last executing test programs: 1.256135177s ago: executing program 4 (id=887): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) uname(&(0x7f00000000c0)=""/107) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b40880000000000073001200000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3a18d739a3cac997, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000020000009}, 0x0, 0xffffffffffffffff, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xe, 0x0, &(0x7f0000000200)=0xfffffffffffffeee) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x5) unshare(0x2040400) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000000000029000000040000000000000000e489ec2c108f6edeb5eb7e0c42967ad5c8628e4fda58b310dfa2b452c1ac8158f3e0f8caab500f088f7c6a628f9e0f080ede15b6b87c90027314e3770800000000000000"], 0x18}}], 0x1, 0x40000000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 1.080885054s ago: executing program 4 (id=890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x48, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 706.592111ms ago: executing program 2 (id=903): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201140088dc18000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d20611bca7b500069231f1f86997743fecf628ba53875c9f4ec268f087e98bd4145218d1", @ANYRES8=r0, @ANYBLOB="887f318e60836ab46228ae6901dd02a7bf4c"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 670.825984ms ago: executing program 2 (id=904): r0 = socket(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 636.177518ms ago: executing program 2 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc2]}, 0x8) 590.755752ms ago: executing program 2 (id=907): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', ',}\x00'}, &(0x7f0000000080)='O\'/-#%\x00', 0x7, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'syzkaller1\x00', 0x2}, 0x18) pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="30b815e844d9f5032eeef1", 0xb}, {&(0x7f0000000140)="bc8e12248f298f50e1cf0865838fa76c2553c4fda4b3b02953ca982173f430fbf9619547f4a06223938e305b85f4e57a3f8decdd722b1f02ec75be8a56e6c172424b791a4664f814f4dd0d120a4d4b886f5fc6e6494806374df719dbb667a4a43522e4f52334564f31ca4e559128574c28a817bc468f48cfa49cf3bed94b8b0325081eeac21261668e44afc60d264e24f7373e4d33839a9f65903ade4561ab13b7b107f1a3406ebbc64c1c8ddb7436cb332f6993965d89e85b6b34488b803f430fb10a83a21ff9ad2dafe46ba830ed7238761ebc816476e280e7347ae2ba4ad8756066c7cac8ba40291a392159301a4c706dc846be90", 0xf6}, {&(0x7f0000000240)="dfc04e025536b80eb06ef532bb2cc74fda1dd330771eca3ba79cfa7892131a3a4f80393b81055d51a8934b69572dde25e96c60a0c3da8be3385e3ce453d3b14edac26cd359383da77d128ef47e0cac9664b0d4377ef7b35c56da89863a0317d5d53bb25016413fd64acc7704f0924a751cace72e5d2aeeb972932134ffb3e2900313d8aabc6b6d6c972943ce02bad9f2cd", 0x91}, {&(0x7f0000000300)="dd2b4b574bfd9c8cd370384173e9e7ad7b121180bd919eae13501174628e6eaf8b5f567e9b2a72a5f9fb5b217d4f5bc29e9f5dabc26b6850a1f1e8e49be078af3329b7554572aac4532320689d8ddb82ac1ab4bab1fe06a879c900e2f7011c5f209add016ad18d0a2f4d310a388e138015dcc295d4cee9d858ef81e43628088a434568d51e743c21307f7bebd9b3e3b45ac0587c3fc620f73d3866880e1784e9fd228be7c120d8377e31256933c82f92d4418681490fd717a28fd4f4c2db00d2", 0xc0}, {&(0x7f00000003c0)="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", 0x1000}], 0x5, 0x200, 0x160000, 0x10) sendmsg$nl_route(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)=@ipv6_newroute={0xa8, 0x18, 0x10, 0x70bd26, 0x25dfdbff, {0xa, 0x63308130c77129ff, 0x0, 0x6c, 0xfd, 0x0, 0xff, 0x1, 0x2000}, [@RTA_MARK={0x8}, @RTA_METRICS={0x82, 0x8, 0x0, 0x1, "b6e2b5d8d3debc245535ce7db790783b2f4cd95b6c91937dba6ddbf5dcb26ddd5a18883bf1a0efbdd9e3000405d97064e9edf1b4c8d3f09893d98de1bf43dee40860e455ad7a10f0df13146b2fe8b61e3ab2f6143e07ea2252b4520e5001a57e20c620f9ab244322b5fa3029caa1925b27f6c0bd202e7ea8c66bb41d213f"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f00000015c0)=[0x3, 0x40000000, 0x7, 0x4, 0x4, 0x2, 0x2]) write$selinux_load(r0, &(0x7f0000001600)={0xf97cff8c, 0x8, 'SE Linux', "33be7e783023d66f680553eeb11bfae1dab5feb81bdb"}, 0x26) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001780)={'mangle\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001800)={0x5, 0x5, 0x8002, 0x80000001, 0x1, 0x3, 0x3, 0x5, 0x0}, &(0x7f0000001840)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000001880)={r2, 0x2}, 0x8) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xd2cc85fef49cb68d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ce}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x3c}}, 0x20040840) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001b00)={r2, 0x3cd9}, &(0x7f0000001b40)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001b80)={r5, 0x8, 0x1, [0x6]}, &(0x7f0000001bc0)=0xa) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001c00)='veth1\x00', 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7b0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x343}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x88}, 0x1, 0x0, 0x0, 0x44080}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e40)={{r0, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)=r0}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001e80)={{0x0, 0xc9c4, 0xa0f5, 0x8, 0x96d0, 0x7, 0x3ff, 0xff, 0x3, 0x8, 0xffffffff, 0x3, 0x4a, 0x6, 0x10000}}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000002e80)={r7, 0x8}) r8 = openat$cgroup_ro(r0, &(0x7f0000003e80)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) timer_create(0x1, &(0x7f0000004040)={0x0, 0x31, 0x4, @thr={&(0x7f0000003ec0)="a4acd94552f9619b7fb075e671ad19fd7ec4aa1b0eabdd624d45267eb69674c6e6d17fb962306d69c0450240831ca4931d974dacfd5aa9b29e530d3ce6506e9d063b711c3563dda11fc7fad08eb28c2bd1d84b67ba29529dadaf75fd7ab7ab974ce28b32e9413b6c6544b063a0db357974f2dd93814582f47ca7574a8ffbc252f4c0f10f85ee8e1caffd3e9f439d1a172cb6f4df01259e15019bbcb42602633e65054036768a6db8204b816070", &(0x7f0000003f80)="b53f8d4a9cd400d06cbfa8f4d2c50f645712e62fa4cb5e33fe75be27e83ccaab5d4b1585555a01311aba7f9c928eb2e20cb343fd892ce21bed736a75c149bacfa462d87d62a58365b6a769a1b317a8aa724f6c4cf6443f34fb38f92c2b87af232aba2d9e2cd95beee09fb528b97862ded9605a47ebcd3fa3052e612bd6438a369ac6be338be83cf694ee3b760d7b466e1ef9660d93375981ff69d86dc3c202ddd31800391b55631bc05a28"}}, &(0x7f0000004080)) r9 = openat$cgroup_ro(r8, &(0x7f00000040c0)='freezer.state\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000004100), &(0x7f0000004140)={'fscrypt:', @auto=[0x38, 0x31, 0x66, 0x62, 0xe, 0x33, 0x66, 0x63, 0x61, 0x64, 0x33, 0x35, 0x63, 0x31, 0x38, 0x36]}, &(0x7f0000004180)={0x0, "98479612e19b15e96dc2bf58a344b2ea01811da93c651536aaba11e5e0eb50b487bf2e1230195a3b4ea49d912b688031bd64f2533c6b59cce1a842f310b84f7f", 0x14}, 0x48, 0xfffffffffffffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004240)={&(0x7f0000004200)='qrtr_ns_server_add\x00', r9, 0x0, 0x8}, 0x18) 565.512945ms ago: executing program 2 (id=909): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) 564.412715ms ago: executing program 2 (id=911): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) close(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x20000024) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x53}, 0x18) pread64(r5, &(0x7f0000000540)=""/108, 0x6c, 0x7740c116) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={0x0, 0x5b, 0x0, 0x25, 0x0, 0x0, 0x84}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r1) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0) 461.118055ms ago: executing program 1 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 449.951846ms ago: executing program 1 (id=914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100), 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 416.669949ms ago: executing program 1 (id=916): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80000) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x1d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001010000000000000000100008500000002000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x2, 0xe5, 0x26}, {0x6, 0x87, 0x2, 0x10000}, {0x6, 0xef, 0x6, 0x80000001}, {0x2, 0xe, 0xff, 0x3ff}]}) 390.352282ms ago: executing program 3 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc2]}, 0x8) 389.886922ms ago: executing program 1 (id=918): socket(0xa, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 367.340674ms ago: executing program 1 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000000306010100000000000000000200000805000100070000000900020073797a300000000036699fcc576793a6c677666a9d44401062ee9971b88aa17a75ff1bba0aa112e6e54da167e14eb70a1239a2adcc9fd5ac59e10ec408ab8261cf62ace9e6d4ce5cd5ddbe8d297da4433aa72e2b1ba2ae3bf09e166f5c70c40d26e802b0065f00cd766f466059a317c2e6ec3ccd38ca3385661c5b6f18f5b6e91718ff8e53f40d4bb6e28c4c97c6cf9e7c9d4057dbd097c3c934e3ef502a40a938ca9f4ece53dbb31468293f613bbb42b2"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 341.798177ms ago: executing program 3 (id=920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8}, 0x0, 0x520, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbe02504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) syz_open_procfs$userns(r5, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x8000000004) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x2, &(0x7f00000000c0)={r6, r7+60000000}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) llistxattr(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)=""/16, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) fallocate(r9, 0x0, 0xbf5, 0x2000402) pwritev2(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) 341.343377ms ago: executing program 1 (id=921): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x4040010}, 0x30) 206.2629ms ago: executing program 0 (id=923): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1, 0x0, 0x0, 0x300}}], 0x2, 0x0) 205.44571ms ago: executing program 4 (id=924): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x883a}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f0000", 0x17}], 0x1}, 0x0) 178.998393ms ago: executing program 0 (id=925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 145.641136ms ago: executing program 3 (id=926): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 144.838736ms ago: executing program 0 (id=927): unshare(0x8040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000d0000000100000040"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 127.352568ms ago: executing program 4 (id=928): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100), 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 104.59867ms ago: executing program 3 (id=929): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80000) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x1d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001010000000000000000100008500000002000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x2, 0xe5, 0x26}, {0x6, 0x87, 0x2, 0x10000}, {0x6, 0xef, 0x6, 0x80000001}, {0x2, 0xe, 0xff, 0x3ff}]}) 77.241493ms ago: executing program 0 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc2]}, 0x8) 76.808103ms ago: executing program 4 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 54.181385ms ago: executing program 3 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000000306010100000000000000000200000805000100070000000900020073797a300000000036699fcc576793a6c677666a9d44401062ee9971b88aa17a75ff1bba0aa112e6e54da167e14eb70a1239a2adcc9fd5ac59e10ec408ab8261cf62ace9e6d4ce5cd5ddbe8d297da4433aa72e2b1ba2ae3bf09e166f5c70c40d26e802b0065f00cd766f466059a317c2e6ec3ccd38ca3385661c5b6f18f5b6e91718ff8e53f40d4bb6e28c4c97c6cf9e7c9d4057dbd097c3c934e3ef502a40a938ca9f4ece53dbb31468293f613bbb42b2"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 47.837416ms ago: executing program 4 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.29408ms ago: executing program 0 (id=934): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc2]}, 0x8) 587.61µs ago: executing program 0 (id=935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x48, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 0s ago: executing program 3 (id=936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8}, 0x0, 0x520, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbe02504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) syz_open_procfs$userns(r5, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x8000000004) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x2, &(0x7f00000000c0)={r6, r7+60000000}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) llistxattr(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)=""/16, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) fallocate(r9, 0x0, 0xbf5, 0x2000402) pwritev2(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) kernel console output (not intermixed with test programs): [ 38.780568][ T3450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.801647][ T3450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.818125][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.851319][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.882166][ T3450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.882616][ T3450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.882916][ T3450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.884299][ T3450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.924220][ T3495] loop4: detected capacity change from 0 to 512 [ 38.966442][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.989748][ T3495] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5: inode has both inline data and extents flags [ 39.003584][ T3495] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 39.016781][ T3495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.038181][ T3483] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 39.194754][ T3511] loop0: detected capacity change from 0 to 256 [ 39.260260][ T3515] loop3: detected capacity change from 0 to 512 [ 39.267399][ T3515] EXT4-fs: Ignoring removed oldalloc option [ 39.273937][ T3515] /dev/loop3: Can't open blockdev [ 39.342006][ T3518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 39.350999][ T3518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10'. [ 39.372866][ T3517] loop2: detected capacity change from 0 to 1024 [ 39.379501][ T3517] ======================================================= [ 39.379501][ T3517] WARNING: The mand mount option has been deprecated and [ 39.379501][ T3517] and is ignored by this kernel. Remove the mand [ 39.379501][ T3517] option from the mount to silence this warning. [ 39.379501][ T3517] ======================================================= [ 39.425526][ T3519] 9pnet_fd: Insufficient options for proto=fd [ 39.432468][ T3517] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.438993][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 39.456276][ T3517] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.11: Invalid block bitmap block 0 in block_group 0 [ 39.457974][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.472472][ T3517] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.11: Failed to acquire dquot type 0 [ 39.491774][ T3517] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.11: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.505798][ T3517] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.11: Invalid inode bitmap blk 0 in block_group 0 [ 39.518414][ T2180] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 39.522628][ T3517] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 39.541495][ T3522] netlink: 'syz.4.12': attribute type 4 has an invalid length. [ 39.542797][ T3517] EXT4-fs (loop2): 1 orphan inode deleted [ 39.554222][ T3522] netlink: 'syz.4.12': attribute type 4 has an invalid length. [ 39.556102][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.600232][ T3517] netlink: 23 bytes leftover after parsing attributes in process `syz.2.11'. [ 39.620949][ T3517] syz.2.11 (3517) used greatest stack depth: 9232 bytes left [ 39.631354][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.669782][ T3528] loop4: detected capacity change from 0 to 512 [ 39.694176][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.710924][ T3528] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.732944][ T3528] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.15: corrupted inode contents [ 39.745017][ T3528] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.15: mark_inode_dirty error [ 39.756458][ T3528] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.15: corrupted inode contents [ 39.769727][ T3528] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.15: mark_inode_dirty error [ 39.787834][ T3534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.862160][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.902251][ T3543] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 39.947516][ T3545] netlink: 'syz.4.19': attribute type 4 has an invalid length. [ 39.963730][ T3546] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 39.998286][ T3547] netlink: 'syz.4.19': attribute type 4 has an invalid length. [ 40.561176][ T3569] loop1: detected capacity change from 0 to 512 [ 40.604882][ T3569] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.24: inode has both inline data and extents flags [ 40.619197][ T3569] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.24: couldn't read orphan inode 15 (err -117) [ 40.662222][ T3569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.812623][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.085900][ T3575] netlink: 76 bytes leftover after parsing attributes in process `syz.3.27'. [ 41.125627][ T3577] syz.3.28 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.692505][ T3601] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 42.703677][ T3601] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 42.843038][ T3607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'. [ 42.862873][ T3606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.902265][ T3607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3607 comm=syz.1.31 [ 42.937438][ T3606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.048810][ T3606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.110853][ T3606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.136209][ T3616] capability: warning: `syz.4.36' uses deprecated v2 capabilities in a way that may be insecure [ 43.181347][ T407] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.209830][ T3616] loop4: detected capacity change from 0 to 512 [ 43.225476][ T3624] loop0: detected capacity change from 0 to 512 [ 43.225573][ T3450] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.257736][ T3624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.265985][ T3450] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.291225][ T3450] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.300231][ T3624] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.340704][ T3624] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.39: corrupted inode contents [ 43.361150][ T3624] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.39: mark_inode_dirty error [ 43.374269][ T3624] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.39: corrupted inode contents [ 43.394904][ T3624] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.39: mark_inode_dirty error [ 43.513489][ T3648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.41'. [ 43.529028][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 43.529043][ T29] audit: type=1400 audit(1761544204.105:456): avc: denied { name_bind } for pid=3639 comm="syz.4.44" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.560795][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.564380][ T3648] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3648 comm=syz.3.41 [ 43.659334][ T29] audit: type=1400 audit(1761544204.225:457): avc: denied { connect } for pid=3655 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.678878][ T29] audit: type=1400 audit(1761544204.225:458): avc: denied { write } for pid=3655 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.698272][ T29] audit: type=1400 audit(1761544204.225:459): avc: denied { bind } for pid=3655 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.717530][ T29] audit: type=1400 audit(1761544204.225:460): avc: denied { setopt } for pid=3655 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.763845][ T29] audit: type=1400 audit(1761544204.345:461): avc: denied { mounton } for pid=3663 comm="syz.2.49" path="/9/bus" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.812719][ T29] audit: type=1400 audit(1761544204.345:462): avc: denied { map } for pid=3663 comm="syz.2.49" path="socket:[3907]" dev="sockfs" ino=3907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.835823][ T29] audit: type=1400 audit(1761544204.345:463): avc: denied { read } for pid=3663 comm="syz.2.49" path="socket:[3907]" dev="sockfs" ino=3907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.879120][ T3670] loop1: detected capacity change from 0 to 1024 [ 43.901240][ T3670] EXT4-fs: inline encryption not supported [ 43.930110][ T3670] EXT4-fs: quotafile must be on filesystem root [ 44.007392][ T3678] loop1: detected capacity change from 0 to 512 [ 44.039585][ T3678] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.51: inode has both inline data and extents flags [ 44.063151][ T3678] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.51: couldn't read orphan inode 15 (err -117) [ 44.075525][ T3678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.278792][ T3681] Zero length message leads to an empty skb [ 44.312216][ T29] audit: type=1400 audit(1761544204.885:464): avc: denied { bind } for pid=3680 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.331511][ T29] audit: type=1400 audit(1761544204.885:465): avc: denied { listen } for pid=3680 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.364911][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.386590][ T3685] loop4: detected capacity change from 0 to 512 [ 44.404645][ T3685] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.54: inode has both inline data and extents flags [ 44.417828][ T3685] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.54: couldn't read orphan inode 15 (err -117) [ 44.434928][ T3684] loop3: detected capacity change from 0 to 512 [ 44.442183][ T3685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.537460][ T3695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'. [ 44.569211][ T3698] loop3: detected capacity change from 0 to 1024 [ 44.593981][ T3698] EXT4-fs: Ignoring removed oldalloc option [ 44.695245][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.735194][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.775532][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.822650][ T3714] loop4: detected capacity change from 0 to 128 [ 44.837565][ T3714] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.852243][ T3714] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.891216][ T3690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 44.902862][ T3690] IPVS: Unknown mcast interface: ipvlan1 [ 44.910105][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.946744][ T3718] loop4: detected capacity change from 0 to 512 [ 44.973912][ T3718] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.005279][ T3718] EXT4-fs (loop4): mount failed [ 45.398975][ T3738] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 45.420593][ T3738] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 45.514318][ T3740] loop1: detected capacity change from 0 to 512 [ 45.539098][ T3742] netlink: 'syz.4.76': attribute type 4 has an invalid length. [ 45.558539][ T3740] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.75: inode has both inline data and extents flags [ 45.582066][ T3742] netlink: 'syz.4.76': attribute type 4 has an invalid length. [ 45.621837][ T3740] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.75: couldn't read orphan inode 15 (err -117) [ 45.700351][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.726953][ T3754] loop0: detected capacity change from 0 to 512 [ 45.766773][ T3754] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.81: inode has both inline data and extents flags [ 45.796802][ T3754] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.81: couldn't read orphan inode 15 (err -117) [ 45.816972][ T3754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.818174][ T3761] loop4: detected capacity change from 0 to 512 [ 45.876710][ T3765] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 45.895091][ T3765] netlink: 'syz.3.86': attribute type 4 has an invalid length. [ 45.912007][ T3761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.942477][ T3761] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.977924][ T3771] loop3: detected capacity change from 0 to 512 [ 45.979062][ T3761] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.84: corrupted inode contents [ 45.996612][ T3761] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.84: mark_inode_dirty error [ 46.002505][ T3771] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.008135][ T3761] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.84: corrupted inode contents [ 46.047511][ T3773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 46.059708][ T3773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3773 comm=syz.2.88 [ 46.072812][ T3761] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.84: mark_inode_dirty error [ 46.084537][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.087474][ T3771] SELinux: policydb magic number 0x5ff does not match expected magic number 0xf97cff8c [ 46.106288][ T3771] SELinux: failed to load policy [ 46.129391][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.191291][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.297563][ T3794] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 46.320493][ T3794] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 46.331595][ T3793] loop1: detected capacity change from 0 to 512 [ 46.345757][ T3793] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.96: inode has both inline data and extents flags [ 46.400009][ T3793] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.96: couldn't read orphan inode 15 (err -117) [ 46.462512][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.582119][ T3810] loop0: detected capacity change from 0 to 512 [ 46.616583][ T3813] loop4: detected capacity change from 0 to 512 [ 46.635203][ T3810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.659396][ T3813] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.105: inode has both inline data and extents flags [ 46.692117][ T3810] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.735472][ T3813] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.105: couldn't read orphan inode 15 (err -117) [ 46.757998][ T3810] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.102: corrupted inode contents [ 46.770603][ T3813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.814001][ T3810] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.102: mark_inode_dirty error [ 46.904021][ T3810] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.102: corrupted inode contents [ 46.961969][ T3810] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.102: mark_inode_dirty error [ 46.964404][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.982673][ T3785] FAULT_INJECTION: forcing a failure. [ 46.982673][ T3785] name fail_futex, interval 1, probability 0, space 0, times 1 [ 46.995560][ T3785] CPU: 0 UID: 0 PID: 3785 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.995591][ T3785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.995687][ T3785] Call Trace: [ 46.995695][ T3785] [ 46.995704][ T3785] __dump_stack+0x1d/0x30 [ 46.995727][ T3785] dump_stack_lvl+0xe8/0x140 [ 46.995748][ T3785] dump_stack+0x15/0x1b [ 46.995770][ T3785] should_fail_ex+0x265/0x280 [ 46.995800][ T3785] should_fail+0xb/0x20 [ 46.995883][ T3785] get_futex_key+0x130/0xbd0 [ 46.995930][ T3785] futex_wake+0x7d/0x360 [ 46.995963][ T3785] ? __rcu_read_unlock+0x4f/0x70 [ 46.995996][ T3785] do_futex+0x323/0x380 [ 46.996079][ T3785] mm_release+0xb2/0x1e0 [ 46.996124][ T3785] exit_mm_release+0x25/0x30 [ 46.996202][ T3785] exit_mm+0x38/0x180 [ 46.996223][ T3785] do_exit+0x417/0x15c0 [ 46.996264][ T3785] ? __rcu_read_unlock+0x4f/0x70 [ 46.996295][ T3785] do_group_exit+0xff/0x140 [ 46.996384][ T3785] ? get_signal+0xe50/0xf70 [ 46.996409][ T3785] get_signal+0xe58/0xf70 [ 46.996439][ T3785] arch_do_signal_or_restart+0x96/0x440 [ 46.996473][ T3785] exit_to_user_mode_loop+0x77/0x110 [ 46.996515][ T3785] do_syscall_64+0x1d6/0x200 [ 46.996604][ T3785] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.996661][ T3785] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.996756][ T3785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.996782][ T3785] RIP: 0033:0x7f230efeefc9 [ 46.996800][ T3785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.996822][ T3785] RSP: 002b:00007f230d8b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 46.996854][ T3785] RAX: fffffffffffffdfe RBX: 00007f230f246090 RCX: 00007f230efeefc9 [ 46.996946][ T3785] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000400 [ 46.996958][ T3785] RBP: 00007f230d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 46.997001][ T3785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.997028][ T3785] R13: 00007f230f246128 R14: 00007f230f246090 R15: 00007ffd88521728 [ 46.997101][ T3785] [ 47.214300][ T3823] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 47.234193][ T3823] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 47.332424][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.348084][ T3830] loop3: detected capacity change from 0 to 512 [ 47.359235][ T3830] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.372525][ T3830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.419975][ T3830] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.458133][ T3837] loop2: detected capacity change from 0 to 512 [ 47.466191][ T3837] journal_path: Non-blockdev passed as './file0' [ 47.472604][ T3837] EXT4-fs: error: could not find journal device path [ 47.536396][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.545726][ T3830] EXT4-fs (loop3): 1 truncate cleaned up [ 47.575599][ T3830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.697497][ T3844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.116'. [ 47.754882][ T3830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 47.776067][ T3848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3848 comm=syz.4.116 [ 48.056287][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.489217][ T3866] loop3: detected capacity change from 0 to 2048 [ 48.533299][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.594019][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 48.594033][ T29] audit: type=1400 audit(1761544209.175:691): avc: denied { read write } for pid=3865 comm="syz.3.119" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.622943][ T29] audit: type=1400 audit(1761544209.175:692): avc: denied { open } for pid=3865 comm="syz.3.119" path="/22/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.725848][ T3884] loop0: detected capacity change from 0 to 512 [ 48.748962][ T3887] loop2: detected capacity change from 0 to 512 [ 48.812875][ T3884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.860997][ T3887] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.124: inode has both inline data and extents flags [ 48.882509][ T3865] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.897542][ T29] audit: type=1400 audit(1761544209.235:693): avc: denied { mount } for pid=3877 comm="syz.0.123" name="/" dev="ramfs" ino=5816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.919592][ T29] audit: type=1400 audit(1761544209.325:694): avc: denied { create } for pid=3865 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.939719][ T29] audit: type=1400 audit(1761544209.345:695): avc: denied { ioctl } for pid=3865 comm="syz.3.119" path="socket:[5832]" dev="sockfs" ino=5832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.968779][ T3884] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.989823][ T3865] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 10 with error 28 [ 49.002572][ T3865] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.002572][ T3865] [ 49.012371][ T3865] EXT4-fs (loop3): Total free blocks count 0 [ 49.018365][ T3865] EXT4-fs (loop3): Free/Dirty block details [ 49.024362][ T3865] EXT4-fs (loop3): free_blocks=2415919504 [ 49.030100][ T3865] EXT4-fs (loop3): dirty_blocks=16 [ 49.035328][ T3865] EXT4-fs (loop3): Block reservation details [ 49.041323][ T3865] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 49.049196][ T3887] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.124: couldn't read orphan inode 15 (err -117) [ 49.073381][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.088294][ T3884] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.126: corrupted inode contents [ 49.118032][ T3884] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.126: mark_inode_dirty error [ 49.157796][ T3884] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.126: corrupted inode contents [ 49.174932][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.175463][ T3898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.129'. [ 49.184111][ T29] audit: type=1400 audit(1761544209.755:696): avc: denied { write } for pid=3897 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.213823][ T29] audit: type=1400 audit(1761544209.755:697): avc: denied { nlmsg_write } for pid=3897 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.234327][ T29] audit: type=1400 audit(1761544209.755:698): avc: denied { nlmsg_read } for pid=3897 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.234650][ T3900] loop1: detected capacity change from 0 to 512 [ 49.265012][ T3900] journal_path: Non-blockdev passed as './file0' [ 49.271422][ T3900] EXT4-fs: error: could not find journal device path [ 49.274508][ T3884] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.126: mark_inode_dirty error [ 49.394091][ T29] audit: type=1326 audit(1761544209.975:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 49.417989][ T29] audit: type=1326 audit(1761544209.975:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 49.443372][ T3918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.133'. [ 49.476881][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.485165][ T3920] loop3: detected capacity change from 0 to 512 [ 49.506218][ T3921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3921 comm=syz.4.133 [ 49.543782][ T3920] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.136: inode has both inline data and extents flags [ 49.571139][ T3920] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.136: couldn't read orphan inode 15 (err -117) [ 49.584367][ T3920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.604101][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.754383][ C1] hrtimer: interrupt took 38079 ns [ 49.784967][ T3932] loop2: detected capacity change from 0 to 4096 [ 49.802100][ T3932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.817488][ T3937] xt_TCPMSS: Only works on TCP SYN packets [ 49.876053][ T3932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.972763][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.036530][ T3944] loop3: detected capacity change from 0 to 512 [ 50.062183][ T3944] journal_path: Non-blockdev passed as './file0' [ 50.068765][ T3944] EXT4-fs: error: could not find journal device path [ 50.082770][ T3935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 50.091738][ T3935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 50.118870][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.307540][ T3954] loop3: detected capacity change from 0 to 512 [ 50.334474][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.376238][ T3954] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.390199][ T3954] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.146: corrupted inode contents [ 50.402392][ T3954] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.146: mark_inode_dirty error [ 50.414599][ T3954] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.146: corrupted inode contents [ 50.426884][ T3954] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.146: mark_inode_dirty error [ 50.538439][ T3966] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 50.549616][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.665937][ T3979] loop1: detected capacity change from 0 to 512 [ 50.679550][ T3981] loop3: detected capacity change from 0 to 512 [ 50.688034][ T3979] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.153: inode has both inline data and extents flags [ 50.709443][ T3979] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.153: couldn't read orphan inode 15 (err -117) [ 50.737296][ T3981] journal_path: Non-blockdev passed as './file0' [ 50.743797][ T3981] EXT4-fs: error: could not find journal device path [ 50.794371][ T3979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.917667][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.089968][ T3995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 51.127261][ T3995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3995 comm=syz.0.157 [ 51.173738][ T4000] xt_TCPMSS: Only works on TCP SYN packets [ 51.419802][ T4006] loop2: detected capacity change from 0 to 512 [ 51.438458][ T4006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.457481][ T4006] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.460059][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 51.470256][ T4006] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.160: corrupted inode contents [ 51.476937][ T3997] IPVS: Unknown mcast interface: ipvlan1 [ 51.489750][ T4006] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.160: mark_inode_dirty error [ 51.508065][ T4006] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.160: corrupted inode contents [ 51.520465][ T4006] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.160: mark_inode_dirty error [ 51.612556][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.657300][ T4014] validate_nla: 2 callbacks suppressed [ 51.657317][ T4014] netlink: 'syz.2.161': attribute type 3 has an invalid length. [ 51.672759][ T4014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.161'. [ 51.685437][ T4014] loop2: detected capacity change from 0 to 512 [ 51.703373][ T4014] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 51.711967][ T4014] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.721187][ T4014] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.161: corrupted inode contents [ 51.733600][ T4014] EXT4-fs (loop2): Remounting filesystem read-only [ 51.740237][ T4014] EXT4-fs (loop2): 1 truncate cleaned up [ 51.746218][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.756783][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.767333][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.778000][ T4014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.793102][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.800618][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.808067][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.815492][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.823003][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.830452][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.837962][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.845382][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.852878][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.860271][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.868372][ T3374] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.892494][ T4019] fido_id[4019]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.927933][ T4021] vlan2: entered allmulticast mode [ 51.938486][ T4021] dummy0: entered allmulticast mode [ 51.945580][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.207769][ T4041] xt_TCPMSS: Only works on TCP SYN packets [ 52.470509][ T3963] Bluetooth: hci0: command 0x1003 tx timeout [ 52.476691][ T3488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.642106][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 53.028308][ T4059] loop3: detected capacity change from 0 to 1024 [ 53.050884][ T4059] EXT4-fs: Ignoring removed orlov option [ 53.113291][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.167242][ T4067] process 'syz.4.181' launched './file1' with NULL argv: empty string added [ 53.279524][ T4073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.184'. [ 53.655129][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 53.655143][ T29] audit: type=1326 audit(1761544214.235:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.744904][ T4111] loop0: detected capacity change from 0 to 512 [ 53.752549][ T29] audit: type=1326 audit(1761544214.265:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.775954][ T29] audit: type=1326 audit(1761544214.265:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.799280][ T29] audit: type=1326 audit(1761544214.265:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.822784][ T29] audit: type=1326 audit(1761544214.265:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.846166][ T29] audit: type=1326 audit(1761544214.265:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.869777][ T29] audit: type=1326 audit(1761544214.265:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.893434][ T29] audit: type=1326 audit(1761544214.265:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.916780][ T29] audit: type=1326 audit(1761544214.265:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.940085][ T29] audit: type=1326 audit(1761544214.265:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f3ef62defc9 code=0x7ffc0000 [ 53.971077][ T4111] journal_path: Non-blockdev passed as './file0' [ 53.977625][ T4111] EXT4-fs: error: could not find journal device path [ 53.984395][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a135e00: rx timeout, send abort [ 53.984458][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a135c00: rx timeout, send abort [ 53.992827][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a135e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 53.992912][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a135c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 54.070783][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.097319][ T4119] vlan2: entered allmulticast mode [ 54.467785][ T4145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'. [ 54.582112][ T4148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4148 comm=syz.0.213 [ 55.312154][ T4153] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=4153 comm=syz.4.215 [ 55.330301][ T4154] loop0: detected capacity change from 0 to 128 [ 55.789391][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 55.798500][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 56.018809][ T4172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 56.030833][ T4172] IPVS: Error connecting to the multicast addr [ 56.151442][ T4185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 56.168936][ T4185] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4185 comm=syz.0.227 [ 56.255159][ T4194] loop3: detected capacity change from 0 to 2048 [ 56.292062][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.306136][ T4194] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.230: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 56.333991][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.371875][ T4199] $H: renamed from bond0 (while UP) [ 56.379264][ T4199] $H: entered promiscuous mode [ 56.384424][ T4199] bond_slave_0: entered promiscuous mode [ 56.390303][ T4199] bond_slave_1: entered promiscuous mode [ 56.524002][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.237'. [ 56.537753][ T4215] loop2: detected capacity change from 0 to 512 [ 56.592022][ T4229] 9pnet: Unknown protocol version 9p2000.uDy!\ ؽ8PiIdmt^ KfL AJY&&9R\1\VAHkb/=.3>?DpŦ0Sc|Qc$Fm [ 56.641416][ T4215] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.239: inode has both inline data and extents flags [ 56.655017][ T4215] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.239: couldn't read orphan inode 15 (err -117) [ 56.667593][ T4215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.734429][ T4285] loop4: detected capacity change from 0 to 512 [ 56.744502][ T4285] journal_path: Non-blockdev passed as './file0' [ 56.750975][ T4285] EXT4-fs: error: could not find journal device path [ 56.799297][ T4288] $H: renamed from bond0 (while UP) [ 56.813433][ T4288] $H: entered promiscuous mode [ 56.818664][ T4288] bond_slave_0: entered promiscuous mode [ 56.824471][ T4288] bond_slave_1: entered promiscuous mode [ 56.906988][ T4292] loop0: detected capacity change from 0 to 512 [ 56.908445][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.938108][ T4292] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.246: inode has both inline data and extents flags [ 56.981934][ T4292] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.246: couldn't read orphan inode 15 (err -117) [ 57.000484][ T4292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.122255][ T4307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.253'. [ 57.204196][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.345157][ T4324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 57.358157][ T4326] netlink: 56 bytes leftover after parsing attributes in process `syz.4.261'. [ 57.384663][ T4324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4324 comm=syz.0.256 [ 57.453579][ T4329] loop4: detected capacity change from 0 to 512 [ 57.462906][ T4329] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.476976][ T4329] EXT4-fs (loop4): invalid journal inode [ 57.482915][ T4329] EXT4-fs (loop4): can't get journal size [ 57.489606][ T4329] EXT4-fs (loop4): 1 truncate cleaned up [ 57.496136][ T4329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.515867][ T4329] netlink: 'syz.4.262': attribute type 6 has an invalid length. [ 57.535206][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.593661][ T4334] loop3: detected capacity change from 0 to 512 [ 57.616579][ T4334] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.264: inode has both inline data and extents flags [ 57.657055][ T4334] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.264: couldn't read orphan inode 15 (err -117) [ 57.669803][ T4334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.723072][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.932282][ T4355] sd 0:0:1:0: device reset [ 58.019596][ T4362] loop2: detected capacity change from 0 to 128 [ 58.028735][ T4362] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.047352][ T4362] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.078529][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.277'. [ 58.087835][ T4226] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.123350][ T4368] loop2: detected capacity change from 0 to 512 [ 58.146710][ T4368] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.278: inode has both inline data and extents flags [ 58.188202][ T4368] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.278: couldn't read orphan inode 15 (err -117) [ 58.201541][ T4379] loop0: detected capacity change from 0 to 512 [ 58.209991][ T4368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.236387][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.255232][ T4379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.275220][ T4379] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.296344][ T4379] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.283: corrupted inode contents [ 58.343048][ T4379] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.283: mark_inode_dirty error [ 58.354523][ T4385] loop2: detected capacity change from 0 to 8192 [ 58.370011][ T4379] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.283: corrupted inode contents [ 58.394911][ T4379] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.283: mark_inode_dirty error [ 58.509048][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.593298][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 58.884613][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 58.884627][ T29] audit: type=1400 audit(1761544219.465:984): avc: denied { setopt } for pid=4395 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.944322][ T29] audit: type=1400 audit(1761544219.495:985): avc: denied { ioctl } for pid=4395 comm="syz.0.288" path="socket:[7071]" dev="sockfs" ino=7071 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.080047][ T4410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4410 comm=syz.1.290 [ 59.154709][ T29] audit: type=1326 audit(1761544219.735:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.224453][ T29] audit: type=1326 audit(1761544219.765:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.247908][ T29] audit: type=1326 audit(1761544219.765:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.271230][ T29] audit: type=1326 audit(1761544219.765:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.294589][ T29] audit: type=1326 audit(1761544219.765:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.318070][ T29] audit: type=1326 audit(1761544219.765:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.341600][ T29] audit: type=1326 audit(1761544219.765:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 59.365137][ T29] audit: type=1326 audit(1761544219.765:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f230eff0ee7 code=0x7ffc0000 [ 59.384593][ T4423] loop2: detected capacity change from 0 to 512 [ 59.425087][ T4423] journal_path: Non-blockdev passed as './file0' [ 59.431514][ T4423] EXT4-fs: error: could not find journal device path [ 59.445235][ T4424] loop0: detected capacity change from 0 to 128 [ 59.462253][ T4424] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.489589][ T4424] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.536940][ T4227] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.805046][ T4450] loop0: detected capacity change from 0 to 512 [ 59.864620][ T4450] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.890431][ T4457] loop1: detected capacity change from 0 to 128 [ 59.900826][ T4457] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.918705][ T4450] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.311: corrupted inode contents [ 59.934981][ T4450] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.311: mark_inode_dirty error [ 59.946277][ T4457] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.955969][ T4450] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.311: corrupted inode contents [ 59.967993][ T4450] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.311: mark_inode_dirty error [ 59.995241][ T4227] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.103389][ T4464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.217819][ T4475] loop1: detected capacity change from 0 to 512 [ 60.243057][ T4475] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.321: inode has both inline data and extents flags [ 60.256669][ T4475] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.321: couldn't read orphan inode 15 (err -117) [ 60.314115][ T4478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4478 comm=syz.0.318 [ 60.505641][ T4491] loop3: detected capacity change from 0 to 128 [ 60.538065][ T4491] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.567162][ T4491] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.615436][ T4226] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.842195][ T4513] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 60.874843][ T4516] __nla_validate_parse: 8 callbacks suppressed [ 60.874944][ T4516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.335'. [ 61.042051][ T4525] loop0: detected capacity change from 0 to 512 [ 61.082136][ T4525] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.338: inode has both inline data and extents flags [ 61.109663][ T4525] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.338: couldn't read orphan inode 15 (err -117) [ 61.227855][ T4528] loop4: detected capacity change from 0 to 128 [ 61.235246][ T4528] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.248375][ T4528] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.291734][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.318587][ T4532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.341'. [ 61.360273][ T4534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 61.410077][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 61.436994][ T4540] netlink: 104 bytes leftover after parsing attributes in process `syz.0.345'. [ 61.464538][ T4542] loop2: detected capacity change from 0 to 512 [ 61.468935][ T4538] loop4: detected capacity change from 0 to 512 [ 61.491401][ T4538] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.500549][ T4538] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 61.503637][ T4542] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.346: inode has both inline data and extents flags [ 61.525959][ T4538] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 61.537290][ T4542] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.346: couldn't read orphan inode 15 (err -117) [ 61.543007][ T4538] System zones: 0-2, 18-18, 34-35 [ 61.571797][ T4538] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 61.599462][ T4548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.348'. [ 61.621516][ T4538] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 61.640896][ T4538] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.657986][ T4538] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.344: bg 0: block 353: padding at end of block bitmap is not set [ 61.707485][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 61.764881][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 61.793368][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 61.797902][ T4233] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.811743][ T4233] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.842230][ T4233] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.851270][ T4233] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.872127][ T4553] netlink: 'syz.0.350': attribute type 12 has an invalid length. [ 61.908709][ T4555] loop4: detected capacity change from 0 to 128 [ 61.915690][ T4555] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.964243][ T4555] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.017666][ T4233] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.072613][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 62.097949][ T4572] loop2: detected capacity change from 0 to 512 [ 62.128739][ T4577] loop0: detected capacity change from 0 to 512 [ 62.137175][ T4577] journal_path: Non-blockdev passed as './file0' [ 62.143601][ T4577] EXT4-fs: error: could not find journal device path [ 62.292440][ T4572] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.360: inode has both inline data and extents flags [ 62.316481][ T4587] loop0: detected capacity change from 0 to 512 [ 62.455736][ T4572] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.360: couldn't read orphan inode 15 (err -117) [ 62.503946][ T4587] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.563470][ T4593] loop3: detected capacity change from 0 to 512 [ 62.575130][ T4587] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.365: corrupted inode contents [ 62.610155][ T4593] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.367: inode has both inline data and extents flags [ 62.622602][ T4587] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.365: mark_inode_dirty error [ 62.636826][ T4593] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.367: couldn't read orphan inode 15 (err -117) [ 62.648828][ T4587] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.365: corrupted inode contents [ 62.664738][ T4587] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.365: mark_inode_dirty error [ 63.027490][ T4610] loop2: detected capacity change from 0 to 256 [ 63.034214][ T4609] loop0: detected capacity change from 0 to 128 [ 63.041763][ T4609] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.067951][ T4609] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.107045][ T4613] loop4: detected capacity change from 0 to 512 [ 63.113889][ T4613] journal_path: Non-blockdev passed as './file0' [ 63.120431][ T4613] EXT4-fs: error: could not find journal device path [ 63.128060][ T37] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.635042][ T4637] loop0: detected capacity change from 0 to 128 [ 63.682481][ T4637] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.725946][ T4637] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.812683][ T4226] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.834347][ T4640] loop3: detected capacity change from 0 to 512 [ 63.924114][ T4640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.958511][ T4646] loop0: detected capacity change from 0 to 512 [ 63.961211][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 63.961230][ T29] audit: type=1326 audit(1761544224.535:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 63.994548][ T29] audit: type=1326 audit(1761544224.535:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.017880][ T29] audit: type=1326 audit(1761544224.535:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.041278][ T29] audit: type=1326 audit(1761544224.535:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.064712][ T29] audit: type=1400 audit(1761544224.535:1730): avc: denied { mount } for pid=4643 comm="syz.2.390" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.087745][ T29] audit: type=1326 audit(1761544224.535:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.111209][ T29] audit: type=1326 audit(1761544224.535:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.134811][ T29] audit: type=1326 audit(1761544224.535:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.177641][ T4640] EXT4-fs (loop3): 1 truncate cleaned up [ 64.223958][ T4646] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.271935][ T4646] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.389: corrupted inode contents [ 64.301970][ T4646] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.389: mark_inode_dirty error [ 64.331977][ T4646] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.389: corrupted inode contents [ 64.345557][ T29] audit: type=1326 audit(1761544224.735:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4643 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 64.369230][ T29] audit: type=1400 audit(1761544224.735:1735): avc: denied { search } for pid=4643 comm="syz.2.390" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.431743][ T4646] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.389: mark_inode_dirty error [ 64.545188][ T4664] loop2: detected capacity change from 0 to 512 [ 64.561932][ T4664] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.394: inode has both inline data and extents flags [ 64.624220][ T4653] IPVS: Error connecting to the multicast addr [ 64.666940][ T4664] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.394: couldn't read orphan inode 15 (err -117) [ 64.821289][ T4676] loop1: detected capacity change from 0 to 512 [ 64.831420][ T4676] journal_path: Non-blockdev passed as './file0' [ 64.837874][ T4676] EXT4-fs: error: could not find journal device path [ 64.934422][ T4682] loop1: detected capacity change from 0 to 1024 [ 64.947668][ T4682] EXT4-fs: Ignoring removed orlov option [ 64.956540][ T4682] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 65.030955][ T4684] loop2: detected capacity change from 0 to 512 [ 65.041436][ T4685] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 65.049693][ T4685] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 65.063431][ T4684] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.084935][ T4684] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.403: corrupted inode contents [ 65.097545][ T4684] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.403: mark_inode_dirty error [ 65.117839][ T4684] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.403: corrupted inode contents [ 65.144548][ T4684] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.403: mark_inode_dirty error [ 65.374596][ T4699] loop1: detected capacity change from 0 to 512 [ 65.408991][ T4699] EXT4-fs: Ignoring removed oldalloc option [ 65.421026][ T4706] loop3: detected capacity change from 0 to 512 [ 65.430753][ T4706] journal_path: Non-blockdev passed as './file0' [ 65.437156][ T4706] EXT4-fs: error: could not find journal device path [ 65.448574][ T4699] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.543931][ T4715] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.405: iget: bad i_size value: 2533274857506816 [ 65.637383][ T4715] EXT4-fs (loop1): Remounting filesystem read-only [ 65.797894][ T4729] loop3: detected capacity change from 0 to 512 [ 65.818683][ T4729] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.859905][ T4729] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.418: corrupted inode contents [ 65.918550][ T4729] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.418: mark_inode_dirty error [ 65.936623][ T4729] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.418: corrupted inode contents [ 65.952790][ T4729] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.418: mark_inode_dirty error [ 65.969809][ T4719] __nla_validate_parse: 5 callbacks suppressed [ 65.969834][ T4719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.414'. [ 65.986364][ T4719] IPVS: Error connecting to the multicast addr [ 66.093715][ T4734] loop3: detected capacity change from 0 to 128 [ 66.118210][ T4734] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.130396][ T4734] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.152764][ T4226] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.232084][ T4742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.421'. [ 66.241133][ T4742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.421'. [ 66.250338][ T4742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.421'. [ 66.281229][ T4742] netlink: 124 bytes leftover after parsing attributes in process `syz.1.421'. [ 66.342247][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 66.351352][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 66.365550][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 66.374518][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 66.387720][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 66.542976][ T4760] loop0: detected capacity change from 0 to 512 [ 66.596025][ T4762] loop2: detected capacity change from 0 to 128 [ 66.606570][ T4760] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.628725][ T4762] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.643056][ T4762] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.643910][ T4760] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.429: corrupted inode contents [ 66.674071][ T4760] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.429: mark_inode_dirty error [ 66.691848][ T4760] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.429: corrupted inode contents [ 66.705807][ T4760] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.429: mark_inode_dirty error [ 66.711811][ T4233] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.750827][ T4772] loop2: detected capacity change from 0 to 512 [ 66.776351][ T4772] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.432: inode has both inline data and extents flags [ 66.789733][ T4772] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.432: couldn't read orphan inode 15 (err -117) [ 67.048506][ T4791] FAULT_INJECTION: forcing a failure. [ 67.048506][ T4791] name failslab, interval 1, probability 0, space 0, times 0 [ 67.061184][ T4791] CPU: 0 UID: 0 PID: 4791 Comm: syz.2.448 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.061232][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.061247][ T4791] Call Trace: [ 67.061254][ T4791] [ 67.061262][ T4791] __dump_stack+0x1d/0x30 [ 67.061289][ T4791] dump_stack_lvl+0xe8/0x140 [ 67.061313][ T4791] dump_stack+0x15/0x1b [ 67.061376][ T4791] should_fail_ex+0x265/0x280 [ 67.061398][ T4791] should_failslab+0x8c/0xb0 [ 67.061481][ T4791] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 67.061518][ T4791] ? __alloc_skb+0x101/0x320 [ 67.061558][ T4791] __alloc_skb+0x101/0x320 [ 67.061735][ T4791] __ppp_xmit_process+0x52d/0xe30 [ 67.061771][ T4791] ? kmem_cache_alloc_node_noprof+0x2b0/0x4a0 [ 67.061807][ T4791] ? ppp_xmit_process+0x1e/0x120 [ 67.061902][ T4791] ppp_xmit_process+0x7d/0x120 [ 67.061938][ T4791] ppp_write+0x2a8/0x330 [ 67.061966][ T4791] vfs_writev+0x406/0x8b0 [ 67.062111][ T4791] ? __pfx_ppp_write+0x10/0x10 [ 67.062238][ T4791] __x64_sys_pwritev+0xfd/0x1c0 [ 67.062288][ T4791] x64_sys_call+0x14f8/0x3000 [ 67.062318][ T4791] do_syscall_64+0xd2/0x200 [ 67.062342][ T4791] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.062521][ T4791] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.062563][ T4791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.062591][ T4791] RIP: 0033:0x7f4df1a5efc9 [ 67.062622][ T4791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.062644][ T4791] RSP: 002b:00007f4df04c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 67.062667][ T4791] RAX: ffffffffffffffda RBX: 00007f4df1cb5fa0 RCX: 00007f4df1a5efc9 [ 67.062688][ T4791] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 67.062703][ T4791] RBP: 00007f4df04c7090 R08: 0000000000000001 R09: 0000000000000000 [ 67.062718][ T4791] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 67.062733][ T4791] R13: 00007f4df1cb6038 R14: 00007f4df1cb5fa0 R15: 00007ffc52b3fce8 [ 67.062756][ T4791] [ 67.266849][ T4791] ppp0: PPP: no memory (VJ comp pkt) [ 67.387095][ T4806] loop1: detected capacity change from 0 to 512 [ 67.418424][ T4806] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.442: inode has both inline data and extents flags [ 67.444402][ T4806] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.442: couldn't read orphan inode 15 (err -117) [ 67.572165][ T4814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4814 comm=syz.2.443 [ 67.595308][ T4816] loop4: detected capacity change from 0 to 512 [ 67.638617][ T4816] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.760443][ T4816] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.444: corrupted inode contents [ 67.785858][ T4816] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.444: mark_inode_dirty error [ 67.797659][ T4816] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.444: corrupted inode contents [ 67.810448][ T4816] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.444: mark_inode_dirty error [ 67.918929][ T4831] $H: renamed from bond0 (while UP) [ 67.925541][ T4829] loop3: detected capacity change from 0 to 2048 [ 67.938333][ T4831] $H: entered promiscuous mode [ 67.943477][ T4831] bond_slave_0: entered promiscuous mode [ 67.949371][ T4831] bond_slave_1: entered promiscuous mode [ 68.128849][ T4844] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4844 comm=syz.1.454 [ 68.313966][ T4852] loop3: detected capacity change from 0 to 512 [ 68.323072][ T4852] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.457: inode has both inline data and extents flags [ 68.354044][ T4852] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.457: couldn't read orphan inode 15 (err -117) [ 68.371579][ T4855] loop2: detected capacity change from 0 to 512 [ 68.378798][ T4855] EXT4-fs (loop2): can't read group descriptor 0 [ 68.404810][ T4859] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 68.431403][ T4859] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 68.562693][ T4861] loop2: detected capacity change from 0 to 128 [ 68.579904][ T4861] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.592177][ T4861] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.618653][ T4226] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.920420][ T4870] netlink: 'syz.3.473': attribute type 4 has an invalid length. [ 68.943518][ T4872] loop1: detected capacity change from 0 to 1024 [ 68.970482][ T4872] EXT4-fs: Ignoring removed orlov option [ 69.004087][ T4870] netlink: 'syz.3.473': attribute type 4 has an invalid length. [ 69.092267][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 69.092328][ T29] audit: type=1326 audit(1761544229.665:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 69.122013][ T29] audit: type=1326 audit(1761544229.665:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 69.172542][ T4872] EXT4-fs mount: 40 callbacks suppressed [ 69.172557][ T4872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.257430][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.372369][ T29] audit: type=1326 audit(1761544229.945:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 69.395807][ T29] audit: type=1326 audit(1761544229.945:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.3.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 69.655887][ T29] audit: type=1326 audit(1761544230.235:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 69.679387][ T29] audit: type=1326 audit(1761544230.235:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 69.749671][ T29] audit: type=1326 audit(1761544230.235:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 69.773106][ T29] audit: type=1326 audit(1761544230.235:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 69.796592][ T29] audit: type=1326 audit(1761544230.235:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 69.820692][ T29] audit: type=1326 audit(1761544230.235:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 69.854947][ T4898] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 70.065165][ T4905] loop4: detected capacity change from 0 to 128 [ 70.092434][ T4905] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.120280][ T4905] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.163090][ T4227] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.490066][ T4917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4917 comm=syz.4.475 [ 70.967511][ T4927] loop2: detected capacity change from 0 to 512 [ 71.024575][ T4927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.037773][ T4927] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.050001][ T4927] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.479: corrupted inode contents [ 71.063465][ T4927] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.479: mark_inode_dirty error [ 71.075366][ T4927] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.479: corrupted inode contents [ 71.087554][ T4927] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.479: mark_inode_dirty error [ 71.183797][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.918834][ T4941] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.046257][ T4953] __nla_validate_parse: 22 callbacks suppressed [ 73.046275][ T4953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'. [ 73.246983][ T4965] bpf: Bad value for 'mode' [ 73.307505][ T4974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.345392][ T4980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'. [ 73.475118][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 73.484366][ T4955] IPVS: Error connecting to the multicast addr [ 73.544048][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.501'. [ 73.569437][ T5000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.569927][ T4998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4998 comm=syz.4.501 [ 73.728529][ T5006] loop1: detected capacity change from 0 to 512 [ 73.746999][ T5006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.761712][ T5006] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.772217][ T5011] loop2: detected capacity change from 0 to 512 [ 73.774372][ T5006] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.519: corrupted inode contents [ 73.778959][ T5011] EXT4-fs: Ignoring removed oldalloc option [ 73.797126][ T5006] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.519: mark_inode_dirty error [ 73.809011][ T5006] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.519: corrupted inode contents [ 73.821080][ T5006] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.519: mark_inode_dirty error [ 73.822466][ T5011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.845444][ T5011] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.922334][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 73.931289][ T5015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 73.941053][ T5015] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.510: iget: bad i_size value: 2533274857506816 [ 73.941753][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.962247][ T5015] EXT4-fs (loop2): Remounting filesystem read-only [ 73.999160][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 74.077161][ T5026] xt_TCPMSS: Only works on TCP SYN packets [ 74.178211][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 74.178226][ T29] audit: type=1326 audit(1761544234.755:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.217383][ T29] audit: type=1326 audit(1761544234.795:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.240841][ T29] audit: type=1326 audit(1761544234.795:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.264412][ T29] audit: type=1326 audit(1761544234.795:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.288551][ T29] audit: type=1326 audit(1761544234.825:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.312362][ T29] audit: type=1326 audit(1761544234.845:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.336016][ T29] audit: type=1326 audit(1761544234.845:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.359461][ T29] audit: type=1326 audit(1761544234.845:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.382821][ T29] audit: type=1326 audit(1761544234.845:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.406279][ T29] audit: type=1326 audit(1761544234.845:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5038 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230efeefc9 code=0x7ffc0000 [ 74.430981][ T5039] loop3: detected capacity change from 0 to 128 [ 74.439001][ T5039] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.456402][ T5039] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.537153][ T5048] loop4: detected capacity change from 0 to 128 [ 74.548691][ T4226] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.645018][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.957614][ T5079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 75.151047][ T5052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 75.160432][ T5052] IPVS: Error connecting to the multicast addr [ 75.235287][ T5090] loop1: detected capacity change from 0 to 512 [ 75.242578][ T5090] EXT4-fs: Ignoring removed oldalloc option [ 75.253581][ T5090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.266265][ T5090] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.332511][ T5093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 75.342232][ T5093] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.539: iget: bad i_size value: 2533274857506816 [ 75.354943][ T5093] EXT4-fs (loop1): Remounting filesystem read-only [ 76.075951][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.460243][ T5142] loop2: detected capacity change from 0 to 512 [ 76.472514][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.559: inode has both inline data and extents flags [ 76.490660][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.559: couldn't read orphan inode 15 (err -117) [ 76.503084][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.598825][ T5127] IPVS: Unknown mcast interface: ipvlan1 [ 76.624973][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.844720][ T5151] mmap: syz.3.563 (5151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.141333][ T5166] loop4: detected capacity change from 0 to 128 [ 77.150471][ T5166] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.222974][ T5172] loop3: detected capacity change from 0 to 512 [ 77.242809][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.571: inode has both inline data and extents flags [ 77.276422][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.571: couldn't read orphan inode 15 (err -117) [ 77.281919][ T5166] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.298277][ T5172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.413636][ T4238] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.456691][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.547147][ T5181] xt_TCPMSS: Only works on TCP SYN packets [ 78.101158][ T5205] loop0: detected capacity change from 0 to 128 [ 78.108275][ T5205] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.135774][ T5205] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.206778][ T5212] __nla_validate_parse: 6 callbacks suppressed [ 78.206796][ T5212] netlink: 56 bytes leftover after parsing attributes in process `syz.1.586'. [ 78.222502][ T2180] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.547032][ T5251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.602'. [ 78.582361][ T5248] xt_TCPMSS: Only works on TCP SYN packets [ 79.237276][ T5287] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.615'. [ 79.341818][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 79.341900][ T29] audit: type=1326 audit(1761544239.675:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.371808][ T29] audit: type=1326 audit(1761544239.675:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.395128][ T29] audit: type=1326 audit(1761544239.675:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.418604][ T29] audit: type=1326 audit(1761544239.675:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.441936][ T29] audit: type=1326 audit(1761544239.675:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.465369][ T29] audit: type=1326 audit(1761544239.675:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.489171][ T29] audit: type=1326 audit(1761544239.675:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.512511][ T29] audit: type=1326 audit(1761544239.675:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.535916][ T29] audit: type=1326 audit(1761544239.675:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.559372][ T29] audit: type=1326 audit(1761544239.685:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5257 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b4351885 code=0x7ffc0000 [ 79.724630][ T5311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 80.209599][ T5352] loop2: detected capacity change from 0 to 512 [ 80.245472][ T5352] EXT4-fs (loop2): 1 orphan inode deleted [ 80.263078][ T5352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.331321][ T5352] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.398742][ T5360] bridge_slave_0: left promiscuous mode [ 80.404495][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.414383][ T5360] bridge_slave_1: left allmulticast mode [ 80.420107][ T5360] bridge_slave_1: left promiscuous mode [ 80.425910][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.436865][ T5361] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 80.444781][ T5361] netlink: 2 bytes leftover after parsing attributes in process `syz.0.641'. [ 80.456094][ T5360] bond0: (slave bond_slave_0): Releasing backup interface [ 80.467416][ T5360] bond0: (slave bond_slave_1): Releasing backup interface [ 80.480435][ T5360] team0: Port device team_slave_0 removed [ 80.490776][ T5360] team0: Port device team_slave_1 removed [ 80.498383][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.505958][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.515305][ T5360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.522874][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.532736][ T5362] netlink: 'syz.0.641': attribute type 7 has an invalid length. [ 80.533807][ T5360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.557126][ T5361] team0: entered promiscuous mode [ 80.562767][ T5361] bridge0: port 1(team0) entered blocking state [ 80.569099][ T5361] bridge0: port 1(team0) entered disabled state [ 80.575804][ T5361] team0: entered allmulticast mode [ 80.599206][ T5361] bridge0: port 1(team0) entered blocking state [ 80.605553][ T5361] bridge0: port 1(team0) entered forwarding state [ 80.616406][ T2180] bridge0: port 1(team0) entered disabled state [ 80.711582][ T5368] Driver unsupported XDP return value 0 on prog (id 475) dev N/A, expect packet loss! [ 80.849995][ T5382] loop1: detected capacity change from 0 to 128 [ 80.863764][ T5382] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.898381][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 80.913306][ T5382] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.943935][ T5386] veth2: entered promiscuous mode [ 80.949051][ T5386] veth2: entered allmulticast mode [ 80.960545][ T2180] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.050623][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.072110][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 81.080955][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 81.197626][ T5407] loop0: detected capacity change from 0 to 512 [ 81.212695][ T5407] ext4: Unknown parameter 'uid' [ 81.259578][ T5409] loop2: detected capacity change from 0 to 2048 [ 81.292611][ T5411] loop3: detected capacity change from 0 to 128 [ 81.302568][ T5411] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.302851][ T5409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.329301][ T5409] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.334888][ T5411] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.364524][ T5418] $H: renamed from bond0 (while UP) [ 81.370999][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 81.398048][ T2180] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.410418][ T5418] $H: entered promiscuous mode [ 81.425207][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 81.458340][ T5421] loop3: detected capacity change from 0 to 512 [ 81.482124][ T5421] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.504418][ T5421] EXT4-fs (loop3): 1 truncate cleaned up [ 81.510671][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.522021][ T5421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.564657][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.654688][ T5434] SELinux: policydb version 0 does not match my version range 15-35 [ 81.672932][ T5434] SELinux: failed to load policy [ 81.686335][ T5438] loop2: detected capacity change from 0 to 512 [ 81.715177][ T5438] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.674: inode has both inline data and extents flags [ 81.746014][ T5445] loop3: detected capacity change from 0 to 512 [ 81.752866][ T5438] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.674: couldn't read orphan inode 15 (err -117) [ 81.765550][ T5445] EXT4-fs: Ignoring removed oldalloc option [ 81.784165][ T5438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.789557][ T5445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.837447][ T5445] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.900845][ T5424] IPVS: Error connecting to the multicast addr [ 81.915657][ T5454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.918189][ T5453] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.677: iget: bad i_size value: 2533274857506816 [ 81.939125][ T5454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.946651][ T5453] EXT4-fs (loop3): Remounting filesystem read-only [ 82.033902][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.367763][ T5497] loop4: detected capacity change from 0 to 2048 [ 82.414535][ T5497] Alternate GPT is invalid, using primary GPT. [ 82.421000][ T5497] loop4: p1 p2 p3 [ 82.424795][ T5497] loop4: partition table partially beyond EOD, truncated [ 82.597294][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.693858][ T5516] loop3: detected capacity change from 0 to 512 [ 82.711137][ T5516] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.706: inode has both inline data and extents flags [ 82.731427][ T5516] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.706: couldn't read orphan inode 15 (err -117) [ 82.744191][ T5516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.961134][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.183532][ T5542] loop4: detected capacity change from 0 to 128 [ 83.202364][ T5542] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.223929][ T5542] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.253906][ T4238] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.335078][ T5528] __nla_validate_parse: 9 callbacks suppressed [ 83.335092][ T5528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.709'. [ 83.354000][ T5528] IPVS: Unknown mcast interface: ipvlan1 [ 83.363677][ T5555] loop3: detected capacity change from 0 to 128 [ 83.365141][ T5556] sch_fq: defrate 0 ignored. [ 83.389510][ T5555] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.424411][ T5561] loop4: detected capacity change from 0 to 512 [ 83.434600][ T5555] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.480040][ T5561] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.721: inode has both inline data and extents flags [ 83.495312][ T5561] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.721: couldn't read orphan inode 15 (err -117) [ 83.523085][ T5561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.536980][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.715495][ T5577] loop0: detected capacity change from 0 to 128 [ 83.724188][ T5577] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.748682][ T5577] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.754208][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.783973][ T5581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.726'. [ 83.784075][ T37] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.818031][ T5581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5581 comm=syz.3.726 [ 84.032343][ T5607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 84.046179][ T5609] loop2: detected capacity change from 0 to 1024 [ 84.053217][ T5609] EXT4-fs: Ignoring removed orlov option [ 84.058972][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.123181][ T5609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0082] [ 84.139839][ T5609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.154672][ T5612] loop1: detected capacity change from 0 to 8192 [ 84.601192][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 84.610333][ T5620] IPVS: Error connecting to the multicast addr [ 84.971817][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.203192][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 85.203211][ T29] audit: type=1326 audit(1761544245.775:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 85.232786][ T29] audit: type=1326 audit(1761544245.775:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 85.256178][ T29] audit: type=1326 audit(1761544245.775:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 85.279449][ T29] audit: type=1326 audit(1761544245.775:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 85.302918][ T29] audit: type=1326 audit(1761544245.775:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b431efc9 code=0x7ffc0000 [ 85.368520][ T29] audit: type=1326 audit(1761544245.945:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6b7eefc9 code=0x7ffc0000 [ 85.419154][ T29] audit: type=1326 audit(1761544245.975:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6b7eefc9 code=0x7ffc0000 [ 85.442738][ T29] audit: type=1326 audit(1761544245.975:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6b7eefc9 code=0x7ffc0000 [ 85.466100][ T29] audit: type=1326 audit(1761544245.975:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6b7eefc9 code=0x7ffc0000 [ 85.489590][ T29] audit: type=1326 audit(1761544245.975:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5648 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6b6b7eefc9 code=0x7ffc0000 [ 85.630883][ T5660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.757'. [ 85.681389][ T5657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5657 comm=syz.4.757 [ 85.957332][ T5668] loop0: detected capacity change from 0 to 512 [ 85.993324][ T5668] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.764: inode has both inline data and extents flags [ 86.030456][ T5668] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.764: couldn't read orphan inode 15 (err -117) [ 86.057209][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.264032][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.335944][ T5676] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.766'. [ 87.800304][ T5694] loop0: detected capacity change from 0 to 512 [ 87.836995][ T5697] loop4: detected capacity change from 0 to 1024 [ 87.844771][ T5698] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 87.846710][ T5694] EXT4-fs: Ignoring removed oldalloc option [ 87.894109][ T5694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.909972][ T5697] EXT4-fs: Ignoring removed orlov option [ 87.957744][ T5697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.978677][ T5694] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.033225][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.051954][ T5709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 88.060874][ T5709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.773'. [ 88.084084][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 88.127132][ T5718] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.773: iget: bad i_size value: 2533274857506816 [ 88.175176][ T5713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5713 comm=syz.3.776 [ 88.175785][ T5718] EXT4-fs (loop0): Remounting filesystem read-only [ 88.277455][ T5722] loop1: detected capacity change from 0 to 512 [ 88.310687][ T5722] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.780: inode has both inline data and extents flags [ 88.346164][ T5722] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.780: couldn't read orphan inode 15 (err -117) [ 88.377313][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.551205][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.592200][ T5725] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 88.640725][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.679121][ T5727] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.782'. [ 88.711909][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 88.885528][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 88.949193][ T5749] loop3: detected capacity change from 0 to 1024 [ 88.960338][ T5750] loop0: detected capacity change from 0 to 1024 [ 88.976216][ T5750] EXT4-fs: Ignoring removed orlov option [ 88.993088][ T5749] EXT4-fs: Ignoring removed orlov option [ 89.009960][ T5749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.057635][ T5750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.127575][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.208060][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.306675][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 89.339651][ T5786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5786 comm=syz.3.797 [ 89.528995][ T5801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 89.531784][ T5799] loop1: detected capacity change from 0 to 1024 [ 89.569396][ T5799] EXT4-fs: Ignoring removed orlov option [ 89.604670][ T5799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.634800][ T5804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 89.665310][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.730684][ T5811] syzkaller0: entered allmulticast mode [ 89.744876][ T5814] syzkaller0: entered promiscuous mode [ 89.761353][ T5811] sd 0:0:1:0: device reset [ 89.778980][ T5812] syzkaller0 (unregistering): left allmulticast mode [ 89.785739][ T5812] syzkaller0 (unregistering): left promiscuous mode [ 89.796816][ T5817] loop0: detected capacity change from 0 to 1024 [ 89.803871][ T5817] EXT4-fs: Ignoring removed orlov option [ 89.809577][ T5817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.832625][ T5817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0082] [ 89.841411][ T5817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.076085][ T5833] FAULT_INJECTION: forcing a failure. [ 90.076085][ T5833] name failslab, interval 1, probability 0, space 0, times 0 [ 90.088760][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.088793][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.088808][ T5833] Call Trace: [ 90.088816][ T5833] [ 90.088825][ T5833] __dump_stack+0x1d/0x30 [ 90.088853][ T5833] dump_stack_lvl+0xe8/0x140 [ 90.088939][ T5833] dump_stack+0x15/0x1b [ 90.089027][ T5833] should_fail_ex+0x265/0x280 [ 90.089051][ T5833] should_failslab+0x8c/0xb0 [ 90.089086][ T5833] __kmalloc_noprof+0xa5/0x570 [ 90.089121][ T5833] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 90.089197][ T5833] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 90.089276][ T5833] ? xas_load+0x413/0x430 [ 90.089315][ T5833] genl_family_rcv_msg_doit+0x48/0x1b0 [ 90.089425][ T5833] ? xa_load+0xb1/0xe0 [ 90.089446][ T5833] ? genl_get_cmd+0x639/0x660 [ 90.089477][ T5833] genl_rcv_msg+0x422/0x460 [ 90.089506][ T5833] ? __pfx_ieee802154_list_phy+0x10/0x10 [ 90.089559][ T5833] netlink_rcv_skb+0x123/0x220 [ 90.089598][ T5833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.089667][ T5833] genl_rcv+0x28/0x40 [ 90.089693][ T5833] netlink_unicast+0x5c0/0x690 [ 90.089733][ T5833] netlink_sendmsg+0x58b/0x6b0 [ 90.089759][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.089816][ T5833] __sock_sendmsg+0x145/0x180 [ 90.089846][ T5833] ____sys_sendmsg+0x31e/0x4e0 [ 90.089889][ T5833] ___sys_sendmsg+0x17b/0x1d0 [ 90.089940][ T5833] __x64_sys_sendmsg+0xd4/0x160 [ 90.089988][ T5833] x64_sys_call+0x191e/0x3000 [ 90.090010][ T5833] do_syscall_64+0xd2/0x200 [ 90.090105][ T5833] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.090143][ T5833] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.090178][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.090206][ T5833] RIP: 0033:0x7f65b431efc9 [ 90.090232][ T5833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.090253][ T5833] RSP: 002b:00007f65b2d7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.090297][ T5833] RAX: ffffffffffffffda RBX: 00007f65b4575fa0 RCX: 00007f65b431efc9 [ 90.090310][ T5833] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 90.090325][ T5833] RBP: 00007f65b2d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.090340][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.090434][ T5833] R13: 00007f65b4576038 R14: 00007f65b4575fa0 R15: 00007fffd6c79db8 [ 90.090453][ T5833] [ 90.094917][ T5836] FAULT_INJECTION: forcing a failure. [ 90.094917][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.122622][ T5837] loop3: detected capacity change from 0 to 1024 [ 90.126347][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz.4.826 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.126450][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.126467][ T5836] Call Trace: [ 90.126476][ T5836] [ 90.126488][ T5836] __dump_stack+0x1d/0x30 [ 90.126519][ T5836] dump_stack_lvl+0xe8/0x140 [ 90.126600][ T5836] dump_stack+0x15/0x1b [ 90.126623][ T5836] should_fail_ex+0x265/0x280 [ 90.126650][ T5836] should_fail+0xb/0x20 [ 90.126673][ T5836] should_fail_usercopy+0x1a/0x20 [ 90.126766][ T5836] _copy_from_iter+0xd2/0xe80 [ 90.126798][ T5836] ? __build_skb_around+0x1ab/0x200 [ 90.126839][ T5836] ? __alloc_skb+0x223/0x320 [ 90.126979][ T5836] pfkey_sendmsg+0x126/0x900 [ 90.127026][ T5836] ? avc_has_perm+0xf7/0x180 [ 90.127053][ T5836] ? selinux_socket_sendmsg+0x175/0x1b0 [ 90.127147][ T5836] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 90.127183][ T5836] __sock_sendmsg+0x145/0x180 [ 90.127216][ T5836] ____sys_sendmsg+0x31e/0x4e0 [ 90.127320][ T5836] ___sys_sendmsg+0x17b/0x1d0 [ 90.127387][ T5836] __x64_sys_sendmsg+0xd4/0x160 [ 90.127437][ T5836] x64_sys_call+0x191e/0x3000 [ 90.127503][ T5836] do_syscall_64+0xd2/0x200 [ 90.127529][ T5836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.127567][ T5836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.127658][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.127687][ T5836] RIP: 0033:0x7f3ef62defc9 [ 90.127707][ T5836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.127732][ T5836] RSP: 002b:00007f3ef4d3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.127758][ T5836] RAX: ffffffffffffffda RBX: 00007f3ef6535fa0 RCX: 00007f3ef62defc9 [ 90.127775][ T5836] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 90.127792][ T5836] RBP: 00007f3ef4d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.127822][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.127838][ T5836] R13: 00007f3ef6536038 R14: 00007f3ef6535fa0 R15: 00007ffde0aa6fa8 [ 90.127866][ T5836] [ 90.566411][ T5837] EXT4-fs: Ignoring removed orlov option [ 90.574909][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 90.593804][ T5837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.622165][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.631234][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 90.631297][ T29] audit: type=1326 audit(1761544251.205:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.671815][ T29] audit: type=1326 audit(1761544251.245:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.695263][ T29] audit: type=1326 audit(1761544251.245:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.718653][ T29] audit: type=1326 audit(1761544251.245:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.742190][ T29] audit: type=1326 audit(1761544251.245:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.785266][ T29] audit: type=1326 audit(1761544251.365:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.809097][ T29] audit: type=1326 audit(1761544251.365:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.864150][ T5857] loop0: detected capacity change from 0 to 164 [ 90.870524][ T29] audit: type=1326 audit(1761544251.415:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.894005][ T29] audit: type=1326 audit(1761544251.415:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.917408][ T29] audit: type=1326 audit(1761544251.415:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.2.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df1a5efc9 code=0x7ffc0000 [ 90.953668][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.079665][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.836'. [ 91.089168][ T5873] loop4: detected capacity change from 0 to 128 [ 91.103253][ T5873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.120128][ T5873] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.120797][ T5872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5872 comm=syz.2.836 [ 91.181120][ T9] hid_parser_main: 17 callbacks suppressed [ 91.181142][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.194686][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.202122][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.209533][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.216981][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.224549][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.231969][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.239417][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.247327][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.254877][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.273432][ T5871] loop1: detected capacity change from 0 to 2048 [ 91.307755][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 91.339895][ T4364] Alternate GPT is invalid, using primary GPT. [ 91.346268][ T5883] loop0: detected capacity change from 0 to 1024 [ 91.346696][ T5883] EXT4-fs: Ignoring removed orlov option [ 91.352875][ T4364] loop1: p1 p2 p3 [ 91.358389][ T5883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.362117][ T4364] loop1: partition table partially beyond EOD, truncated [ 91.381983][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.396199][ T5881] fido_id[5881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.428788][ T5883] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0082] [ 91.452589][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.508430][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 91.605406][ T5871] Alternate GPT is invalid, using primary GPT. [ 91.612129][ T5871] loop1: p1 p2 p3 [ 91.615874][ T5871] loop1: partition table partially beyond EOD, truncated [ 91.810091][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 91.924195][ T5908] xt_TCPMSS: Only works on TCP SYN packets [ 92.242230][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.594459][ T5938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5938 comm=syz.0.858 [ 92.664674][ T5946] loop2: detected capacity change from 0 to 512 [ 92.677511][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.863: inode has both inline data and extents flags [ 92.691112][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.863: couldn't read orphan inode 15 (err -117) [ 92.704622][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.866169][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.022849][ T5968] xt_TCPMSS: Only works on TCP SYN packets [ 93.434284][ T1035] IPVS: starting estimator thread 0... [ 93.440020][ T5993] IPVS: ip_vs_add_dest(): server weight less than zero [ 93.464255][ T5983] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.525142][ T5997] loop0: detected capacity change from 0 to 512 [ 93.531740][ T5994] IPVS: using max 2400 ests per chain, 120000 per kthread [ 93.532865][ T5997] EXT4-fs: Ignoring removed oldalloc option [ 93.546267][ T5983] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.600370][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.632672][ T5983] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.719451][ T6005] __nla_validate_parse: 5 callbacks suppressed [ 93.719555][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.883'. [ 93.734839][ T6005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.883'. [ 93.745831][ T5983] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.762086][ T6005] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.883: iget: bad i_size value: 2533274857506816 [ 93.826548][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 93.835649][ T6005] EXT4-fs (loop0): Remounting filesystem read-only [ 93.852873][ T6010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6010 comm=syz.1.885 [ 93.873156][ T4226] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891333][ T6012] loop4: detected capacity change from 0 to 128 [ 93.904278][ T4226] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.918820][ T6012] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.945548][ T4226] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.960306][ T4226] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.969297][ T6012] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.009655][ T4226] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.135236][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'. [ 94.159323][ T6029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6029 comm=syz.4.890 [ 94.315648][ T6044] loop2: detected capacity change from 0 to 128 [ 94.323965][ T6044] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.347372][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.357199][ T6044] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.393573][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.540684][ T6064] loop0: detected capacity change from 0 to 512 [ 94.550454][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.910: inode has both inline data and extents flags [ 94.564307][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.910: couldn't read orphan inode 15 (err -117) [ 94.614675][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.776450][ T6088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.815792][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.825913][ T6089] loop3: detected capacity change from 0 to 128 [ 94.836853][ T6088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.854535][ T6089] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.902158][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 94.929341][ T6088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.944971][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.954736][ T6066] IPVS: Error connecting to the multicast addr [ 94.995058][ T6088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.076814][ T4226] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.095964][ T4226] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.113260][ T6114] loop4: detected capacity change from 0 to 512 [ 95.120328][ T4226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.135811][ T6114] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.933: inode has both inline data and extents flags [ 95.142203][ T4226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.158624][ T6114] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.933: couldn't read orphan inode 15 (err -117) [ 95.171088][ T3003] ================================================================== [ 95.174250][ T6114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.179190][ T3003] BUG: KCSAN: data-race in d_delete / step_into [ 95.179221][ T3003] [ 95.179227][ T3003] read-write to 0xffff888106ff5840 of 4 bytes by task 3496 on cpu 0: [ 95.179242][ T3003] d_delete+0x15a/0x180 [ 95.203308][ T6123] netlink: 64 bytes leftover after parsing attributes in process `syz.1.937'. [ 95.208648][ T3003] d_delete_notify+0x32/0x100 [ 95.212882][ T6123] team0: No ports can be present during mode change [ 95.221645][ T3003] vfs_unlink+0x30b/0x420 [ 95.221678][ T3003] do_unlinkat+0x24e/0x480 [ 95.241838][ T3003] __x64_sys_unlink+0x2e/0x40 [ 95.246544][ T3003] x64_sys_call+0x2dcf/0x3000 [ 95.251238][ T3003] do_syscall_64+0xd2/0x200 [ 95.255747][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.261645][ T3003] [ 95.263982][ T3003] read to 0xffff888106ff5840 of 4 bytes by task 3003 on cpu 1: [ 95.271529][ T3003] step_into+0x12f/0x7f0 [ 95.275802][ T3003] walk_component+0x162/0x220 [ 95.280496][ T3003] path_lookupat+0xfe/0x2a0 [ 95.285023][ T3003] filename_lookup+0x147/0x340 [ 95.289805][ T3003] do_readlinkat+0x7d/0x320 [ 95.294318][ T3003] __x64_sys_readlink+0x47/0x60 [ 95.299352][ T3003] x64_sys_call+0x28de/0x3000 [ 95.304049][ T3003] do_syscall_64+0xd2/0x200 [ 95.308569][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.314481][ T3003] [ 95.316833][ T3003] value changed: 0x00300180 -> 0x00004080 [ 95.322635][ T3003] [ 95.324970][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 95.331118][ T3003] CPU: 1 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.340405][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.350465][ T3003] ================================================================== [ 95.365421][ T6124] loop3: detected capacity change from 0 to 128 [ 95.373728][ T6124] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.415642][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.935'. [ 95.453434][ T6127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6127 comm=syz.0.935