last executing test programs: 10.716579193s ago: executing program 0 (id=1206): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 10.666168633s ago: executing program 0 (id=1210): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x0, 0xffffffff}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x1800}], 0x1}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1}, 0x1}], 0x1, 0x1, 0x0) 10.616915513s ago: executing program 0 (id=1212): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) 10.582362913s ago: executing program 0 (id=1214): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) 10.561069413s ago: executing program 0 (id=1216): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) sendfile(r0, r3, &(0x7f0000000000), 0x1001) 10.318766832s ago: executing program 0 (id=1225): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 10.283869162s ago: executing program 32 (id=1225): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 3.682924125s ago: executing program 4 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) 3.564307535s ago: executing program 4 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.216917093s ago: executing program 5 (id=1384): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x3, 0x0, 0x2, 0x4, 0xae, 0xc, 0x5, 0x8000, [{0xc569, 0x6, 0x2, 0xa000}, {0x9, 0x1, 0x2, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}]}, 0x6c}}, 0x44800) 3.071703242s ago: executing program 4 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 3.018828002s ago: executing program 4 (id=1387): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) 3.018393182s ago: executing program 5 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 2.811179971s ago: executing program 5 (id=1394): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000280)=@nfc={0x27, r2, 0xffffffffffffffff, 0x1}, 0x80) 1.960901938s ago: executing program 5 (id=1417): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x1, 0x1}, &(0x7f0000000340)=[{}]) 1.678705187s ago: executing program 3 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.660329727s ago: executing program 5 (id=1425): socket$inet6_sctp(0xa, 0x5, 0x84) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x28c8, &(0x7f0000000140)={0x0, 0x8031, 0x1, 0x0, 0xe2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410e9) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.633345287s ago: executing program 3 (id=1426): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00f0db2d5bb30000ee58f6744b0000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$rxrpc(0x21, 0x2, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1.095572575s ago: executing program 2 (id=1436): pipe2$9p(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xffffffff], 'syz_tun\x00', 'macvtap0\x00', {0x101}, {0xff}, 0x0, 0x3, 0x4, 0x20}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0x0, 0xff000000, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e22, 0x1ff, 0x9, 0x1, 0xc7ec, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2022) 1.031612484s ago: executing program 2 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000d1ce4e3800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.031216474s ago: executing program 2 (id=1439): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r1 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x497c, 0xe13b, 0x0, 0x0, 0x0) 866.361574ms ago: executing program 4 (id=1442): syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) 826.312103ms ago: executing program 2 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 726.421563ms ago: executing program 2 (id=1444): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x257, &(0x7f0000000480)="$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") r0 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000300)=ANY=[]) 726.235503ms ago: executing program 3 (id=1445): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt(0xffffffffffffffff, 0x65, 0x20000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7b}) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f0000000040)) 726.060633ms ago: executing program 5 (id=1446): clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x14542, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1c3002, 0x162) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x6db6e559) 605.571262ms ago: executing program 3 (id=1448): r0 = io_uring_setup(0x7fdb, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xffffefff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 549.702052ms ago: executing program 2 (id=1449): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x40000000) io_setup(0x2007, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x7}, 0x10) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 506.670812ms ago: executing program 3 (id=1450): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r2, r1, 0x0, 0x80004700) 346.593381ms ago: executing program 1 (id=1453): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x268, 0x311, 0xd0, 0x268, 0x210, 0x460, 0x460, 0x210, 0x460, 0x9, 0x0, {[{{@ipv6={@local, @local, [0x0, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xff, 0xff, 0xff], 'pim6reg1\x00', 'batadv_slave_0\x00', {}, {}, 0x11, 0x80, 0x4}, 0x160, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x401, 0x6, 0x11}}}, {{@ipv6={@private2, @remote, [], [0x0, 0x0, 0xff], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110, 0xe4030000}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 232.412461ms ago: executing program 1 (id=1454): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xa, 0x7ec, 0x2000000000, 0x2000000000002, 0x3, 0x0, 0x7ffd}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 182.61958ms ago: executing program 1 (id=1455): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x80000061}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe966}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r5], 0x12) 126.5603ms ago: executing program 1 (id=1456): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x826, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) shutdown(r0, 0x0) 90.44561ms ago: executing program 3 (id=1457): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) 18.65912ms ago: executing program 1 (id=1458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.95715ms ago: executing program 1 (id=1459): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) 0s ago: executing program 4 (id=1460): r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 44.441599][ T29] audit: type=1326 audit(1738303334.192:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3775 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 44.467052][ T29] audit: type=1326 audit(1738303334.192:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3775 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 44.497761][ T3781] : renamed from ipvlan1 [ 44.702939][ T3797] syzkaller0: entered promiscuous mode [ 44.708974][ T3797] syzkaller0: entered allmulticast mode [ 44.737801][ T3799] loop0: detected capacity change from 0 to 128 [ 44.769550][ T3799] syz.0.111: attempt to access beyond end of device [ 44.769550][ T3799] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 44.802618][ T3798] syz.0.111: attempt to access beyond end of device [ 44.802618][ T3798] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 44.817989][ T3799] syz.0.111: attempt to access beyond end of device [ 44.817989][ T3799] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 44.833151][ T3799] syz.0.111: attempt to access beyond end of device [ 44.833151][ T3799] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 45.223982][ T3820] loop0: detected capacity change from 0 to 256 [ 46.219896][ T3856] loop0: detected capacity change from 0 to 512 [ 46.253317][ T3856] EXT4-fs: Ignoring removed orlov option [ 46.259571][ T3856] EXT4-fs: Ignoring removed i_version option [ 46.307198][ T3856] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 46.345449][ T3856] loop0: detected capacity change from 0 to 2048 [ 46.387692][ T3856] loop0: p1 < > p2 p3 p4 < p5 > [ 46.401957][ T3856] loop0: p2 size 458752 extends beyond EOD, truncated [ 46.412260][ T3864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 46.437647][ T3856] loop0: p3 start 4284289 is beyond EOD, truncated [ 46.445009][ T3856] loop0: p5 size 458752 extends beyond EOD, truncated [ 46.462114][ T3000] loop0: p1 < > p2 p3 p4 < p5 > [ 46.469166][ T3000] loop0: p2 size 458752 extends beyond EOD, truncated [ 46.478644][ T3000] loop0: p3 start 4284289 is beyond EOD, truncated [ 46.491935][ T3000] loop0: p5 size 458752 extends beyond EOD, truncated [ 46.581582][ T3883] Illegal XDP return value 4294967274 on prog (id 68) dev syz_tun, expect packet loss! [ 46.602434][ T3885] process 'syz.1.144' launched './file0' with NULL argv: empty string added [ 46.642983][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 46.645613][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 46.667242][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 46.679788][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.736066][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.752234][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 46.752498][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 46.770908][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 46.949950][ T3910] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.157'. [ 46.980274][ T3915] : renamed from bond0 (while UP) [ 47.052997][ T3925] loop4: detected capacity change from 0 to 512 [ 47.067632][ T3925] EXT4-fs: Ignoring removed orlov option [ 47.073775][ T3925] EXT4-fs: Ignoring removed i_version option [ 47.087543][ T3925] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 47.114199][ T3925] loop4: detected capacity change from 0 to 2048 [ 47.163863][ T3934] program syz.0.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.175048][ T3925] loop4: p1 < > p2 p3 p4 < p5 > [ 47.182540][ T3925] loop4: p2 size 458752 extends beyond EOD, truncated [ 47.198272][ T3925] loop4: p3 start 4284289 is beyond EOD, truncated [ 47.205645][ T3936] syz.1.168 uses obsolete (PF_INET,SOCK_PACKET) [ 47.206929][ T3925] loop4: p5 size 458752 extends beyond EOD, truncated [ 47.216213][ T3936] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 47.232281][ T3000] loop4: p1 < > p2 p3 p4 < p5 > [ 47.239196][ T3000] loop4: p2 size 458752 extends beyond EOD, truncated [ 47.247557][ T3000] loop4: p3 start 4284289 is beyond EOD, truncated [ 47.255739][ T3000] loop4: p5 size 458752 extends beyond EOD, truncated [ 47.296019][ T3938] loop0: detected capacity change from 0 to 128 [ 47.362767][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 47.363600][ T3880] udevd[3880]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.468688][ T3961] tipc: Started in network mode [ 47.474360][ T3961] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 47.483511][ T3961] tipc: Enabled bearer , priority 0 [ 47.578302][ T3972] netlink: 'syz.2.184': attribute type 3 has an invalid length. [ 47.664618][ T3982] SELinux: Context : is not valid (left unmapped). [ 47.729383][ T3989] tipc: Started in network mode [ 47.734676][ T3989] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 47.744196][ T3989] tipc: Enabled bearer , priority 0 [ 47.752555][ T3990] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.190'. [ 47.763035][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 47.866268][ T3997] syzkaller0: entered allmulticast mode [ 47.876045][ T3987] loop2: detected capacity change from 0 to 256 [ 47.876757][ T3997] syzkaller0 (unregistering): left allmulticast mode [ 47.895446][ T3987] FAT-fs (loop2): IO charset cp857 not found [ 47.965319][ T4001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.005391][ T4006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.034158][ T4006] Zero length message leads to an empty skb [ 48.125108][ T4019] loop2: detected capacity change from 0 to 2048 [ 48.150269][ T4019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.225110][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.247055][ T4027] pim6reg1: entered promiscuous mode [ 48.252764][ T4027] pim6reg1: entered allmulticast mode [ 48.319952][ T4037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.361585][ T4039] loop3: detected capacity change from 0 to 8192 [ 48.407181][ T4039] loop3: p1 < > p3 < p5 > p4 [ 48.412156][ T4039] loop3: partition table partially beyond EOD, truncated [ 48.420303][ T4039] loop3: p1 start 4294967040 is beyond EOD, truncated [ 48.462127][ T4048] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 48.462127][ T4048] program syz.2.217 not setting count and/or reply_len properly [ 48.487106][ T1039] tipc: Node number set to 11578026 [ 48.539401][ T4051] loop4: detected capacity change from 0 to 2048 [ 48.568429][ T4051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.616223][ T4060] syz_tun: entered allmulticast mode [ 48.631105][ T4059] syz_tun: left allmulticast mode [ 48.682533][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.703189][ T4064] ip6tnl1: entered promiscuous mode [ 48.709007][ T4064] ip6tnl1: entered allmulticast mode [ 48.856949][ T3366] tipc: Node number set to 11578026 [ 48.892415][ T4070] loop4: detected capacity change from 0 to 256 [ 48.905671][ T4070] FAT-fs (loop4): IO charset cp857 not found [ 49.091059][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 49.091073][ T29] audit: type=1326 audit(1738303338.902:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.155918][ T29] audit: type=1326 audit(1738303338.942:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.181649][ T29] audit: type=1326 audit(1738303338.942:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.208735][ T29] audit: type=1326 audit(1738303338.942:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.235663][ T29] audit: type=1400 audit(1738303338.942:639): avc: denied { create } for pid=4091 comm="syz.4.235" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.267541][ T29] audit: type=1326 audit(1738303338.942:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.293915][ T29] audit: type=1326 audit(1738303338.942:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.319710][ T29] audit: type=1326 audit(1738303338.942:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.329771][ T4098] loop1: detected capacity change from 0 to 1024 [ 49.346102][ T29] audit: type=1400 audit(1738303338.942:643): avc: denied { setattr } for pid=4091 comm="syz.4.235" name="bus" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.378063][ T29] audit: type=1326 audit(1738303338.942:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 49.433847][ T4104] loop3: detected capacity change from 0 to 128 [ 49.447879][ T4104] EXT4-fs: Ignoring removed nobh option [ 49.470373][ T4104] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.485634][ T4098] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #2: comm syz.1.239: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0) [ 49.485970][ T4104] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.538001][ T4098] EXT4-fs (loop1): get root inode failed [ 49.544120][ T4098] EXT4-fs (loop1): mount failed [ 49.550538][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.740251][ T4137] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 49.758201][ T4137] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 49.811262][ T4146] loop2: detected capacity change from 0 to 1024 [ 49.827411][ T4146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.836224][ T4146] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 49.991237][ T4162] macvlan0: entered promiscuous mode [ 50.001058][ T4162] ipvlan0: entered promiscuous mode [ 50.008194][ T4162] ipvlan0: left promiscuous mode [ 50.016546][ T4162] macvlan0: left promiscuous mode [ 50.230764][ T4191] batadv1: entered promiscuous mode [ 50.238556][ C1] hrtimer: interrupt took 9190 ns [ 50.253185][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 50.296710][ T4201] loop2: detected capacity change from 0 to 164 [ 50.315019][ T4202] loop1: detected capacity change from 0 to 512 [ 50.328914][ T4202] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.390770][ T4209] loop3: detected capacity change from 0 to 1024 [ 50.399371][ T4202] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.282: bg 0: block 248: padding at end of block bitmap is not set [ 50.443848][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.456064][ T4202] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.282: Failed to acquire dquot type 1 [ 50.472907][ T4209] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 50.490296][ T4209] EXT4-fs (loop3): Remounting filesystem read-only [ 50.490799][ T4202] EXT4-fs (loop1): 1 truncate cleaned up [ 50.514244][ T4202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.517721][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.566437][ T4220] loop3: detected capacity change from 0 to 1024 [ 50.581347][ T4202] syz.1.282 (4202) used greatest stack depth: 9360 bytes left [ 50.592331][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.606267][ T4220] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.606448][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.624260][ T4220] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 50.642301][ T4220] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.642301][ T4220] [ 50.652368][ T4220] EXT4-fs (loop3): Total free blocks count 0 [ 50.659143][ T4220] EXT4-fs (loop3): Free/Dirty block details [ 50.665546][ T4220] EXT4-fs (loop3): free_blocks=0 [ 50.671245][ T4220] EXT4-fs (loop3): dirty_blocks=0 [ 50.677468][ T4220] EXT4-fs (loop3): Block reservation details [ 50.685204][ T4220] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 50.724935][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.764579][ T4233] pim6reg: entered allmulticast mode [ 50.830334][ T4242] netlink: 'syz.0.298': attribute type 21 has an invalid length. [ 50.845225][ T4233] loop3: detected capacity change from 0 to 1024 [ 50.862049][ T4233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.878415][ T4233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.931932][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.005752][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 51.009383][ T4254] loop1: detected capacity change from 0 to 2048 [ 51.023077][ T4256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.031862][ T4256] IPv6: NLM_F_CREATE should be set when creating new route [ 51.042754][ T4256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.304'. [ 51.060158][ T4259] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 51.069302][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.081692][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.085950][ T4254] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.105021][ T4259] : (slave batadv0): Enslaving as an active interface with an up link [ 51.129595][ T4254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.303: bg 0: block 345: padding at end of block bitmap is not set [ 51.180544][ T4269] netlink: 'syz.3.309': attribute type 21 has an invalid length. [ 51.216271][ T2216] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 51.230275][ T2216] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.230275][ T2216] [ 51.241307][ T2216] EXT4-fs (loop1): Total free blocks count 0 [ 51.248231][ T2216] EXT4-fs (loop1): Free/Dirty block details [ 51.254673][ T2216] EXT4-fs (loop1): free_blocks=0 [ 51.259756][ T2216] EXT4-fs (loop1): dirty_blocks=16 [ 51.265452][ T2216] EXT4-fs (loop1): Block reservation details [ 51.272024][ T2216] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 51.279592][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.363578][ T4285] loop0: detected capacity change from 0 to 2048 [ 51.389015][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.424557][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.449262][ T4295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 51.495966][ T9] kernel write not supported for file /159/projid_map (pid: 9 comm: kworker/0:1) [ 51.503600][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 51.594919][ T4308] loop0: detected capacity change from 0 to 8192 [ 51.637683][ T4308] loop0: p1 < > p3 < p5 > p4 [ 51.642673][ T4308] loop0: partition table partially beyond EOD, truncated [ 51.658934][ T4308] loop0: p1 start 4294967040 is beyond EOD, truncated [ 51.836256][ T4325] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 51.970682][ T4329] syzkaller0: entered promiscuous mode [ 51.976286][ T4329] syzkaller0: entered allmulticast mode [ 52.146676][ T4338] loop0: detected capacity change from 0 to 512 [ 52.210185][ T4338] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 52.228855][ T4338] EXT4-fs (loop0): mount failed [ 52.235897][ T4344] pim6reg1: entered promiscuous mode [ 52.241652][ T4344] pim6reg1: entered allmulticast mode [ 52.264590][ T4338] loop0: detected capacity change from 0 to 2048 [ 52.414003][ T4352] loop2: detected capacity change from 0 to 128 [ 52.422678][ T4350] pim6reg1: entered promiscuous mode [ 52.429674][ T4350] pim6reg1: entered allmulticast mode [ 52.462059][ T4352] syz.2.345: attempt to access beyond end of device [ 52.462059][ T4352] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 52.476057][ T4352] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 52.499660][ T4352] syz.2.345: attempt to access beyond end of device [ 52.499660][ T4352] loop2: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 52.578897][ T4354] loop0: detected capacity change from 0 to 512 [ 52.591006][ T4356] syzkaller0: entered promiscuous mode [ 52.598565][ T4356] syzkaller0: entered allmulticast mode [ 52.618356][ T4354] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.346: bg 0: block 35: padding at end of block bitmap is not set [ 52.642316][ T4354] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 52.654497][ T4354] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.346: invalid indirect mapped block 4294967295 (level 1) [ 52.676127][ T4354] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.346: invalid indirect mapped block 4294967295 (level 2) [ 52.697952][ T4354] EXT4-fs (loop0): 1 truncate cleaned up [ 52.711022][ T4354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.832648][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.919903][ T4372] loop0: detected capacity change from 0 to 164 [ 52.927251][ T4367] Falling back ldisc for ttyS3. [ 53.094330][ T4398] loop1: detected capacity change from 0 to 2048 [ 53.171023][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.182196][ T4411] loop3: detected capacity change from 0 to 512 [ 53.206392][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 53.229070][ T4411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.308564][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.321551][ T4411] EXT4-fs (loop3): 1 truncate cleaned up [ 53.361245][ T4411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.442505][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.478572][ T4431] loop2: detected capacity change from 0 to 2048 [ 53.507473][ T4431] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.557751][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.618130][ T4431] Process accounting resumed [ 53.623530][ T2216] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 234: padding at end of block bitmap is not set [ 53.701249][ T2216] EXT4-fs (loop2): Remounting filesystem read-only [ 53.802667][ T4444] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 53.903925][ T4444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.918814][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.014169][ T4444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.078146][ T4444] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 54.129148][ T4444] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 54.213975][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 54.214056][ T29] audit: type=1400 audit(1738303344.022:766): avc: denied { relabelfrom } for pid=4450 comm="syz.0.372" name="" dev="pipefs" ino=7562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 54.246520][ T4451] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 54.278761][ T29] audit: type=1400 audit(1738303344.072:767): avc: denied { relabelto } for pid=4450 comm="syz.0.372" name="" dev="pipefs" ino=7562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:watchdog_device_t:s0" [ 54.366777][ T4455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4455 comm=syz.3.374 [ 54.410797][ T4455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 54.453358][ T4460] loop4: detected capacity change from 0 to 512 [ 54.482092][ T29] audit: type=1400 audit(1738303344.292:768): avc: denied { write } for pid=4463 comm="syz.0.380" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.508177][ T29] audit: type=1400 audit(1738303344.292:769): avc: denied { open } for pid=4463 comm="syz.0.380" path="/79/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.549597][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.607049][ T4460] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.679555][ T29] audit: type=1400 audit(1738303344.322:770): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.700868][ T29] audit: type=1400 audit(1738303344.412:771): avc: denied { mount } for pid=4469 comm="syz.3.383" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.713805][ T4476] loop1: detected capacity change from 0 to 256 [ 54.741422][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.754776][ T4479] loop3: detected capacity change from 0 to 512 [ 54.763571][ T4482] loop0: detected capacity change from 0 to 164 [ 54.772511][ T4479] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.811926][ T29] audit: type=1400 audit(1738303344.612:772): avc: denied { create } for pid=4485 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.817425][ T4479] loop3: detected capacity change from 0 to 512 [ 54.849611][ T4482] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 54.859158][ T4479] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 54.872961][ T4476] FAT-fs (loop1): Directory bread(block 64) failed [ 54.888955][ T4476] FAT-fs (loop1): Directory bread(block 65) failed [ 54.895738][ T4476] FAT-fs (loop1): Directory bread(block 66) failed [ 54.903560][ T4476] FAT-fs (loop1): Directory bread(block 67) failed [ 54.912879][ T4476] FAT-fs (loop1): Directory bread(block 68) failed [ 54.927812][ T4476] FAT-fs (loop1): Directory bread(block 69) failed [ 54.936617][ T4476] FAT-fs (loop1): Directory bread(block 70) failed [ 54.943510][ T4476] FAT-fs (loop1): Directory bread(block 71) failed [ 54.954791][ T4476] FAT-fs (loop1): Directory bread(block 72) failed [ 54.961752][ T4476] FAT-fs (loop1): Directory bread(block 73) failed [ 55.009828][ T4498] ip6gre1: entered allmulticast mode [ 55.066604][ T4505] loop3: detected capacity change from 0 to 512 [ 55.081527][ T29] audit: type=1400 audit(1738303344.892:773): avc: denied { write } for pid=4504 comm="syz.0.407" name="fd" dev="proc" ino=7664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.147875][ T29] audit: type=1400 audit(1738303344.892:774): avc: denied { add_name } for pid=4504 comm="syz.0.407" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.148017][ T4505] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 55.212304][ T4505] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 55.242641][ T4505] EXT4-fs (loop3): mount failed [ 55.256808][ T4518] loop1: detected capacity change from 0 to 512 [ 55.264369][ T4516] loop0: detected capacity change from 0 to 128 [ 55.280945][ T4518] EXT4-fs: Ignoring removed nobh option [ 55.325854][ T4522] loop0: detected capacity change from 0 to 512 [ 55.337145][ T4518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.351413][ T4522] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.380246][ T4522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.403190][ T4505] loop3: detected capacity change from 0 to 2048 [ 55.415180][ T4518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.430718][ T4522] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.403: corrupted inode contents [ 55.443765][ T4522] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.403: mark_inode_dirty error [ 55.446977][ T4518] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.502684][ T4522] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.403: corrupted inode contents [ 55.556622][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.569098][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.620093][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.630711][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.651242][ T4538] loop4: detected capacity change from 0 to 512 [ 55.690263][ T4538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.705673][ T4538] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.751767][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.795965][ T4554] netlink: 216 bytes leftover after parsing attributes in process `syz.4.415'. [ 55.805799][ T4554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 55.815850][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.415'. [ 55.886668][ T4558] loop2: detected capacity change from 0 to 2048 [ 55.900059][ T4557] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 55.913915][ T4557] batman_adv: batadv0: Adding interface: ip6gretap1 [ 55.921489][ T4557] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.952543][ T4557] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 55.971992][ T4558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.999294][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.126466][ T9] kernel write not supported for file /virtual_nci (pid: 9 comm: kworker/0:1) [ 56.137498][ T4579] loop4: detected capacity change from 0 to 2048 [ 56.145382][ T4579] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.195807][ T4579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.218675][ T4579] Process accounting resumed [ 56.224233][ T2216] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 234: padding at end of block bitmap is not set [ 56.284134][ T2216] EXT4-fs (loop4): Remounting filesystem read-only [ 56.316711][ T4596] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 56.332837][ T4596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.353479][ T4596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.359813][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.361260][ T4596] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 56.382746][ T4596] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 56.423822][ T4601] loop2: detected capacity change from 0 to 1024 [ 56.443059][ T4601] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 56.454733][ T4601] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 56.464997][ T4601] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 56.481091][ T4601] EXT4-fs (loop2): invalid journal inode [ 56.559015][ T4612] netlink: 148 bytes leftover after parsing attributes in process `syz.4.435'. [ 56.737834][ T4629] vhci_hcd: default hub control req: 800c v0000 i0000 l0 [ 56.839796][ T4635] ip6gre1: entered allmulticast mode [ 56.852838][ T4637] loop2: detected capacity change from 0 to 512 [ 56.879565][ T4637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.893123][ T4637] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.907352][ T4637] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 12: comm syz.2.445: path /100/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 56.931951][ T4637] EXT4-fs (loop2): Remounting filesystem read-only [ 57.275897][ T4649] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 57.278886][ T4647] loop3: detected capacity change from 0 to 1024 [ 57.314851][ T4647] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 57.327768][ T4647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 57.358384][ T4647] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 57.561297][ T4647] EXT4-fs (loop3): invalid journal inode [ 57.571615][ T4649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.733514][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.845838][ T4671] ip6gre1: entered allmulticast mode [ 58.067807][ T4695] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 58.088993][ T4695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.141015][ T4695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.151045][ T4695] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 58.165086][ T4695] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 58.599561][ T4734] geneve2: entered promiscuous mode [ 58.609083][ T4734] geneve2: entered allmulticast mode [ 58.902009][ T4749] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 58.950560][ T4749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.000047][ T4756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.020892][ T4756] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 59.086960][ T4756] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 59.315011][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 59.315040][ T29] audit: type=1400 audit(1738303349.122:885): avc: denied { create } for pid=4770 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.349247][ T29] audit: type=1400 audit(1738303349.162:886): avc: denied { ioctl } for pid=4770 comm="syz.0.492" path="socket:[8347]" dev="sockfs" ino=8347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.405440][ T29] audit: type=1326 audit(1738303349.212:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 59.433416][ T29] audit: type=1326 audit(1738303349.212:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 59.480485][ T29] audit: type=1326 audit(1738303349.272:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 59.510329][ T29] audit: type=1326 audit(1738303349.272:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 59.540260][ T29] audit: type=1326 audit(1738303349.272:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 59.818129][ T4808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4808 comm=syz.3.507 [ 59.840007][ T4808] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 59.856854][ T29] audit: type=1400 audit(1738303349.662:892): avc: denied { setopt } for pid=4812 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.858246][ T4808] bond2: entered promiscuous mode [ 59.894556][ T4808] bond2: entered allmulticast mode [ 59.902579][ T29] audit: type=1400 audit(1738303349.712:893): avc: denied { bind } for pid=4812 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.922074][ T4814] batadv1: entered allmulticast mode [ 59.931562][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 59.941054][ T4814] bond2: (slave batadv1): making interface the new active one [ 59.950445][ T4814] batadv1: entered promiscuous mode [ 59.969908][ T4814] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 60.052543][ T4823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4823 comm=syz.1.511 [ 60.066224][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 60.075860][ T4823] netlink: 'syz.1.511': attribute type 7 has an invalid length. [ 60.090831][ T4823] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.102101][ T4823] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.112857][ T4823] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.123287][ T4823] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.133953][ T4823] vxlan0: entered promiscuous mode [ 60.144036][ T4822] geneve0: entered promiscuous mode [ 60.150262][ T4822] geneve0: entered allmulticast mode [ 60.424040][ T29] audit: type=1326 audit(1738303350.232:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c9d6cda9 code=0x7ffc0000 [ 60.454402][ T4833] loop0: detected capacity change from 0 to 512 [ 60.518982][ T4833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.590972][ T4833] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.970992][ T4855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.525'. [ 61.126225][ T4828] syz.0.516 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 61.138390][ T4828] CPU: 0 UID: 0 PID: 4828 Comm: syz.0.516 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 61.138429][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.138440][ T4828] Call Trace: [ 61.138447][ T4828] [ 61.138531][ T4828] dump_stack_lvl+0xf2/0x150 [ 61.139031][ T4828] dump_stack+0x15/0x1a [ 61.139053][ T4828] dump_header+0x83/0x2d0 [ 61.139078][ T4828] oom_kill_process+0x341/0x4c0 [ 61.139100][ T4828] out_of_memory+0x9af/0xbe0 [ 61.139241][ T4828] ? css_next_descendant_pre+0x11c/0x140 [ 61.139263][ T4828] mem_cgroup_out_of_memory+0x13e/0x190 [ 61.139284][ T4828] try_charge_memcg+0x508/0x7f0 [ 61.139382][ T4828] charge_memcg+0x50/0xc0 [ 61.139466][ T4828] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 61.139486][ T4828] __read_swap_cache_async+0x236/0x480 [ 61.139506][ T4828] swap_cluster_readahead+0x279/0x3f0 [ 61.139593][ T4828] swapin_readahead+0xe4/0x6f0 [ 61.139613][ T4828] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 61.139688][ T4828] ? swap_cache_get_folio+0x77/0x210 [ 61.139708][ T4828] do_swap_page+0x31b/0x2550 [ 61.139738][ T4828] ? __rcu_read_lock+0x36/0x50 [ 61.139767][ T4828] ? __pfx_default_wake_function+0x10/0x10 [ 61.139858][ T4828] handle_mm_fault+0x8e4/0x2ac0 [ 61.139893][ T4828] exc_page_fault+0x3b9/0x650 [ 61.139937][ T4828] asm_exc_page_fault+0x26/0x30 [ 61.139959][ T4828] RIP: 0033:0x7f0aa490f613 [ 61.139974][ T4828] Code: cd 08 00 48 8d 3d 16 ce 08 00 e8 08 49 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e df 1b 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 61.139988][ T4828] RSP: 002b:00007ffc996cf968 EFLAGS: 00010293 [ 61.140046][ T4828] RAX: 00000000fffffffa RBX: 00007f0aa4af5fa0 RCX: 0000000000000000 [ 61.140059][ T4828] RDX: 00007ffc996cf980 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.140071][ T4828] RBP: 00007f0aa4af7ba0 R08: 0000000003321dfc R09: 7fffffffffffffff [ 61.140084][ T4828] R10: 0000000000000000 R11: 0000000000000010 R12: 000000000000eee8 [ 61.140094][ T4828] R13: 00007f0aa4af6080 R14: 0000000000000032 R15: ffffffffffffffff [ 61.140108][ T4828] [ 61.140113][ T4828] memory: usage 307200kB, limit 307200kB, failcnt 65 [ 61.372593][ T4828] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 61.380718][ T4828] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 61.388277][ T4828] Memory cgroup stats for /syz0: [ 61.389055][ T4828] cache 16384 [ 61.397603][ T4828] rss 0 [ 61.400675][ T4828] shmem 0 [ 61.403988][ T4828] mapped_file 0 [ 61.407770][ T4828] dirty 0 [ 61.411241][ T4828] writeback 0 [ 61.414685][ T4828] workingset_refault_anon 1406 [ 61.419510][ T4828] workingset_refault_file 58 [ 61.424418][ T4828] swap 458752 [ 61.428138][ T4828] swapcached 4096 [ 61.432812][ T4828] pgpgin 21121 [ 61.436255][ T4828] pgpgout 21116 [ 61.440167][ T4828] pgfault 28415 [ 61.443979][ T4828] pgmajfault 212 [ 61.448897][ T4828] inactive_anon 0 [ 61.452881][ T4828] active_anon 4096 [ 61.456706][ T4828] inactive_file 0 [ 61.460966][ T4828] active_file 16384 [ 61.464831][ T4828] unevictable 0 [ 61.468426][ T4828] hierarchical_memory_limit 314572800 [ 61.474067][ T4828] hierarchical_memsw_limit 9223372036854771712 [ 61.480413][ T4828] total_cache 16384 [ 61.484697][ T4828] total_rss 0 [ 61.488528][ T4828] total_shmem 0 [ 61.492223][ T4828] total_mapped_file 0 [ 61.496488][ T4828] total_dirty 0 [ 61.500088][ T4828] total_writeback 0 [ 61.504776][ T4828] total_workingset_refault_anon 1406 [ 61.510332][ T4828] total_workingset_refault_file 58 [ 61.515792][ T4828] total_swap 458752 [ 61.519963][ T4828] total_swapcached 4096 [ 61.524388][ T4828] total_pgpgin 22807 [ 61.528664][ T4828] total_pgpgout 22802 [ 61.532822][ T4828] total_pgfault 30101 [ 61.537078][ T4828] total_pgmajfault 212 [ 61.541249][ T4828] total_inactive_anon 0 [ 61.545536][ T4828] total_active_anon 4096 [ 61.550090][ T4828] total_inactive_file 0 [ 61.554627][ T4828] total_active_file 16384 [ 61.559481][ T4828] total_unevictable 0 [ 61.563716][ T4828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.516,pid=4828,uid=0 [ 61.579025][ T4828] Memory cgroup out of memory: Killed process 4828 (syz.0.516) total-vm:93712kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 61.795549][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 61.817581][ T4874] wg2: entered promiscuous mode [ 61.817921][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 61.823340][ T4874] wg2: entered allmulticast mode [ 61.883038][ T4867] geneve0: entered promiscuous mode [ 61.888341][ T4867] geneve0: entered allmulticast mode [ 62.014249][ T4883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 62.045127][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 62.075716][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 62.100005][ T4888] loop4: detected capacity change from 0 to 512 [ 62.126855][ T4888] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.539: corrupted in-inode xattr: invalid ea_ino [ 62.157246][ T4888] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.539: couldn't read orphan inode 15 (err -117) [ 62.174127][ T4888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.176136][ T4891] IPv6: Can't replace route, no match found [ 62.217484][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.275117][ T4829] syz.0.516 (4829) used greatest stack depth: 7200 bytes left [ 62.309354][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.784893][ T4943] ip6tnl1: entered promiscuous mode [ 62.790342][ T4943] ip6tnl1: entered allmulticast mode [ 63.131855][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.139744][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.148408][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.180104][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.188207][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.196176][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.203960][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.211395][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.219050][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.226769][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.234708][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.242627][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.250210][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.258377][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.268995][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.277089][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.286043][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.293799][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.301600][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.309357][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.317240][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.324902][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.333342][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.341220][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.349114][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.357069][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.382980][ T1039] hid-generic 0000:0000:0000.0001: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 63.485385][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 63.509904][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 63.695439][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.704022][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.712898][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.741066][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.750208][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.758345][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.766442][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.774496][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.782852][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.790629][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.799815][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.807582][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.815176][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.823693][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.938290][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.945746][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.950299][ T5036] loop3: detected capacity change from 0 to 2048 [ 63.953806][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.967557][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.974950][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.982596][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.990553][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.998362][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.005929][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.007367][ T5036] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.013639][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.028850][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.037379][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.058845][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 64.106361][ T5036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.261446][ T5036] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 64.273829][ T5044] Falling back ldisc for ttyS3. [ 64.316917][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 64.316930][ T29] audit: type=1326 audit(1738303354.122:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0aa4878fa9 code=0x7ffc0000 [ 64.354585][ T29] audit: type=1326 audit(1738303354.142:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.379233][ T29] audit: type=1326 audit(1738303354.142:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.403782][ T29] audit: type=1326 audit(1738303354.142:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.429295][ T29] audit: type=1326 audit(1738303354.142:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.454381][ T29] audit: type=1326 audit(1738303354.142:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.480673][ T29] audit: type=1326 audit(1738303354.142:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.505447][ T29] audit: type=1326 audit(1738303354.142:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.533674][ T29] audit: type=1326 audit(1738303354.142:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.559215][ T29] audit: type=1326 audit(1738303354.142:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x7ffc0000 [ 64.609946][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.630386][ T5057] loop2: detected capacity change from 0 to 512 [ 64.649540][ T5057] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 64.686705][ T5057] EXT4-fs (loop2): invalid journal inode [ 64.692929][ T5057] EXT4-fs (loop2): can't get journal size [ 64.707464][ T5065] loop1: detected capacity change from 0 to 512 [ 64.718883][ T5063] SELinux: Context Ü is not valid (left unmapped). [ 64.735113][ T5057] EXT4-fs (loop2): 1 truncate cleaned up [ 64.747468][ T5065] EXT4-fs: Ignoring removed i_version option [ 64.753841][ T5065] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.858020][ T5065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.889026][ T5065] EXT4-fs (loop1): 1 truncate cleaned up [ 65.166441][ T5091] loop2: detected capacity change from 0 to 512 [ 65.211605][ T5091] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.232669][ T5091] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 31: comm syz.2.629: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 65.691247][ T5131] loop3: detected capacity change from 0 to 512 [ 65.712993][ T5131] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.778329][ T5131] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 31: comm syz.3.643: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 66.323396][ T5149] Set syz1 is full, maxelem 65536 reached [ 66.421031][ T5178] loop0: detected capacity change from 0 to 1024 [ 66.436574][ T5180] loop3: detected capacity change from 0 to 512 [ 66.464132][ T5180] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.621894][ T5201] loop2: detected capacity change from 0 to 512 [ 66.639807][ T5201] EXT4-fs (loop2): 1 orphan inode deleted [ 66.648907][ T5201] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.669483][ T5201] Process accounting resumed [ 66.682488][ T28] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 66.789823][ T5214] loop2: detected capacity change from 0 to 512 [ 66.797560][ T5214] EXT4-fs: Ignoring removed i_version option [ 66.804017][ T5214] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.812439][ T5214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.826224][ T5214] EXT4-fs (loop2): 1 truncate cleaned up [ 67.521257][ T5269] pim6reg1: entered promiscuous mode [ 67.526652][ T5269] pim6reg1: entered allmulticast mode [ 67.590514][ T5275] loop3: detected capacity change from 0 to 512 [ 67.598395][ T5275] EXT4-fs: Ignoring removed i_version option [ 67.604881][ T5275] ext2: Unknown parameter 'noacl' [ 67.623294][ T5277] loop0: detected capacity change from 0 to 164 [ 67.638411][ T5277] Unable to read rock-ridge attributes [ 67.661621][ T5277] Unable to read rock-ridge attributes [ 67.973669][ T5298] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 68.020900][ T5303] loop2: detected capacity change from 0 to 512 [ 68.032380][ T5303] EXT4-fs: Ignoring removed i_version option [ 68.073327][ T5315] loop4: detected capacity change from 0 to 512 [ 68.082606][ T5303] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.087591][ T5315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.107291][ T5303] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.715: corrupted inode contents [ 68.126942][ T5303] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #4: comm syz.2.715: mark_inode_dirty error [ 68.141841][ T5303] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.715: corrupted inode contents [ 68.154099][ T5315] EXT4-fs (loop4): 1 truncate cleaned up [ 68.160934][ T5315] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 68.194874][ T5303] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.715: mark_inode_dirty error [ 68.210887][ T5303] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.715: Failed to acquire dquot type 1 [ 68.217140][ T5328] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.715: corrupted inode contents [ 68.296146][ T5328] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #4: comm syz.2.715: mark_inode_dirty error [ 68.313181][ T5328] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.715: corrupted inode contents [ 68.327472][ T5328] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.715: mark_inode_dirty error [ 68.340191][ T5328] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.715: Failed to acquire dquot type 1 [ 68.404362][ T5349] loop0: detected capacity change from 0 to 1024 [ 68.415201][ T5349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.416153][ T5351] loop2: detected capacity change from 0 to 512 [ 68.431872][ T5351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.446368][ T5351] EXT4-fs (loop2): 1 truncate cleaned up [ 68.453289][ T5349] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 68.457746][ T5351] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 68.457746][ T5351] n'º|$@OOݱµ’-®+·el' [ 68.491654][ T5351] EXT4-fs error (device loop2): empty_inline_dir:1850: inode #12: block 7: comm syz.2.730: bad entry in directory: inode out of bounds - offset=4, inode=16777215, rec_len=16, size=60 fake=0 [ 68.512676][ T5351] EXT4-fs warning (device loop2): empty_inline_dir:1857: bad inline directory (dir #12) - inode 16777215, rec_len 16, name_len 5inline size 60 [ 68.784267][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 68.794654][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 68.812691][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 68.828838][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 68.862880][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 68.873264][ T5390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 69.039796][ T5410] netlink: 96 bytes leftover after parsing attributes in process `syz.4.754'. [ 69.214319][ T5418] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.225691][ T5418] vhci_hcd: invalid port number 23 [ 69.559942][ T5426] Set syz1 is full, maxelem 65536 reached [ 69.693201][ T5447] loop3: detected capacity change from 0 to 512 [ 69.916316][ T5471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5471 comm=syz.0.776 [ 69.931332][ T5473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 69.938482][ T5471] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 69.962696][ T5471] bond1: entered promiscuous mode [ 69.968258][ T5471] bond1: entered allmulticast mode [ 69.993085][ T5471] bond1: (slave geneve2): making interface the new active one [ 70.001316][ T5471] geneve2: entered promiscuous mode [ 70.007716][ T5471] geneve2: entered allmulticast mode [ 70.016212][ T5471] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 70.079398][ T5482] SELinux: syz.0.780 (5482) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.100688][ T5484] netlink: 96 bytes leftover after parsing attributes in process `syz.3.781'. [ 70.120333][ T5486] loop4: detected capacity change from 0 to 512 [ 70.133879][ T5488] loop0: detected capacity change from 0 to 128 [ 70.146155][ T5486] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.159921][ T5486] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.782: bg 0: block 248: padding at end of block bitmap is not set [ 70.180087][ T5486] __quota_error: 4412 callbacks suppressed [ 70.180102][ T5486] Quota error (device loop4): write_blk: dquota write failed [ 70.195780][ T5486] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 70.207145][ T5486] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.782: Failed to acquire dquot type 1 [ 70.220957][ T5488] syz.0.783: attempt to access beyond end of device [ 70.220957][ T5488] loop0: rw=34817, sector=97, nr_sectors = 944 limit=128 [ 70.238480][ T5486] EXT4-fs (loop4): 1 truncate cleaned up [ 70.281441][ T5496] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.290952][ T5496] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.300334][ T5496] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.309629][ T5496] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.328266][ T5496] vxlan0: entered promiscuous mode [ 70.333667][ T5496] vxlan0: entered allmulticast mode [ 70.341883][ T5496] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.351914][ T5496] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.361470][ T5496] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.371201][ T5496] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.386494][ T29] audit: type=1326 audit(1738303360.192:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.389115][ T5498] netlink: 'syz.4.786': attribute type 4 has an invalid length. [ 70.411294][ T29] audit: type=1326 audit(1738303360.192:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.414999][ T29] audit: type=1326 audit(1738303360.222:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.469843][ T29] audit: type=1326 audit(1738303360.222:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.495435][ T29] audit: type=1326 audit(1738303360.222:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.550087][ T29] audit: type=1326 audit(1738303360.232:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.575632][ T29] audit: type=1326 audit(1738303360.232:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.601215][ T29] audit: type=1326 audit(1738303360.232:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 70.635949][ T5508] loop0: detected capacity change from 0 to 512 [ 70.649601][ T5508] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 70.669171][ T5508] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.791: iget: bad i_size value: -67835469387268086 [ 70.696940][ T5508] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.791: couldn't read orphan inode 15 (err -117) [ 70.726434][ T5508] EXT4-fs mount: 24 callbacks suppressed [ 70.726447][ T5508] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.745973][ T5508] ext2 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.780657][ T3301] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 70.804009][ T5526] pim6reg1: entered promiscuous mode [ 70.810211][ T5526] pim6reg1: entered allmulticast mode [ 70.840476][ T5532] loop3: detected capacity change from 0 to 1024 [ 70.869447][ T5532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.900488][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.974745][ T5532] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 128 with max blocks 4 with error 28 [ 70.988112][ T5532] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.988112][ T5532] [ 70.998188][ T5532] EXT4-fs (loop3): Total free blocks count 0 [ 71.004582][ T5532] EXT4-fs (loop3): Free/Dirty block details [ 71.010997][ T5532] EXT4-fs (loop3): free_blocks=0 [ 71.016751][ T5532] EXT4-fs (loop3): dirty_blocks=0 [ 71.022285][ T5532] EXT4-fs (loop3): Block reservation details [ 71.029418][ T5532] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 71.132505][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.218087][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 71.415867][ T5606] loop0: detected capacity change from 0 to 128 [ 71.438190][ T5606] FAT-fs (loop0): Directory bread(block 11554) failed [ 71.445875][ T5606] FAT-fs (loop0): Directory bread(block 11555) failed [ 71.453625][ T5606] FAT-fs (loop0): Directory bread(block 11556) failed [ 71.461402][ T5606] FAT-fs (loop0): Directory bread(block 11557) failed [ 71.476052][ T5606] FAT-fs (loop0): Directory bread(block 11558) failed [ 71.483802][ T5606] FAT-fs (loop0): Directory bread(block 11559) failed [ 71.491588][ T5606] FAT-fs (loop0): Directory bread(block 11560) failed [ 71.493621][ T5611] syzkaller0: entered promiscuous mode [ 71.506834][ T5606] FAT-fs (loop0): Directory bread(block 11561) failed [ 71.507930][ T5611] syzkaller0: entered allmulticast mode [ 71.517095][ T5606] FAT-fs (loop0): Directory bread(block 11562) failed [ 71.529267][ T5606] FAT-fs (loop0): Directory bread(block 11563) failed [ 71.561586][ T5613] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 71.575149][ T5613] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.609425][ T5616] loop3: detected capacity change from 0 to 128 [ 71.625594][ T5616] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.643252][ T5616] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.712985][ T5621] loop2: detected capacity change from 0 to 512 [ 71.729799][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.752528][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.770158][ T5625] program syz.4.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.780119][ T5625] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 71.784661][ T5627] loop0: detected capacity change from 0 to 512 [ 71.810205][ T5621] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.836606][ T5627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.868910][ T5627] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.830: bad orphan inode 131083 [ 71.881871][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.922504][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.979126][ T5644] ip6_vti0: mtu greater than device maximum [ 72.005206][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.201247][ T5668] loop4: detected capacity change from 0 to 2048 [ 72.256329][ T5668] loop4: p1 < > p4 [ 72.262723][ T5668] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.264815][ T5680] vlan2: entered promiscuous mode [ 72.352687][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 72.374843][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 72.459733][ T5697] bridge0: entered promiscuous mode [ 72.465403][ T5697] macvlan2: entered promiscuous mode [ 72.494966][ T5697] bridge0: port 3(macvlan2) entered blocking state [ 72.494996][ T5697] bridge0: port 3(macvlan2) entered disabled state [ 72.495072][ T5697] macvlan2: entered allmulticast mode [ 72.514182][ T5697] bridge0: entered allmulticast mode [ 72.534451][ T5697] macvlan2: left allmulticast mode [ 72.534470][ T5697] bridge0: left allmulticast mode [ 72.534986][ T5697] bridge0: left promiscuous mode [ 72.550657][ T5704] netlink: 'syz.0.861': attribute type 4 has an invalid length. [ 72.567495][ T5705] netlink: 'syz.4.860': attribute type 22 has an invalid length. [ 72.671863][ T5714] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 72.839280][ T5733] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 73.051679][ T5755] loop2: detected capacity change from 0 to 256 [ 73.236849][ T5776] loop0: detected capacity change from 0 to 1024 [ 73.264082][ T5776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.296999][ T5781] netlink: 'syz.4.893': attribute type 21 has an invalid length. [ 73.305495][ T5781] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 73.402694][ T5794] netlink: 'syz.4.898': attribute type 7 has an invalid length. [ 73.413118][ T5797] EXT4-fs (loop0): shut down requested (0) [ 73.469054][ T50] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 73.510325][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 73.523676][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.523676][ T50] [ 73.534248][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 73.541121][ T50] EXT4-fs (loop0): Free/Dirty block details [ 73.547505][ T50] EXT4-fs (loop0): free_blocks=68451041280 [ 73.553768][ T50] EXT4-fs (loop0): dirty_blocks=4640 [ 73.559428][ T50] EXT4-fs (loop0): Block reservation details [ 73.566110][ T50] EXT4-fs (loop0): i_reserved_data_blocks=290 [ 73.823244][ T5826] loop4: detected capacity change from 0 to 2048 [ 73.834164][ T5826] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.849987][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.879482][ T5826] Process accounting resumed [ 73.885032][ T1714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 234: padding at end of block bitmap is not set [ 73.924690][ T1714] EXT4-fs (loop4): Remounting filesystem read-only [ 73.952757][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.169000][ T5853] loop1: detected capacity change from 0 to 512 [ 74.199461][ T5853] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.916: corrupted in-inode xattr: invalid ea_ino [ 74.225681][ T5853] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.916: couldn't read orphan inode 15 (err -117) [ 74.262886][ T5853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.292071][ T5853] rdma_op ffff888119d57d80 conn xmit_rdma 0000000000000000 [ 74.311068][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.370346][ T5867] loop4: detected capacity change from 0 to 8192 [ 74.793572][ T5891] loop0: detected capacity change from 0 to 512 [ 74.800903][ T5891] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 74.882375][ T5900] bond_slave_1: entered promiscuous mode [ 74.893048][ T5900] bond_slave_1: left promiscuous mode [ 74.988116][ T5911] loop3: detected capacity change from 0 to 2048 [ 75.009871][ T5914] netlink: 'syz.1.938': attribute type 13 has an invalid length. [ 75.226148][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 75.226184][ T29] audit: type=1400 audit(1738303365.032:5947): avc: denied { ioctl } for pid=5939 comm="syz.3.951" path="socket:[11849]" dev="sockfs" ino=11849 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.258494][ T29] audit: type=1400 audit(1738303365.052:5948): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 75.320039][ T5948] netlink: 'syz.1.955': attribute type 4 has an invalid length. [ 75.328320][ T5948] __nla_validate_parse: 10 callbacks suppressed [ 75.328332][ T5948] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.955'. [ 75.502756][ T29] audit: type=1326 audit(1738303365.312:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.527350][ T29] audit: type=1326 audit(1738303365.312:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.563831][ T29] audit: type=1326 audit(1738303365.362:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.588587][ T29] audit: type=1326 audit(1738303365.362:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.613131][ T29] audit: type=1326 audit(1738303365.362:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.638232][ T29] audit: type=1326 audit(1738303365.362:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.663021][ T29] audit: type=1326 audit(1738303365.362:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.688195][ T29] audit: type=1326 audit(1738303365.362:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5dc27cda9 code=0x7ffc0000 [ 75.856498][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.864683][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.872494][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.880522][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.889151][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.897507][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.905971][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.914718][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.923955][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.931679][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.939653][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.947767][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.955763][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.964319][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.972562][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.980385][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.988637][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.996560][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.004458][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.012322][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.020623][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.028967][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.037165][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.044956][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.053245][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.060865][ T3379] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 76.068938][ T3379] hid-generic 0000:0000:0000.0003: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 76.891807][ T6030] netlink: 100 bytes leftover after parsing attributes in process `syz.0.988'. [ 77.341584][ T6082] loop1: detected capacity change from 0 to 2048 [ 77.357754][ T6082] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.384013][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.402487][ T6082] Process accounting resumed [ 77.408138][ T163] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 234: padding at end of block bitmap is not set [ 77.424974][ T163] EXT4-fs (loop1): Remounting filesystem read-only [ 77.441997][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.614124][ T6106] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 77.622428][ T6106] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1018'. [ 77.909348][ T6118] loop1: detected capacity change from 0 to 512 [ 77.909933][ T6119] loop0: detected capacity change from 0 to 2048 [ 77.923679][ T6119] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.938664][ T6119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.952693][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.955737][ T6119] Process accounting resumed [ 77.968991][ T6118] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.984325][ T1714] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 234: padding at end of block bitmap is not set [ 77.989102][ T6118] Process accounting resumed [ 78.004889][ T1714] EXT4-fs (loop0): Remounting filesystem read-only [ 78.012876][ T6118] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 78.043336][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.054239][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.155330][ T6138] vlan2: entered allmulticast mode [ 78.184753][ T6136] loop0: detected capacity change from 0 to 8192 [ 78.270502][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1035'. [ 78.283069][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1035'. [ 78.323588][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1035'. [ 78.333675][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1035'. [ 78.362328][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1035'. [ 78.372032][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1035'. [ 78.450880][ T6174] loop0: detected capacity change from 0 to 512 [ 78.484181][ T6178] loop2: detected capacity change from 0 to 512 [ 78.489970][ T6176] loop3: detected capacity change from 0 to 2048 [ 78.502058][ T6174] EXT4-fs (loop0): too many log groups per flexible block group [ 78.510279][ T6174] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 78.519387][ T6174] EXT4-fs (loop0): mount failed [ 78.520522][ T6178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.541281][ T6178] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.553658][ T6176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.605010][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.645069][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.768373][ T6204] loop2: detected capacity change from 0 to 1024 [ 78.780377][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.794029][ T6204] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.840861][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.903021][ T6219] loop2: detected capacity change from 0 to 2048 [ 78.923127][ T6219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.994213][ T6227] loop0: detected capacity change from 0 to 512 [ 79.022193][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.036018][ T6227] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.061366][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.123047][ T9] IPVS: starting estimator thread 0... [ 79.135737][ T6219] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.151916][ T6219] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 79.166286][ T6219] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.166286][ T6219] [ 79.176736][ T6219] EXT4-fs (loop2): Total free blocks count 0 [ 79.183141][ T6219] EXT4-fs (loop2): Free/Dirty block details [ 79.189251][ T6219] EXT4-fs (loop2): free_blocks=2415919104 [ 79.195304][ T6219] EXT4-fs (loop2): dirty_blocks=8192 [ 79.201026][ T6219] EXT4-fs (loop2): Block reservation details [ 79.207406][ T6219] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 79.227298][ T6237] IPVS: using max 2880 ests per chain, 144000 per kthread [ 79.251194][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 79.342725][ T6253] all: renamed from bridge_slave_0 (while UP) [ 79.374825][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 79.613455][ T6276] loop4: detected capacity change from 0 to 512 [ 79.659711][ T6276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.677617][ T6276] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.713503][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.393490][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 80.393503][ T29] audit: type=1326 audit(1738303370.202:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa48dcda9 code=0x7ffc0000 [ 80.426261][ T29] audit: type=1326 audit(1738303370.212:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa48dcda9 code=0x7ffc0000 [ 80.453080][ T29] audit: type=1326 audit(1738303370.212:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0aa48dcda9 code=0x7ffc0000 [ 80.479854][ T29] audit: type=1326 audit(1738303370.212:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa48dcda9 code=0x7ffc0000 [ 80.483293][ T6342] __nla_validate_parse: 1 callbacks suppressed [ 80.483378][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 80.504677][ T29] audit: type=1326 audit(1738303370.232:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.0.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa48dcda9 code=0x7ffc0000 [ 80.603360][ T29] audit: type=1326 audit(1738303370.412:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6345 comm="syz.4.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1c46cda9 code=0x0 [ 80.751973][ T6351] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 80.763212][ T6351] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 80.974070][ T29] audit: type=1326 audit(1738303370.782:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 80.999461][ T29] audit: type=1326 audit(1738303370.782:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 81.024424][ T29] audit: type=1326 audit(1738303370.782:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 81.051776][ T29] audit: type=1326 audit(1738303370.782:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 81.193732][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 81.547761][ T6390] loop2: detected capacity change from 0 to 1024 [ 81.570492][ T6390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.581589][ T6394] loop0: detected capacity change from 0 to 1764 [ 81.625402][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.719077][ T6413] netlink: 'syz.4.1142': attribute type 7 has an invalid length. [ 81.730250][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 81.800722][ T6419] loop4: detected capacity change from 0 to 2048 [ 81.847443][ T6419] loop4: p1 < > p4 [ 81.853928][ T6419] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.883272][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.887394][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 81.898887][ T6424] loop7: detected capacity change from 0 to 16384 [ 81.926118][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 81.945602][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 82.107051][ T6431] loop7: detected capacity change from 16384 to 16383 [ 82.240842][ T6447] bridge_slave_0: left allmulticast mode [ 82.247710][ T6447] bridge_slave_0: left promiscuous mode [ 82.254590][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.270338][ T6447] bridge_slave_1: left allmulticast mode [ 82.276185][ T6447] bridge_slave_1: left promiscuous mode [ 82.282496][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.307312][ T6447] bond0: (slave bond_slave_0): Releasing backup interface [ 82.330582][ T6447] bond0: (slave bond_slave_1): Releasing backup interface [ 82.361471][ T6447] team0: Port device team_slave_0 removed [ 82.387778][ T6447] team0: Port device team_slave_1 removed [ 82.398474][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.407239][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.419614][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.429607][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.479926][ T6458] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1163'. [ 82.513859][ T6461] loop4: detected capacity change from 0 to 4096 [ 82.526623][ T6461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.576824][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.619436][ T6470] dummy0: entered promiscuous mode [ 82.627051][ T6470] dummy0: left promiscuous mode [ 82.678495][ T6481] tipc: Started in network mode [ 82.685568][ T6481] tipc: Node identity 8e5c41a3a975, cluster identity 4711 [ 82.693528][ T6481] tipc: Enabled bearer , priority 0 [ 82.750745][ T6481] syzkaller0: entered promiscuous mode [ 82.757187][ T6481] syzkaller0: entered allmulticast mode [ 82.789942][ T6481] tipc: Resetting bearer [ 82.820391][ T50] tipc: Resetting bearer [ 82.829370][ T6480] tipc: Resetting bearer [ 82.872823][ T6480] tipc: Disabling bearer [ 82.890779][ T6498] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1177'. [ 82.905580][ T6492] loop2: detected capacity change from 0 to 8192 [ 82.915427][ T6500] netlink: 'syz.1.1178': attribute type 13 has an invalid length. [ 82.941019][ T6492] loop2: p1 p2 p3 [ 82.952902][ T6492] loop2: p1 start 51379968 is beyond EOD, truncated [ 82.961917][ T6492] loop2: p3 size 100663552 extends beyond EOD, truncated [ 82.976778][ T6508] loop4: detected capacity change from 0 to 512 [ 82.995879][ T6508] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 83.050740][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.058239][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.074154][ T6500] tipc: Resetting bearer [ 83.112733][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.123765][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.139025][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.142384][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.163488][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.178856][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.237380][ T6500] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.247726][ T6500] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.257521][ T6500] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.268751][ T6500] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.274175][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 83.290884][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 83.301420][ T6520] netlink: 'syz.2.1185': attribute type 3 has an invalid length. [ 83.311654][ T6520] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1185'. [ 83.334882][ T6500] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.346657][ T6500] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.356567][ T6500] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.371566][ T6500] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.382835][ T6502] pim6reg1: entered promiscuous mode [ 83.389371][ T6502] pim6reg1: entered allmulticast mode [ 83.399170][ T6508] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1181'. [ 83.417049][ T6516] syzkaller1: entered promiscuous mode [ 83.423066][ T6516] syzkaller1: entered allmulticast mode [ 83.543615][ T6534] loop2: detected capacity change from 0 to 128 [ 83.591974][ T6534] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.689262][ T6544] loop1: detected capacity change from 0 to 2048 [ 83.723532][ T6534] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.779480][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.834190][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.911538][ T6555] netlink: 'syz.2.1197': attribute type 7 has an invalid length. [ 83.920772][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 83.934965][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.959163][ T6558] loop1: detected capacity change from 0 to 256 [ 83.980245][ T6558] FAT-fs (loop1): Directory bread(block 64) failed [ 83.992132][ T6558] FAT-fs (loop1): Directory bread(block 65) failed [ 84.000796][ T6558] FAT-fs (loop1): Directory bread(block 66) failed [ 84.010382][ T6558] FAT-fs (loop1): Directory bread(block 67) failed [ 84.023591][ T6558] FAT-fs (loop1): Directory bread(block 68) failed [ 84.047189][ T6558] FAT-fs (loop1): Directory bread(block 69) failed [ 84.055220][ T6558] FAT-fs (loop1): Directory bread(block 70) failed [ 84.062752][ T6558] FAT-fs (loop1): Directory bread(block 71) failed [ 84.099944][ T6568] syzkaller1: entered promiscuous mode [ 84.105011][ T6558] FAT-fs (loop1): Directory bread(block 72) failed [ 84.107804][ T6568] syzkaller1: entered allmulticast mode [ 84.124918][ T6558] FAT-fs (loop1): Directory bread(block 73) failed [ 84.215550][ T6558] Process accounting resumed [ 84.224455][ T6578] ALSA: seq fatal error: cannot create timer (-16) [ 84.245642][ T6558] +}[@: attempt to access beyond end of device [ 84.245642][ T6558] loop1: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 84.263247][ T6558] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 326) [ 84.271947][ T6558] FAT-fs (loop1): Filesystem has been set read-only [ 84.296773][ T6585] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 84.328884][ T6585] loop4: detected capacity change from 0 to 2048 [ 84.341190][ T6592] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.362737][ T6592] vhci_hcd: invalid port number 23 [ 84.398532][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.421324][ T6598] netlink: 'syz.1.1218': attribute type 3 has an invalid length. [ 84.442150][ T6598] netlink: 'syz.1.1218': attribute type 3 has an invalid length. [ 84.451863][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.534355][ T3000] udevd[3000]: worker [3879] terminated by signal 33 (Unknown signal 33) [ 84.552227][ T3000] udevd[3000]: worker [3879] failed while handling '/devices/virtual/block/loop4' [ 84.748128][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 84.783383][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.793791][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.803757][ T6621] bridge_slave_0: entered allmulticast mode [ 84.816017][ T6621] bridge_slave_0: entered promiscuous mode [ 84.823543][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.832269][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.841759][ T6621] bridge_slave_1: entered allmulticast mode [ 84.849620][ T6621] bridge_slave_1: entered promiscuous mode [ 84.868230][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.880346][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.900607][ T6621] team0: Port device team_slave_0 added [ 84.908352][ T6621] team0: Port device team_slave_1 added [ 84.924262][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.931895][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.962984][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.975364][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.982540][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.013067][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.040630][ T6621] hsr_slave_0: entered promiscuous mode [ 85.047986][ T6621] hsr_slave_1: entered promiscuous mode [ 85.054842][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.063367][ T6621] Cannot create hsr debugfs directory [ 85.085552][ T6639] loop2: detected capacity change from 0 to 8192 [ 85.138678][ T6621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.151316][ T6621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.163917][ T6621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.176494][ T6621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.223356][ T6649] pim6reg1: entered promiscuous mode [ 85.229056][ T6649] pim6reg1: entered allmulticast mode [ 85.269016][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.302491][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.321074][ T1714] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.330999][ T1714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.380313][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.389510][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.449382][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 85.449398][ T29] audit: type=1326 audit(1738303375.262:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.481224][ T29] audit: type=1326 audit(1738303375.262:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.484105][ T6673] wireguard0: entered promiscuous mode [ 85.507172][ T29] audit: type=1326 audit(1738303375.262:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.507197][ T29] audit: type=1326 audit(1738303375.262:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.507218][ T29] audit: type=1326 audit(1738303375.262:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.512998][ T6673] wireguard0: entered allmulticast mode [ 85.538405][ T29] audit: type=1326 audit(1738303375.262:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.626341][ T29] audit: type=1326 audit(1738303375.262:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.654444][ T29] audit: type=1326 audit(1738303375.262:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.685166][ T29] audit: type=1326 audit(1738303375.262:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.711915][ T29] audit: type=1326 audit(1738303375.262:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6675 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da811cda9 code=0x7ffc0000 [ 85.785729][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.907217][ T6707] smc: net device bond0 applied user defined pnetid SYZ2 [ 85.914839][ T6621] veth0_vlan: entered promiscuous mode [ 85.930731][ T6707] smc: net device bond0 erased user defined pnetid SYZ2 [ 85.982662][ T6621] veth1_vlan: entered promiscuous mode [ 85.984483][ T6711] loop3: detected capacity change from 0 to 2048 [ 86.004931][ T6621] veth0_macvtap: entered promiscuous mode [ 86.013429][ T6621] veth1_macvtap: entered promiscuous mode [ 86.042603][ T6718] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 86.049624][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.052923][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.063093][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.063106][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.063117][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.063127][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.063137][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.138534][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.168965][ T6718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.179319][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.191746][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.202977][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.214479][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.225894][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.225965][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.246516][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.325610][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.339257][ T6720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.348104][ T6720] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.361788][ T6720] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 86.370720][ T6728] xt_hashlimit: max too large, truncated to 1048576 [ 86.404682][ T6621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413751][ T6621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.423225][ T6621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432550][ T6621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.662465][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.671852][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.706256][ T6747] netlink: 'syz.5.1267': attribute type 2 has an invalid length. [ 86.715436][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1267'. [ 86.768084][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.828767][ T6757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1272'. [ 86.832313][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.848384][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.886988][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.944247][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 86.953381][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 87.043151][ T6765] loop1: detected capacity change from 0 to 128 [ 87.091846][ T6771] loop4: detected capacity change from 0 to 2048 [ 87.112548][ T6765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.147241][ T6765] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.161552][ T6771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.189850][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.230471][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.448727][ T6783] tipc: Enabled bearer , priority 0 [ 87.492144][ T6783] syzkaller0: entered promiscuous mode [ 87.498739][ T6783] syzkaller0: entered allmulticast mode [ 87.504921][ T6783] tipc: Resetting bearer [ 87.544782][ T6782] tipc: Resetting bearer [ 87.559369][ T6782] tipc: Disabling bearer [ 87.779568][ T6800] pim6reg1: entered promiscuous mode [ 87.784942][ T6800] pim6reg1: entered allmulticast mode [ 87.873566][ T6804] loop2: detected capacity change from 0 to 2048 [ 87.907490][ T6804] loop2: p1 < > p3 [ 87.912473][ T6804] loop2: p3 size 134217728 extends beyond EOD, truncated [ 87.979484][ T6810] capability: warning: `syz.2.1292' uses deprecated v2 capabilities in a way that may be insecure [ 88.119447][ T6817] tipc: Started in network mode [ 88.125036][ T6817] tipc: Node identity 7e44f68455bb, cluster identity 4711 [ 88.132865][ T6817] tipc: Enabled bearer , priority 0 [ 88.142321][ T6816] tipc: Resetting bearer [ 88.153716][ T6816] tipc: Disabling bearer [ 88.214917][ T6820] loop2: detected capacity change from 0 to 2048 [ 88.222446][ T6820] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 88.268351][ T6824] loop2: detected capacity change from 0 to 1024 [ 88.276044][ T6824] EXT4-fs: Ignoring removed nobh option [ 88.284159][ T6824] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.296308][ T6824] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.1298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 88.316257][ T6824] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1298: couldn't read orphan inode 11 (err -117) [ 88.330986][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.355250][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.462196][ C0] vcan0: j1939_tp_rxtimer: 0xffff888127fa2200: rx timeout, send abort [ 88.471078][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888127fa2200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.502885][ T6834] loop2: detected capacity change from 0 to 1024 [ 88.511562][ T6836] loop4: detected capacity change from 0 to 2048 [ 88.511589][ T6834] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 88.529872][ T6834] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 88.540292][ T6834] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.551566][ T6834] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 88.587972][ T6836] loop4: p1 < > p3 [ 88.593171][ T6836] loop4: p3 size 134217728 extends beyond EOD, truncated [ 88.621086][ T6839] loop3: detected capacity change from 0 to 2048 [ 88.642238][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 88.648211][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 88.679590][ T6839] syz.3.1303: attempt to access beyond end of device [ 88.679590][ T6839] loop3: rw=0, sector=1552, nr_sectors = 512 limit=2048 [ 88.680924][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 88.705458][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 88.742376][ T6846] loop4: detected capacity change from 0 to 512 [ 88.779802][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.818851][ T6846] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.821545][ T6848] loop2: detected capacity change from 0 to 8192 [ 88.911204][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.978674][ T6864] loop4: detected capacity change from 0 to 764 [ 89.005379][ T6864] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.027974][ T6864] Invalid ELF header magic: != ELF [ 89.527329][ T6901] bond2: entered promiscuous mode [ 89.562889][ T6901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.574600][ T6908] loop5: detected capacity change from 0 to 512 [ 89.589357][ T6901] bond3: entered promiscuous mode [ 89.598866][ T6908] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1332: casefold flag without casefold feature [ 89.623776][ T6901] bond2: (slave bond3): Enslaving as an active interface with an up link [ 89.641157][ T6908] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1332: couldn't read orphan inode 15 (err -117) [ 89.677432][ T6911] bond2 (unregistering): (slave bond3): Releasing backup interface [ 89.689576][ T6911] bond3: left promiscuous mode [ 89.707272][ T6908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.709188][ T6911] bond2 (unregistering): Released all slaves [ 89.745837][ T6913] lo: entered promiscuous mode [ 89.751170][ T6913] lo: entered allmulticast mode [ 89.810056][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.831737][ T6917] random: crng reseeded on system resumption [ 89.968161][ T6932] loop3: detected capacity change from 0 to 128 [ 90.008282][ T6932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.027350][ T6934] loop2: detected capacity change from 0 to 2048 [ 90.036033][ T6932] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.091018][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.110874][ T6934] Alternate GPT is invalid, using primary GPT. [ 90.117563][ T6934] loop2: p2 p3 p7 [ 90.195885][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 90.207004][ T6668] udevd[6668]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 90.255265][ T6950] bridge0: port 3(gretap0) entered blocking state [ 90.255460][ T6949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.262508][ T6950] bridge0: port 3(gretap0) entered disabled state [ 90.262812][ T6950] gretap0: entered allmulticast mode [ 90.291154][ T6950] gretap0: entered promiscuous mode [ 90.317049][ T6950] bridge0: port 3(gretap0) entered blocking state [ 90.324391][ T6950] bridge0: port 3(gretap0) entered forwarding state [ 90.329516][ T6949] loop2: detected capacity change from 0 to 8192 [ 90.371249][ T6952] loop3: detected capacity change from 0 to 128 [ 90.382230][ T6952] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.420590][ T6952] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.438612][ T6958] bond3: entered promiscuous mode [ 90.458185][ T6958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.459321][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.466730][ T6958] bond4: entered promiscuous mode [ 90.481084][ T6958] bond3: (slave bond4): Enslaving as an active interface with an up link [ 90.535711][ T6958] bond3 (unregistering): (slave bond4): Releasing backup interface [ 90.546813][ T6958] bond4: left promiscuous mode [ 90.555490][ T6958] bond3 (unregistering): Released all slaves [ 90.571267][ T6964] pim6reg1: entered promiscuous mode [ 90.577412][ T6964] pim6reg1: entered allmulticast mode [ 90.611546][ T6974] loop3: detected capacity change from 0 to 512 [ 90.631233][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.649937][ T6974] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.656414][ T6978] bridge: RTM_NEWNEIGH with invalid ether address [ 90.677739][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 90.677753][ T29] audit: type=1400 audit(1738303380.492:6749): avc: denied { setattr } for pid=6973 comm="syz.3.1359" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.792657][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.823696][ T29] audit: type=1400 audit(1738303380.622:6750): avc: denied { bind } for pid=6987 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.843662][ T29] audit: type=1400 audit(1738303380.622:6751): avc: denied { listen } for pid=6987 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.864135][ T29] audit: type=1400 audit(1738303380.622:6752): avc: denied { write } for pid=6987 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.884340][ T29] audit: type=1400 audit(1738303380.622:6753): avc: denied { accept } for pid=6987 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.904353][ T29] audit: type=1400 audit(1738303380.622:6754): avc: denied { read } for pid=6987 comm="syz.5.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.927958][ T29] audit: type=1400 audit(1738303380.722:6755): avc: denied { unmount } for pid=6621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.938385][ T6994] loop4: detected capacity change from 0 to 256 [ 90.978677][ T29] audit: type=1326 audit(1738303380.792:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c9d6cda9 code=0x7ffc0000 [ 91.016233][ T29] audit: type=1326 audit(1738303380.792:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c9d6cda9 code=0x7ffc0000 [ 91.040194][ T29] audit: type=1326 audit(1738303380.792:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f09c9d6cda9 code=0x7ffc0000 [ 91.050569][ T6994] FAT-fs (loop4): Directory bread(block 64) failed [ 91.086804][ T6994] FAT-fs (loop4): Directory bread(block 65) failed [ 91.094415][ T6994] FAT-fs (loop4): Directory bread(block 66) failed [ 91.101987][ T6994] FAT-fs (loop4): Directory bread(block 67) failed [ 91.109247][ T6994] FAT-fs (loop4): Directory bread(block 68) failed [ 91.116161][ T6994] FAT-fs (loop4): Directory bread(block 69) failed [ 91.124624][ T6994] FAT-fs (loop4): Directory bread(block 70) failed [ 91.132655][ T6994] FAT-fs (loop4): Directory bread(block 71) failed [ 91.139915][ T6994] FAT-fs (loop4): Directory bread(block 72) failed [ 91.146986][ T6994] FAT-fs (loop4): Directory bread(block 73) failed [ 91.200602][ T7011] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 91.236823][ T7016] bond_slave_1: entered promiscuous mode [ 91.248032][ T7016] bond_slave_1: left promiscuous mode [ 91.268196][ T7020] loop5: detected capacity change from 0 to 2048 [ 91.280132][ T7020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.324852][ T7025] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.361426][ T7025] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.410109][ T7025] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.456124][ T7026] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.473196][ T7026] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 91.486470][ T7026] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.486470][ T7026] [ 91.497030][ T7026] EXT4-fs (loop5): Total free blocks count 0 [ 91.503320][ T7026] EXT4-fs (loop5): Free/Dirty block details [ 91.509518][ T7026] EXT4-fs (loop5): free_blocks=2415919104 [ 91.516286][ T7026] EXT4-fs (loop5): dirty_blocks=8192 [ 91.522007][ T7026] EXT4-fs (loop5): Block reservation details [ 91.528643][ T7026] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 91.539745][ T7025] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.547693][ T7020] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 91.575098][ T7034] loop3: detected capacity change from 0 to 512 [ 91.584099][ T7034] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 91.595905][ T7034] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 91.604715][ T7034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.624001][ T7034] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 91.652669][ T7025] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664970][ T7025] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.677967][ T7025] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692205][ T7025] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816657][ T7041] pim6reg1: entered promiscuous mode [ 91.822344][ T7041] pim6reg1: entered allmulticast mode [ 91.868835][ T7047] loop5: detected capacity change from 0 to 512 [ 91.898924][ T7047] EXT4-fs (loop5): too many log groups per flexible block group [ 91.908084][ T7047] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 91.916538][ T7051] __nla_validate_parse: 11 callbacks suppressed [ 91.916553][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1389'. [ 91.934891][ T7047] EXT4-fs (loop5): mount failed [ 91.994727][ T7058] bridge0: port 3(gretap0) entered blocking state [ 92.002162][ T7058] bridge0: port 3(gretap0) entered disabled state [ 92.046436][ T7058] gretap0: entered allmulticast mode [ 92.102614][ T7058] gretap0: entered promiscuous mode [ 92.151884][ T7065] loop2: detected capacity change from 0 to 8192 [ 92.754161][ T7112] loop3: detected capacity change from 0 to 512 [ 92.780022][ T7112] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.798637][ T7115] syzkaller0: entered promiscuous mode [ 92.805918][ T7115] syzkaller0: entered allmulticast mode [ 92.864372][ T7119] loop3: detected capacity change from 0 to 2048 [ 92.926767][ T7125] loop5: detected capacity change from 0 to 2048 [ 92.986952][ T3293] Alternate GPT is invalid, using primary GPT. [ 92.995009][ T3293] loop5: p2 p3 p7 [ 93.022241][ T7130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.026542][ T7125] Alternate GPT is invalid, using primary GPT. [ 93.044265][ T7125] loop5: p2 p3 p7 [ 93.308326][ T7153] lo speed is unknown, defaulting to 1000 [ 93.324323][ T7153] lo speed is unknown, defaulting to 1000 [ 93.337120][ T7153] lo speed is unknown, defaulting to 1000 [ 93.367715][ T7153] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.377296][ T7153] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.405178][ T7153] lo speed is unknown, defaulting to 1000 [ 93.417869][ T7153] lo speed is unknown, defaulting to 1000 [ 93.445829][ T7153] lo speed is unknown, defaulting to 1000 [ 93.476770][ T7153] lo speed is unknown, defaulting to 1000 [ 93.499103][ T7153] lo speed is unknown, defaulting to 1000 [ 93.523205][ T7153] lo speed is unknown, defaulting to 1000 [ 93.540540][ T7167] ip6tnl2: entered promiscuous mode [ 93.547788][ T7167] ip6tnl2: entered allmulticast mode [ 93.605113][ T7171] loop2: detected capacity change from 0 to 512 [ 93.620219][ T7171] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.675250][ T7177] loop2: detected capacity change from 0 to 128 [ 93.726360][ T7177] syz.2.1433: attempt to access beyond end of device [ 93.726360][ T7177] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 93.809860][ T7185] serio: Serial port ptm1 [ 94.120684][ T7201] loop2: detected capacity change from 0 to 256 [ 94.153957][ T7206] loop3: detected capacity change from 0 to 512 [ 94.165417][ T7201] FAT-fs (loop2): Directory bread(block 64) failed [ 94.182982][ T7201] FAT-fs (loop2): Directory bread(block 65) failed [ 94.191354][ T7201] FAT-fs (loop2): Directory bread(block 66) failed [ 94.199077][ T7201] FAT-fs (loop2): Directory bread(block 67) failed [ 94.209619][ T7206] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.222429][ T7201] FAT-fs (loop2): Directory bread(block 68) failed [ 94.232597][ T7201] FAT-fs (loop2): Directory bread(block 69) failed [ 94.240268][ T7201] FAT-fs (loop2): Directory bread(block 70) failed [ 94.248267][ T7201] FAT-fs (loop2): Directory bread(block 71) failed [ 94.255439][ T7201] FAT-fs (loop2): Directory bread(block 72) failed [ 94.262983][ T7201] FAT-fs (loop2): Directory bread(block 73) failed [ 94.297826][ T7205] loop5: detected capacity change from 0 to 8192 [ 94.906100][ T7238] loop3: detected capacity change from 0 to 2048 [ 94.907008][ T7240] block device autoloading is deprecated and will be removed. [ 94.921275][ T7240] syz.1.1459: attempt to access beyond end of device [ 94.921275][ T7240] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 94.949659][ T7217] ================================================================== [ 94.958486][ T7217] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 94.967483][ T7217] [ 94.970109][ T7217] write to 0xffff888117fde468 of 8 bytes by task 7205 on cpu 0: [ 94.978770][ T7217] sync_mapping_buffers+0x159/0x7c0 [ 94.984259][ T7217] fat_file_fsync+0xa7/0x100 [ 94.989411][ T7217] vfs_fsync_range+0x116/0x130 [ 94.994313][ T7217] generic_file_write_iter+0x1c3/0x310 [ 95.000139][ T7217] iter_file_splice_write+0x5f1/0x980 [ 95.006844][ T7217] direct_splice_actor+0x160/0x2c0 [ 95.012019][ T7217] splice_direct_to_actor+0x302/0x670 [ 95.017686][ T7217] do_splice_direct+0xd7/0x150 [ 95.022900][ T7217] do_sendfile+0x398/0x660 [ 95.028536][ T7217] __x64_sys_sendfile64+0x110/0x150 [ 95.033948][ T7217] x64_sys_call+0xfbd/0x2dc0 [ 95.040011][ T7217] do_syscall_64+0xc9/0x1c0 [ 95.045243][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.052385][ T7217] [ 95.055163][ T7217] read to 0xffff888117fde468 of 8 bytes by task 7217 on cpu 1: [ 95.063455][ T7217] mark_buffer_dirty_inode+0x96/0x1c0 [ 95.070082][ T7217] fat16_ent_put+0x4f/0x60 [ 95.075368][ T7217] fat_alloc_clusters+0x4c9/0xa80 [ 95.081818][ T7217] fat_get_block+0x25c/0x5e0 [ 95.089235][ T7217] __block_write_begin_int+0x417/0xfa0 [ 95.095412][ T7217] cont_write_begin+0x546/0x860 [ 95.100479][ T7217] fat_write_begin+0x51/0xe0 [ 95.105601][ T7217] generic_perform_write+0x1a8/0x4a0 [ 95.111539][ T7217] __generic_file_write_iter+0xa1/0x120 [ 95.117827][ T7217] generic_file_write_iter+0x8f/0x310 [ 95.123373][ T7217] vfs_write+0x77b/0x920 [ 95.127905][ T7217] ksys_write+0xe8/0x1b0 [ 95.133207][ T7217] __x64_sys_write+0x42/0x50 [ 95.138963][ T7217] x64_sys_call+0x287e/0x2dc0 [ 95.143928][ T7217] do_syscall_64+0xc9/0x1c0 [ 95.148518][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.155593][ T7217] [ 95.158296][ T7217] value changed: 0xffff888117e36c08 -> 0x0000000000000000 [ 95.165674][ T7217] [ 95.168052][ T7217] Reported by Kernel Concurrency Sanitizer on: [ 95.174549][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.5.1446 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 95.186912][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.197518][ T7217] ================================================================== [ 95.493315][ T7246] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.510223][ T7246] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 95.523513][ T7246] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.523513][ T7246] [ 95.536436][ T7246] EXT4-fs (loop3): Total free blocks count 0 [ 95.538051][ T7216] syz.2.1449 (7216) used greatest stack depth: 6384 bytes left [ 95.543626][ T7246] EXT4-fs (loop3): Free/Dirty block details [ 95.559651][ T7246] EXT4-fs (loop3): free_blocks=2415919104 [ 95.565580][ T7246] EXT4-fs (loop3): dirty_blocks=8192 [ 95.572178][ T7246] EXT4-fs (loop3): Block reservation details [ 95.581876][ T7246] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 95.599023][ T7238] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 95.612804][ T7238] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.612804][ T7238]