributes in process `syz.4.947'. [ 60.903586][ T5687] hsr_slave_0: left promiscuous mode [ 60.915275][ T5687] hsr_slave_1: left promiscuous mode [ 60.959955][ T5693] netlink: 272 bytes leftover after parsing attributes in process `syz.0.950'. [ 61.350110][ T5733] loop1: detected capacity change from 0 to 1024 [ 61.397133][ T5733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.496719][ T5733] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.966: Allocating blocks 449-513 which overlap fs metadata [ 61.565613][ T5731] EXT4-fs (loop1): pa ffff8881071fc700: logic 48, phys. 177, len 21 [ 61.573691][ T5731] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 61.613583][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.646211][ T5757] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.653549][ T5757] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 61.681585][ T5759] loop4: detected capacity change from 0 to 512 [ 61.723054][ T5759] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 62.069290][ T5810] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.104939][ T5810] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 62.384656][ T5839] __nla_validate_parse: 3 callbacks suppressed [ 62.384674][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 62.400146][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 62.533015][ T5803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 62.870366][ T5865] netlink: 'syz.0.1027': attribute type 30 has an invalid length. [ 63.006966][ T5870] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1029'. [ 63.039044][ T5870] hsr_slave_0: left promiscuous mode [ 63.164707][ T5870] hsr_slave_1: left promiscuous mode [ 63.218780][ T5845] Set syz1 is full, maxelem 65536 reached [ 63.278854][ T5887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'. [ 63.288110][ T5887] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1033'. [ 63.298643][ T5887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'. [ 63.307991][ T5887] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1033'. [ 63.369727][ T5896] loop2: detected capacity change from 0 to 512 [ 63.389059][ T5896] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 63.481688][ T5907] bridge0: entered promiscuous mode [ 63.489362][ T5907] bridge0: port 3(macsec1) entered blocking state [ 63.495942][ T5907] bridge0: port 3(macsec1) entered disabled state [ 63.503630][ T5907] macsec1: entered allmulticast mode [ 63.509245][ T5907] bridge0: entered allmulticast mode [ 63.516281][ T5907] macsec1: left allmulticast mode [ 63.521383][ T5907] bridge0: left allmulticast mode [ 63.527757][ T5907] bridge0: left promiscuous mode [ 63.649767][ T5914] bridge_slave_0: left allmulticast mode [ 63.655516][ T5914] bridge_slave_0: left promiscuous mode [ 63.661247][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.689708][ T5915] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 63.697746][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'. [ 63.709246][ T5914] bridge_slave_1: left allmulticast mode [ 63.715050][ T5914] bridge_slave_1: left promiscuous mode [ 63.720799][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.739394][ T5914] bond0: (slave bond_slave_0): Releasing backup interface [ 63.765448][ T5914] bond0: (slave bond_slave_1): Releasing backup interface [ 63.783998][ T5914] team0: Port device team_slave_0 removed [ 63.794431][ T5914] team0: Port device team_slave_1 removed [ 63.801840][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.809338][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.818637][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.826237][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.855789][ T5915] batman_adv: batadv0: Adding interface: veth1_vlan [ 63.862453][ T5915] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.889523][ T5915] batman_adv: batadv0: Interface activated: veth1_vlan [ 64.131410][ T5947] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 64.253549][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 64.253566][ T29] audit: type=1326 audit(1757359824.101:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 64.300290][ T29] audit: type=1326 audit(1757359824.141:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 64.324109][ T29] audit: type=1326 audit(1757359824.141:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 64.347703][ T29] audit: type=1326 audit(1757359824.141:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 64.371229][ T29] audit: type=1326 audit(1757359824.141:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 64.460942][ T6001] bridge0: port 3(macsec1) entered blocking state [ 64.467465][ T6001] bridge0: port 3(macsec1) entered disabled state [ 64.479945][ T6001] macsec1: entered allmulticast mode [ 64.485336][ T6001] bridge0: entered allmulticast mode [ 64.490786][ T29] audit: type=1400 audit(1757359824.261:1147): avc: denied { listen } for pid=5992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.510246][ T29] audit: type=1400 audit(1757359824.261:1148): avc: denied { accept } for pid=5992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.529869][ T29] audit: type=1326 audit(1757359824.291:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 64.553385][ T29] audit: type=1326 audit(1757359824.291:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 64.576916][ T29] audit: type=1326 audit(1757359824.291:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 64.606588][ T6001] macsec1: left allmulticast mode [ 64.611869][ T6001] bridge0: left allmulticast mode [ 64.631862][ T6008] netlink: 'syz.1.1080': attribute type 30 has an invalid length. [ 64.640952][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 64.659382][ T6011] netlink: 'syz.3.1082': attribute type 6 has an invalid length. [ 64.736829][ T6024] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.014742][ T6053] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 65.031882][ T6051] loop3: detected capacity change from 0 to 1024 [ 65.086940][ T6051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.128843][ T6041] netlink: 'syz.4.1092': attribute type 2 has an invalid length. [ 65.138028][ T6064] random: crng reseeded on system resumption [ 65.157190][ T6051] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1094: Allocating blocks 449-513 which overlap fs metadata [ 65.196651][ T6050] EXT4-fs (loop3): pa ffff8881071fc770: logic 48, phys. 177, len 21 [ 65.204764][ T6050] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 65.222312][ T6066] rdma_op ffff8881023ecd80 conn xmit_rdma 0000000000000000 [ 65.287790][ T6073] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 65.309798][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.483484][ T6090] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.522081][ T6096] netlink: 'syz.4.1113': attribute type 30 has an invalid length. [ 65.563138][ T6098] loop3: detected capacity change from 0 to 256 [ 65.583421][ T6098] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 66.651014][ T6140] netlink: 'syz.3.1127': attribute type 30 has an invalid length. [ 66.679076][ T6142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.746888][ T6148] bridge0: entered promiscuous mode [ 66.766865][ T6148] bridge0: port 3(macsec1) entered blocking state [ 66.773376][ T6148] bridge0: port 3(macsec1) entered disabled state [ 66.794400][ T6148] macsec1: entered allmulticast mode [ 66.799881][ T6148] bridge0: entered allmulticast mode [ 66.819946][ T6148] macsec1: left allmulticast mode [ 66.825099][ T6148] bridge0: left allmulticast mode [ 66.833800][ T6148] bridge0: left promiscuous mode [ 66.871089][ T6153] macvtap0: refused to change device tx_queue_len [ 67.233350][ T6131] syz.2.1124 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 67.248063][ T6131] CPU: 1 UID: 0 PID: 6131 Comm: syz.2.1124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.248099][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.248115][ T6131] Call Trace: [ 67.248124][ T6131] [ 67.248133][ T6131] __dump_stack+0x1d/0x30 [ 67.248160][ T6131] dump_stack_lvl+0xe8/0x140 [ 67.248217][ T6131] dump_stack+0x15/0x1b [ 67.248234][ T6131] dump_header+0x81/0x220 [ 67.248271][ T6131] oom_kill_process+0x342/0x400 [ 67.248315][ T6131] out_of_memory+0x979/0xb80 [ 67.248423][ T6131] try_charge_memcg+0x5e6/0x9e0 [ 67.248461][ T6131] obj_cgroup_charge_pages+0xa6/0x150 [ 67.248499][ T6131] __memcg_kmem_charge_page+0x9f/0x170 [ 67.248553][ T6131] __alloc_frozen_pages_noprof+0x188/0x360 [ 67.248598][ T6131] alloc_pages_mpol+0xb3/0x250 [ 67.248641][ T6131] alloc_pages_noprof+0x90/0x130 [ 67.248690][ T6131] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 67.248739][ T6131] __kvmalloc_node_noprof+0x30f/0x4e0 [ 67.248838][ T6131] ? ip_set_alloc+0x1f/0x30 [ 67.248857][ T6131] ? ip_set_alloc+0x1f/0x30 [ 67.248933][ T6131] ? __kmalloc_cache_noprof+0x189/0x320 [ 67.249037][ T6131] ip_set_alloc+0x1f/0x30 [ 67.249097][ T6131] hash_netiface_create+0x282/0x740 [ 67.249120][ T6131] ? __pfx_hash_netiface_create+0x10/0x10 [ 67.249142][ T6131] ip_set_create+0x3c9/0x960 [ 67.249183][ T6131] ? __nla_parse+0x40/0x60 [ 67.249214][ T6131] nfnetlink_rcv_msg+0x4c3/0x590 [ 67.249254][ T6131] netlink_rcv_skb+0x123/0x220 [ 67.249329][ T6131] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 67.249368][ T6131] nfnetlink_rcv+0x16b/0x1690 [ 67.249456][ T6131] ? nlmon_xmit+0x4f/0x60 [ 67.249488][ T6131] ? consume_skb+0x49/0x150 [ 67.249559][ T6131] ? nlmon_xmit+0x4f/0x60 [ 67.249594][ T6131] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 67.249697][ T6131] ? __dev_queue_xmit+0x1200/0x2000 [ 67.249852][ T6131] ? __dev_queue_xmit+0x182/0x2000 [ 67.249932][ T6131] ? ref_tracker_free+0x37d/0x3e0 [ 67.249976][ T6131] ? __netlink_deliver_tap+0x4dc/0x500 [ 67.250005][ T6131] netlink_unicast+0x5bd/0x690 [ 67.250072][ T6131] netlink_sendmsg+0x58b/0x6b0 [ 67.250177][ T6131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.250205][ T6131] __sock_sendmsg+0x142/0x180 [ 67.250236][ T6131] ____sys_sendmsg+0x31e/0x4e0 [ 67.250272][ T6131] ___sys_sendmsg+0x17b/0x1d0 [ 67.250355][ T6131] __x64_sys_sendmsg+0xd4/0x160 [ 67.250389][ T6131] x64_sys_call+0x191e/0x2ff0 [ 67.250416][ T6131] do_syscall_64+0xd2/0x200 [ 67.250456][ T6131] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.250512][ T6131] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.250620][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.250647][ T6131] RIP: 0033:0x7fc8c6d2ebe9 [ 67.250663][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.250680][ T6131] RSP: 002b:00007fc8c576e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.250699][ T6131] RAX: ffffffffffffffda RBX: 00007fc8c6f66090 RCX: 00007fc8c6d2ebe9 [ 67.250711][ T6131] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 67.250725][ T6131] RBP: 00007fc8c6db1e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.250812][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.250828][ T6131] R13: 00007fc8c6f66128 R14: 00007fc8c6f66090 R15: 00007ffdb3db6128 [ 67.250851][ T6131] [ 67.250859][ T6131] memory: usage 307200kB, limit 307200kB, failcnt 324 [ 67.589934][ T6131] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 67.597945][ T6131] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 67.605274][ T6131] Memory cgroup stats for /syz2: [ 67.605539][ T6131] cache 0 [ 67.613676][ T6131] rss 4096 [ 67.616780][ T6131] shmem 0 [ 67.619737][ T6131] mapped_file 0 [ 67.623235][ T6131] dirty 0 [ 67.626214][ T6131] writeback 0 [ 67.629515][ T6131] workingset_refault_anon 50 [ 67.634189][ T6131] workingset_refault_file 112 [ 67.639504][ T6131] swap 372736 [ 67.642845][ T6131] swapcached 8192 [ 67.646804][ T6131] pgpgin 23369 [ 67.650195][ T6131] pgpgout 23367 [ 67.653769][ T6131] pgfault 38853 [ 67.657297][ T6131] pgmajfault 38 [ 67.660759][ T6131] inactive_anon 8192 [ 67.664707][ T6131] active_anon 0 [ 67.668314][ T6131] inactive_file 0 [ 67.671967][ T6131] active_file 0 [ 67.675484][ T6131] unevictable 0 [ 67.679040][ T6131] hierarchical_memory_limit 314572800 [ 67.684484][ T6131] hierarchical_memsw_limit 9223372036854771712 [ 67.690663][ T6131] total_cache 0 [ 67.694137][ T6131] total_rss 4096 [ 67.697751][ T6131] total_shmem 0 [ 67.701230][ T6131] total_mapped_file 0 [ 67.705263][ T6131] total_dirty 0 [ 67.708816][ T6131] total_writeback 0 [ 67.712620][ T6131] total_workingset_refault_anon 50 [ 67.717846][ T6131] total_workingset_refault_file 112 [ 67.723062][ T6131] total_swap 372736 [ 67.726959][ T6131] total_swapcached 8192 [ 67.731150][ T6131] total_pgpgin 23369 [ 67.735078][ T6131] total_pgpgout 23367 [ 67.739325][ T6131] total_pgfault 38853 [ 67.743392][ T6131] total_pgmajfault 38 [ 67.747404][ T6131] total_inactive_anon 8192 [ 67.751924][ T6131] total_active_anon 0 [ 67.756105][ T6131] total_inactive_file 0 [ 67.760275][ T6131] total_active_file 0 [ 67.764254][ T6131] total_unevictable 0 [ 67.768375][ T6131] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1124,pid=6127,uid=0 [ 67.783458][ T6131] Memory cgroup out of memory: Killed process 6127 (syz.2.1124) total-vm:96008kB, anon-rss:988kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 67.868286][ T6180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.930933][ T6185] batadv_slave_0: entered promiscuous mode [ 67.956721][ T6183] batadv_slave_0: left promiscuous mode [ 68.051237][ T4337] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 68.067102][ T6197] __nla_validate_parse: 4 callbacks suppressed [ 68.067117][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'. [ 68.316248][ T6112] Set syz1 is full, maxelem 65536 reached [ 68.404908][ T6214] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.415756][ T6214] FAT-fs (loop5): unable to read boot sector [ 68.446942][ T6221] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1166'. [ 68.498473][ T6221] 0X: renamed from caif0 [ 68.513064][ T6221] 0X: entered allmulticast mode [ 68.518411][ T6221] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 68.628619][ T6242] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 68.683124][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 68.997867][ T6292] loop4: detected capacity change from 0 to 164 [ 69.047336][ T6292] ISOFS: unable to read i-node block [ 69.052773][ T6292] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 69.429315][ T6325] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 69.543425][ T6336] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.565203][ T6339] loop4: detected capacity change from 0 to 512 [ 69.594584][ T6339] journal_path: Non-blockdev passed as './bus' [ 69.600916][ T6339] EXT4-fs: error: could not find journal device path [ 69.737170][ T6354] veth1_to_bond: entered allmulticast mode [ 69.743500][ T6354] veth1_to_bond: entered promiscuous mode [ 69.760670][ T6353] veth1_to_bond: left promiscuous mode [ 69.766333][ T6353] veth1_to_bond: left allmulticast mode [ 69.790988][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 69.791005][ T29] audit: type=1326 audit(1757359829.641:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 69.820676][ T29] audit: type=1326 audit(1757359829.641:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 69.844432][ T29] audit: type=1326 audit(1757359829.641:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 69.954271][ T6367] loop3: detected capacity change from 0 to 2048 [ 69.984735][ T29] audit: type=1326 audit(1757359829.731:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.008377][ T29] audit: type=1326 audit(1757359829.731:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.032236][ T29] audit: type=1326 audit(1757359829.741:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.055934][ T29] audit: type=1326 audit(1757359829.741:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.079657][ T29] audit: type=1326 audit(1757359829.741:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.103256][ T29] audit: type=1326 audit(1757359829.741:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.126732][ T29] audit: type=1326 audit(1757359829.751:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 70.156310][ T6377] netlink: 'syz.1.1240': attribute type 21 has an invalid length. [ 70.172784][ T6377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1240'. [ 70.181984][ T6377] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 70.185306][ T3296] Alternate GPT is invalid, using primary GPT. [ 70.196373][ T3296] loop3: p1 p2 p3 [ 70.234192][ T6367] Alternate GPT is invalid, using primary GPT. [ 70.240743][ T6367] loop3: p1 p2 p3 [ 70.344773][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 70.346587][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 70.358133][ T3912] udevd[3912]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 70.807952][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 70.829359][ T6451] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 71.125204][ T6472] loop4: detected capacity change from 0 to 512 [ 71.145919][ T6472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.186446][ T6472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.228985][ T6472] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.399263][ T6477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 71.460741][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.527693][ T6502] SELinux: Context is not valid (left unmapped). [ 71.689185][ T6517] netlink: 'syz.3.1283': attribute type 2 has an invalid length. [ 71.697072][ T6517] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 71.704806][ T6517] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1283'. [ 71.903429][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.910675][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.001279][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.047646][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.133651][ T4337] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.156610][ T4337] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.173823][ T4337] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.189886][ T4337] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.295334][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 72.305680][ T6582] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1303'. [ 72.315118][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 72.364629][ T6588] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1305'. [ 72.436335][ T6595] sd 0:0:1:0: device reset [ 72.489682][ T6599] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 72.839642][ T6622] loop3: detected capacity change from 0 to 512 [ 72.862463][ T6622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.921844][ T6630] ref_ctr_offset mismatch. inode: 0x589 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 72.951202][ T6622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.993024][ T6622] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1320: corrupted xattr block 19: overlapping e_value [ 73.021535][ T6622] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 73.052600][ T6646] netlink: 'syz.1.1331': attribute type 3 has an invalid length. [ 73.061717][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.157423][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 73.384172][ T6687] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1352'. [ 73.715652][ T6708] netlink: 'syz.4.1362': attribute type 13 has an invalid length. [ 73.730650][ T6708] gretap0: refused to change device tx_queue_len [ 73.738902][ T6708] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 73.853323][ T6721] openvswitch: netlink: Message has 6 unknown bytes. [ 73.958435][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'. [ 73.967550][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'. [ 73.968782][ T6734] loop3: detected capacity change from 0 to 2048 [ 74.047573][ T6734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 74.067561][ T6746] netlink: 'syz.2.1379': attribute type 3 has an invalid length. [ 74.078140][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.149201][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 74.150757][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 74.347164][ T6787] binfmt_misc: register: failed to install interpreter file ./file0 [ 74.366977][ T6789] SELinux: Context attr/f is not valid (left unmapped). [ 74.634045][ T6832] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1418'. [ 74.662225][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 74.845872][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 74.845889][ T29] audit: type=1326 audit(1757359834.701:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 74.875823][ T29] audit: type=1326 audit(1757359834.731:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 74.900979][ T29] audit: type=1326 audit(1757359834.731:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 74.924553][ T29] audit: type=1326 audit(1757359834.731:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 74.948138][ T29] audit: type=1326 audit(1757359834.761:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 74.971684][ T29] audit: type=1326 audit(1757359834.761:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 74.997425][ T29] audit: type=1326 audit(1757359834.761:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 75.021268][ T29] audit: type=1326 audit(1757359834.761:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 75.044729][ T29] audit: type=1326 audit(1757359834.761:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 75.068543][ T29] audit: type=1326 audit(1757359834.761:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc8c6d2ebe9 code=0x7ffc0000 [ 75.371023][ T6883] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 75.963468][ T6947] wg2: entered promiscuous mode [ 75.968480][ T6947] wg2: entered allmulticast mode [ 76.185013][ T6970] loop9: detected capacity change from 0 to 7 [ 76.191460][ T6970] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.201119][ T6970] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.209012][ T6970] loop9: unable to read partition table [ 76.216403][ T6970] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 76.216403][ T6970] ) failed (rc=-5) [ 76.217674][ T3291] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.239343][ T3291] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.255090][ T3291] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.263408][ T3291] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.275736][ T3291] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.407477][ T6976] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 76.478726][ T1037] kernel write not supported for file bpf-prog (pid: 1037 comm: kworker/0:2) [ 77.220226][ T7025] can0: slcan on ttyS3. [ 77.295387][ T7025] can0 (unregistered): slcan off ttyS3. [ 77.315895][ T7033] can0: slcan on ttyS3. [ 77.405518][ T7024] can0 (unregistered): slcan off ttyS3. [ 77.894739][ T7110] loop4: detected capacity change from 0 to 2048 [ 77.958981][ T7110] Alternate GPT is invalid, using primary GPT. [ 77.965526][ T7110] loop4: p1 p2 p3 [ 78.168166][ T7137] syzkaller0: entered allmulticast mode [ 78.175834][ T7137] syzkaller0 (unregistering): left allmulticast mode [ 78.511276][ T7162] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1557'. [ 78.765510][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'. [ 78.917539][ T7185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7185 comm=syz.3.1567 [ 78.940967][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'. [ 79.268738][ T7230] rdma_op ffff88811c2f8d80 conn xmit_rdma 0000000000000000 [ 79.660203][ T7274] loop4: detected capacity change from 0 to 1024 [ 79.667101][ T7274] EXT4-fs: Ignoring removed orlov option [ 79.682506][ T7274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.906182][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.933011][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 79.933024][ T29] audit: type=1326 audit(79.907:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 79.972800][ T29] audit: type=1326 audit(79.907:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 79.995667][ T29] audit: type=1326 audit(79.907:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 80.018589][ T29] audit: type=1326 audit(79.907:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 80.041306][ T29] audit: type=1326 audit(79.907:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 80.063957][ T29] audit: type=1326 audit(79.907:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bc3febe9 code=0x7ffc0000 [ 80.095764][ T7290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7290 comm=syz.4.1597 [ 80.110893][ T29] audit: type=1400 audit(80.067:1688): avc: denied { name_connect } for pid=7289 comm="syz.4.1597" dest=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 80.164980][ T29] audit: type=1326 audit(80.127:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 80.187915][ T29] audit: type=1326 audit(80.127:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 80.210927][ T29] audit: type=1326 audit(80.127:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81052bebe9 code=0x7ffc0000 [ 80.327072][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 80.336213][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 80.345311][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 80.370766][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 80.379885][ T7320] netlink: 'syz.2.1615': attribute type 6 has an invalid length. [ 81.078771][ T7410] vhci_hcd: invalid port number 96 [ 81.083967][ T7410] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 81.116626][ T7414] wg2: entered promiscuous mode [ 81.121556][ T7414] wg2: entered allmulticast mode [ 81.150895][ T7420] sd 0:0:1:0: device reset [ 81.458800][ T7452] usb usb1: usbfs: process 7452 (syz.4.1652) did not claim interface 4 before use [ 81.622308][ T7473] loop4: detected capacity change from 0 to 128 [ 81.659984][ T7473] FAT-fs (loop4): Directory bread(block 32) failed [ 81.666749][ T7473] FAT-fs (loop4): Directory bread(block 33) failed [ 81.673277][ T7473] FAT-fs (loop4): Directory bread(block 34) failed [ 81.709770][ T7473] FAT-fs (loop4): Directory bread(block 35) failed [ 81.717481][ T7473] FAT-fs (loop4): Directory bread(block 36) failed [ 81.724165][ T7473] FAT-fs (loop4): Directory bread(block 37) failed [ 81.732405][ T7473] FAT-fs (loop4): Directory bread(block 38) failed [ 81.739177][ T7473] FAT-fs (loop4): Directory bread(block 39) failed [ 81.746119][ T7473] FAT-fs (loop4): Directory bread(block 40) failed [ 81.752799][ T7473] FAT-fs (loop4): Directory bread(block 41) failed [ 81.788408][ T7473] syz.4.1660: attempt to access beyond end of device [ 81.788408][ T7473] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 81.819938][ T7473] FAT-fs (loop4): Filesystem has been set read-only [ 81.832254][ T7473] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 81.850121][ T7482] can: request_module (can-proto-0) failed. [ 81.928260][ T7492] SELinux: policydb version -1497064854 does not match my version range 15-35 [ 81.962799][ T7492] SELinux: failed to load policy [ 82.077161][ T7516] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1678'. [ 82.289761][ T7545] block device autoloading is deprecated and will be removed. [ 82.778021][ T1037] IPVS: starting estimator thread 0... [ 82.858885][ T7583] loop3: detected capacity change from 0 to 512 [ 82.871859][ T7579] IPVS: using max 2400 ests per chain, 120000 per kthread [ 82.894416][ T7583] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.901371][ T7583] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1709: bad orphan inode 13 [ 82.911839][ T7583] ext4_test_bit(bit=12, block=18) = 1 [ 82.917360][ T7583] is_bad_inode(inode)=0 [ 82.921540][ T7583] NEXT_ORPHAN(inode)=2130706432 [ 82.926571][ T7583] max_ino=32 [ 82.929804][ T7583] i_nlink=1 [ 82.933700][ T7583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.952139][ T7583] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 82.970355][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 82.979522][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1711'. [ 82.980012][ T7583] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 82.991945][ T7588] bridge0: port 3(vlan2) entered blocking state [ 83.003614][ T7588] bridge0: port 3(vlan2) entered disabled state [ 83.010226][ T7588] vlan2: entered allmulticast mode [ 83.015442][ T7588] bridge0: entered allmulticast mode [ 83.021570][ T7588] vlan2: left allmulticast mode [ 83.026482][ T7588] bridge0: left allmulticast mode [ 83.033859][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.149933][ T7601] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 83.149933][ T7601] Q&|xXX, priority 10 [ 84.573921][ T7708] loop3: detected capacity change from 0 to 512 [ 84.581549][ T7708] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 84.607495][ T7708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 84.631913][ T7708] System zones: 1-12 [ 84.637088][ T7708] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1755: corrupted in-inode xattr: e_value size too large [ 84.676282][ T7708] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1755: couldn't read orphan inode 15 (err -117) [ 84.704586][ T7708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.734953][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.785871][ T7722] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1762'. [ 84.802706][ T7726] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.822744][ T7725] pim6reg: entered allmulticast mode [ 84.838167][ T7725] pim6reg: left allmulticast mode [ 84.895271][ T7737] 9pnet_fd: Insufficient options for proto=fd [ 84.938514][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1772'. [ 85.127157][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 85.127172][ T29] audit: type=1400 audit(85.107:1862): avc: denied { append } for pid=7756 comm="syz.4.1776" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.208212][ T29] audit: type=1326 audit(85.177:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.231118][ T29] audit: type=1326 audit(85.177:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.254033][ T29] audit: type=1326 audit(85.177:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.276761][ T29] audit: type=1326 audit(85.177:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.299754][ T29] audit: type=1326 audit(85.177:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.322506][ T29] audit: type=1326 audit(85.177:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.345362][ T29] audit: type=1326 audit(85.177:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.368259][ T29] audit: type=1326 audit(85.177:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.391060][ T29] audit: type=1326 audit(85.187:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 85.456935][ T3398] Process accounting resumed [ 85.506509][ T7772] loop3: detected capacity change from 0 to 1024 [ 85.532382][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.607596][ T7772] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1785: bg 0: block 393: padding at end of block bitmap is not set [ 85.633565][ T7772] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 85.644928][ T3398] tipc: Node number set to 2886997007 [ 85.646238][ T7772] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.646238][ T7772] [ 85.661109][ T7772] EXT4-fs (loop3): Total free blocks count 0 [ 85.667245][ T7772] EXT4-fs (loop3): Free/Dirty block details [ 85.673403][ T7772] EXT4-fs (loop3): free_blocks=0 [ 85.678909][ T7772] EXT4-fs (loop3): dirty_blocks=16 [ 85.684037][ T7772] EXT4-fs (loop3): Block reservation details [ 85.690047][ T7772] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 85.702368][ T7782] : renamed from veth0_to_bond (while UP) [ 85.782450][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.839836][ T7793] random: crng reseeded on system resumption [ 85.965418][ T7812] random: crng reseeded on system resumption [ 85.977149][ T7812] Restarting kernel threads ... [ 85.984215][ T7812] Done restarting kernel threads. [ 86.390852][ T7845] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1816'. [ 86.534213][ T7855] 9pnet_fd: Insufficient options for proto=fd [ 86.601681][ T7863] SELinux: failed to load policy [ 86.652019][ T7869] random: crng reseeded on system resumption [ 86.661552][ T7871] loop4: detected capacity change from 0 to 512 [ 86.663200][ T7869] Restarting kernel threads ... [ 86.674773][ T7869] Done restarting kernel threads. [ 86.703765][ T7871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.737222][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.831357][ T7882] SELinux: failed to load policy [ 86.988615][ T7908] pim6reg: entered allmulticast mode [ 87.006195][ T7908] pim6reg: left allmulticast mode [ 87.209961][ T7938] sctp: [Deprecated]: syz.3.1861 (pid 7938) Use of int in max_burst socket option. [ 87.209961][ T7938] Use struct sctp_assoc_value instead [ 87.233320][ T7941] pimreg: entered allmulticast mode [ 87.251071][ T7941] pimreg: left allmulticast mode [ 87.292325][ T7949] pim6reg: entered allmulticast mode [ 87.299884][ T7949] pim6reg: left allmulticast mode [ 87.408511][ T7965] loop3: detected capacity change from 0 to 512 [ 87.415924][ T7961] : renamed from veth0_to_bond [ 87.421074][ T7965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.447601][ T7965] EXT4-fs (loop3): 1 truncate cleaned up [ 87.465421][ T7965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.612547][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.632393][ T7984] loop4: detected capacity change from 0 to 1024 [ 87.688418][ T7992] pim6reg: entered allmulticast mode [ 87.696415][ T7994] sd 0:0:1:0: device reset [ 87.703915][ T7984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.705255][ T7992] pim6reg: left allmulticast mode [ 87.759498][ T7984] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1883: bg 0: block 393: padding at end of block bitmap is not set [ 87.776047][ T7984] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 87.788765][ T7984] EXT4-fs (loop4): This should not happen!! Data will be lost [ 87.788765][ T7984] [ 87.798465][ T7984] EXT4-fs (loop4): Total free blocks count 0 [ 87.804482][ T7984] EXT4-fs (loop4): Free/Dirty block details [ 87.810569][ T7984] EXT4-fs (loop4): free_blocks=0 [ 87.815568][ T7984] EXT4-fs (loop4): dirty_blocks=16 [ 87.820704][ T7984] EXT4-fs (loop4): Block reservation details [ 87.826765][ T7984] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 87.874320][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.922411][ T8008] loop0: detected capacity change from 0 to 1764 [ 87.936714][ T8012] random: crng reseeded on system resumption [ 87.960249][ T8008] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.293554][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.299053][ T8056] loop0: detected capacity change from 0 to 1024 [ 88.305717][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.309716][ T7675] hid_parser_main: 18 callbacks suppressed [ 88.309787][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.319446][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.334194][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.341750][ T8053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.350405][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.364856][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.372369][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.379836][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.387277][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.394708][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.402247][ T7675] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.422091][ T8056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.430069][ T7675] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz1 [ 88.471443][ T8056] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.1915: lblock 3 mapped to illegal pblock 3 (length 13) [ 88.503102][ T8056] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 88.515710][ T8056] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.515710][ T8056] [ 88.539602][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.554102][ T8074] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.574855][ T8074] netlink: 'syz.4.1923': attribute type 12 has an invalid length. [ 88.582804][ T8074] netlink: 'syz.4.1923': attribute type 29 has an invalid length. [ 88.590679][ T8074] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1923'. [ 88.593802][ T8078] loop0: detected capacity change from 0 to 1024 [ 88.599850][ T8074] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 88.614032][ T8074] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1923'. [ 88.648929][ T8082] loop4: detected capacity change from 0 to 512 [ 88.664562][ T8082] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.702297][ T8082] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.722831][ T8078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.768401][ T8082] EXT4-fs (loop4): 1 truncate cleaned up [ 88.774687][ T8082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.851357][ T8078] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1922: bg 0: block 393: padding at end of block bitmap is not set [ 88.921628][ T8078] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 88.934195][ T8078] EXT4-fs (loop0): This should not happen!! Data will be lost [ 88.934195][ T8078] [ 88.943920][ T8078] EXT4-fs (loop0): Total free blocks count 0 [ 88.950012][ T8078] EXT4-fs (loop0): Free/Dirty block details [ 88.955954][ T8078] EXT4-fs (loop0): free_blocks=0 [ 88.960902][ T8078] EXT4-fs (loop0): dirty_blocks=16 [ 88.966065][ T8078] EXT4-fs (loop0): Block reservation details [ 88.972185][ T8078] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 89.022059][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.719875][ T8125] loop0: detected capacity change from 0 to 256 [ 89.748161][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.212103][ T8152] loop0: detected capacity change from 0 to 512 [ 90.220681][ T8152] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.230871][ T8152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.241941][ T8152] EXT4-fs (loop0): 1 truncate cleaned up [ 90.248602][ T8152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.298130][ T8159] loop3: detected capacity change from 0 to 1024 [ 90.304936][ T8159] EXT4-fs: Ignoring removed bh option [ 90.327133][ T8159] EXT4-fs: inline encryption not supported [ 90.336852][ T8159] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.347711][ T8159] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.356837][ T8159] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1959: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.371167][ T8159] __quota_error: 183 callbacks suppressed [ 90.371186][ T8159] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 90.385177][ T8159] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1959: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.400263][ T8159] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 90.409154][ T8159] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1959: Failed to acquire dquot type 0 [ 90.420705][ T8159] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 90.430421][ T8159] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1959: mark_inode_dirty error [ 90.441981][ T8159] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 90.452511][ T8159] EXT4-fs (loop3): 1 orphan inode deleted [ 90.458753][ T8159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.471401][ T4376] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.486789][ T4376] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 90.495344][ T4376] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:47: Failed to release dquot type 0 [ 90.507913][ T29] audit: type=1400 audit(90.487:2055): avc: denied { remount } for pid=8158 comm="syz.3.1959" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.529007][ T8159] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.631466][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.683831][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'. [ 91.007870][ T29] audit: type=1326 audit(90.987:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 91.055038][ T29] audit: type=1326 audit(91.007:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 91.077991][ T29] audit: type=1326 audit(91.007:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 91.100947][ T29] audit: type=1326 audit(91.007:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 91.124226][ T29] audit: type=1326 audit(91.017:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 91.147123][ T29] audit: type=1326 audit(91.017:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28184aebe9 code=0x7ffc0000 [ 91.509457][ T8206] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 91.531489][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.577131][ T8215] loop0: detected capacity change from 0 to 512 [ 91.642434][ T8215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.655805][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 91.755560][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 91.876234][ T8215] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.965942][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.990024][ T8233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1990'. [ 92.021727][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.050729][ T8234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.214173][ T8243] ================================================================== [ 92.222601][ T8243] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 92.231222][ T8243] [ 92.233559][ T8243] write to 0xffff888116306828 of 8 bytes by task 8249 on cpu 1: [ 92.241234][ T8243] shmem_file_splice_read+0x470/0x600 [ 92.246677][ T8243] splice_direct_to_actor+0x26c/0x680 [ 92.252065][ T8243] do_splice_direct+0xda/0x150 [ 92.256878][ T8243] do_sendfile+0x380/0x650 [ 92.261326][ T8243] __x64_sys_sendfile64+0x105/0x150 [ 92.266544][ T8243] x64_sys_call+0x2bb0/0x2ff0 [ 92.271252][ T8243] do_syscall_64+0xd2/0x200 [ 92.275792][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.281704][ T8243] [ 92.284038][ T8243] write to 0xffff888116306828 of 8 bytes by task 8243 on cpu 0: [ 92.291687][ T8243] shmem_file_splice_read+0x470/0x600 [ 92.297092][ T8243] splice_direct_to_actor+0x26c/0x680 [ 92.302476][ T8243] do_splice_direct+0xda/0x150 [ 92.307255][ T8243] do_sendfile+0x380/0x650 [ 92.311690][ T8243] __x64_sys_sendfile64+0x105/0x150 [ 92.316906][ T8243] x64_sys_call+0x2bb0/0x2ff0 [ 92.321598][ T8243] do_syscall_64+0xd2/0x200 [ 92.326119][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.332018][ T8243] [ 92.334342][ T8243] value changed: 0x000000000000a75d -> 0x000000000000a8a7 [ 92.341452][ T8243] [ 92.343780][ T8243] Reported by Kernel Concurrency Sanitizer on: [ 92.349934][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.1.1993 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.359667][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.369730][ T8243] ================================================================== [ 92.395483][ T8251] netlink: 'syz.2.1996': attribute type 3 has an invalid length.