last executing test programs: 3m46.986779206s ago: executing program 3 (id=916): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='nobh') 3m46.926723507s ago: executing program 3 (id=917): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8561a678639e49e4, @perf_bp={0x0, 0x4}, 0x109ba0, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c850}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) chmod(0x0, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500082c", @ANYRESOCT=r5], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3m46.844572928s ago: executing program 3 (id=919): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) 3m46.825137278s ago: executing program 3 (id=920): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da017677835a94bb61da8cfaefd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8e916f873c102b78c833218500b7242c6131ea886f7d8c2cb5774b4c6225f818c023d81a4d21f1019c70d6a9587ba01ac5b3e61ee121158e8a65ecf02ba84daafd7c3685ad4d72cf8fbe3155c3daba02ec565a2f4a91bad20ce47a5a600480ac49aed88ec4679bbbf28c46967d4e2de"], 0x4, 0x286, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2200c10, &(0x7f0000002880)={[{@resgid}]}, 0xff, 0x24b, &(0x7f0000002440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffbfff, 0x0, 0xfffffffffffffffd, 0x1) pipe2$9p(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7f}) 3m46.259725229s ago: executing program 3 (id=922): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7f0, &(0x7f0000001d80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) rt_sigpending(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") openat(0xffffffffffffff9c, 0x0, 0x0, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 3m46.088973802s ago: executing program 3 (id=923): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4092}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xb}, {0x0, 0x4}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m30.996438501s ago: executing program 32 (id=923): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4092}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xb}, {0x0, 0x4}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m7.587754578s ago: executing program 1 (id=2542): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) 2m7.538021959s ago: executing program 1 (id=2543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x92b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) timerfd_gettime(0xffffffffffffffff, 0x0) 2m7.380597222s ago: executing program 1 (id=2547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140), 0x0, 0x0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x102) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 2m7.274195414s ago: executing program 1 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000009a7def0500000000000000000000000081123000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x917, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0x1, 0x2, 0xfffe}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, 0x6, 0x3) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8000000000000001}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x0) r4 = open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r4, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) tkill(r5, 0x12) ptrace(0x4208, r5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000ddffff060000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000b00000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c617374000000003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x9, 0x17, 0x0, 0x3, 0x802, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x80000000, 0x4}, 0x0, 0x22, 0x4a8d, 0x1, 0x7f, 0x7, 0xfff7, 0x0, 0x9, 0x0, 0x4}, r5, 0xb, 0xffffffffffffffff, 0x9) 2m7.112982717s ago: executing program 1 (id=2553): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) 2m7.053898808s ago: executing program 1 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 2m7.000058769s ago: executing program 33 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 5.975525069s ago: executing program 0 (id=4529): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 4.960524229s ago: executing program 0 (id=4533): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.448975948s ago: executing program 0 (id=4540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.430742398s ago: executing program 0 (id=4541): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$eJzs28tvG8UfAPDvbuz2lz5+MVV59AEECqLikTRpKT1wAAQSB5CQ4FCOIUmrUrdBTZBoVUFBqBxRJe6IIxJ/ASe4IOCExBU4o0oV6qUtJ6O1dxvbtdPW2HWoPx9p45ndsWa+nh17dicbwMiazP4kEVsi4reImGhkWwtMNl6uXj47f+3y2fkkarU3/0rq5a5cPjtfFC3et7nIlCLST5PY1aHe5dNnjs9Vq4un8vz0yon3ppfHzzxz7MTc0cWjiydnDx06sH/muYOzz/YlziyuKzs/XNq949W3L7w+f/jCOz99kxTxt8XRJ5Md95YaL4/Xan2ubri2NqWT0hAbwm0Zy0/Jcn38T8RYrHbeRLzyyVAbBwxUrVar3df98LkacBdLYtgtAIaj+KHPrn+L7Q5NPdaFSy82LoCyuK/mW+NIKdK8TLnt+rafJiPi8Lm/v8y2aL8PMT6gSgGAkfZdNv95utP8L43m+0L/z9dQKhFxT0Rsi4iDEbE9Iu6NqJe9PyIeuGmNl1py7YskN84/04s9B3cLsvnf8/naVuv8r5j9RWUsz22tx19OjhyrLu7LP5O9Ud6Y5WfWqOP7l3/9vNux5vlftmX1F3PBvB0XSxtb37MwtzL3b2JudunjiJ2lTvEn11cCkojYEREv9FjHsSe/3t3tWJf4W9cgu+nDOlPtq4gnGv1/LtriLyTX1ydPd1qfnP5fVBf3TRdnxY1+/uX8G93qv3n/D1bW/5s6nv9F/H9Ukub12uXbr+P87591vabs9fzfkLzVsu+DuZWVUzMRG5LX6vlK8/7ZtnKzq+Wz+Pfu6Tz+t8XqJ7ErIrKT+MGIeCgiHs7b/khEPBoRe9aI/8eXHnu39/gHK4t/Yc3+j7b+X01siPY9nRNjx3/4tqXSyu3En/X/gXpqb77nVr7/bqVdvZ3NAAAA8N+TRsSWSNKp6+k0nZpq/A//9tiUVpeWV546svT+yYXGMwKVKKfFna6JpvuhM/llfZGfbcvvz+8bfzE2Xs9PzS9VF4YdPIy4zV3Gf+bPsWG3Dhg4z2vB6DL+YXQZ/zCarrU9CASMlg6//x49gxHRaf7/0RDaAdx5beN/zWU/EwO4u7j/B6PL+IfRZfzDSFoej5s/JH93JNKIWAfNaE2UI2IdNKOHRKTrohkSA0oM+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgP/4JAAD//5nH7E0=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1ec, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x188, 0x1, [@m_simple={0x184, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0x0) io_submit(r11, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r10, 0x0, 0x0, 0x7, 0x0, 0x2}]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) 3.164080182s ago: executing program 4 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000400), 0x4) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x1416c14, &(0x7f0000000340), 0x1, 0x77e, &(0x7f0000001600)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100003c}, 0x18) r5 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r5, 0xa) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000540)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) 3.033056454s ago: executing program 4 (id=4552): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x60101, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb4e8403aa2e08ae02b69b9b95e2aaf61d0700000000000000000000d86ff0f8396088e403adc534dc25", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 2.052920722s ago: executing program 4 (id=4558): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32, @ANYRES16], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xffffdffc, 0x100, 0xfffffffc, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000c00)="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", 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) setreuid(0xee01, 0x0) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x100, 0x2) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) chmod(&(0x7f00000001c0)='./bus\x00', 0x30) 1.870877575s ago: executing program 4 (id=4564): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) 1.792803087s ago: executing program 4 (id=4565): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x19c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x184, 0x1, [@m_simple={0x148, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb4e8403aa2e08ae02b69b9b95e2aaf61d0700000000000000000000d86ff0f8396088e403adc534dc25", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.129889889s ago: executing program 5 (id=4571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.128831269s ago: executing program 5 (id=4572): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x2, 0x3, 0x88, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000640)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@dont_measure}]}, 0xfe, 0x478, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x79) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_rr_get_interval(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e27, 0x1, @mcast1, 0x22}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4004844) 1.057160681s ago: executing program 5 (id=4573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) 1.008110911s ago: executing program 5 (id=4575): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x14) 922.485273ms ago: executing program 4 (id=4576): socket$kcm(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) 842.793524ms ago: executing program 6 (id=4577): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xedf}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000380), &(0x7f00000005c0)=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000030101030041fdc21ff655bddc00e5ff3902a492abc764662c08072f24da9578dc3d45c6803924670b47939aa3405a45641468a06a0bc0"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x200000000000026f, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) mincore(&(0x7f0000854000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/86) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xec, 0x0}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc91) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r9], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) 685.936157ms ago: executing program 6 (id=4578): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) statfs(0x0, 0x0) 679.142077ms ago: executing program 2 (id=4579): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32, @ANYRES16], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xffffdffc, 0x100, 0xfffffffc, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000c00)="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", &(0x7f0000000500)="ae34e5d8a3707b23d631258d17dfa81be82d31d55f7ac9a61666f8d9a19a6d76d4aa87a1a7eaf6335fcbb64591435b2465154818902f79b45e662a1f102579f8aa8c6d5afa48a50ba75a1da41162c5e3294397267677149c63cbaf7433ae6d8ab02ad0594537f74bbca083567b8964f081e916a7d84d468107506dc39fccc74fe2a6178adcd78b828966d4c30b3d80048b2980604caaa42a58702a7d60bde01ecc36c10e7bb1b2cb744831a846b15dccc0781465e665a9bc95af602c8bef5bfde79ec7a180"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) setreuid(0xee01, 0x0) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x100, 0x2) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) chmod(&(0x7f00000001c0)='./bus\x00', 0x30) 641.691008ms ago: executing program 6 (id=4580): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000047c0), 0x401, 0x0) 612.664498ms ago: executing program 6 (id=4581): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x4032}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x12, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2d83c067, 0x25, &(0x7f0000000180)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=[{0x4, 0x5, 0xf}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x2, 0xe, 0x2}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0x400}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0082b9689459820311c72c83e80000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 514.486461ms ago: executing program 6 (id=4582): syz_socket_connect_nvme_tcp() 513.787331ms ago: executing program 2 (id=4583): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 512.429161ms ago: executing program 6 (id=4584): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x20c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1c0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a8, 0x1, [@m_simple={0x16c, 0x1e, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc91) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r7], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) kernel console output (not intermixed with test programs): 89] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 276.021778][T13989] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 276.080855][T13992] random: crng reseeded on system resumption [ 276.234070][T13997] loop6: detected capacity change from 0 to 1024 [ 276.287512][T13997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.379163][T13997] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 276.432240][T14009] netlink: 'syz.5.3842': attribute type 10 has an invalid length. [ 276.440996][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3842'. [ 276.475248][T14014] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3844'. [ 276.502222][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.582164][T14021] loop6: detected capacity change from 0 to 512 [ 276.610516][T14021] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 276.620504][T14021] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 276.702799][T14021] net_ratelimit: 485 callbacks suppressed [ 276.702817][T14021] netlink: zone id is out of range [ 276.726995][T14021] netlink: zone id is out of range [ 276.732779][T14021] netlink: zone id is out of range [ 276.738195][T14021] netlink: zone id is out of range [ 276.760249][T14021] netlink: zone id is out of range [ 276.775887][T14021] netlink: zone id is out of range [ 276.781318][T14021] netlink: zone id is out of range [ 276.810614][T14021] netlink: zone id is out of range [ 276.825903][T14021] netlink: zone id is out of range [ 276.843209][T14021] netlink: zone id is out of range [ 276.868235][T14026] SELinux: failed to load policy [ 276.910936][T14026] syz2: rxe_newlink: already configured on vxcan1 [ 276.934505][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 276.956890][T14026] bridge0: entered promiscuous mode [ 276.962244][T14026] macsec1: entered allmulticast mode [ 276.967878][T14026] bridge0: entered allmulticast mode [ 276.987266][T14026] bridge0: port 4(macsec1) entered blocking state [ 276.993882][T14026] bridge0: port 4(macsec1) entered disabled state [ 277.017691][T14026] bridge0: left allmulticast mode [ 277.022858][T14026] bridge0: left promiscuous mode [ 277.085990][T14031] random: crng reseeded on system resumption [ 277.548992][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 277.549012][ T29] audit: type=1326 audit(1757273424.095:19012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd924b7ebe9 code=0x7ffc0000 [ 277.609309][ T29] audit: type=1326 audit(1757273424.095:19013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd924b7ebe9 code=0x7ffc0000 [ 277.633018][ T29] audit: type=1326 audit(1757273424.095:19014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd924b7ebe9 code=0x7ffc0000 [ 277.656894][ T29] audit: type=1326 audit(1757273424.095:19015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd924b7ebe9 code=0x7ffc0000 [ 277.680514][ T29] audit: type=1326 audit(1757273424.135:19016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd924b7ebe9 code=0x7ffc0000 [ 277.682584][T14051] loop0: detected capacity change from 0 to 512 [ 277.704207][ T29] audit: type=1326 audit(1757273424.135:19017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd924b75ba7 code=0x7ffc0000 [ 277.734018][ T29] audit: type=1326 audit(1757273424.135:19018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd924b1adb9 code=0x7ffc0000 [ 277.757675][ T29] audit: type=1326 audit(1757273424.135:19019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd924b75ba7 code=0x7ffc0000 [ 277.770297][T14051] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 277.782909][ T29] audit: type=1326 audit(1757273424.135:19020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd924b1adb9 code=0x7ffc0000 [ 277.782948][ T29] audit: type=1326 audit(1757273424.135:19021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.5.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd924b75ba7 code=0x7ffc0000 [ 277.798172][T14054] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3857'. [ 277.911251][T14054] 0{X功: renamed from 31{X功 (while UP) [ 277.948666][T14058] loop4: detected capacity change from 0 to 1024 [ 277.965261][T14059] loop6: detected capacity change from 0 to 512 [ 277.982682][T14058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.997956][T14059] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 278.007978][T14059] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 278.037438][T14066] loop5: detected capacity change from 0 to 1024 [ 278.055460][T14058] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 278.090564][T14066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.104896][T14075] loop6: detected capacity change from 0 to 128 [ 278.132219][T14075] bio_check_eod: 60 callbacks suppressed [ 278.132241][T14075] syz.6.3864: attempt to access beyond end of device [ 278.132241][T14075] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 278.162362][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.188083][T14075] syz.6.3864: attempt to access beyond end of device [ 278.188083][T14075] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 278.201683][T14075] buffer_io_error: 24 callbacks suppressed [ 278.201703][T14075] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 278.216620][T14075] syz.6.3864: attempt to access beyond end of device [ 278.216620][T14075] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 278.230664][T14075] syz.6.3864: attempt to access beyond end of device [ 278.230664][T14075] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 278.244126][T14075] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 278.247477][T14066] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 278.276094][T14075] syz.6.3864: attempt to access beyond end of device [ 278.276094][T14075] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 278.317323][T14075] syz.6.3864: attempt to access beyond end of device [ 278.317323][T14075] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 278.330845][T14075] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 278.346094][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.358253][T14084] netlink: 'syz.0.3867': attribute type 10 has an invalid length. [ 278.367916][T14084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3867'. [ 278.375420][T14088] netlink: 'syz.4.3870': attribute type 10 has an invalid length. [ 278.388357][T14075] syz.6.3864: attempt to access beyond end of device [ 278.388357][T14075] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 278.413691][T14086] random: crng reseeded on system resumption [ 278.424648][T14075] syz.6.3864: attempt to access beyond end of device [ 278.424648][T14075] loop6: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 278.438492][T14075] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 278.461045][T14075] syz.6.3864: attempt to access beyond end of device [ 278.461045][T14075] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 278.484619][T14075] syz.6.3864: attempt to access beyond end of device [ 278.484619][T14075] loop6: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 278.498160][T14075] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 278.529226][T14097] loop0: detected capacity change from 0 to 512 [ 278.536439][T14075] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 278.554514][T14097] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 278.565173][T14075] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 278.579134][T14075] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 278.599823][T14075] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 278.619274][T14075] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 278.621762][T14099] loop4: detected capacity change from 0 to 764 [ 278.648761][T14099] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.012322][T14121] netlink: 'syz.6.3883': attribute type 10 has an invalid length. [ 279.118542][T14127] random: crng reseeded on system resumption [ 279.143391][T14132] loop4: detected capacity change from 0 to 512 [ 279.155085][T14132] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 279.158316][T14130] vxcan1 speed is unknown, defaulting to 1000 [ 279.268125][T14139] loop6: detected capacity change from 0 to 128 [ 279.529130][T14149] netlink: 'syz.6.3894': attribute type 10 has an invalid length. [ 279.855067][T14164] loop4: detected capacity change from 0 to 512 [ 279.866056][T14164] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 279.883739][T14168] batadv_slave_1: entered promiscuous mode [ 279.905129][T14167] batadv_slave_1: left promiscuous mode [ 279.932725][T14170] netlink: 'syz.0.3903': attribute type 10 has an invalid length. [ 279.942237][T14170] __nla_validate_parse: 3 callbacks suppressed [ 279.942273][T14170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3903'. [ 279.968578][T14172] loop4: detected capacity change from 0 to 1024 [ 279.987091][T14174] netlink: 'syz.5.3905': attribute type 10 has an invalid length. [ 279.997690][T14174] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3905'. [ 280.023385][T14172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.044062][T14179] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3906'. [ 280.053369][T14179] 1{X功: renamed from 30{X功 (while UP) [ 280.080287][T14172] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 280.124275][T14181] random: crng reseeded on system resumption [ 280.144089][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.438718][T14201] loop6: detected capacity change from 0 to 512 [ 280.450404][T14201] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 280.503366][T14203] random: crng reseeded on system resumption [ 280.525200][T14207] batadv_slave_1: entered promiscuous mode [ 280.531341][T14209] loop6: detected capacity change from 0 to 1024 [ 280.533002][T14206] batadv_slave_1: left promiscuous mode [ 280.547893][T14209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.576109][T14214] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3920'. [ 280.585203][T14214] 0{X功: renamed from 31{X功 (while UP) [ 280.598707][T14209] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 280.634428][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.050298][T14230] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3926'. [ 281.394792][T14243] batadv_slave_1: entered promiscuous mode [ 281.403101][T14242] batadv_slave_1: left promiscuous mode [ 281.430103][T14245] loop0: detected capacity change from 0 to 1024 [ 281.448509][T14247] loop4: detected capacity change from 0 to 1024 [ 281.457757][T14245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.472008][T14247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.501771][T14245] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 281.512493][T14247] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 281.579590][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.593740][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.710379][T14261] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3934'. [ 281.725895][T14261] 0{X功: renamed from 31{X功 (while UP) [ 281.746819][T14261] net_ratelimit: 157 callbacks suppressed [ 281.746834][T14261] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 281.778170][T14265] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3938'. [ 281.850363][T14269] vxcan1 speed is unknown, defaulting to 1000 [ 281.870015][T14272] loop2: detected capacity change from 0 to 512 [ 281.884214][T14274] loop0: detected capacity change from 0 to 764 [ 281.891717][T14272] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.901092][T14274] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.927420][T14272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 281.949964][T14272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 281.966556][T14272] System zones: 1-12 [ 281.974699][T14272] EXT4-fs (loop2): 1 truncate cleaned up [ 281.987523][T14272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.387811][T14293] loop6: detected capacity change from 0 to 1024 [ 282.412667][T14293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.461881][T14293] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 282.500635][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.554519][T14299] batadv_slave_1: entered promiscuous mode [ 282.565054][T14298] batadv_slave_1: left promiscuous mode [ 282.597453][T14303] random: crng reseeded on system resumption [ 282.635242][T14305] loop6: detected capacity change from 0 to 128 [ 282.637591][T14307] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3953'. [ 282.740141][T14311] random: crng reseeded on system resumption [ 282.747588][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.767751][ T29] kauditd_printk_skb: 1052 callbacks suppressed [ 282.767771][ T29] audit: type=1326 audit(1757273429.315:20074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8443ebe9 code=0x7ffc0000 [ 282.812681][ T29] audit: type=1326 audit(1757273429.345:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8443ebe9 code=0x7ffc0000 [ 282.836468][ T29] audit: type=1326 audit(1757273429.345:20076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8443ebe9 code=0x7ffc0000 [ 282.860122][ T29] audit: type=1326 audit(1757273429.345:20077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8443ebe9 code=0x7ffc0000 [ 282.883873][ T29] audit: type=1326 audit(1757273429.345:20078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8443ebe9 code=0x7ffc0000 [ 282.907818][ T29] audit: type=1326 audit(1757273429.345:20079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b84435ba7 code=0x7ffc0000 [ 282.931592][ T29] audit: type=1326 audit(1757273429.345:20080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b843dadb9 code=0x7ffc0000 [ 282.955370][ T29] audit: type=1326 audit(1757273429.345:20081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b84435ba7 code=0x7ffc0000 [ 282.978972][ T29] audit: type=1326 audit(1757273429.345:20082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b843dadb9 code=0x7ffc0000 [ 283.002516][ T29] audit: type=1326 audit(1757273429.345:20083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b84435ba7 code=0x7ffc0000 [ 283.051538][T14325] loop6: detected capacity change from 0 to 1024 [ 283.098873][T14325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.142056][T14325] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 283.162248][T14331] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3961'. [ 283.171745][T14331] 1{X功: renamed from 30{X功 (while UP) [ 283.181475][T14331] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 283.244046][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.276297][T14337] netlink: 'syz.5.3964': attribute type 10 has an invalid length. [ 283.284505][T14337] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3964'. [ 283.372145][T14345] batadv_slave_1: entered promiscuous mode [ 283.420042][T14341] batadv_slave_1: left promiscuous mode [ 283.434982][T14349] random: crng reseeded on system resumption [ 283.554934][T14360] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 283.679120][T14364] loop2: detected capacity change from 0 to 764 [ 283.687003][T14364] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 283.892433][T14366] loop4: detected capacity change from 0 to 512 [ 283.908345][T14366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 283.918275][T14366] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 283.935731][T14366] netlink: zone id is out of range [ 283.941236][T14366] netlink: zone id is out of range [ 283.947534][T14366] netlink: zone id is out of range [ 283.952710][T14366] netlink: zone id is out of range [ 283.957951][T14366] netlink: zone id is out of range [ 283.963202][T14366] netlink: zone id is out of range [ 283.969628][T14366] netlink: zone id is out of range [ 283.974818][T14366] netlink: zone id is out of range [ 284.021171][T14369] loop0: detected capacity change from 0 to 1024 [ 284.048664][T14369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.083698][T14369] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 284.119681][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.217088][T14383] loop2: detected capacity change from 0 to 128 [ 284.237263][T14383] bio_check_eod: 77 callbacks suppressed [ 284.237280][T14383] syz.2.3980: attempt to access beyond end of device [ 284.237280][T14383] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 284.272727][T14385] netlink: 'syz.0.3978': attribute type 10 has an invalid length. [ 284.284064][T14383] syz.2.3980: attempt to access beyond end of device [ 284.284064][T14383] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 284.297601][T14383] buffer_io_error: 32 callbacks suppressed [ 284.297620][T14383] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 284.312249][T14387] loop5: detected capacity change from 0 to 1024 [ 284.331222][T14383] syz.2.3980: attempt to access beyond end of device [ 284.331222][T14383] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 284.347391][T14383] syz.2.3980: attempt to access beyond end of device [ 284.347391][T14383] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 284.360964][T14383] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 284.371032][T14383] syz.2.3980: attempt to access beyond end of device [ 284.371032][T14383] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 284.385463][T14387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.439021][T14387] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 284.456188][T14383] syz.2.3980: attempt to access beyond end of device [ 284.456188][T14383] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 284.469700][T14383] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 284.504027][T14383] syz.2.3980: attempt to access beyond end of device [ 284.504027][T14383] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 284.523455][T14383] syz.2.3980: attempt to access beyond end of device [ 284.523455][T14383] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 284.537443][T14383] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 284.547727][T14383] syz.2.3980: attempt to access beyond end of device [ 284.547727][T14383] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 284.561837][T14383] syz.2.3980: attempt to access beyond end of device [ 284.561837][T14383] loop2: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 284.575447][T14383] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 284.584644][T14383] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 284.585081][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.605307][T14383] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 284.614941][T14383] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 284.629976][T14383] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 284.652727][T14383] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 284.680941][T14406] loop5: detected capacity change from 0 to 764 [ 284.691112][T14406] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 284.921298][T14418] netlink: 'syz.0.3992': attribute type 10 has an invalid length. [ 284.970965][T14423] loop5: detected capacity change from 0 to 1024 [ 284.988628][T14423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.050484][T14423] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 285.118289][T14430] loop0: detected capacity change from 0 to 512 [ 285.125399][T14430] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.135331][T14430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 285.148111][T14430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 285.156439][T14430] System zones: 1-12 [ 285.160973][T14430] EXT4-fs (loop0): 1 truncate cleaned up [ 285.168951][T14430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.400575][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.436634][T14434] netlink: 'syz.5.3997': attribute type 10 has an invalid length. [ 285.445309][T14434] __nla_validate_parse: 3 callbacks suppressed [ 285.445345][T14434] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3997'. [ 285.555884][T14438] SELinux: failed to load policy [ 285.565078][T14438] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 285.572203][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3999'. [ 285.598228][T14442] loop6: detected capacity change from 0 to 128 [ 285.719627][T14446] netlink: 'syz.2.4003': attribute type 10 has an invalid length. [ 285.734378][T14446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4003'. [ 285.799468][T14449] loop6: detected capacity change from 0 to 764 [ 285.857595][T14449] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 286.115468][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.158711][T14463] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4008'. [ 286.210862][T14469] loop6: detected capacity change from 0 to 512 [ 286.217704][T14469] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.224579][T14469] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.235488][T14469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 286.243857][T14469] System zones: 1-12 [ 286.249224][T14469] EXT4-fs (loop6): 1 truncate cleaned up [ 286.255421][T14469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.310324][T14474] SELinux: failed to load policy [ 286.317859][T14474] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 286.324449][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4013'. [ 286.336885][T14474] bridge0: entered promiscuous mode [ 286.342444][T14474] macsec1: entered allmulticast mode [ 286.347866][T14474] bridge0: entered allmulticast mode [ 286.355181][T14474] bridge0: port 4(macsec1) entered blocking state [ 286.361826][T14474] bridge0: port 4(macsec1) entered disabled state [ 286.370056][T14474] bridge0: left allmulticast mode [ 286.375166][T14474] bridge0: left promiscuous mode [ 286.885153][T14482] loop2: detected capacity change from 0 to 128 [ 286.919414][T14483] netlink: 'syz.5.4016': attribute type 10 has an invalid length. [ 286.928160][T14483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4016'. [ 287.072198][T14488] loop4: detected capacity change from 0 to 764 [ 287.091101][T14488] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 287.287162][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.341961][T14496] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4021'. [ 287.508047][T14509] random: crng reseeded on system resumption [ 287.514152][T14513] netlink: 'syz.2.4028': attribute type 10 has an invalid length. [ 287.522424][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4028'. [ 287.577745][T14518] loop2: detected capacity change from 0 to 128 [ 287.591532][T14516] netlink: 'syz.4.4029': attribute type 10 has an invalid length. [ 287.600182][T14516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4029'. [ 287.662196][T14522] random: crng reseeded on system resumption [ 287.677243][T14525] loop4: detected capacity change from 0 to 512 [ 287.684200][T14525] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 287.755102][T14530] loop5: detected capacity change from 0 to 512 [ 287.762054][T14530] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.772105][T14530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.786900][T14530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 287.795264][T14530] System zones: 1-12 [ 287.800612][T14530] EXT4-fs (loop5): 1 truncate cleaned up [ 287.903630][T14538] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4036'. [ 288.058504][T14546] loop2: detected capacity change from 0 to 764 [ 288.179288][T14546] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 288.261037][T14550] netlink: 'syz.0.4042': attribute type 10 has an invalid length. [ 288.326409][T14552] loop4: detected capacity change from 0 to 128 [ 288.347650][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 288.347670][ T29] audit: type=1326 audit(1757273434.885:20640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.377809][ T29] audit: type=1326 audit(1757273434.885:20641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.380607][T14554] loop6: detected capacity change from 0 to 512 [ 288.401718][ T29] audit: type=1326 audit(1757273434.885:20642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.431723][ T29] audit: type=1326 audit(1757273434.885:20643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.455443][ T29] audit: type=1326 audit(1757273434.885:20644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.465631][T14554] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 288.479052][ T29] audit: type=1326 audit(1757273434.895:20645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.511631][ T29] audit: type=1326 audit(1757273434.895:20646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.535581][ T29] audit: type=1326 audit(1757273434.895:20647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.559542][ T29] audit: type=1326 audit(1757273434.895:20648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.583296][ T29] audit: type=1326 audit(1757273434.895:20649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.6.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 288.671858][T14561] loop6: detected capacity change from 0 to 512 [ 288.683911][T14561] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.692105][T14561] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.714244][T14561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 288.735030][T14561] System zones: 1-12 [ 288.745162][T14561] EXT4-fs (loop6): 1 truncate cleaned up [ 288.760827][T14567] netlink: 'syz.0.4049': attribute type 10 has an invalid length. [ 288.775551][T14570] 0{X功: renamed from 31{X功 (while UP) [ 288.784729][T14570] net_ratelimit: 74 callbacks suppressed [ 288.784746][T14570] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 288.995435][T14584] random: crng reseeded on system resumption [ 289.060559][T14588] vxcan1 speed is unknown, defaulting to 1000 [ 289.161159][T14592] loop2: detected capacity change from 0 to 512 [ 289.169954][T14592] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 289.305200][T14598] loop2: detected capacity change from 0 to 1024 [ 289.463100][T14606] loop2: detected capacity change from 0 to 764 [ 289.471649][T14606] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 289.589842][T14610] loop6: detected capacity change from 0 to 512 [ 289.598728][T14610] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.605869][T14610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 289.617922][T14610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 289.626496][T14610] System zones: 1-12 [ 289.630939][T14610] EXT4-fs (loop6): 1 truncate cleaned up [ 289.831550][T14627] netlink: 'syz.2.4070': attribute type 10 has an invalid length. [ 290.054025][T14638] loop0: detected capacity change from 0 to 512 [ 290.071007][T14638] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.086175][T14638] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 290.112297][T14638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 290.133186][T14638] System zones: 1-12 [ 290.148102][T14638] EXT4-fs (loop0): 1 truncate cleaned up [ 290.172017][T10499] EXT4-fs unmount: 7 callbacks suppressed [ 290.172037][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.178628][T14638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.213367][T14652] loop6: detected capacity change from 0 to 1024 [ 290.230797][T14652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.312570][T14652] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 290.391548][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.401324][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.442958][T14671] loop6: detected capacity change from 0 to 2048 [ 290.455975][T14673] __nla_validate_parse: 7 callbacks suppressed [ 290.455992][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4088'. [ 290.612630][T14684] netlink: 'syz.0.4092': attribute type 10 has an invalid length. [ 290.620822][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4092'. [ 290.718154][T14694] batadv_slave_1: entered promiscuous mode [ 290.733672][T14693] batadv_slave_1: left promiscuous mode [ 290.742774][T14696] loop5: detected capacity change from 0 to 1024 [ 290.768412][T14696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.804935][T14696] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 290.851705][T14702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4100'. [ 290.865370][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.939511][T14710] loop0: detected capacity change from 0 to 128 [ 290.950581][T14710] bio_check_eod: 135 callbacks suppressed [ 290.950600][T14710] syz.0.4104: attempt to access beyond end of device [ 290.950600][T14710] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 290.972599][T14710] syz.0.4104: attempt to access beyond end of device [ 290.972599][T14710] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 290.986174][T14710] buffer_io_error: 60 callbacks suppressed [ 290.986192][T14710] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 291.003295][T14710] syz.0.4104: attempt to access beyond end of device [ 291.003295][T14710] loop0: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 291.018229][T14710] syz.0.4104: attempt to access beyond end of device [ 291.018229][T14710] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 291.031777][T14710] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 291.051770][T14710] syz.0.4104: attempt to access beyond end of device [ 291.051770][T14710] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 291.067087][T14710] syz.0.4104: attempt to access beyond end of device [ 291.067087][T14710] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 291.080651][T14710] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 291.091382][T14710] syz.0.4104: attempt to access beyond end of device [ 291.091382][T14710] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 291.111972][T14710] syz.0.4104: attempt to access beyond end of device [ 291.111972][T14710] loop0: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 291.125553][T14710] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 291.134722][T14710] syz.0.4104: attempt to access beyond end of device [ 291.134722][T14710] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 291.150049][T14710] syz.0.4104: attempt to access beyond end of device [ 291.150049][T14710] loop0: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 291.163539][T14710] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 291.179345][T14710] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 291.191550][T14710] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 291.202016][T14710] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 291.214442][T14710] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 291.224778][T14710] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 291.257537][T14716] netlink: 'syz.5.4107': attribute type 10 has an invalid length. [ 291.266635][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4107'. [ 291.325022][T14724] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4110'. [ 291.333993][T14722] random: crng reseeded on system resumption [ 291.363138][T14729] loop5: detected capacity change from 0 to 1024 [ 291.390380][T14729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.412104][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4113'. [ 291.471295][T14747] loop4: detected capacity change from 0 to 512 [ 291.478291][T14747] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.485912][T14747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 291.500225][T14747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 291.508355][T14747] System zones: 1-12 [ 291.510181][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.521487][T14747] EXT4-fs (loop4): 1 truncate cleaned up [ 291.528119][T14747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.644422][T14753] loop2: detected capacity change from 0 to 128 [ 291.773744][T14760] netlink: 'syz.5.4122': attribute type 10 has an invalid length. [ 291.781877][T14760] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4122'. [ 292.111201][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.126610][T14767] loop5: detected capacity change from 0 to 512 [ 292.133547][T14767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 292.143441][T14767] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 292.156571][T14767] netlink: zone id is out of range [ 292.161853][T14767] netlink: zone id is out of range [ 292.167206][T14767] netlink: zone id is out of range [ 292.172388][T14767] netlink: zone id is out of range [ 292.177712][T14767] netlink: zone id is out of range [ 292.182983][T14767] netlink: zone id is out of range [ 292.188326][T14767] netlink: zone id is out of range [ 292.193772][T14767] netlink: zone id is out of range [ 292.199184][T14767] netlink: zone id is out of range [ 292.220903][T14775] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4127'. [ 292.238924][T14778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4128'. [ 292.298318][T14786] loop4: detected capacity change from 0 to 1024 [ 292.318156][T14790] loop5: detected capacity change from 0 to 512 [ 292.325027][T14790] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 292.366772][T14786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.412036][T14798] loop6: detected capacity change from 0 to 512 [ 292.418788][T14798] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.427034][T14798] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 292.441512][T14798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 292.457995][T14801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.473814][T14798] System zones: 1-12 [ 292.480103][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.489764][T14798] EXT4-fs (loop6): 1 truncate cleaned up [ 292.506789][T14798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.613689][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4141'. [ 292.783673][T14816] netlink: 'syz.4.4144': attribute type 10 has an invalid length. [ 292.827553][T14820] loop5: detected capacity change from 0 to 764 [ 292.840528][T14820] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 292.884248][T14826] loop4: detected capacity change from 0 to 1024 [ 292.892266][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.909025][T14826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.991633][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.032308][T14840] loop4: detected capacity change from 0 to 128 [ 293.051197][T14839] loop0: detected capacity change from 0 to 1024 [ 293.064741][T14836] random: crng reseeded on system resumption [ 293.080447][T14839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.124176][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.173351][T14849] netlink: 'syz.6.4157': attribute type 10 has an invalid length. [ 293.289137][T14860] loop5: detected capacity change from 0 to 1024 [ 293.306687][T14862] loop4: detected capacity change from 0 to 512 [ 293.309744][T14860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.325748][T14862] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.333703][T14862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.353534][T14866] loop0: detected capacity change from 0 to 512 [ 293.360456][T14866] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.367670][T14866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 293.372943][T14862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 293.379191][T14866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 293.386117][T14862] System zones: 1-12 [ 293.394832][T14866] System zones: 1-12 [ 293.397942][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.410680][T14866] EXT4-fs (loop0): 1 truncate cleaned up [ 293.417094][T14866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.430372][T14862] EXT4-fs (loop4): 1 truncate cleaned up [ 293.436622][T14862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.460450][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.470823][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 293.470839][ T29] audit: type=1400 audit(1757273440.025:20921): avc: granted { setsecparam } for pid=14869 comm="syz.5.4164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 293.580488][T14872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.669623][T14877] loop5: detected capacity change from 0 to 1024 [ 293.699277][T14877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.773634][T14881] random: crng reseeded on system resumption [ 293.787001][T14872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.841080][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.889709][T14887] loop2: detected capacity change from 0 to 128 [ 293.986170][T14872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.001419][T14891] netlink: 'syz.5.4171': attribute type 10 has an invalid length. [ 294.180298][T14872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.208520][ T29] audit: type=1326 audit(1757273440.745:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.232184][ T29] audit: type=1326 audit(1757273440.745:20923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.256181][ T29] audit: type=1326 audit(1757273440.745:20924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.279914][ T29] audit: type=1326 audit(1757273440.745:20925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.303646][ T29] audit: type=1326 audit(1757273440.745:20926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.327468][ T29] audit: type=1326 audit(1757273440.745:20927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.351463][ T29] audit: type=1326 audit(1757273440.745:20928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.375256][ T29] audit: type=1326 audit(1757273440.745:20929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.398987][ T29] audit: type=1326 audit(1757273440.745:20930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14896 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb9a6ebe9 code=0x7ffc0000 [ 294.434267][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.469582][T14897] 1{X功: renamed from 30{X功 (while UP) [ 294.480168][T14897] net_ratelimit: 73 callbacks suppressed [ 294.480213][T14897] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 294.508624][T14904] random: crng reseeded on system resumption [ 294.532270][ T6866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.541048][ T6866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.550722][T14906] loop4: detected capacity change from 0 to 128 [ 294.560125][ T6866] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.579209][ T6888] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.632122][T14917] loop2: detected capacity change from 0 to 128 [ 294.663204][T14915] random: crng reseeded on system resumption [ 294.820567][T14934] loop2: detected capacity change from 0 to 512 [ 294.827789][T14934] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 294.887897][T14948] random: crng reseeded on system resumption [ 294.914704][T14951] netlink: 'syz.4.4196': attribute type 10 has an invalid length. [ 294.947986][T14949] random: crng reseeded on system resumption [ 295.022054][T14958] netlink: 'syz.5.4208': attribute type 10 has an invalid length. [ 295.067469][T14961] loop0: detected capacity change from 0 to 128 [ 295.142953][T14956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.291521][T14975] loop0: detected capacity change from 0 to 512 [ 295.299192][T14975] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 295.356915][T14981] netlink: 'syz.2.4207': attribute type 10 has an invalid length. [ 295.389437][T14956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.394201][T14985] random: crng reseeded on system resumption [ 295.525474][T14956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.751336][T15008] loop2: detected capacity change from 0 to 128 [ 295.779351][T14956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.798271][T14991] vxcan1 speed is unknown, defaulting to 1000 [ 295.818287][ T6876] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.857466][ T6881] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.869711][ T6876] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.885679][ T6881] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.908909][ T6881] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.919168][ T6881] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.931885][ T6876] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.981317][T14991] chnl_net:caif_netlink_parms(): no params data found [ 295.994259][T15017] netlink: 'syz.2.4219': attribute type 10 has an invalid length. [ 296.002595][T15017] __nla_validate_parse: 11 callbacks suppressed [ 296.002633][T15017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4219'. [ 296.030280][ T6876] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.050323][T15019] loop4: detected capacity change from 0 to 1024 [ 296.055455][T15022] loop2: detected capacity change from 0 to 512 [ 296.064066][T15022] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 296.077371][T15019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.097047][T14991] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.104195][T14991] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.114016][T14991] bridge_slave_0: entered allmulticast mode [ 296.120908][T14991] bridge_slave_0: entered promiscuous mode [ 296.129510][T14991] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.136793][T14991] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.144104][T14991] bridge_slave_1: entered allmulticast mode [ 296.152197][T14991] bridge_slave_1: entered promiscuous mode [ 296.166151][T15028] random: crng reseeded on system resumption [ 296.180638][T14991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.194214][T14991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.208945][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.235178][T14991] team0: Port device team_slave_0 added [ 296.242627][T14991] team0: Port device team_slave_1 added [ 296.373318][ T6876] dummy0: left allmulticast mode [ 296.385340][ T6876] bridge0: port 1(dummy0) entered disabled state [ 296.454825][ T6876] bridge0 (unregistering): left allmulticast mode [ 296.499037][ T6876] bond0 (unregistering): Released all slaves [ 296.507626][T14991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.514608][T14991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.540789][T14991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.558455][T14991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.565483][T14991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.591712][T14991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.600895][T15040] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4226'. [ 296.621193][T15040] 1{X功: renamed from 30{X功 (while UP) [ 296.629647][T15040] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 296.648215][T14991] hsr_slave_0: entered promiscuous mode [ 296.654458][T14991] hsr_slave_1: entered promiscuous mode [ 296.670720][T14991] debugfs: 'hsr0' already exists in 'hsr' [ 296.676690][T14991] Cannot create hsr debugfs directory [ 296.685528][T15042] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4227'. [ 296.731584][ T6876] hsr_slave_0: left promiscuous mode [ 296.749222][T15046] netlink: 'syz.0.4228': attribute type 10 has an invalid length. [ 296.757178][T15046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4228'. [ 296.767240][ T6876] hsr_slave_1: left promiscuous mode [ 296.777561][ T6876] veth1_macvtap: left promiscuous mode [ 296.783082][ T6876] veth0_macvtap: left promiscuous mode [ 296.788846][ T6876] veth1_vlan: left promiscuous mode [ 296.794114][ T6876] veth0_vlan: left promiscuous mode [ 296.920187][T15050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4230'. [ 296.957868][T15054] loop4: detected capacity change from 0 to 512 [ 296.972935][T15054] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.979010][T15056] loop0: detected capacity change from 0 to 512 [ 296.986100][T15054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 296.987832][T15056] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 296.997267][T15054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 297.015276][T15054] System zones: 1-12 [ 297.029927][T15054] EXT4-fs (loop4): 1 truncate cleaned up [ 297.036113][T15054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.297308][T15064] loop2: detected capacity change from 0 to 764 [ 297.304734][T15064] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 297.307992][T14991] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.327318][T14991] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.341372][T14991] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.362969][T14991] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.422919][T14991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.451760][T14991] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.470156][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.477347][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.502626][T14991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.513079][T14991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.529119][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.536271][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.673772][T14991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.861798][T14991] veth0_vlan: entered promiscuous mode [ 297.899118][T14991] veth1_vlan: entered promiscuous mode [ 297.944999][T15094] random: crng reseeded on system resumption [ 297.975521][T14991] veth0_macvtap: entered promiscuous mode [ 297.996931][T14991] veth1_macvtap: entered promiscuous mode [ 298.010134][T14991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.023373][T14991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.035442][ T6881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.057338][ T6881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.071591][ T6881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.094044][ T6881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.121317][T15101] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4239'. [ 298.128279][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.152831][T15105] netlink: 'syz.4.4240': attribute type 10 has an invalid length. [ 298.160991][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4240'. [ 298.274275][T15111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4241'. [ 298.375016][T15113] random: crng reseeded on system resumption [ 298.531657][T15119] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 298.544571][T15118] loop2: detected capacity change from 0 to 512 [ 298.551693][T15118] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.567485][T15119] SELinux: failed to load policy [ 298.574305][T15118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 298.585252][T15116] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 298.592795][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4243'. [ 298.602848][T15118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 298.612842][T15123] loop4: detected capacity change from 0 to 512 [ 298.613721][T15118] System zones: 1-12 [ 298.624639][T15123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 298.627852][T15116] bridge0: entered promiscuous mode [ 298.634896][T15123] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 298.649047][T15118] EXT4-fs (loop2): 1 truncate cleaned up [ 298.655227][T15118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.663063][T15123] netlink: zone id is out of range [ 298.668785][T15116] macsec1: entered allmulticast mode [ 298.673049][T15123] netlink: zone id is out of range [ 298.677915][T15116] bridge0: entered allmulticast mode [ 298.679497][T15116] bridge0: port 4(macsec1) entered blocking state [ 298.683524][T15123] netlink: zone id is out of range [ 298.688681][T15116] bridge0: port 4(macsec1) entered disabled state [ 298.695104][T15123] netlink: zone id is out of range [ 298.711957][T15123] netlink: zone id is out of range [ 298.717245][T15123] netlink: zone id is out of range [ 298.722616][T15116] bridge0: left allmulticast mode [ 298.727857][T15116] bridge0: left promiscuous mode [ 298.733154][T15123] netlink: zone id is out of range [ 298.739405][T15123] netlink: zone id is out of range [ 298.790969][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 298.790988][ T29] audit: type=1326 audit(1757273445.335:21329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 298.877689][ T29] audit: type=1326 audit(1757273445.335:21330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 298.904197][ T29] audit: type=1326 audit(1757273445.335:21331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 298.927974][ T29] audit: type=1326 audit(1757273445.335:21332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 298.952764][ T29] audit: type=1326 audit(1757273445.335:21333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 298.976533][ T29] audit: type=1326 audit(1757273445.335:21334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 299.000320][ T29] audit: type=1326 audit(1757273445.335:21335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 299.024306][ T29] audit: type=1326 audit(1757273445.335:21336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 299.048137][ T29] audit: type=1326 audit(1757273445.335:21337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 299.071961][ T29] audit: type=1326 audit(1757273445.335:21338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 299.110259][T15136] loop6: detected capacity change from 0 to 512 [ 299.117105][T15136] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.124098][T15136] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.137536][T15136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 299.145634][T15136] System zones: 1-12 [ 299.151010][T15136] EXT4-fs (loop6): 1 truncate cleaned up [ 299.546474][T15136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.610912][T15142] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4252'. [ 299.623620][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.633770][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.724321][T15152] random: crng reseeded on system resumption [ 299.750903][T15156] SELinux: failed to load policy [ 299.761130][T15156] syz2: rxe_newlink: already configured on vxcan1 [ 299.780720][T15156] bridge0: entered promiscuous mode [ 299.794586][T15156] macsec1: entered allmulticast mode [ 299.799999][T15156] bridge0: entered allmulticast mode [ 299.807074][T15156] bridge0: port 4(macsec1) entered blocking state [ 299.813640][T15156] bridge0: port 4(macsec1) entered disabled state [ 299.824510][T15156] bridge0: left allmulticast mode [ 299.829786][T15156] bridge0: left promiscuous mode [ 300.080207][T15171] loop2: detected capacity change from 0 to 512 [ 300.095195][T15171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.105113][T15171] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 300.313508][T15171] net_ratelimit: 74 callbacks suppressed [ 300.313529][T15171] netlink: zone id is out of range [ 300.325875][T15171] netlink: zone id is out of range [ 300.331135][T15171] netlink: zone id is out of range [ 300.336380][T15171] netlink: zone id is out of range [ 300.342869][T15171] netlink: zone id is out of range [ 300.348172][T15171] netlink: zone id is out of range [ 300.353525][T15171] netlink: zone id is out of range [ 300.363043][T15171] netlink: zone id is out of range [ 300.372189][T15171] netlink: zone id is out of range [ 300.378685][T15171] netlink: zone id is out of range [ 300.501260][T15185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.575219][T15185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.725068][T15185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.764382][T15194] loop0: detected capacity change from 0 to 512 [ 300.771319][T15194] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.778310][T15194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.789051][T15194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 300.797265][T15194] System zones: 1-12 [ 300.838481][T15185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.229371][ T6890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.282436][T15194] EXT4-fs (loop0): 1 truncate cleaned up [ 301.294139][T15194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.318200][ T6890] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.337697][ T6890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.356716][ T6890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.375014][T15201] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 301.383068][T15201] __nla_validate_parse: 2 callbacks suppressed [ 301.383088][T15201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4273'. [ 301.399795][T15199] random: crng reseeded on system resumption [ 301.422997][T15203] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4274'. [ 301.533487][T15210] loop6: detected capacity change from 0 to 512 [ 301.541506][T15210] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.550242][T15210] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 301.561236][T15210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 301.572013][T15210] System zones: 1-12 [ 301.576685][T15210] EXT4-fs (loop6): 1 truncate cleaned up [ 301.582986][T15210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.586329][T15212] loop5: detected capacity change from 0 to 1024 [ 301.627944][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.643938][T15212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.648214][T15216] random: crng reseeded on system resumption [ 301.678928][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4279'. [ 301.750574][T14991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.804688][T15232] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.819017][T15234] loop2: detected capacity change from 0 to 512 [ 301.838927][T15236] netlink: 'syz.5.4284': attribute type 10 has an invalid length. [ 301.839471][T15234] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.846917][T15236] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4284'. [ 301.862969][T15234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.883211][T15236] dummy0: entered promiscuous mode [ 301.890592][T15236] bridge0: port 3(dummy0) entered blocking state [ 301.897129][T15236] bridge0: port 3(dummy0) entered disabled state [ 301.903832][T15234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 301.905925][T15236] dummy0: entered allmulticast mode [ 301.911922][T15234] System zones: 1-12 [ 301.922901][T15234] EXT4-fs (loop2): 1 truncate cleaned up [ 301.928811][T15236] bridge0: port 3(dummy0) entered blocking state [ 301.935393][T15236] bridge0: port 3(dummy0) entered forwarding state [ 301.945065][T15234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.000636][T15232] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.160274][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.171790][T15232] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.738501][T15232] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.799155][ T6890] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.829531][ T6890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.854859][ T6890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.869088][ T6890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.894208][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.918268][T15254] loop0: detected capacity change from 0 to 512 [ 302.941870][T15254] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.949059][T15254] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.966690][T15257] SELinux: failed to load policy [ 302.973907][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4293'. [ 302.976607][T15257] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 302.988398][T15254] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 302.992316][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4291'. [ 303.008083][T15254] System zones: 1-12 [ 303.010514][T15257] bridge0: entered promiscuous mode [ 303.017470][T15257] macsec1: entered allmulticast mode [ 303.022950][T15257] bridge0: entered allmulticast mode [ 303.029675][T15257] bridge0: port 4(macsec1) entered blocking state [ 303.036273][T15257] bridge0: port 4(macsec1) entered disabled state [ 303.036332][T15254] EXT4-fs (loop0): 1 truncate cleaned up [ 303.036775][T15254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.061571][T15257] bridge0: left allmulticast mode [ 303.066809][T15257] bridge0: left promiscuous mode [ 303.174351][T15269] random: crng reseeded on system resumption [ 303.310033][T15275] netlink: 'syz.6.4298': attribute type 10 has an invalid length. [ 303.319514][T15275] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4298'. [ 303.377791][T15277] random: crng reseeded on system resumption [ 303.466315][T15283] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.509454][T15283] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.560676][T15283] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.620463][T15283] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.658984][T15287] loop2: detected capacity change from 0 to 512 [ 303.667723][T15287] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.683998][T15287] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 303.705013][ T6846] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.716720][T15287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 303.725537][T15287] System zones: 1-12 [ 303.731581][ T6846] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.740307][T15287] EXT4-fs (loop2): 1 truncate cleaned up [ 303.740740][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4305'. [ 303.755745][ T6846] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.763869][T15287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.776285][ T6846] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.802671][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.869732][T15295] random: crng reseeded on system resumption [ 303.882068][T15300] netlink: 'syz.4.4310': attribute type 10 has an invalid length. [ 303.898115][T15300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4310'. [ 303.900081][T15298] loop0: detected capacity change from 0 to 764 [ 303.920548][T15298] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 304.008476][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 304.008494][ T29] audit: type=1326 audit(1757273450.555:21397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.051469][ T29] audit: type=1326 audit(1757273450.555:21398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.075306][ T29] audit: type=1326 audit(1757273450.555:21399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.099292][ T29] audit: type=1326 audit(1757273450.555:21400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.122999][ T29] audit: type=1326 audit(1757273450.555:21401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.146692][ T29] audit: type=1326 audit(1757273450.555:21402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.170346][ T29] audit: type=1326 audit(1757273450.555:21403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.194102][ T29] audit: type=1326 audit(1757273450.555:21404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.220202][ T29] audit: type=1326 audit(1757273450.555:21405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.243998][ T29] audit: type=1326 audit(1757273450.555:21406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.4.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88bb2ebe9 code=0x7ffc0000 [ 304.306056][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4317'. [ 304.784233][T15325] netlink: 'syz.5.4318': attribute type 10 has an invalid length. [ 305.142575][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.231114][T15342] netlink: 'syz.2.4323': attribute type 10 has an invalid length. [ 305.390189][T15352] random: crng reseeded on system resumption [ 305.402762][T15354] batadv_slave_1: entered promiscuous mode [ 305.414089][T15353] batadv_slave_1: left promiscuous mode [ 305.920267][T15359] loop5: detected capacity change from 0 to 512 [ 305.927328][T15359] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 305.951677][T15361] netlink: 'syz.2.4331': attribute type 10 has an invalid length. [ 305.974447][T15365] loop5: detected capacity change from 0 to 764 [ 305.999389][T15365] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 306.309062][T15378] random: crng reseeded on system resumption [ 306.383940][T15381] loop5: detected capacity change from 0 to 512 [ 306.400604][T15385] loop4: detected capacity change from 0 to 1024 [ 306.409576][T15381] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 306.438408][T15385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.468523][T15392] loop0: detected capacity change from 0 to 512 [ 306.485201][T15392] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.493441][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.512345][T15392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.531344][T15392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 306.543218][T15396] random: crng reseeded on system resumption [ 306.550194][T15392] System zones: 1-12 [ 306.560984][T15392] EXT4-fs (loop0): 1 truncate cleaned up [ 306.577549][T15392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.613338][T15402] loop6: detected capacity change from 0 to 512 [ 306.623634][T15402] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 306.675673][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.694680][T15408] netlink: 'syz.6.4344': attribute type 10 has an invalid length. [ 306.702664][T15408] __nla_validate_parse: 5 callbacks suppressed [ 306.702750][T15408] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4344'. [ 306.837046][T15410] loop0: detected capacity change from 0 to 1024 [ 306.854519][T15410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.871650][T15415] loop6: detected capacity change from 0 to 764 [ 306.880170][T15415] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 307.140499][T15410] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 307.168147][T15420] loop2: detected capacity change from 0 to 2048 [ 307.318366][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.450088][T15427] loop0: detected capacity change from 0 to 1024 [ 307.462429][T15429] loop5: detected capacity change from 0 to 512 [ 307.482424][T15429] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 307.494203][T15427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.644802][T15427] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 307.665683][T15436] loop4: detected capacity change from 0 to 1024 [ 307.724597][T15441] random: crng reseeded on system resumption [ 307.935619][T15443] loop2: detected capacity change from 0 to 512 [ 307.942770][T15443] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.951329][T15443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 307.962960][T15443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 307.974074][T15443] System zones: 1-12 [ 307.979200][T15443] EXT4-fs (loop2): 1 truncate cleaned up [ 307.986260][T15443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.047963][T15436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.081428][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.117766][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.127699][T15449] loop5: detected capacity change from 0 to 512 [ 308.134635][T15449] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.141808][T15449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.153492][T15449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 308.161672][T15449] System zones: 1-12 [ 308.166202][T15449] EXT4-fs (loop5): 1 truncate cleaned up [ 308.184972][T15449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.272830][T14991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.549431][T15467] loop4: detected capacity change from 0 to 512 [ 308.556320][T15467] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.563230][T15467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.574513][T15467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 308.582658][T15467] System zones: 1-12 [ 308.587293][T15467] EXT4-fs (loop4): 1 truncate cleaned up [ 308.593537][T15467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.944442][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.991308][T15471] SELinux: failed to load policy [ 308.998602][T15471] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 309.005522][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4364'. [ 309.036170][T15471] bridge0: entered promiscuous mode [ 309.041745][T15471] macsec1: entered allmulticast mode [ 309.047150][T15471] bridge0: entered allmulticast mode [ 309.055633][T15471] bridge0: port 4(macsec1) entered blocking state [ 309.062255][T15471] bridge0: port 4(macsec1) entered disabled state [ 309.071093][T15471] bridge0: left allmulticast mode [ 309.076268][T15471] bridge0: left promiscuous mode [ 309.181349][T15477] random: crng reseeded on system resumption [ 309.242551][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 309.242570][ T29] audit: type=1326 audit(1757273455.785:21764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.272988][ T29] audit: type=1326 audit(1757273455.785:21765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.298044][ T29] audit: type=1326 audit(1757273455.825:21766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.321924][ T29] audit: type=1326 audit(1757273455.825:21767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.345621][ T29] audit: type=1326 audit(1757273455.825:21768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.350916][T15483] loop5: detected capacity change from 0 to 512 [ 309.371194][ T29] audit: type=1326 audit(1757273455.825:21769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.379440][T15483] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 309.401233][ T29] audit: type=1326 audit(1757273455.825:21770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.433630][ T29] audit: type=1326 audit(1757273455.825:21771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.457341][ T29] audit: type=1326 audit(1757273455.855:21772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.483165][ T29] audit: type=1326 audit(1757273455.855:21773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.5.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 309.611774][T15499] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4376'. [ 309.629237][T15499] 0{X功: renamed from 31{X功 (while UP) [ 309.647918][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.705600][T15499] net_ratelimit: 72 callbacks suppressed [ 309.705706][T15499] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 310.170841][T15513] netlink: 'syz.2.4379': attribute type 10 has an invalid length. [ 310.179540][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4379'. [ 310.372005][T15522] random: crng reseeded on system resumption [ 310.597738][T15530] loop0: detected capacity change from 0 to 512 [ 310.611765][T15532] loop5: detected capacity change from 0 to 512 [ 310.619697][T15530] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 310.630920][T15532] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.641619][T15532] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 310.653865][T15532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 310.662046][T15532] System zones: 1-12 [ 310.666579][T15532] EXT4-fs (loop5): 1 truncate cleaned up [ 310.672974][T15532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.678385][T15536] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4387'. [ 310.737437][T15540] random: crng reseeded on system resumption [ 310.787130][T15545] loop0: detected capacity change from 0 to 512 [ 310.794013][T15545] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.800875][T15545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.812006][T15545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 310.820534][T15545] System zones: 1-12 [ 310.824942][T15545] EXT4-fs (loop0): 1 truncate cleaned up [ 310.974725][T15552] loop6: detected capacity change from 0 to 512 [ 310.981573][T15552] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.988571][T15552] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 311.007960][T15552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 311.016289][T15552] System zones: 1-12 [ 311.021524][T15552] EXT4-fs (loop6): 1 truncate cleaned up [ 311.271124][T15556] loop2: detected capacity change from 0 to 1024 [ 311.305303][T15560] loop0: detected capacity change from 0 to 1024 [ 311.339271][T15556] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 311.469687][T15566] random: crng reseeded on system resumption [ 311.518644][T15570] loop2: detected capacity change from 0 to 512 [ 311.525512][T15570] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 311.572181][T15575] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4399'. [ 311.586795][T15572] netlink: 'syz.5.4398': attribute type 10 has an invalid length. [ 311.595500][T15572] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4398'. [ 312.007202][T15597] random: crng reseeded on system resumption [ 312.031162][T15599] loop0: detected capacity change from 0 to 1024 [ 312.129680][T15610] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4410'. [ 312.138894][T15610] 1{X功: renamed from 30{X功 (while UP) [ 312.146713][T15610] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 312.191081][T15613] loop6: detected capacity change from 0 to 512 [ 312.198010][T15613] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.204753][T15613] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 312.219485][T15613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 312.228385][T15613] System zones: 1-12 [ 312.232717][T15613] EXT4-fs (loop6): 1 truncate cleaned up [ 312.589426][T15617] random: crng reseeded on system resumption [ 312.734558][T15623] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4414'. [ 312.880400][T15633] loop4: detected capacity change from 0 to 512 [ 312.896859][T15633] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 313.053030][T15639] loop4: detected capacity change from 0 to 1024 [ 313.366674][T15636] random: crng reseeded on system resumption [ 313.559989][T15659] random: crng reseeded on system resumption [ 313.697166][T15667] loop6: detected capacity change from 0 to 1024 [ 313.708698][T15669] loop2: detected capacity change from 0 to 1024 [ 313.728409][T15667] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 313.788587][T15675] loop6: detected capacity change from 0 to 512 [ 313.795553][T15675] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 313.827486][T15677] netlink: 'syz.2.4432': attribute type 10 has an invalid length. [ 313.835386][T15677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4432'. [ 313.870052][T15679] random: crng reseeded on system resumption [ 314.085950][T15690] random: crng reseeded on system resumption [ 314.215048][T15705] loop6: detected capacity change from 0 to 512 [ 314.222036][T15705] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.227726][T15707] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4443'. [ 314.231175][T15705] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 314.237816][T15707] 0{X功: renamed from 31{X功 (while UP) [ 314.255159][T15705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 314.256509][T15707] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 314.263480][T15705] System zones: 1-12 [ 314.279431][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 314.279449][ T29] audit: type=1326 audit(1757273460.835:22324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.313131][ T29] audit: type=1326 audit(1757273460.855:22325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.336969][ T29] audit: type=1326 audit(1757273460.855:22326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.360733][ T29] audit: type=1326 audit(1757273460.855:22327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.384489][ T29] audit: type=1326 audit(1757273460.855:22328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.408844][ T29] audit: type=1326 audit(1757273460.855:22329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.433009][ T29] audit: type=1326 audit(1757273460.855:22330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.433048][ T29] audit: type=1326 audit(1757273460.855:22331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.482314][ T29] audit: type=1326 audit(1757273460.855:22332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.506252][ T29] audit: type=1326 audit(1757273460.855:22333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 314.508241][T15705] EXT4-fs (loop6): 1 truncate cleaned up [ 314.558854][T15716] random: crng reseeded on system resumption [ 314.700439][T15722] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4447'. [ 315.315166][T15736] random: crng reseeded on system resumption [ 315.450286][T15744] random: crng reseeded on system resumption [ 315.482464][T15747] netlink: 'syz.6.4455': attribute type 10 has an invalid length. [ 315.490419][T15747] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4455'. [ 315.525221][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4457'. [ 315.560796][T15749] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.608785][T15760] loop2: detected capacity change from 0 to 512 [ 315.616132][T15760] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.623256][T15760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 315.639429][T15760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 315.654255][T15760] System zones: 1-12 [ 315.667057][T15760] EXT4-fs (loop2): 1 truncate cleaned up [ 315.681219][T15765] loop6: detected capacity change from 0 to 512 [ 315.696380][T15765] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.708610][T15749] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.713189][T15765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 315.735270][T15765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 315.743949][T15765] System zones: 1-12 [ 315.749554][T15765] EXT4-fs (loop6): 1 truncate cleaned up [ 315.818278][T15749] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.911446][T15749] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.187895][ T6866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.270684][ T6866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.331436][ T6846] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.350701][ T6866] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.403229][T15775] loop0: detected capacity change from 0 to 512 [ 316.410394][T15775] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.430711][T15775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 316.453529][T15775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 316.507808][T15775] System zones: 1-12 [ 316.538525][T15782] netlink: 'syz.5.4468': attribute type 10 has an invalid length. [ 316.546531][T15782] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4468'. [ 316.556023][T15775] EXT4-fs (loop0): 1 truncate cleaned up [ 316.575040][T15784] loop4: detected capacity change from 0 to 764 [ 316.606520][T15784] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 316.651051][T15786] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4470'. [ 316.669429][T15788] random: crng reseeded on system resumption [ 316.843340][T15799] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4474'. [ 316.866601][T15799] 1{X功: renamed from 30{X功 (while UP) [ 316.875293][T15799] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 317.045344][T15806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.051358][T15816] random: crng reseeded on system resumption [ 317.084851][T15818] netlink: 'syz.2.4481': attribute type 10 has an invalid length. [ 317.214348][T15828] random: crng reseeded on system resumption [ 317.307728][T15806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.428952][T15836] random: crng reseeded on system resumption [ 317.483613][T15840] loop4: detected capacity change from 0 to 512 [ 317.511348][T15840] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.532912][T15840] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.571146][T15840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 317.591774][T15840] System zones: 1-12 [ 317.599805][T15840] EXT4-fs (loop4): 1 truncate cleaned up [ 317.633867][T15845] __nla_validate_parse: 2 callbacks suppressed [ 317.633917][T15845] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4489'. [ 317.658725][T15806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.659285][T15847] loop0: detected capacity change from 0 to 512 [ 317.678711][T15847] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 317.709023][T15845] 0{X功: renamed from 31{X功 (while UP) [ 317.718186][T15845] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 317.762484][T15806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.763442][T15851] loop6: detected capacity change from 0 to 764 [ 317.780339][T15851] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 317.860959][ T6888] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.885311][T15857] netlink: 'syz.0.4493': attribute type 10 has an invalid length. [ 317.893447][T15857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4493'. [ 317.908820][ T6866] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.926049][ T6888] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.944627][ T6888] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.968975][T15859] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4494'. [ 318.010917][T15862] loop0: detected capacity change from 0 to 512 [ 318.025551][T15862] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.041815][T15862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 318.062344][T15862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 318.071208][T15862] System zones: 1-12 [ 318.076159][T15862] EXT4-fs (loop0): 1 truncate cleaned up [ 318.086702][T15868] random: crng reseeded on system resumption [ 318.185154][T15875] loop6: detected capacity change from 0 to 512 [ 318.192188][T15875] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.203033][T15875] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 318.216315][T15874] loop2: detected capacity change from 0 to 1024 [ 318.227024][T15875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 318.260401][T15875] System zones: 1-12 [ 318.265078][T15875] EXT4-fs (loop6): 1 truncate cleaned up [ 318.300801][T15884] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 318.313419][T15874] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 318.328384][T15884] SELinux: failed to load policy [ 318.376691][T15880] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 318.391612][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4500'. [ 318.406851][T15880] bridge0: entered promiscuous mode [ 318.412570][T15880] macsec1: entered allmulticast mode [ 318.418021][T15880] bridge0: entered allmulticast mode [ 318.425071][T15880] bridge0: port 4(macsec1) entered blocking state [ 318.431613][T15880] bridge0: port 4(macsec1) entered disabled state [ 318.454832][T15880] bridge0: left allmulticast mode [ 318.460164][T15880] bridge0: left promiscuous mode [ 318.620477][T15898] netlink: 'syz.0.4505': attribute type 10 has an invalid length. [ 318.628425][T15898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4505'. [ 318.670167][T15900] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4506'. [ 318.908693][T15910] loop2: detected capacity change from 0 to 764 [ 319.122539][T15913] random: crng reseeded on system resumption [ 319.352141][T15910] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 319.388208][T15919] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.429362][T15922] loop5: detected capacity change from 0 to 512 [ 319.446189][T15924] loop6: detected capacity change from 0 to 1024 [ 319.455225][T15922] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.473323][T15922] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 319.496905][T15922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 319.505050][T15922] System zones: 1-12 [ 319.510550][T15922] EXT4-fs (loop5): 1 truncate cleaned up [ 319.563639][T15919] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.669887][T15935] loop2: detected capacity change from 0 to 1024 [ 319.673363][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 319.673437][ T29] audit: type=1326 audit(1757273466.215:22581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.697920][T15937] loop6: detected capacity change from 0 to 2048 [ 319.706332][ T29] audit: type=1326 audit(1757273466.215:22582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.777462][T15919] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.804606][T15942] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4518'. [ 319.817048][ T29] audit: type=1326 audit(1757273466.295:22583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.840819][ T29] audit: type=1326 audit(1757273466.295:22584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.864552][ T29] audit: type=1326 audit(1757273466.295:22585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.888579][ T29] audit: type=1326 audit(1757273466.295:22586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.912266][ T29] audit: type=1326 audit(1757273466.295:22587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.935985][ T29] audit: type=1326 audit(1757273466.295:22588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.940604][T15935] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 319.959686][ T29] audit: type=1326 audit(1757273466.295:22589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 319.967294][T15935] inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 320.000464][ T29] audit: type=1326 audit(1757273466.295:22590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15932 comm="syz.0.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e675ebe9 code=0x7ffc0000 [ 320.030379][T15939] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4519'. [ 320.041843][T15942] 0{X功: renamed from gretap0 (while UP) [ 320.115165][T15942] 0{X功: entered allmulticast mode [ 320.121617][T15942] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 320.146810][T15919] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.269662][ T6888] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.279360][ T6888] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.299828][T11674] EXT4-fs unmount: 40 callbacks suppressed [ 320.299848][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.317584][ T6888] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.335564][ T6888] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.717434][T15969] netlink: 'syz.5.4525': attribute type 10 has an invalid length. [ 320.725408][T15969] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4525'. [ 320.765873][T15972] random: crng reseeded on system resumption [ 320.816765][T15976] loop6: detected capacity change from 0 to 764 [ 320.824536][T15976] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 320.970602][T15981] loop2: detected capacity change from 0 to 512 [ 320.977785][T15981] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.126490][T15981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.238254][T15981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 321.264199][T15981] System zones: 1-12 [ 321.293342][T15986] loop0: detected capacity change from 0 to 512 [ 321.306792][T15981] EXT4-fs (loop2): 1 truncate cleaned up [ 321.320212][T15986] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.329068][T15981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.343871][T15986] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 321.356488][T15986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 321.370914][T15986] System zones: 1-12 [ 321.375427][T15986] EXT4-fs (loop0): 1 truncate cleaned up [ 321.387952][T15986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.407143][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.503798][T15993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.647857][T15993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.723963][T15993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.839686][T15993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.002106][ T6876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.056083][ T6876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.145885][ T6876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.162884][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.231195][ T6846] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.246366][T16003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.266491][T16005] loop6: detected capacity change from 0 to 1024 [ 322.278176][T16005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.297960][T16009] loop2: detected capacity change from 0 to 512 [ 322.305275][T16009] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 322.318753][T16003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.337315][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.412195][T16014] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.451580][T16003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.499061][T16003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.547052][T16014] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.574092][ T6876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.586070][ T6890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.612944][ T6890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.645495][T16020] random: crng reseeded on system resumption [ 322.661071][T16014] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.700526][T16024] loop0: detected capacity change from 0 to 512 [ 322.707605][T16024] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.710609][ T6890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.722516][T16024] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 322.734312][T16024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 322.742478][T16024] System zones: 1-12 [ 322.748378][T16024] EXT4-fs (loop0): 1 truncate cleaned up [ 322.754611][T16024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.802260][T16014] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.858661][T10298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.264772][T16035] loop6: detected capacity change from 0 to 512 [ 323.272779][T16035] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.297776][T16032] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.334885][T16035] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 323.348519][ T6881] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.363587][ T6881] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.373022][ T6881] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.381840][ T6881] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.393491][T16035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 323.402061][T16035] System zones: 1-12 [ 323.440729][T16035] EXT4-fs (loop6): 1 truncate cleaned up [ 323.449190][T16035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.467933][T16032] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.643347][T16032] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.691403][T16042] loop5: detected capacity change from 0 to 512 [ 323.701936][T16042] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 323.739381][T16032] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.754077][T16048] loop5: detected capacity change from 0 to 512 [ 323.761410][T16046] loop4: detected capacity change from 0 to 1024 [ 323.769012][T16048] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.777254][T16048] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 323.789384][T16048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 323.789710][T16046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.797423][T16048] System zones: 1-12 [ 323.815230][T16048] EXT4-fs (loop5): 1 truncate cleaned up [ 323.833652][T16048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.876994][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.938255][T16056] loop4: detected capacity change from 0 to 1024 [ 323.960211][T16056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.022478][T16056] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 324.091606][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.224527][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.276716][T16065] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4554'. [ 324.691152][T14991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.712829][T16070] loop6: detected capacity change from 0 to 1024 [ 324.714266][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 324.714284][ T29] audit: type=1326 audit(1757273471.255:22838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.750970][ T29] audit: type=1326 audit(1757273471.275:22839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.774867][ T29] audit: type=1326 audit(1757273471.275:22840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.798552][ T29] audit: type=1326 audit(1757273471.275:22841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.822235][ T29] audit: type=1326 audit(1757273471.275:22842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.845873][ T29] audit: type=1326 audit(1757273471.275:22843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.861452][T16070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.869480][ T29] audit: type=1326 audit(1757273471.275:22844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.905349][ T29] audit: type=1326 audit(1757273471.275:22845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.914370][T16070] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4556: Allocating blocks 497-513 which overlap fs metadata [ 324.929159][ T29] audit: type=1326 audit(1757273471.275:22846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.944668][T16070] EXT4-fs (loop6): pa ffff8881071c4e70: logic 256, phys. 369, len 9 [ 324.966556][ T29] audit: type=1326 audit(1757273471.275:22847): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16071 comm="syz.5.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2230c9ebe9 code=0x7ffc0000 [ 324.998516][T16070] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 325.048504][T16077] netlink: 'syz.5.4557': attribute type 10 has an invalid length. [ 325.056916][T16077] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4557'. [ 325.077511][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.117533][T16082] loop6: detected capacity change from 0 to 512 [ 325.124114][T16080] random: crng reseeded on system resumption [ 325.124722][T16082] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 325.166007][T16088] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4562'. [ 325.192714][T16090] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4563'. [ 325.292408][T16098] loop4: detected capacity change from 0 to 512 [ 325.299354][T16098] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.308540][T16098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 325.319798][T16098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 325.335375][T16098] System zones: 1-12 [ 325.340535][T16098] EXT4-fs (loop4): 1 truncate cleaned up [ 325.347890][T16098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.468472][T16108] random: crng reseeded on system resumption [ 325.718417][T16114] netlink: 'syz.5.4570': attribute type 10 has an invalid length. [ 325.726431][T16114] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4570'. [ 326.018117][T16119] loop5: detected capacity change from 0 to 512 [ 326.025505][T16119] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 326.082371][T16121] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4573'. [ 326.140763][T16123] SELinux: failed to load policy [ 326.148631][T16123] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 326.155366][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4574'. [ 326.167868][T16123] bridge0: entered promiscuous mode [ 326.173222][T16123] macsec1: entered allmulticast mode [ 326.178664][T16123] bridge0: entered allmulticast mode [ 326.185665][T16123] bridge0: port 4(macsec1) entered blocking state [ 326.192251][T16123] bridge0: port 4(macsec1) entered disabled state [ 326.200061][T11400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.209281][T16123] bridge0: left allmulticast mode [ 326.214360][T16123] bridge0: left promiscuous mode [ 326.255657][T16129] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.446312][T16129] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.487329][T16139] random: crng reseeded on system resumption [ 326.523281][T16141] netlink: 'syz.6.4581': attribute type 10 has an invalid length. [ 326.532776][T16137] random: crng reseeded on system resumption [ 326.541644][T16141] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4581'. [ 326.546172][T16129] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.622739][T16149] loop6: detected capacity change from 0 to 512 [ 326.634242][T16149] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.641614][T16149] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 326.662437][T16149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 326.671246][T16149] System zones: 1-12 [ 326.675883][T16149] EXT4-fs (loop6): 1 truncate cleaned up [ 326.684253][T16129] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.684410][T16154] loop2: detected capacity change from 0 to 512 [ 326.684789][T16154] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.708194][T16149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.725408][T16154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 326.737202][T16154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 326.742963][ T6846] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.745387][T16154] System zones: 1-12 [ 326.767040][ T6846] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.786316][ T6846] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.794822][ T6876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.799461][T16154] EXT4-fs (loop2): 1 truncate cleaned up [ 326.813760][T16154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.042444][T16162] netlink: 'syz.5.4588': attribute type 10 has an invalid length. [ 327.050472][T16162] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4588'. [ 327.078828][T16160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.092594][ T6890] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.111471][ T6876] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.130612][T16160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.253171][ T6876] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.270026][ T6846] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.290317][T16160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.312732][T16154] ================================================================== [ 327.320903][T16154] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_clear_mark [ 327.329469][T16154] [ 327.331825][T16154] write to 0xffff888119c36dfc of 4 bytes by task 16159 on cpu 1: [ 327.339569][T16154] xas_clear_mark+0x16b/0x180 [ 327.344299][T16154] __folio_start_writeback+0x2ce/0x440 [ 327.349795][T16154] ext4_bio_write_folio+0x5ad/0x9f0 [ 327.355066][T16154] mpage_process_page_bufs+0x4a1/0x620 [ 327.360567][T16154] mpage_prepare_extent_to_map+0x786/0xc00 [ 327.366404][T16154] ext4_do_writepages+0xa05/0x2750 [ 327.371546][T16154] ext4_writepages+0x176/0x300 [ 327.376339][T16154] do_writepages+0x1c6/0x310 [ 327.380968][T16154] file_write_and_wait_range+0x156/0x2c0 [ 327.386650][T16154] generic_buffers_fsync_noflush+0x45/0x120 [ 327.392572][T16154] ext4_sync_file+0x1ab/0x690 [ 327.397274][T16154] vfs_fsync_range+0x10a/0x130 [ 327.402071][T16154] ext4_buffered_write_iter+0x34f/0x3c0 [ 327.407659][T16154] ext4_file_write_iter+0xdbf/0xf00 [ 327.412931][T16154] iter_file_splice_write+0x666/0xa60 [ 327.418338][T16154] direct_splice_actor+0x156/0x2a0 [ 327.423487][T16154] splice_direct_to_actor+0x312/0x680 [ 327.428898][T16154] do_splice_direct+0xda/0x150 [ 327.433686][T16154] do_sendfile+0x380/0x650 [ 327.438157][T16154] __x64_sys_sendfile64+0x105/0x150 [ 327.443407][T16154] x64_sys_call+0x2bb0/0x2ff0 [ 327.448216][T16154] do_syscall_64+0xd2/0x200 [ 327.452859][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.458786][T16154] [ 327.461138][T16154] read to 0xffff888119c36dfc of 4 bytes by task 16154 on cpu 0: [ 327.468800][T16154] filemap_write_and_wait_range+0xfc/0x340 [ 327.475096][T16154] filemap_invalidate_pages+0xa4/0x1a0 [ 327.480596][T16154] kiocb_invalidate_pages+0x6e/0x80 [ 327.485838][T16154] __iomap_dio_rw+0x5d4/0x1250 [ 327.490815][T16154] iomap_dio_rw+0x40/0x90 [ 327.495190][T16154] ext4_file_write_iter+0xad9/0xf00 [ 327.500453][T16154] iter_file_splice_write+0x666/0xa60 [ 327.505873][T16154] direct_splice_actor+0x156/0x2a0 [ 327.511052][T16154] splice_direct_to_actor+0x312/0x680 [ 327.516450][T16154] do_splice_direct+0xda/0x150 [ 327.521244][T16154] do_sendfile+0x380/0x650 [ 327.525705][T16154] __x64_sys_sendfile64+0x105/0x150 [ 327.531121][T16154] x64_sys_call+0x2bb0/0x2ff0 [ 327.535846][T16154] do_syscall_64+0xd2/0x200 [ 327.540398][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.546769][T16154] [ 327.549170][T16154] value changed: 0x0e000021 -> 0x04000021 [ 327.555002][T16154] [ 327.557394][T16154] Reported by Kernel Concurrency Sanitizer on: [ 327.563567][T16154] CPU: 0 UID: 0 PID: 16154 Comm: syz.2.4586 Not tainted syzkaller #0 PREEMPT(voluntary) [ 327.574196][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.584307][T16154] ================================================================== [ 327.609722][T16160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.632649][T11674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.704243][T10499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.112077][ T6846] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.123601][ T6846] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.135132][ T6846] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.146662][ T6888] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0