last executing test programs: 17.576167547s ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 17.528259448s ago: executing program 2 (id=646): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) close(r3) 17.437989139s ago: executing program 2 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 17.30509062s ago: executing program 2 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 17.245135671s ago: executing program 2 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@delchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xe}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 17.039386144s ago: executing program 2 (id=657): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 17.005763684s ago: executing program 32 (id=657): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.180400641s ago: executing program 3 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket(0xa, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}}, 0x0) 3.122043092s ago: executing program 3 (id=979): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 2.917601335s ago: executing program 5 (id=984): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {0x3}, {0x5}, @control={0x4, 0x4, 0x4}}, {0x3, 0x5b, 0x0, 0x0, @tick=0x7, {}, {}, @ext={0x0, 0x0}}], 0x38) 2.901968765s ago: executing program 3 (id=985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2.819616136s ago: executing program 5 (id=988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) 2.801523726s ago: executing program 3 (id=989): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 2.521846329s ago: executing program 5 (id=997): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0xfeff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 2.277280552s ago: executing program 0 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 2.043805935s ago: executing program 0 (id=1017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) 1.976773486s ago: executing program 0 (id=1008): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x9}, 0x18) 1.887289707s ago: executing program 3 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r1, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0xfffffefa}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 1.778893928s ago: executing program 3 (id=1012): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 984.636018ms ago: executing program 0 (id=1026): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) 692.026932ms ago: executing program 5 (id=1018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000140), &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r4, 0xa32, 0x0, 0x47, 0x0, 0x0) 689.983302ms ago: executing program 0 (id=1031): fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x14850, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x26f, &(0x7f0000000900)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 653.783262ms ago: executing program 0 (id=1019): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) linkat(0xffffffffffffffff, 0x0, r2, &(0x7f0000000700)='./file2\x00', 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 632.666742ms ago: executing program 5 (id=1022): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x180, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 465.590774ms ago: executing program 1 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket(0xa, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}}, 0x0) 465.446994ms ago: executing program 4 (id=1025): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x29f8) close_range(r3, 0xffffffffffffffff, 0x0) 410.242775ms ago: executing program 1 (id=1027): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0xc92b) 367.063545ms ago: executing program 4 (id=1028): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 366.614275ms ago: executing program 1 (id=1040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', '', [{0x20, 'memory.events\x008\x8b?\xa9R^\xda?O\x97\xfa\x1eT\x88\x00\af\x9e\x1dg\xac\xc2\x18\xc7-\xc9\xf7\xce\xc5\xe1\xac\xa5\xf2\x05\x10\xb1(\xdc\xec\xc7\xd5\xdb\xdc\xb9\x11\xb8\xa0\xed\x1c\xd8ql\xf9~\x89\x10\xd1\xad\xec'}]}, 0x4e) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 351.399995ms ago: executing program 5 (id=1029): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0xff, 0x11dc, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 284.922186ms ago: executing program 4 (id=1030): setfsuid(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 274.641736ms ago: executing program 1 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0xfeff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 257.591277ms ago: executing program 4 (id=1034): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 38.215449ms ago: executing program 1 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000640)=""/241, 0xf1, 0x0, &(0x7f00000000c0)=""/36, 0x24}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x8581, 0x7, 0x2, 0x769cacda, 0x101}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x10, 0x6, 0x6d, 0x3, 0x31a}}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x3, 0x200, 0xf2b}}]}}}]}, 0x8c}}, 0x0) 37.672849ms ago: executing program 4 (id=1046): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 179.53µs ago: executing program 1 (id=1036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4107, 0x100b}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) 0s ago: executing program 4 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) kernel console output (not intermixed with test programs): 7] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.439348][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.449982][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.459117][ T3304] veth1_vlan: entered promiscuous mode [ 30.471642][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.484685][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.494798][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.505308][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.516237][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.524445][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.535040][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.546026][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.554587][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.563422][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.572530][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.581370][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.591374][ T3316] veth0_vlan: entered promiscuous mode [ 30.600698][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.611252][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.621275][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.631913][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.642514][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.661240][ T3316] veth1_vlan: entered promiscuous mode [ 30.669981][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.678872][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.687723][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.696571][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.713491][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.738908][ T3316] veth0_macvtap: entered promiscuous mode [ 30.751417][ T3304] veth0_macvtap: entered promiscuous mode [ 30.763032][ T3316] veth1_macvtap: entered promiscuous mode [ 30.789826][ T3304] veth1_macvtap: entered promiscuous mode [ 30.812715][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.823346][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.833236][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.843737][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.853685][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.864192][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.877896][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 30.878334][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.893844][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.901353][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.910536][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.918047][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.947680][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.958303][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.968286][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.978774][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.991462][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.000413][ C0] hrtimer: interrupt took 47246 ns [ 31.006291][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.017042][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.026993][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.037465][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.047383][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.057943][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.096688][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 31.096707][ T29] audit: type=1400 audit(1745560421.453:131): avc: denied { create } for pid=3450 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.123210][ T29] audit: type=1400 audit(1745560421.463:132): avc: denied { write } for pid=3450 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.144620][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.158488][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.169114][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.179163][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.189746][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.199691][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.210230][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.225452][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.237472][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.246321][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.255135][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.263910][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.280144][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.288997][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.297846][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.306743][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.329677][ T29] audit: type=1400 audit(1745560421.713:133): avc: denied { allowed } for pid=3452 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.348749][ T29] audit: type=1400 audit(1745560421.713:134): avc: denied { create } for pid=3452 comm="syz.3.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.369662][ T29] audit: type=1400 audit(1745560421.713:135): avc: denied { map } for pid=3452 comm="syz.3.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.393437][ T29] audit: type=1400 audit(1745560421.713:136): avc: denied { read write } for pid=3452 comm="syz.3.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.504132][ T3458] loop3: detected capacity change from 0 to 512 [ 31.541853][ T3458] ======================================================= [ 31.541853][ T3458] WARNING: The mand mount option has been deprecated and [ 31.541853][ T3458] and is ignored by this kernel. Remove the mand [ 31.541853][ T3458] option from the mount to silence this warning. [ 31.541853][ T3458] ======================================================= [ 31.580534][ T3458] EXT4-fs: inline encryption not supported [ 31.590109][ T3458] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.603293][ T3458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.634117][ T3463] syz.0.7 (3463) used greatest stack depth: 11048 bytes left [ 31.646436][ T3458] EXT4-fs (loop3): 1 truncate cleaned up [ 31.652732][ T3458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.695271][ T29] audit: type=1400 audit(1745560422.073:137): avc: denied { mount } for pid=3457 comm="syz.3.8" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.781357][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.791399][ T29] audit: type=1400 audit(1745560422.113:138): avc: denied { write } for pid=3457 comm="syz.3.8" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.812942][ T29] audit: type=1400 audit(1745560422.113:139): avc: denied { add_name } for pid=3457 comm="syz.3.8" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.855156][ T29] audit: type=1400 audit(1745560422.113:140): avc: denied { create } for pid=3457 comm="syz.3.8" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.347255][ T3508] loop2: detected capacity change from 0 to 512 [ 32.354317][ T3505] Zero length message leads to an empty skb [ 32.356572][ T3508] EXT4-fs: Ignoring removed oldalloc option [ 32.378137][ T3508] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.26: Parent and EA inode have the same ino 15 [ 32.405712][ T3508] EXT4-fs (loop2): Remounting filesystem read-only [ 32.412401][ T3508] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.425528][ T3508] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 32.446347][ T3508] EXT4-fs (loop2): 1 orphan inode deleted [ 32.464032][ T3508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.503348][ T3513] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use) [ 32.608789][ T3508] syz.2.26 (3508) used greatest stack depth: 10984 bytes left [ 32.632284][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.747468][ T3533] netlink: 'syz.3.33': attribute type 21 has an invalid length. [ 32.774655][ T3533] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 32.782387][ T3533] netlink: 144 bytes leftover after parsing attributes in process `syz.3.33'. [ 32.851359][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.866737][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.113024][ T3553] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 33.242014][ T3557] loop4: detected capacity change from 0 to 512 [ 33.352650][ T3557] EXT4-fs (loop4): 1 orphan inode deleted [ 33.368874][ T1767] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 33.395722][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.495771][ T3557] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.576116][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.692490][ T3564] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.731980][ T3570] loop3: detected capacity change from 0 to 8192 [ 33.875508][ T3564] syz.0.47 (3564) used greatest stack depth: 10272 bytes left [ 33.962837][ T3575] loop0: detected capacity change from 0 to 1024 [ 33.980064][ T3578] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 33.992122][ T3575] EXT4-fs: Ignoring removed orlov option [ 34.014205][ T3575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.029269][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.048131][ T3580] loop3: detected capacity change from 0 to 512 [ 34.088217][ T3578] bridge_slave_1: left allmulticast mode [ 34.093996][ T3578] bridge_slave_1: left promiscuous mode [ 34.099716][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.123563][ T3580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.237767][ T3578] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 34.280879][ T3580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.513058][ T3550] syz.1.42 (3550) used greatest stack depth: 7000 bytes left [ 34.592269][ T3580] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.679711][ T3580] EXT4-fs (loop3): 1 truncate cleaned up [ 34.692778][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.007939][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.040328][ T3595] loop2: detected capacity change from 0 to 4096 [ 35.083744][ T3595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.157765][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.168073][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.207013][ T3607] loop2: detected capacity change from 0 to 1024 [ 35.267174][ T3608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.291127][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.331530][ T3616] loop4: detected capacity change from 0 to 1024 [ 35.340545][ T3607] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.343576][ T3616] EXT4-fs: inline encryption not supported [ 35.362603][ T3616] EXT4-fs: Ignoring removed bh option [ 35.375387][ T3614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 35.380940][ T3607] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.63: Allocating blocks 465-513 which overlap fs metadata [ 35.384374][ T3614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.412353][ T3607] EXT4-fs (loop2): pa ffff8881063c6070: logic 256, phys. 369, len 9 [ 35.420524][ T3607] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 3 [ 35.420673][ T3618] loop0: detected capacity change from 0 to 512 [ 35.431054][ T3607] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 35.439360][ T3614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.464407][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.488296][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.499264][ T3618] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.68: corrupted inode contents [ 35.512078][ T3618] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.68: mark_inode_dirty error [ 35.531689][ T3624] loop2: detected capacity change from 0 to 512 [ 35.551541][ T3624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.564447][ T3618] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.68: corrupted inode contents [ 35.577986][ T3618] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.68: mark_inode_dirty error [ 35.594495][ T3618] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.68: Failed to acquire dquot type 0 [ 35.610510][ T3618] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.68: corrupted inode contents [ 35.622734][ T3618] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.68: mark_inode_dirty error [ 35.624733][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.644634][ T3618] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.68: corrupted inode contents [ 35.658272][ T3624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.658434][ T3618] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.68: mark_inode_dirty error [ 35.683098][ T3618] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.68: corrupted inode contents [ 35.697537][ T3624] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.708866][ T3618] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 35.723367][ T3618] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.68: corrupted inode contents [ 35.763487][ T3618] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.68: mark_inode_dirty error [ 35.781353][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.805580][ T3618] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 35.842717][ T3618] EXT4-fs (loop0): 1 truncate cleaned up [ 35.865894][ T3618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.915466][ T3618] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.051018][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.106449][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 36.106465][ T29] audit: type=1326 audit(1745560426.493:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbacda05927 code=0x7ffc0000 [ 36.174350][ T29] audit: type=1326 audit(1745560426.523:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbacd9aab39 code=0x7ffc0000 [ 36.197590][ T29] audit: type=1326 audit(1745560426.523:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbacda05927 code=0x7ffc0000 [ 36.215537][ T3651] loop2: detected capacity change from 0 to 2048 [ 36.220999][ T29] audit: type=1326 audit(1745560426.523:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbacd9aab39 code=0x7ffc0000 [ 36.250640][ T29] audit: type=1326 audit(1745560426.523:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 36.273857][ T29] audit: type=1326 audit(1745560426.533:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbacda05927 code=0x7ffc0000 [ 36.297089][ T29] audit: type=1326 audit(1745560426.533:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbacd9aab39 code=0x7ffc0000 [ 36.320444][ T29] audit: type=1326 audit(1745560426.533:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 36.343740][ T29] audit: type=1326 audit(1745560426.533:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbacda05927 code=0x7ffc0000 [ 36.366917][ T29] audit: type=1326 audit(1745560426.543:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3644 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbacd9aab39 code=0x7ffc0000 [ 36.426126][ T3297] loop2: p1 < > p4 [ 36.432575][ T3297] loop2: p4 size 8388608 extends beyond EOD, truncated [ 36.510070][ T3665] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 36.560924][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 36.571014][ T3651] loop2: p1 < > p4 [ 36.580815][ T3674] ip6erspan0: entered promiscuous mode [ 36.586604][ T3651] loop2: p4 size 8388608 extends beyond EOD, truncated [ 36.707202][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.721190][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.754224][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.754533][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.858699][ T3697] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.876338][ T3697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 36.879794][ T3699] loop3: detected capacity change from 0 to 2048 [ 36.930604][ T3707] netlink: 'syz.1.99': attribute type 7 has an invalid length. [ 36.938418][ T3707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 36.951196][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.972401][ T3699] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.994937][ T3699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.97: bg 0: block 345: padding at end of block bitmap is not set [ 37.003589][ T3712] bridge_slave_0: left allmulticast mode [ 37.014898][ T3712] bridge_slave_0: left promiscuous mode [ 37.016361][ T3699] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 37.020664][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.032835][ T3699] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.032835][ T3699] [ 37.051914][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.063950][ T3712] bridge_slave_1: left allmulticast mode [ 37.069715][ T3712] bridge_slave_1: left promiscuous mode [ 37.075693][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.090035][ T3712] bond0: (slave bond_slave_0): Releasing backup interface [ 37.103812][ T3712] bond0: (slave bond_slave_1): Releasing backup interface [ 37.116847][ T3712] team0: Port device team_slave_0 removed [ 37.126167][ T3712] team0: Port device team_slave_1 removed [ 37.133641][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.141218][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.150891][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.158499][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.425506][ T3738] SELinux: Context is not valid (left unmapped). [ 37.484453][ T3740] SELinux: failed to load policy [ 37.519226][ T3743] loop3: detected capacity change from 0 to 2048 [ 37.553970][ T3752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 37.562991][ T3752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 37.573189][ T3743] Alternate GPT is invalid, using primary GPT. [ 37.579789][ T3743] loop3: p1 p2 p3 [ 37.677267][ T3759] bridge0: entered promiscuous mode [ 37.682568][ T3759] macvlan2: entered promiscuous mode [ 37.692947][ T3759] bridge0: port 3(macvlan2) entered blocking state [ 37.699818][ T3759] bridge0: port 3(macvlan2) entered disabled state [ 37.716637][ T3759] macvlan2: entered allmulticast mode [ 37.722127][ T3759] bridge0: entered allmulticast mode [ 37.786143][ T3759] macvlan2: left allmulticast mode [ 37.791451][ T3759] bridge0: left allmulticast mode [ 37.806601][ T3759] bridge0: left promiscuous mode [ 37.852169][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.853757][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 37.863827][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 38.028784][ T3772] IPv6: sit1: Disabled Multicast RS [ 38.057169][ T3773] loop3: detected capacity change from 0 to 512 [ 38.120949][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.211012][ T3773] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.271402][ T3781] syz.2.125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.291342][ T3782] syzkaller1: entered promiscuous mode [ 38.296929][ T3782] syzkaller1: entered allmulticast mode [ 38.426927][ T3790] loop4: detected capacity change from 0 to 164 [ 38.610010][ T3790] iso9660: Unknown parameter '017777777777777777777771844674407370955161518446744073709551615' [ 38.710990][ T3795] loop1: detected capacity change from 0 to 2048 [ 38.776065][ T3297] loop1: p1 < > p4 < > [ 38.845920][ T3795] loop1: p1 < > p4 < > [ 38.892998][ T3808] tipc: Started in network mode [ 38.898045][ T3808] tipc: Node identity da227b635961, cluster identity 4711 [ 38.905315][ T3808] tipc: Enabled bearer , priority 0 [ 38.913218][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.934994][ T3005] loop1: p1 < > p4 < > [ 38.942746][ T3803] tipc: Resetting bearer [ 38.980585][ T3803] tipc: Disabling bearer [ 39.057686][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.057764][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 39.133283][ T3824] ip6gre1: entered allmulticast mode [ 39.221360][ T3831] loop1: detected capacity change from 0 to 1024 [ 39.246373][ T3831] EXT4-fs: Ignoring removed nobh option [ 39.252231][ T3831] ext2: Unknown parameter 'dont_hash' [ 39.321161][ T3837] IPv4: Oversized IP packet from 127.202.26.0 [ 39.918758][ T3884] loop2: detected capacity change from 0 to 512 [ 39.939300][ T3884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.952025][ T3884] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.973185][ T3889] loop4: detected capacity change from 0 to 512 [ 39.980325][ T3889] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 40.000435][ T3887] loop3: detected capacity change from 0 to 512 [ 40.012062][ T3887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.070136][ T3887] EXT4-fs (loop3): 1 truncate cleaned up [ 40.079999][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.094255][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.118795][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.153169][ T3898] loop4: detected capacity change from 0 to 1024 [ 40.165933][ T3897] loop2: detected capacity change from 0 to 2048 [ 40.187651][ T3891] bridge0: entered promiscuous mode [ 40.195789][ T3891] macvlan2: entered promiscuous mode [ 40.211279][ T3891] bridge0: port 3(macvlan2) entered blocking state [ 40.221819][ T3891] bridge0: port 3(macvlan2) entered disabled state [ 40.224374][ T3898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.233315][ T3891] macvlan2: entered allmulticast mode [ 40.248997][ T3891] bridge0: entered allmulticast mode [ 40.252145][ T3897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.269065][ T3891] macvlan2: left allmulticast mode [ 40.275747][ T3891] bridge0: left allmulticast mode [ 40.307854][ T3898] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.171: Allocating blocks 385-513 which overlap fs metadata [ 40.326498][ T3891] bridge0: left promiscuous mode [ 40.389212][ T3898] EXT4-fs (loop4): pa ffff8881007e8540: logic 16, phys. 129, len 24 [ 40.397421][ T3898] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 40.462349][ T3898] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 40.560505][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.824478][ T3928] syzkaller0: entered allmulticast mode [ 40.840936][ T3928] syzkaller0: entered promiscuous mode [ 40.896249][ T3928] syzkaller0 (unregistering): left promiscuous mode [ 40.902919][ T3928] syzkaller0 (unregistering): left allmulticast mode [ 41.236811][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 234: padding at end of block bitmap is not set [ 41.252547][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 41.265073][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.265073][ T12] [ 41.275181][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 41.281264][ T12] EXT4-fs (loop2): Free/Dirty block details [ 41.287212][ T12] EXT4-fs (loop2): free_blocks=0 [ 41.292262][ T12] EXT4-fs (loop2): dirty_blocks=2624 [ 41.297586][ T12] EXT4-fs (loop2): Block reservation details [ 41.303608][ T12] EXT4-fs (loop2): i_reserved_data_blocks=164 [ 41.325155][ T2777] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 574 with error 28 [ 41.474979][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 41.475007][ T29] audit: type=1400 audit(1745560431.853:717): avc: denied { read } for pid=3964 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.545728][ T29] audit: type=1400 audit(1745560431.853:718): avc: denied { open } for pid=3964 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.570830][ T29] audit: type=1400 audit(1745560431.853:719): avc: denied { getattr } for pid=3964 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.603974][ T3963] bridge0: entered promiscuous mode [ 41.615905][ T3963] macvlan2: entered promiscuous mode [ 41.624336][ T3963] bridge0: port 1(macvlan2) entered blocking state [ 41.634517][ T3963] bridge0: port 1(macvlan2) entered disabled state [ 41.671060][ T3963] macvlan2: entered allmulticast mode [ 41.679445][ T3963] bridge0: entered allmulticast mode [ 41.720908][ T29] audit: type=1400 audit(1745560431.983:720): avc: denied { write } for pid=3961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.743950][ T29] audit: type=1400 audit(1745560431.983:721): avc: denied { add_name } for pid=3961 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.757897][ T3963] macvlan2: left allmulticast mode [ 41.766594][ T29] audit: type=1400 audit(1745560431.983:722): avc: denied { create } for pid=3961 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.766632][ T29] audit: type=1400 audit(1745560431.983:723): avc: denied { write } for pid=3961 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=1568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.766677][ T29] audit: type=1400 audit(1745560431.983:724): avc: denied { append } for pid=3961 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.766711][ T29] audit: type=1400 audit(1745560432.073:725): avc: denied { remove_name } for pid=3979 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.766746][ T29] audit: type=1400 audit(1745560432.073:726): avc: denied { unlink } for pid=3979 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.898721][ T3963] bridge0: left allmulticast mode [ 41.936530][ T3963] bridge0: left promiscuous mode [ 42.118101][ T4010] ip6gre1: entered allmulticast mode [ 42.235948][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 42.247148][ T4024] loop2: detected capacity change from 0 to 512 [ 42.264560][ T4024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.277551][ T4024] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.830372][ T4028] loop3: detected capacity change from 0 to 1024 [ 42.849976][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.868781][ T4028] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.209: Allocating blocks 385-513 which overlap fs metadata [ 42.892629][ T4028] EXT4-fs (loop3): pa ffff8881063c60e0: logic 16, phys. 129, len 24 [ 42.900898][ T4028] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 42.920980][ T4028] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 42.970252][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.117980][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.262004][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 43.290097][ T4054] loop4: detected capacity change from 0 to 8192 [ 43.302953][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.334198][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.600180][ T4092] loop4: detected capacity change from 0 to 512 [ 43.668350][ T4092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.713004][ T4092] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.885612][ T4099] loop3: detected capacity change from 0 to 2048 [ 43.946532][ T3297] loop3: p1 < > p4 [ 43.951209][ T3297] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.010883][ T4099] loop3: p1 < > p4 [ 44.021119][ T4099] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.073361][ T3005] loop3: p1 < > p4 [ 44.079429][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.219573][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.223342][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 44.260390][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 44.261868][ T3689] udevd[3689]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.343494][ T4115] loop1: detected capacity change from 0 to 1024 [ 44.356325][ T4115] EXT4-fs: Ignoring removed orlov option [ 44.399875][ T4115] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.469672][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.532231][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.584474][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 44.750806][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.783871][ T4142] loop4: detected capacity change from 0 to 1024 [ 44.816889][ T4142] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.836977][ T4142] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 44.857710][ T4142] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.864913][ T4142] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 44.918088][ T4151] loop2: detected capacity change from 0 to 512 [ 44.924691][ T4142] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.240: mark_inode_dirty error [ 44.951787][ T4146] bridge_slave_0: left allmulticast mode [ 44.957613][ T4146] bridge_slave_0: left promiscuous mode [ 44.963561][ T4146] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.978946][ T4146] bridge_slave_1: left allmulticast mode [ 44.984689][ T4146] bridge_slave_1: left promiscuous mode [ 44.990506][ T4146] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.992245][ T4142] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.240: Invalid block bitmap block 3 in block_group 0 [ 45.021976][ T4142] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.240: Invalid block bitmap block 3 in block_group 0 [ 45.037770][ T4151] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.242: corrupted inode contents [ 45.055019][ T4146] bond0: (slave bond_slave_0): Releasing backup interface [ 45.062986][ T4151] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.242: mark_inode_dirty error [ 45.074398][ T4142] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.240: Invalid block bitmap block 3 in block_group 0 [ 45.088434][ T4146] bond0: (slave bond_slave_1): Releasing backup interface [ 45.108249][ T4142] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.112439][ T4153] netlink: 'syz.0.243': attribute type 13 has an invalid length. [ 45.126145][ T4151] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #3: comm syz.2.242: corrupted inode contents [ 45.144241][ T4146] team0: Port device team_slave_0 removed [ 45.151818][ T4142] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.240: mark_inode_dirty error [ 45.167441][ T4146] team0: Port device team_slave_1 removed [ 45.173433][ T4151] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.242: mark_inode_dirty error [ 45.175717][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.184933][ T4142] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm syz.4.240: lblock 6 mapped to illegal pblock 1 (length 1) [ 45.191937][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.216045][ T4151] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.242: Failed to acquire dquot type 0 [ 45.218872][ T4146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.228271][ T4142] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.240: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.234763][ T4146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.250175][ T4151] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.242: corrupted inode contents [ 45.269825][ T4142] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.240: Failed to acquire dquot type 0 [ 45.281618][ T4151] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #16: comm syz.2.242: mark_inode_dirty error [ 45.294120][ T4142] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 49: comm syz.4.240: lblock 1 mapped to illegal pblock 49 (length 1) [ 45.310041][ T4142] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.240: Failed to acquire dquot type 0 [ 45.324733][ T4151] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.242: corrupted inode contents [ 45.337640][ T4142] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 45.350635][ T4142] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #15: comm syz.4.240: mark_inode_dirty error [ 45.370308][ T4151] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.242: mark_inode_dirty error [ 45.388033][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.395470][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.396360][ T4142] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 45.403682][ T4151] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.242: corrupted inode contents [ 45.412998][ T4142] EXT4-fs (loop4): 1 orphan inode deleted [ 45.426617][ T4151] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 45.442741][ T4151] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.242: corrupted inode contents [ 45.450264][ T4142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.455532][ T4151] EXT4-fs error (device loop2): ext4_truncate:4255: inode #16: comm syz.2.242: mark_inode_dirty error [ 45.480514][ T4151] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 45.480500][ T4142] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 45.491359][ T4151] EXT4-fs (loop2): 1 truncate cleaned up [ 45.501466][ T4142] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.240: Abort forced by user [ 45.516831][ T4151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.517634][ T4142] EXT4-fs (loop4): Remounting filesystem read-only [ 45.536461][ T4142] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.537060][ T4151] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.586735][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.596752][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.633219][ T4153] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.639190][ T4165] loop4: detected capacity change from 0 to 2048 [ 45.642234][ T4153] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.642274][ T4153] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.642310][ T4153] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.697231][ T4165] loop4: p1 < > p4 [ 45.702517][ T4165] loop4: p4 size 8388608 extends beyond EOD, truncated [ 45.710845][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.794504][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 46.062271][ T4200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4200 comm=syz.3.260 [ 46.074770][ T4200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4200 comm=syz.3.260 [ 46.615367][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 46.615435][ T29] audit: type=1326 audit(1745560437.003:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.652756][ T29] audit: type=1326 audit(1745560437.033:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.676288][ T29] audit: type=1326 audit(1745560437.033:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.699553][ T29] audit: type=1326 audit(1745560437.033:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.722884][ T29] audit: type=1326 audit(1745560437.033:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.746846][ T29] audit: type=1326 audit(1745560437.033:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbacda41225 code=0x7ffc0000 [ 46.770735][ T29] audit: type=1326 audit(1745560437.033:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.794356][ T29] audit: type=1326 audit(1745560437.133:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.817804][ T29] audit: type=1326 audit(1745560437.133:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.841101][ T29] audit: type=1326 audit(1745560437.153:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbacda0e969 code=0x7ffc0000 [ 46.895489][ T4207] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 47.049167][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 47.078415][ T4226] sit0: entered promiscuous mode [ 47.088113][ T4226] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 47.095812][ T4226] netlink: 1 bytes leftover after parsing attributes in process `syz.4.271'. [ 47.193391][ T4229] syzkaller0: entered promiscuous mode [ 47.199079][ T4229] syzkaller0: entered allmulticast mode [ 47.211573][ T4243] loop1: detected capacity change from 0 to 2048 [ 47.266670][ T4243] loop1: p1 < > p4 [ 47.272110][ T4243] loop1: p4 size 8388608 extends beyond EOD, truncated [ 47.276262][ T4249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.287583][ T4249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.298119][ T4248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 47.353225][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 47.362309][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 47.372632][ T4258] sit0: entered promiscuous mode [ 47.381608][ T4258] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 47.389458][ T4258] netlink: 1 bytes leftover after parsing attributes in process `syz.2.286'. [ 47.402734][ T4249] syz_tun: entered promiscuous mode [ 47.421990][ T4249] syz_tun: left promiscuous mode [ 47.453922][ T4266] loop1: detected capacity change from 0 to 512 [ 47.484877][ T4266] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.494199][ T4266] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.520509][ T4266] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 47.559993][ T4266] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 47.599741][ T4266] System zones: 0-2, 18-18, 34-34 [ 47.608279][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.292'. [ 47.618469][ T4266] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.640317][ T4266] EXT4-fs (loop1): 1 truncate cleaned up [ 47.646905][ T4266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.697789][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.743443][ T4284] syzkaller0: entered promiscuous mode [ 47.749040][ T4284] syzkaller0: entered allmulticast mode [ 47.838349][ T4282] loop2: detected capacity change from 0 to 1024 [ 47.846163][ T4282] EXT4-fs: Ignoring removed orlov option [ 47.852240][ T4282] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 47.872050][ T4291] loop1: detected capacity change from 0 to 2048 [ 47.872582][ T4293] ip6gre1: entered allmulticast mode [ 47.885901][ T4282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.921884][ T4291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.941775][ T4291] netlink: 'syz.1.297': attribute type 13 has an invalid length. [ 47.950978][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.001477][ T4299] loop2: detected capacity change from 0 to 128 [ 48.020456][ T4298] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.028430][ T4298] FAT-fs (loop2): Filesystem has been set read-only [ 48.038787][ T4298] syz.2.300: attempt to access beyond end of device [ 48.038787][ T4298] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.053252][ T4298] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.061264][ T4298] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.085886][ T4299] syz.2.300: attempt to access beyond end of device [ 48.085886][ T4299] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.099449][ T4299] syz.2.300: attempt to access beyond end of device [ 48.099449][ T4299] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.117762][ T4299] syz.2.300: attempt to access beyond end of device [ 48.117762][ T4299] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.124548][ T4309] usb usb6: usbfs: process 4309 (syz.4.303) did not claim interface 0 before use [ 48.133603][ T4299] syz.2.300: attempt to access beyond end of device [ 48.133603][ T4299] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.155502][ T4299] syz.2.300: attempt to access beyond end of device [ 48.155502][ T4299] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.169760][ T4299] syz.2.300: attempt to access beyond end of device [ 48.169760][ T4299] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.183443][ T4299] syz.2.300: attempt to access beyond end of device [ 48.183443][ T4299] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.256550][ T4291] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.265889][ T4291] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.274796][ T4291] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.284298][ T4291] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.314029][ T4307] vlan2: entered allmulticast mode [ 48.335930][ T4317] pim6reg1: entered promiscuous mode [ 48.341310][ T4317] pim6reg1: entered allmulticast mode [ 48.365650][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.422320][ T4327] vlan2: entered allmulticast mode [ 48.437791][ T4329] loop1: detected capacity change from 0 to 512 [ 48.446914][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.313: corrupted inode contents [ 48.459967][ T4329] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.313: mark_inode_dirty error [ 48.471903][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.313: corrupted inode contents [ 48.484087][ T4332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 48.493818][ T4329] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.313: mark_inode_dirty error [ 48.506434][ T4329] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.313: Failed to acquire dquot type 0 [ 48.518483][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.313: corrupted inode contents [ 48.531647][ T4329] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.313: mark_inode_dirty error [ 48.558711][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.313: corrupted inode contents [ 48.573256][ T4329] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.313: mark_inode_dirty error [ 48.586065][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.313: corrupted inode contents [ 48.607498][ T4329] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 48.627468][ T4329] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.313: corrupted inode contents [ 48.640114][ T4329] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.313: mark_inode_dirty error [ 48.655546][ T4329] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 48.669247][ T4329] EXT4-fs (loop1): 1 truncate cleaned up [ 48.676410][ T4329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.689203][ T4329] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.736734][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.756183][ T4344] loop2: detected capacity change from 0 to 1024 [ 48.769134][ T4344] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.792130][ T4344] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.817050][ T4352] ip6gre1: entered allmulticast mode [ 48.831760][ T4344] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.908656][ T4344] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 48.954168][ T4359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.325'. [ 48.972812][ T4344] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.317: mark_inode_dirty error [ 49.013518][ T4344] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.317: Invalid block bitmap block 3 in block_group 0 [ 49.049080][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 49.049745][ T4344] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.317: Invalid block bitmap block 3 in block_group 0 [ 49.073618][ T4344] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.317: Invalid block bitmap block 3 in block_group 0 [ 49.091748][ T4344] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 49.102134][ T4344] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.317: mark_inode_dirty error [ 49.115248][ T4344] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm syz.2.317: lblock 6 mapped to illegal pblock 1 (length 1) [ 49.147471][ T4344] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.317: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.162051][ T4344] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.317: Failed to acquire dquot type 0 [ 49.174839][ T4344] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 49: comm syz.2.317: lblock 1 mapped to illegal pblock 49 (length 1) [ 49.190754][ T4344] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.317: Failed to acquire dquot type 0 [ 49.203376][ T4344] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 49.213407][ T4344] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #15: comm syz.2.317: mark_inode_dirty error [ 49.226609][ T4344] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 49.239799][ T4344] EXT4-fs (loop2): 1 orphan inode deleted [ 49.247096][ T4344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.283641][ T4344] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 49.305342][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 49.322754][ T4344] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.317: Abort forced by user [ 49.347107][ T4344] EXT4-fs (loop2): Remounting filesystem read-only [ 49.353878][ T4344] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.410355][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.547490][ T4394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4394 comm=syz.1.337 [ 49.560065][ T4394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4394 comm=syz.1.337 [ 49.761209][ T4403] loop4: detected capacity change from 0 to 164 [ 49.786774][ T4403] Unable to read rock-ridge attributes [ 49.794574][ T4405] loop3: detected capacity change from 0 to 128 [ 49.832094][ T4404] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 49.840065][ T4404] FAT-fs (loop3): Filesystem has been set read-only [ 49.849145][ T4404] syz.3.346: attempt to access beyond end of device [ 49.849145][ T4404] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 49.866890][ T4404] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 49.874806][ T4404] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 49.908294][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 49.961392][ T4417] syz.3.346: attempt to access beyond end of device [ 49.961392][ T4417] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.008268][ T4420] ip6gre2: entered allmulticast mode [ 50.116156][ T4431] ip6gre1: entered allmulticast mode [ 50.216348][ T4437] loop4: detected capacity change from 0 to 2048 [ 50.258867][ T4437] loop4: p1 < > p4 [ 50.275310][ T4437] loop4: p4 size 8388608 extends beyond EOD, truncated [ 50.428569][ T4461] loop4: detected capacity change from 0 to 128 [ 50.439772][ T4460] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 50.447777][ T4460] FAT-fs (loop4): Filesystem has been set read-only [ 50.454925][ T4460] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 50.454987][ T4462] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.462797][ T4460] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 50.480257][ T4462] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 50.515336][ T4464] loop9: detected capacity change from 0 to 7 [ 50.533799][ T4464] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.569900][ T4464] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.578076][ T4464] loop9: unable to read partition table [ 50.583996][ T4468] loop4: detected capacity change from 0 to 1024 [ 50.598106][ T4471] loop3: detected capacity change from 0 to 1024 [ 50.605635][ T4464] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 50.605635][ T4464] U) failed (rc=-5) [ 50.620435][ T4471] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.641202][ T4471] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.673946][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.692651][ T4471] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.720880][ T4468] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.372: Allocating blocks 497-513 which overlap fs metadata [ 50.744332][ T4471] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 50.782616][ T4468] EXT4-fs (loop4): pa ffff8881007e8690: logic 272, phys. 385, len 8 [ 50.790830][ T4468] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 50.806564][ T4471] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.371: mark_inode_dirty error [ 50.823008][ T4471] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.371: Invalid block bitmap block 3 in block_group 0 [ 50.840227][ T4489] loop2: detected capacity change from 0 to 2048 [ 50.850134][ T4491] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.856226][ T4471] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.371: Invalid block bitmap block 3 in block_group 0 [ 50.858909][ T4491] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.881125][ T4491] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.887302][ T4471] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.371: Invalid block bitmap block 3 in block_group 0 [ 50.890081][ T4491] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.903298][ T4471] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 50.930289][ T4471] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.371: mark_inode_dirty error [ 50.941421][ T4489] loop2: p1 < > p4 [ 50.942276][ T4471] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm syz.3.371: lblock 6 mapped to illegal pblock 1 (length 1) [ 50.960376][ T4471] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.371: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.974815][ T4491] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.976624][ T4489] loop2: p4 size 8388608 extends beyond EOD, truncated [ 50.983811][ T4491] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.983921][ T4491] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.008566][ T4491] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.019684][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.022181][ T4471] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.371: Failed to acquire dquot type 0 [ 51.037676][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.047690][ T4471] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 49: comm syz.3.371: lblock 1 mapped to illegal pblock 49 (length 1) [ 51.063148][ T4471] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.371: Failed to acquire dquot type 0 [ 51.083476][ T4495] syz_tun: entered promiscuous mode [ 51.089148][ T4471] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 51.109880][ T4471] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #15: comm syz.3.371: mark_inode_dirty error [ 51.122142][ T4471] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 51.132679][ T4471] EXT4-fs (loop3): 1 orphan inode deleted [ 51.139903][ T4495] syz_tun: left promiscuous mode [ 51.146208][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.154558][ T4499] SELinux: failed to load policy [ 51.158584][ T4471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.215803][ T4503] rdma_op ffff8881196a5d80 conn xmit_rdma 0000000000000000 [ 51.264695][ T4471] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 51.307996][ T4471] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.371: Abort forced by user [ 51.322371][ T4471] EXT4-fs (loop3): Remounting filesystem read-only [ 51.328971][ T4471] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.353967][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.369018][ T4523] IPv4: Oversized IP packet from 127.202.26.0 [ 51.459590][ T4536] SELinux: syz.2.401 (4536) set checkreqprot to 1. This is no longer supported. [ 51.567227][ T4545] loop1: detected capacity change from 0 to 128 [ 51.580072][ T4543] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.588126][ T4543] FAT-fs (loop1): Filesystem has been set read-only [ 51.598576][ T4543] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.606598][ T4543] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.620297][ T4545] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.629239][ T4545] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.637186][ T4545] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.697198][ T4556] loop1: detected capacity change from 0 to 1024 [ 51.704380][ T4556] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.723388][ T4556] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.732381][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 51.732399][ T29] audit: type=1400 audit(1745560442.113:1037): avc: denied { bind } for pid=4552 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.733426][ T4556] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.765311][ T4556] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 51.775013][ T4556] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.408: mark_inode_dirty error [ 51.790233][ T4556] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.408: Invalid block bitmap block 3 in block_group 0 [ 51.806525][ T4556] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.408: Invalid block bitmap block 3 in block_group 0 [ 51.884823][ T29] audit: type=1326 audit(1745560442.263:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 51.908384][ T29] audit: type=1326 audit(1745560442.263:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 51.909598][ T4556] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.408: Invalid block bitmap block 3 in block_group 0 [ 51.952477][ T4556] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 51.962869][ T4556] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.408: mark_inode_dirty error [ 51.975364][ T4572] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 51.975472][ T4556] Quota error (device loop1): write_blk: dquota write failed [ 51.990716][ T4556] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm syz.1.408: lblock 6 mapped to illegal pblock 1 (length 1) [ 52.006114][ T4556] Quota error (device loop1): write_blk: dquota write failed [ 52.013322][ T4572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.013554][ T4556] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 52.051677][ T4556] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.408: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.051684][ T29] audit: type=1326 audit(1745560442.313:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 52.051871][ T4556] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 52.065791][ T29] audit: type=1326 audit(1745560442.313:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 52.089072][ T4556] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.408: Failed to acquire dquot type 0 [ 52.106080][ T4556] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 49: comm syz.1.408: lblock 1 mapped to illegal pblock 49 (length 1) [ 52.121243][ T29] audit: type=1326 audit(1745560442.333:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 52.172472][ T4556] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.408: Failed to acquire dquot type 0 [ 52.184833][ T4577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.208115][ T4556] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 52.220246][ T4556] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #15: comm syz.1.408: mark_inode_dirty error [ 52.223116][ T4578] bond1: (slave ip6gretap1): making interface the new active one [ 52.242394][ T4556] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 52.255369][ T4583] loop2: detected capacity change from 0 to 128 [ 52.262157][ T4556] EXT4-fs (loop1): 1 orphan inode deleted [ 52.268399][ T4556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.270955][ T4582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.281382][ T4578] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 52.288765][ T4582] FAT-fs (loop2): Filesystem has been set read-only [ 52.304564][ T4582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.312484][ T4582] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.323139][ T4577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.364356][ T4589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.378933][ T4577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.390188][ T4589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.400081][ T4556] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 52.415726][ T4589] __nla_validate_parse: 9 callbacks suppressed [ 52.415745][ T4589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 52.430940][ T4589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 52.439869][ T4556] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.408: Abort forced by user [ 52.453514][ T4577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.455397][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 52.467716][ T4556] EXT4-fs (loop1): Remounting filesystem read-only [ 52.479552][ T4556] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 52.486780][ T4593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 52.500296][ T4589] syz_tun: entered promiscuous mode [ 52.507694][ T4589] syz_tun: left promiscuous mode [ 52.517432][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.534228][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 52.550241][ T4591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.567350][ T4594] bond2 (unregistering): Released all slaves [ 52.599518][ T4577] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.612020][ T4577] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.624209][ T4577] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.662873][ T4577] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.800986][ T4635] syzkaller0: entered promiscuous mode [ 52.806587][ T4635] syzkaller0: entered allmulticast mode [ 53.068522][ T4689] capability: warning: `syz.0.444' uses deprecated v2 capabilities in a way that may be insecure [ 53.151013][ T4692] loop3: detected capacity change from 0 to 512 [ 53.191988][ T4692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.216843][ T4692] EXT4-fs (loop3): 1 truncate cleaned up [ 53.223053][ T4692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.337895][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.480847][ T4715] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.547538][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.556458][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.569419][ T4722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 53.574056][ T4724] loop2: detected capacity change from 0 to 512 [ 53.578419][ T4722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 53.586432][ T4724] EXT4-fs: Mount option(s) incompatible with ext3 [ 53.605064][ T4722] syz_tun: entered promiscuous mode [ 53.623722][ T4722] syz_tun: left promiscuous mode [ 53.644416][ T4728] loop2: detected capacity change from 0 to 2048 [ 53.667897][ T4728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.719926][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 53.822585][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.848742][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 54.049711][ T4752] loop2: detected capacity change from 0 to 512 [ 54.079994][ T4752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.093524][ T4752] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.167656][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.189302][ T36] IPVS: starting estimator thread 0... [ 54.230364][ T4777] xt_hashlimit: max too large, truncated to 1048576 [ 54.252328][ T4779] smc: net device bond0 applied user defined pnetid SYZ2 [ 54.259973][ T4779] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.269981][ T4774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 54.287165][ T4771] IPVS: using max 2448 ests per chain, 122400 per kthread [ 54.348055][ T4791] loop2: detected capacity change from 0 to 1024 [ 54.399524][ T4800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.408127][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.422890][ T4800] syz_tun: entered promiscuous mode [ 54.429753][ T4800] syz_tun: left promiscuous mode [ 55.293534][ T4846] loop1: detected capacity change from 0 to 128 [ 55.401879][ T4856] loop3: detected capacity change from 0 to 512 [ 55.409136][ T4856] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 55.428082][ T4856] EXT4-fs (loop3): invalid journal inode [ 55.441080][ T4856] EXT4-fs (loop3): can't get journal size [ 55.449711][ T4856] EXT4-fs (loop3): 1 truncate cleaned up [ 55.456024][ T4856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.490695][ T4858] process 'syz.1.516' launched '/dev/fd/3' with NULL argv: empty string added [ 55.503342][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.676611][ T4893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.685145][ T4893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.812184][ T4899] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 56.853946][ T4969] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.922787][ T4975] loop1: detected capacity change from 0 to 256 [ 56.988753][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 56.997422][ T4980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4980 comm=syz.4.570 [ 57.010152][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.016802][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.024704][ T4975] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.067897][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.149863][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.161838][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.175962][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.213655][ T4975] dummy0 speed is unknown, defaulting to 1000 [ 57.227667][ T4995] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.256551][ T4995] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.308893][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 57.308909][ T29] audit: type=1400 audit(1745560447.693:1166): avc: denied { write } for pid=4999 comm="syz.4.578" path="socket:[9168]" dev="sockfs" ino=9168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.401956][ T5006] smc: net device bond0 applied user defined pnetid SYZ2 [ 57.485385][ T36] IPVS: starting estimator thread 0... [ 57.528153][ T29] audit: type=1326 audit(1745560447.913:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.561975][ T5020] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 57.561975][ T5020] program syz.1.586 not setting count and/or reply_len properly [ 57.638111][ T29] audit: type=1326 audit(1745560447.913:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.644428][ T5014] IPVS: using max 1968 ests per chain, 98400 per kthread [ 57.661511][ T29] audit: type=1326 audit(1745560447.913:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.691859][ T29] audit: type=1326 audit(1745560447.913:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.715231][ T29] audit: type=1326 audit(1745560447.913:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.738567][ T29] audit: type=1326 audit(1745560447.913:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.762076][ T29] audit: type=1326 audit(1745560447.913:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.785701][ T29] audit: type=1326 audit(1745560447.933:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 57.884445][ T5026] loop3: detected capacity change from 0 to 1024 [ 57.900872][ T5026] EXT4-fs: Ignoring removed oldalloc option [ 57.920135][ T5026] EXT4-fs: Ignoring removed orlov option [ 57.930796][ T5026] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 57.991972][ T5026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.026363][ T5028] loop1: detected capacity change from 0 to 8192 [ 58.045555][ T5026] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 58.119297][ T5026] EXT4-fs (loop3): Remounting filesystem read-only [ 58.173208][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.255668][ T5036] netlink: 'syz.4.593': attribute type 7 has an invalid length. [ 58.263389][ T5036] __nla_validate_parse: 8 callbacks suppressed [ 58.263406][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 58.418846][ T5042] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 58.596978][ T5046] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 58.615384][ T29] audit: type=1400 audit(1745560448.993:1175): avc: denied { relabelto } for pid=5043 comm="syz.4.597" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 58.990251][ T5054] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.999677][ T5054] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008985][ T5054] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.017579][ T5054] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.047322][ T5054] geneve2: entered promiscuous mode [ 59.053279][ T5054] geneve2: entered allmulticast mode [ 59.192115][ T5054] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.202435][ T5054] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.211924][ T5054] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.221025][ T5054] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.497256][ T5078] netlink: '+}[@': attribute type 3 has an invalid length. [ 59.621227][ T5089] loop4: detected capacity change from 0 to 256 [ 59.654693][ T5089] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.728375][ T5091] wg2: entered promiscuous mode [ 59.733346][ T5091] wg2: entered allmulticast mode [ 60.090954][ T5114] dummy0 speed is unknown, defaulting to 1000 [ 60.108788][ T5100] loop1: detected capacity change from 0 to 512 [ 60.116360][ T5100] EXT4-fs: Ignoring removed nobh option [ 60.157122][ T5100] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.620: corrupted inode contents [ 60.175536][ T5100] EXT4-fs (loop1): Remounting filesystem read-only [ 60.199889][ T5100] EXT4-fs (loop1): 1 truncate cleaned up [ 60.215741][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.226418][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.262217][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.296742][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.317328][ T5100] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.350071][ T5100] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 60.373054][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.455021][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.477058][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.496103][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.525378][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.538675][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.556803][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.572804][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.617043][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.656637][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 60.664680][ T5128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5128 comm=syz.1.631 [ 60.667522][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.632'. [ 60.872780][ T5139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.636'. [ 60.881729][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 60.890684][ T5139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.636'. [ 60.955327][ T5139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.636'. [ 61.094382][ T5145] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 61.122351][ T5145] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 61.144057][ T5145] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 61.362719][ T5161] Cannot find del_set index 0 as target [ 61.387429][ T5164] pim6reg1: entered promiscuous mode [ 61.393074][ T5164] pim6reg1: entered allmulticast mode [ 61.534256][ T5171] loop3: detected capacity change from 0 to 8192 [ 61.574524][ T5174] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.667172][ T5174] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.787309][ T5174] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.815705][ T4625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.852199][ T5174] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.909786][ T4625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.943340][ T5174] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.956091][ T5174] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.971953][ T5174] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.995555][ T5174] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.018579][ T4625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.059778][ T4625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.093772][ T5193] dummy0 speed is unknown, defaulting to 1000 [ 62.238124][ T4625] bridge_slave_0: left promiscuous mode [ 62.243947][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.340309][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 62.340327][ T29] audit: type=1326 audit(1745560452.723:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.370063][ T29] audit: type=1326 audit(1745560452.723:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.436489][ T29] audit: type=1326 audit(1745560452.723:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.460088][ T29] audit: type=1326 audit(1745560452.723:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.484024][ T29] audit: type=1326 audit(1745560452.723:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.507642][ T29] audit: type=1326 audit(1745560452.723:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.531152][ T29] audit: type=1326 audit(1745560452.723:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.554534][ T29] audit: type=1326 audit(1745560452.723:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.578071][ T29] audit: type=1326 audit(1745560452.723:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.601553][ T29] audit: type=1326 audit(1745560452.733:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.4.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 62.691617][ T4625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.719172][ T4625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.758316][ T4625] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 62.797213][ T4625] bond0 (unregistering): Released all slaves [ 62.833896][ T5193] chnl_net:caif_netlink_parms(): no params data found [ 62.870496][ T4625] hsr_slave_0: left promiscuous mode [ 62.877424][ T4625] hsr_slave_1: left promiscuous mode [ 62.886477][ T4625] veth1_macvtap: left promiscuous mode [ 62.892014][ T4625] veth0_macvtap: left promiscuous mode [ 62.899768][ T4625] veth1_vlan: left promiscuous mode [ 62.905059][ T4625] veth0_vlan: left promiscuous mode [ 63.062575][ T4625] team0 (unregistering): Port device team_slave_1 removed [ 63.075424][ T4625] team0 (unregistering): Port device team_slave_0 removed [ 63.150224][ T3381] infiniband syz1: ib_query_port failed (-19) [ 63.203297][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.210540][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.239745][ T5193] bridge_slave_0: entered allmulticast mode [ 63.269440][ T5193] bridge_slave_0: entered promiscuous mode [ 63.297646][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.304786][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.319514][ T5193] bridge_slave_1: entered allmulticast mode [ 63.326729][ T5193] bridge_slave_1: entered promiscuous mode [ 63.362812][ T5293] loop4: detected capacity change from 0 to 2048 [ 63.386559][ T5193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.422446][ T5193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.458053][ T5193] team0: Port device team_slave_0 added [ 63.475147][ T5293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.494972][ T5193] team0: Port device team_slave_1 added [ 63.537168][ T4625] IPVS: stop unused estimator thread 0... [ 63.541347][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.550027][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.576119][ T5193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.587555][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.587668][ T5293] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 63.594506][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.594591][ T5193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.594540][ T5293] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 63.675755][ T5307] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 63.691881][ T5193] hsr_slave_0: entered promiscuous mode [ 63.698358][ T5193] hsr_slave_1: entered promiscuous mode [ 63.704542][ T5193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.728278][ T5193] Cannot create hsr debugfs directory [ 63.741878][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 63.751776][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 63.761753][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.812304][ T5319] selinux_netlink_send: 58 callbacks suppressed [ 63.812369][ T5319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5319 comm=syz.0.701 [ 63.832749][ T5319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5319 comm=syz.0.701 [ 63.929350][ T5329] netlink: 96 bytes leftover after parsing attributes in process `syz.3.708'. [ 63.944597][ T5193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.971598][ T5193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.985521][ T5337] 9pnet: p9_errstr2errno: server reported unknown error [ 63.997610][ T5193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.012754][ T5193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.082278][ T5193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.095685][ T5193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.105434][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.112538][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.131102][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.138209][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.231525][ T5366] veth0_vlan: entered allmulticast mode [ 64.252422][ T5366] veth0_vlan: left promiscuous mode [ 64.257786][ T5366] veth0_vlan: entered promiscuous mode [ 64.298499][ T5193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.441539][ T5193] veth0_vlan: entered promiscuous mode [ 64.465244][ T5193] veth1_vlan: entered promiscuous mode [ 64.482059][ T5193] veth0_macvtap: entered promiscuous mode [ 64.490600][ T5193] veth1_macvtap: entered promiscuous mode [ 64.522308][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.536145][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.546840][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.558869][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.567799][ T5193] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.576596][ T5193] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.585353][ T5193] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.594160][ T5193] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.649190][ T5412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.698699][ T5412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.734493][ T5421] bond0: (slave bridge0): Releasing backup interface [ 64.773775][ T5412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.838287][ T5412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.976384][ T5434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.744'. [ 64.985651][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 65.094754][ T5444] tipc: Started in network mode [ 65.099807][ T5444] tipc: Node identity ac14140f, cluster identity 4711 [ 65.108625][ T5444] tipc: New replicast peer: 255.255.255.83 [ 65.114592][ T5444] tipc: Enabled bearer , priority 10 [ 65.141073][ T5448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 65.431973][ T5476] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 65.446660][ T5476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.477863][ T5476] bond2: (slave veth7): Enslaving as an active interface with a down link [ 65.550407][ T5487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.769'. [ 66.110644][ T5412] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.122146][ T5412] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133193][ T5412] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.144613][ T5412] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.174905][ T5495] bond1: entered promiscuous mode [ 66.180066][ T5495] bond1: entered allmulticast mode [ 66.185686][ T5495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.197243][ T5495] bond1 (unregistering): Released all slaves [ 66.214858][ T5500] ref_ctr increment failed for inode: 0x368 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103c96e00 [ 66.221891][ T5501] tipc: Started in network mode [ 66.228057][ T5499] uprobe: syz.4.774:5499 failed to unregister, leaking uprobe [ 66.230854][ T5501] tipc: Node identity d1, cluster identity 4711 [ 66.230865][ T5501] tipc: Node number set to 209 [ 66.233977][ T5501] tipc: Cannot configure node identity twice [ 66.238591][ T10] tipc: Node number set to 2886997007 [ 66.335822][ T5505] netlink: 'syz.4.776': attribute type 27 has an invalid length. [ 66.359463][ T5505] sit0: left promiscuous mode [ 66.435041][ T5505] veth0_vlan: left allmulticast mode [ 66.460725][ T5505] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.469277][ T5505] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.477767][ T5505] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.486324][ T5505] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.497345][ T5505] ip6gre1: left allmulticast mode [ 66.516639][ T5505] ip6gre2: left allmulticast mode [ 66.613622][ T5528] loop5: detected capacity change from 0 to 1024 [ 66.630200][ T5528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.656602][ T5528] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 67.101226][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 67.176819][ T5572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 67.278034][ T5587] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 67.302717][ T5587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.327767][ T5587] bond1: (slave veth3): Enslaving as an active interface with a down link [ 67.349131][ T5587] ip6gretap1: entered promiscuous mode [ 67.357328][ T5587] bond1: (slave ip6gretap1): making interface the new active one [ 67.368073][ T5587] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 67.419018][ T5598] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 67.448751][ T5598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.478263][ T5193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.498121][ T5598] bond2: (slave veth5): Enslaving as an active interface with a down link [ 67.635955][ T5611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.810'. [ 67.821961][ T5624] loop1: detected capacity change from 0 to 1024 [ 67.872706][ T5630] pim6reg1: entered promiscuous mode [ 67.878106][ T5630] pim6reg1: entered allmulticast mode [ 67.878821][ T5632] loop1: detected capacity change from 0 to 1764 [ 68.039883][ T5649] loop3: detected capacity change from 0 to 1024 [ 68.116925][ T5649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.205153][ T5649] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.827: Allocating blocks 385-513 which overlap fs metadata [ 68.247027][ T5649] EXT4-fs (loop3): pa ffff8881007e8690: logic 16, phys. 129, len 24 [ 68.255077][ T5649] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 68.318279][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.365655][ T5673] loop3: detected capacity change from 0 to 512 [ 68.379702][ T5671] ref_ctr increment failed for inode: 0x432 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103c96e00 [ 68.398061][ T5673] EXT4-fs (loop3): 1 orphan inode deleted [ 68.405647][ T5673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.427932][ T5675] loop5: detected capacity change from 0 to 1764 [ 68.428531][ T4625] __quota_error: 173 callbacks suppressed [ 68.428548][ T4625] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 68.449972][ T4625] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 68.513942][ T5673] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.535363][ T5670] uprobe: syz.0.843:5670 failed to unregister, leaking uprobe [ 68.586927][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.672193][ T5692] random: crng reseeded on system resumption [ 68.678364][ T29] audit: type=1400 audit(1745560459.053:1392): avc: denied { append } for pid=5687 comm="syz.1.841" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.772284][ T5700] __nla_validate_parse: 3 callbacks suppressed [ 68.772304][ T5700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.841'. [ 68.835250][ T29] audit: type=1400 audit(1745560459.203:1393): avc: denied { shutdown } for pid=5697 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.998465][ T5709] bond1: entered promiscuous mode [ 69.003705][ T5709] bond1: entered allmulticast mode [ 69.025301][ T5709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.052435][ T5709] bond1 (unregistering): Released all slaves [ 69.064161][ T29] audit: type=1400 audit(1745560459.443:1394): avc: denied { connect } for pid=5706 comm="syz.0.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.090069][ T5714] tipc: Started in network mode [ 69.095028][ T5714] tipc: Node identity d1, cluster identity 4711 [ 69.101565][ T5714] tipc: Node number set to 209 [ 69.105259][ T29] audit: type=1400 audit(1745560459.473:1395): avc: denied { write } for pid=5706 comm="syz.0.857" path="socket:[11945]" dev="sockfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.124496][ T5714] tipc: Cannot configure node identity twice [ 69.144328][ T5719] netlink: 'syz.5.849': attribute type 1 has an invalid length. [ 69.198348][ T5721] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 69.231693][ T5721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.257587][ T5719] ip6gretap1: entered promiscuous mode [ 69.328883][ T5721] bond1: (slave veth9): Enslaving as an active interface with a down link [ 69.363731][ T29] audit: type=1326 audit(1745560459.723:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 69.387918][ T29] audit: type=1326 audit(1745560459.723:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 69.411434][ T29] audit: type=1326 audit(1745560459.723:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 69.434865][ T29] audit: type=1326 audit(1745560459.723:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 69.458318][ T29] audit: type=1326 audit(1745560459.723:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c2e1e969 code=0x7ffc0000 [ 69.487940][ T5726] bond1: (slave ip6gretap1): making interface the new active one [ 69.497302][ T5726] ip6gretap1: entered promiscuous mode [ 69.503065][ T5726] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 69.838536][ T5750] bond2: entered promiscuous mode [ 69.843679][ T5750] bond2: entered allmulticast mode [ 69.877529][ T5755] loop4: detected capacity change from 0 to 1024 [ 69.901761][ T5750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.950202][ T5750] bond2 (unregistering): Released all slaves [ 69.978801][ T5757] tipc: Started in network mode [ 69.983716][ T5757] tipc: Node identity d1, cluster identity 4711 [ 69.990008][ T5757] tipc: Node number set to 209 [ 70.003484][ T5757] tipc: Cannot configure node identity twice [ 70.140887][ T5772] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 70.173115][ T5772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.201012][ T5776] bond1: (slave veth5): Enslaving as an active interface with a down link [ 70.277090][ T5772] bond1: (slave ip6gretap1): making interface the new active one [ 70.289740][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 70.315852][ T5772] ip6gretap1: entered promiscuous mode [ 70.331817][ T5772] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 70.442710][ T5785] loop1: detected capacity change from 0 to 2048 [ 70.458063][ T5785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.733038][ T5804] loop5: detected capacity change from 0 to 512 [ 70.750238][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.781473][ T5804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.806707][ T5804] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.826924][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 70.870668][ T5809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.892979][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 70.922828][ T5809] bond2 (unregistering): Released all slaves [ 70.957097][ T5815] xt_hashlimit: max too large, truncated to 1048576 [ 70.968822][ T5193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.020544][ T5818] dummy0 speed is unknown, defaulting to 1000 [ 71.339255][ T5826] netlink: 'syz.5.890': attribute type 1 has an invalid length. [ 71.383941][ T5824] dummy0 speed is unknown, defaulting to 1000 [ 71.694765][ T5838] loop5: detected capacity change from 0 to 8192 [ 71.754899][ T5838] bio_check_eod: 28 callbacks suppressed [ 71.754919][ T5838] syz.5.898: attempt to access beyond end of device [ 71.754919][ T5838] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 71.794785][ T5838] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 71.802868][ T5838] FAT-fs (loop5): Filesystem has been set read-only [ 71.837348][ T5838] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 71.853836][ T5838] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 72.061614][ T5866] loop3: detected capacity change from 0 to 512 [ 72.070016][ T5866] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 72.567228][ T5887] loop5: detected capacity change from 0 to 128 [ 72.678077][ T5887] syz.5.919: attempt to access beyond end of device [ 72.678077][ T5887] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 72.708661][ T5887] syz.5.919: attempt to access beyond end of device [ 72.708661][ T5887] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 72.724332][ T5887] syz.5.919: attempt to access beyond end of device [ 72.724332][ T5887] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 72.739297][ T5887] syz.5.919: attempt to access beyond end of device [ 72.739297][ T5887] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 72.786100][ T5887] syz.5.919: attempt to access beyond end of device [ 72.786100][ T5887] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 72.800731][ T5887] syz.5.919: attempt to access beyond end of device [ 72.800731][ T5887] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 72.814558][ T5887] syz.5.919: attempt to access beyond end of device [ 72.814558][ T5887] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 72.846712][ T5887] syz.5.919: attempt to access beyond end of device [ 72.846712][ T5887] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 72.882389][ T5887] syz.5.919: attempt to access beyond end of device [ 72.882389][ T5887] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 73.074692][ T5911] netlink: 96 bytes leftover after parsing attributes in process `syz.1.929'. [ 73.150253][ T5922] netlink: 76 bytes leftover after parsing attributes in process `syz.0.942'. [ 73.510564][ T5932] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.557811][ T5932] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.617932][ T5932] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.667854][ T5932] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.723502][ T5932] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.734983][ T5932] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748570][ T5932] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.771873][ T5932] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.149406][ T5957] loop3: detected capacity change from 0 to 256 [ 74.153581][ T5956] dummy0 speed is unknown, defaulting to 1000 [ 74.204937][ T5957] siw: device registration error -23 [ 74.376808][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 74.376824][ T29] audit: type=1326 audit(1745560464.763:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.430858][ T5968] loop5: detected capacity change from 0 to 512 [ 74.437968][ T29] audit: type=1326 audit(1745560464.803:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.461504][ T29] audit: type=1326 audit(1745560464.803:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.463463][ T5968] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.484945][ T29] audit: type=1326 audit(1745560464.803:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.518632][ T29] audit: type=1326 audit(1745560464.803:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.542379][ T29] audit: type=1326 audit(1745560464.803:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.565837][ T29] audit: type=1326 audit(1745560464.803:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.589508][ T29] audit: type=1326 audit(1745560464.813:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.612875][ T29] audit: type=1326 audit(1745560464.813:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.636576][ T29] audit: type=1326 audit(1745560464.813:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5965 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4214e969 code=0x7ffc0000 [ 74.662053][ T5970] loop3: detected capacity change from 0 to 8192 [ 74.668773][ T5968] EXT4-fs (loop5): 1 truncate cleaned up [ 74.679038][ T5968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.708341][ T5976] loop1: detected capacity change from 0 to 128 [ 74.718804][ T5970] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 74.726723][ T5970] FAT-fs (loop3): Filesystem has been set read-only [ 74.735697][ T5970] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 74.757147][ T5970] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 74.776760][ T5193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.829124][ T5979] smc: net device bond0 erased user defined pnetid SYZ2 [ 74.880033][ T5987] loop4: detected capacity change from 0 to 2048 [ 74.907968][ T5987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.929523][ T5990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.966591][ T5998] loop5: detected capacity change from 0 to 1024 [ 74.973979][ T5998] EXT4-fs: Ignoring removed oldalloc option [ 74.980439][ T5998] EXT4-fs: Ignoring removed orlov option [ 74.986970][ T5998] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 75.077193][ T5998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.141836][ T5998] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 75.159180][ T5990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.172835][ T5998] EXT4-fs (loop5): Remounting filesystem read-only [ 75.187144][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.201368][ T6004] netlink: 'syz.1.964': attribute type 7 has an invalid length. [ 75.209114][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 75.258481][ T5990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.279386][ T5193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.303919][ T5990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.339752][ T6009] loop4: detected capacity change from 0 to 512 [ 75.367766][ T5990] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.368124][ T6009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.400484][ T5990] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.410408][ T6009] EXT4-fs (loop4): 1 truncate cleaned up [ 75.414062][ T5990] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.424704][ T6009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.428788][ T5990] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484078][ T6016] loop1: detected capacity change from 0 to 512 [ 75.514843][ T6016] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 75.526381][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.547324][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.971'. [ 75.556344][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.971'. [ 75.612378][ T6021] wg2: entered promiscuous mode [ 75.617542][ T6021] wg2: entered allmulticast mode [ 75.743617][ T6039] loop3: detected capacity change from 0 to 2048 [ 75.759484][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.909335][ T6046] netlink: '+}[@': attribute type 3 has an invalid length. [ 75.948371][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.962267][ T6051] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 75.962267][ T6051] program syz.5.984 not setting count and/or reply_len properly [ 76.203170][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'. [ 76.212483][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'. [ 76.352543][ T6082] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.421881][ T6082] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.487166][ T6082] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.497466][ T6093] siw: device registration error -23 [ 76.532161][ T6095] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 76.532161][ T6095] program syz.0.1004 not setting count and/or reply_len properly [ 76.581556][ T6082] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.788245][ T6103] loop1: detected capacity change from 0 to 512 [ 76.795043][ T6103] EXT4-fs: Ignoring removed orlov option [ 76.813363][ T6103] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1006: corrupted in-inode xattr: invalid ea_ino [ 76.832046][ T6103] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1006: couldn't read orphan inode 15 (err -117) [ 76.837799][ T6107] smc: net device bond0 applied user defined pnetid SYZ2 [ 76.845097][ T6103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.934243][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.022238][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1010'. [ 77.031350][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1010'. [ 77.097904][ T6126] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.190288][ T6126] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.227194][ T6126] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.286924][ T6126] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.877339][ T6132] loop1: detected capacity change from 0 to 1024 [ 77.886438][ T6132] EXT4-fs: Ignoring removed oldalloc option [ 77.892461][ T6132] EXT4-fs: Ignoring removed orlov option [ 77.898769][ T6132] EXT4-fs (loop1): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 77.928831][ T6132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.951280][ T6132] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 77.967391][ T6132] EXT4-fs (loop1): Remounting filesystem read-only [ 77.998424][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.097923][ T6082] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111549][ T6082] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.123498][ T6082] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.136905][ T6082] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.208679][ T6155] loop4: detected capacity change from 0 to 256 [ 78.222260][ T6155] siw: device registration error -23 [ 78.273019][ T6159] geneve2: entered promiscuous mode [ 78.280529][ T6159] geneve2: entered allmulticast mode [ 78.338634][ T6157] ip6gre2: entered allmulticast mode [ 78.530845][ T6179] loop5: detected capacity change from 0 to 8192 [ 78.874578][ T6195] syzkaller0: entered promiscuous mode [ 78.880185][ T6195] syzkaller0: entered allmulticast mode [ 79.273039][ T6187] ================================================================== [ 79.281178][ T6187] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 79.289461][ T6187] [ 79.291797][ T6187] write to 0xffff888106386228 of 4 bytes by task 6179 on cpu 0: [ 79.299533][ T6187] writeback_single_inode+0x14a/0x3e0 [ 79.304942][ T6187] sync_inode_metadata+0x5b/0x90 [ 79.309905][ T6187] __generic_file_fsync+0xf8/0x140 [ 79.315061][ T6187] fat_file_fsync+0x49/0x100 [ 79.319764][ T6187] vfs_fsync_range+0x10a/0x130 [ 79.324544][ T6187] generic_file_write_iter+0x1b8/0x2f0 [ 79.330121][ T6187] iter_file_splice_write+0x5ef/0x970 [ 79.335983][ T6187] direct_splice_actor+0x153/0x2a0 [ 79.341239][ T6187] splice_direct_to_actor+0x30f/0x680 [ 79.346730][ T6187] do_splice_direct+0xda/0x150 [ 79.351554][ T6187] do_sendfile+0x380/0x640 [ 79.356005][ T6187] __x64_sys_sendfile64+0x105/0x150 [ 79.361232][ T6187] x64_sys_call+0xb39/0x2fb0 [ 79.365849][ T6187] do_syscall_64+0xd0/0x1a0 [ 79.370382][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.376298][ T6187] [ 79.378641][ T6187] read to 0xffff888106386228 of 4 bytes by task 6187 on cpu 1: [ 79.386198][ T6187] __mark_inode_dirty+0x52/0x760 [ 79.391176][ T6187] fat_update_time+0x1ec/0x200 [ 79.396008][ T6187] touch_atime+0x145/0x330 [ 79.400475][ T6187] filemap_splice_read+0x629/0x6b0 [ 79.405623][ T6187] splice_direct_to_actor+0x26c/0x680 [ 79.411042][ T6187] do_splice_direct+0xda/0x150 [ 79.415861][ T6187] do_sendfile+0x380/0x640 [ 79.420319][ T6187] __x64_sys_sendfile64+0x105/0x150 [ 79.425546][ T6187] x64_sys_call+0xb39/0x2fb0 [ 79.430163][ T6187] do_syscall_64+0xd0/0x1a0 [ 79.434785][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.440735][ T6187] [ 79.443074][ T6187] value changed: 0x00000038 -> 0x00000002 [ 79.448806][ T6187] [ 79.451140][ T6187] Reported by Kernel Concurrency Sanitizer on: [ 79.457310][ T6187] CPU: 1 UID: 0 PID: 6187 Comm: syz.5.1029 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 79.469752][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.479853][ T6187] ================================================================== [ 80.131057][ T6126] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.142602][ T6126] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.153841][ T6126] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.164864][ T6126] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.705425][ T4652] ip6gretap1: left promiscuous mode [ 81.595327][ T4652] ip6gretap1: left promiscuous mode