last executing test programs: 1m43.143902202s ago: executing program 2 (id=91): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 1m43.026783405s ago: executing program 2 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m42.932416106s ago: executing program 2 (id=96): socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m42.76262652s ago: executing program 2 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m42.714277361s ago: executing program 2 (id=104): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) finit_module(r1, 0x0, 0x3) read$char_usb(r1, &(0x7f0000000100)=""/177, 0x39) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 1m42.453209056s ago: executing program 2 (id=107): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000240)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25) 1m42.452976356s ago: executing program 32 (id=107): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000240)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25) 1m36.395041403s ago: executing program 1 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) 1m36.266509146s ago: executing program 1 (id=240): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) 1m36.237374146s ago: executing program 1 (id=242): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) ftruncate(r0, 0xf09) 1m35.994251751s ago: executing program 1 (id=253): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m35.608388768s ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 1m34.901086182s ago: executing program 1 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xee3}, {}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m34.854993373s ago: executing program 33 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xee3}, {}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m24.66007429s ago: executing program 4 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m24.386425406s ago: executing program 4 (id=602): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x85b, 0x7, 0x6b6, 0x0, 0x6}, 0x14) 1m24.322152167s ago: executing program 4 (id=604): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000000301"], 0xdc}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m24.263395388s ago: executing program 4 (id=607): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 1m24.15790456s ago: executing program 4 (id=613): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f0000000140)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x48000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000dcf00000000005dd2"]) 1m23.763538298s ago: executing program 4 (id=626): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 1m23.763313648s ago: executing program 34 (id=626): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 1m16.580781817s ago: executing program 6 (id=846): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe74, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) 1m16.504165518s ago: executing program 6 (id=848): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1m16.40260933s ago: executing program 6 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 1m16.359484711s ago: executing program 6 (id=852): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,utf8=1,utf8\x00\x00,utf8=1,shortname=win95,errors=remount-ro,uni_xlate=1,\x00'], 0x3, 0x236, &(0x7f0000000380)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 1m16.269647833s ago: executing program 6 (id=854): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m15.777278602s ago: executing program 6 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000004c40)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064"], 0x62d) 1m15.777087723s ago: executing program 35 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000004c40)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064"], 0x62d) 12.835118651s ago: executing program 7 (id=3751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) close(r1) 12.831711692s ago: executing program 7 (id=3753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 12.771404943s ago: executing program 7 (id=3755): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', r0, 0x0, 0x200000000}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) 12.744110493s ago: executing program 7 (id=3760): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 12.718397433s ago: executing program 7 (id=3761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="79010000000000007c0006"], 0x20}}, 0x24008050) 12.634896585s ago: executing program 7 (id=3764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 12.623837445s ago: executing program 36 (id=3764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 1.343165684s ago: executing program 8 (id=4210): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.272738005s ago: executing program 5 (id=4213): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x4000) 1.254699256s ago: executing program 5 (id=4214): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800000002"], 0x0) 1.091826599s ago: executing program 5 (id=4220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) unshare(0x22020400) syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 978.069041ms ago: executing program 8 (id=4228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) 916.779352ms ago: executing program 8 (id=4231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x2, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 890.299662ms ago: executing program 5 (id=4233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 772.748525ms ago: executing program 5 (id=4235): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 714.590246ms ago: executing program 5 (id=4239): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 643.432267ms ago: executing program 8 (id=4241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 642.970797ms ago: executing program 3 (id=4242): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) 642.676627ms ago: executing program 8 (id=4243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/183, 0xb7}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 619.152938ms ago: executing program 3 (id=4244): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) cachestat(r2, &(0x7f0000000040)={0x2, 0x401}, &(0x7f0000000200), 0x0) 422.322301ms ago: executing program 8 (id=4249): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 408.230602ms ago: executing program 0 (id=4251): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0xa, 0x8, 0x2, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x48080) 329.113043ms ago: executing program 0 (id=4252): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 284.208164ms ago: executing program 0 (id=4253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 198.175916ms ago: executing program 0 (id=4255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 197.541756ms ago: executing program 3 (id=4265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 193.945866ms ago: executing program 9 (id=4256): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 169.996096ms ago: executing program 9 (id=4257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_clone(0x0, &(0x7f0000001340)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59d8a746aab9d94111fc0922b33d6e4618df4ad9f45e1e4c5a419429893f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe", 0x87, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, &(0x7f00000013c0)) 110.363728ms ago: executing program 0 (id=4258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r3, 0xb60aebde7ebb79ef, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) 109.788887ms ago: executing program 9 (id=4259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x814) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa86, 0x2) 81.768598ms ago: executing program 0 (id=4260): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 81.215728ms ago: executing program 9 (id=4261): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) 58.154329ms ago: executing program 9 (id=4262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:tmp_t:s0\x00', 0x1b) 13.17273ms ago: executing program 3 (id=4263): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 12.69755ms ago: executing program 3 (id=4264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70000, 0x181) r2 = open_tree(r1, &(0x7f0000000280)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) 12.19324ms ago: executing program 3 (id=4266): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 0s ago: executing program 9 (id=4267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) kernel console output (not intermixed with test programs): : denied { connect } for pid=7010 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.244176][ T29] audit: type=1400 audit(1757669743.701:1701): avc: denied { getopt } for pid=7010 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.289411][ T29] audit: type=1400 audit(1757669743.851:1702): avc: denied { mount } for pid=7019 comm="syz.8.1406" name="/" dev="ramfs" ino=16912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.337043][ T29] audit: type=1326 audit(1757669743.901:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 86.427265][ T7025] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 86.535094][ T7039] loop8: detected capacity change from 0 to 512 [ 86.579508][ T7039] Invalid ELF header magic: != ELF [ 86.663603][ T7051] netlink: 'syz.8.1421': attribute type 13 has an invalid length. [ 86.676481][ T7054] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1424'. [ 86.691510][ T7051] gretap0: refused to change device tx_queue_len [ 86.709981][ T7051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 86.984154][ T7090] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 86.993484][ T7090] SELinux: failed to load policy [ 87.003234][ T7092] 9p: Unknown access argument kæ¹: -22 [ 87.127639][ T7104] can0: slcan on ttyS3. [ 87.179168][ T7108] loop8: detected capacity change from 0 to 512 [ 87.213419][ T7108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.274884][ T7082] loop7: detected capacity change from 0 to 32768 [ 87.285907][ T7108] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.297752][ T7104] can0 (unregistered): slcan off ttyS3. [ 87.322522][ T7122] can0: slcan on ttyS3. [ 87.328149][ T7082] loop7: p1 p2 p3 < p5 p6 > [ 87.343456][ T7082] loop7: p2 size 16775168 extends beyond EOD, truncated [ 87.361030][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.362067][ T7082] loop7: p5 start 4294970168 is beyond EOD, truncated [ 87.370333][ T7103] can0 (unregistered): slcan off ttyS3. [ 87.404307][ T7134] SELinux: policydb version -25284851 does not match my version range 15-35 [ 87.413630][ T7134] SELinux: failed to load policy [ 87.472260][ T7141] loop5: detected capacity change from 0 to 512 [ 87.486624][ T7141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.512921][ T7141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.577106][ T7141] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1455: corrupted xattr block 19: overlapping e_value [ 87.609877][ T7148] SELinux: failed to load policy [ 87.620540][ T7141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 87.643369][ T7153] sd 0:0:1:0: device reset [ 87.657301][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.668742][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.680314][ T7161] netlink: 'syz.7.1465': attribute type 10 has an invalid length. [ 87.694106][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.778212][ T7173] loop8: detected capacity change from 0 to 512 [ 87.786649][ T7173] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.1470: corrupted in-inode xattr: invalid ea_ino [ 87.800871][ T7173] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1470: couldn't read orphan inode 15 (err -117) [ 87.813711][ T7173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.842696][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.999777][ T7195] syz_tun: entered allmulticast mode [ 88.011616][ T7194] syz_tun: left allmulticast mode [ 88.025059][ T7197] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 88.058813][ T7199] loop5: detected capacity change from 0 to 1024 [ 88.067709][ T7199] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.078743][ T7199] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.110221][ T7199] JBD2: no valid journal superblock found [ 88.110236][ T7199] EXT4-fs (loop5): Could not load journal inode [ 88.140588][ T7199] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 88.270933][ T7210] sd 0:0:1:0: device reset [ 88.362510][ T7214] rdma_op ffff8881244a6d80 conn xmit_rdma 0000000000000000 [ 88.424138][ T7219] loop0: detected capacity change from 0 to 764 [ 88.425039][ T7219] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 88.426032][ T7219] Symlink component flag not implemented [ 88.426373][ T7219] Symlink component flag not implemented (7) [ 88.558373][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 88.603085][ T7229] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 88.604326][ T7229] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 88.897773][ T7248] syz_tun: entered allmulticast mode [ 88.904641][ T7247] syz_tun: left allmulticast mode [ 89.096354][ T7269] rdma_op ffff888119333580 conn xmit_rdma 0000000000000000 [ 89.217602][ T7286] loop5: detected capacity change from 0 to 764 [ 89.226018][ T7286] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.226112][ T7287] can0: slcan on ttyS3. [ 89.239545][ T7286] Symlink component flag not implemented [ 89.245564][ T7286] Symlink component flag not implemented (7) [ 89.263774][ T7289] loop7: detected capacity change from 0 to 512 [ 89.274553][ T7289] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1521: corrupted in-inode xattr: invalid ea_ino [ 89.291338][ T7289] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1521: couldn't read orphan inode 15 (err -117) [ 89.292759][ T7292] loop5: detected capacity change from 0 to 512 [ 89.304732][ T7287] can0 (unregistered): slcan off ttyS3. [ 89.319267][ T7293] can0: slcan on ttyS3. [ 89.323957][ T7289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.342362][ T7292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.355254][ T7292] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.356135][ T5147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.388195][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.408312][ T7285] can0 (unregistered): slcan off ttyS3. [ 89.432393][ T7303] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 89.463474][ T7307] rdma_op ffff888119333180 conn xmit_rdma 0000000000000000 [ 89.502257][ T7312] loop5: detected capacity change from 0 to 1024 [ 89.509998][ T7312] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.516690][ T7312] EXT4-fs: inline encryption not supported [ 89.523728][ T7312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.541726][ T7312] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1532: bad orphan inode 11 [ 89.553932][ T7312] ext4_test_bit(bit=10, block=4) = 1 [ 89.559376][ T7312] is_bad_inode(inode)=0 [ 89.563653][ T7312] NEXT_ORPHAN(inode)=3254779904 [ 89.568833][ T7312] max_ino=32 [ 89.572065][ T7312] i_nlink=0 [ 89.577168][ T7312] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1532: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.591762][ T7312] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1532: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.606242][ T7312] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1532: Failed to acquire dquot type 0 [ 89.617880][ T7312] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 89.628041][ T7312] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1532: mark_inode_dirty error [ 89.635757][ T7320] hub 9-0:1.0: USB hub found [ 89.642210][ T7312] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 89.656792][ T7312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.669156][ T7320] hub 9-0:1.0: 8 ports detected [ 89.675569][ T7312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.690218][ T7312] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.1532: Invalid inode table block 1 in block_group 0 [ 89.705476][ T7324] loop3: detected capacity change from 0 to 256 [ 89.719612][ T7312] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 89.732029][ T7312] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.1532: mark_inode_dirty error [ 89.764593][ T7324] bio_check_eod: 7 callbacks suppressed [ 89.764623][ T7324] syz.3.1537: attempt to access beyond end of device [ 89.764623][ T7324] loop3: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 89.786518][ T7324] syz.3.1537: attempt to access beyond end of device [ 89.786518][ T7324] loop3: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 89.943420][ T7346] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 89.994204][ T7357] can0: slcan on ttyS3. [ 90.003407][ T7358] loop3: detected capacity change from 0 to 512 [ 90.011868][ T7358] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.019444][ T7358] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1561: iget: bad extended attribute block 1 [ 90.032499][ T7358] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1561: couldn't read orphan inode 15 (err -117) [ 90.045965][ T7358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.068336][ T7357] can0 (unregistered): slcan off ttyS3. [ 90.081278][ T7363] can0: slcan on ttyS3. [ 90.088163][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.148221][ T7356] can0 (unregistered): slcan off ttyS3. [ 90.213476][ T7376] ipvlan2: entered promiscuous mode [ 90.221726][ T7376] bridge0: port 4(ipvlan2) entered blocking state [ 90.228327][ T7376] bridge0: port 4(ipvlan2) entered disabled state [ 90.235274][ T7376] ipvlan2: entered allmulticast mode [ 90.240748][ T7376] bridge0: entered allmulticast mode [ 90.248336][ T7376] ipvlan2: left allmulticast mode [ 90.253437][ T7376] bridge0: left allmulticast mode [ 90.283615][ T7380] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 90.284203][ T7382] loop7: detected capacity change from 0 to 128 [ 90.335181][ T7388] loop0: detected capacity change from 0 to 512 [ 90.342429][ T7388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.356397][ T7388] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1566: corrupted xattr block 19: overlapping e_value [ 90.371124][ T7388] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 90.400834][ T7393] loop0: detected capacity change from 0 to 512 [ 90.420246][ T7393] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.569675][ T7409] hub 9-0:1.0: USB hub found [ 90.574537][ T7409] hub 9-0:1.0: 8 ports detected [ 90.876722][ T7433] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 90.885602][ T7433] SELinux: failed to load policy [ 90.913090][ T7440] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1587'. [ 90.923418][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1587'. [ 91.060930][ T7465] SELinux: truncated policydb string identifier [ 91.061001][ T7465] SELinux: failed to load policy [ 91.165086][ T7470] loop0: detected capacity change from 0 to 2048 [ 91.209164][ T7470] loop0: p1 < > p4 [ 91.209629][ T7470] loop0: p4 size 8388608 extends beyond EOD, truncated [ 91.337240][ T3415] Process accounting resumed [ 91.443955][ T7497] loop3: detected capacity change from 0 to 128 [ 91.527733][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 91.527751][ T29] audit: type=1326 audit(1757669749.091:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.563230][ T7511] loop7: detected capacity change from 0 to 512 [ 91.563485][ T29] audit: type=1326 audit(1757669749.091:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.593296][ T29] audit: type=1326 audit(1757669749.091:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.616727][ T29] audit: type=1326 audit(1757669749.091:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.640364][ T29] audit: type=1326 audit(1757669749.091:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.663942][ T29] audit: type=1326 audit(1757669749.091:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.687435][ T29] audit: type=1326 audit(1757669749.091:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.711071][ T29] audit: type=1326 audit(1757669749.091:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.734505][ T29] audit: type=1326 audit(1757669749.101:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.758045][ T29] audit: type=1326 audit(1757669749.101:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 91.761589][ T7511] Invalid ELF header magic: != ELF [ 92.068317][ T7540] rdma_op ffff88811a185980 conn xmit_rdma 0000000000000000 [ 92.190947][ T7551] loop0: detected capacity change from 0 to 128 [ 92.210500][ T7554] loop5: detected capacity change from 0 to 512 [ 92.234822][ T7557] loop8: detected capacity change from 0 to 256 [ 92.247833][ T7554] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 92.261064][ T7554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 92.271712][ T7559] netlink: 212 bytes leftover after parsing attributes in process `syz.7.1636'. [ 92.288976][ T7554] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1634: corrupted in-inode xattr: e_value size too large [ 92.299940][ T7557] syz.8.1635: attempt to access beyond end of device [ 92.299940][ T7557] loop8: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 92.318798][ T7554] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1634: couldn't read orphan inode 15 (err -117) [ 92.345034][ T7557] syz.8.1635: attempt to access beyond end of device [ 92.345034][ T7557] loop8: rw=34817, sector=261, nr_sectors = 32 limit=256 [ 92.412506][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1643'. [ 92.441863][ T7581] loop7: detected capacity change from 0 to 764 [ 92.467020][ T7581] Symlink component flag not implemented [ 92.485451][ T7585] SELinux: unknown common r [ 92.490345][ T7585] SELinux: failed to load policy [ 92.491266][ T7581] Symlink component flag not implemented (129) [ 92.560583][ T7581] rock: directory entry would overflow storage [ 92.566835][ T7581] rock: sig=0x4f50, size=4, remaining=3 [ 92.572505][ T7581] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 92.706345][ T7618] loop7: detected capacity change from 0 to 512 [ 92.719178][ T7618] EXT4-fs (loop7): orphan cleanup on readonly fs [ 92.729465][ T7618] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1660: iget: bad extended attribute block 1 [ 92.758551][ T7618] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1660: couldn't read orphan inode 15 (err -117) [ 92.918970][ T7649] wireguard0: entered promiscuous mode [ 92.924570][ T7649] wireguard0: entered allmulticast mode [ 92.999529][ T7658] loop7: detected capacity change from 0 to 1024 [ 93.013252][ T7660] loop0: detected capacity change from 0 to 512 [ 93.029040][ T7658] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.1678: Allocating blocks 385-513 which overlap fs metadata [ 93.054697][ T7660] Invalid ELF header magic: != ELF [ 93.062936][ T7658] EXT4-fs (loop7): pa ffff8881071f2850: logic 16, phys. 129, len 24 [ 93.071086][ T7658] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 93.152172][ T7672] loop7: detected capacity change from 0 to 512 [ 93.162623][ T7672] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 93.177836][ T7677] netlink: 'syz.0.1685': attribute type 3 has an invalid length. [ 93.179585][ T7672] System zones: 0-7 [ 93.185710][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 93.200055][ T7679] ./file0: Can't open blockdev [ 93.245224][ T7683] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1688'. [ 93.321207][ T7698] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1695'. [ 93.346959][ T7700] netlink: 'syz.7.1696': attribute type 21 has an invalid length. [ 93.354921][ T7700] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1696'. [ 93.474737][ T7715] loop3: detected capacity change from 0 to 512 [ 93.487177][ T7715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 93.495446][ T7715] System zones: 0-7 [ 93.522067][ T7719] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1705'. [ 93.591936][ T7730] loop5: detected capacity change from 0 to 512 [ 93.604257][ T7734] loop3: detected capacity change from 0 to 4096 [ 93.681981][ T7730] Invalid ELF header magic: != ELF [ 93.691660][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1715'. [ 93.909317][ T7762] loop8: detected capacity change from 0 to 1024 [ 93.935986][ T7762] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.970407][ T7768] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.006015][ T7762] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1723: bg 0: block 393: padding at end of block bitmap is not set [ 94.037001][ T7762] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 94.050009][ T7762] EXT4-fs (loop8): This should not happen!! Data will be lost [ 94.050009][ T7762] [ 94.060006][ T7771] loop0: detected capacity change from 0 to 1024 [ 94.066875][ T7771] EXT4-fs: Ignoring removed orlov option [ 94.131548][ T7780] netlink: 'syz.0.1731': attribute type 10 has an invalid length. [ 94.141606][ T7780] batman_adv: batadv0: Adding interface: veth1_vlan [ 94.148356][ T7780] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.174595][ T7780] batman_adv: batadv0: Interface activated: veth1_vlan [ 94.319714][ T1036] IPVS: starting estimator thread 0... [ 94.365887][ T7804] loop0: detected capacity change from 0 to 512 [ 94.388983][ T7804] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 94.398180][ T7804] System zones: 0-7 [ 94.398557][ T7806] blk_print_req_error: 6 callbacks suppressed [ 94.398576][ T7806] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.418791][ T7800] IPVS: using max 2448 ests per chain, 122400 per kthread [ 94.429713][ T7806] FAT-fs (loop15): unable to read boot sector [ 94.465132][ T7813] netlink: 'syz.7.1747': attribute type 13 has an invalid length. [ 94.487152][ T31] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.497469][ T7813] netlink: 'syz.7.1747': attribute type 13 has an invalid length. [ 94.519158][ T31] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.537200][ T31] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.559639][ T31] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.574213][ T7822] bridge0: port 1(hsr_slave_1) entered blocking state [ 94.581181][ T7822] bridge0: port 1(hsr_slave_1) entered disabled state [ 94.599750][ T7822] hsr_slave_1: entered allmulticast mode [ 94.605965][ T7822] hsr_slave_1: left allmulticast mode [ 94.709346][ T7842] netlink: 'syz.7.1759': attribute type 1 has an invalid length. [ 94.713152][ T7835] loop5: detected capacity change from 0 to 512 [ 94.726961][ T7835] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 94.753561][ T7835] System zones: 0-7 [ 94.771864][ T7850] sctp: [Deprecated]: syz.7.1765 (pid 7850) Use of int in max_burst socket option deprecated. [ 94.771864][ T7850] Use struct sctp_assoc_value instead [ 94.859400][ T7858] vhci_hcd: invalid port number 11 [ 94.864671][ T7858] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 95.040064][ T7873] SELinux: failed to load policy [ 95.305899][ T7908] syzkaller1: entered promiscuous mode [ 95.311472][ T7908] syzkaller1: entered allmulticast mode [ 95.474637][ T7927] syzkaller1: entered promiscuous mode [ 95.480266][ T7927] syzkaller1: entered allmulticast mode [ 95.507129][ T7931] loop5: detected capacity change from 0 to 1024 [ 95.514684][ T7931] EXT4-fs: Ignoring removed orlov option [ 95.630518][ T7944] netlink: 'syz.7.1814': attribute type 10 has an invalid length. [ 95.641655][ T7946] 9pnet_fd: p9_fd_create_unix (7946): problem connecting socket: ./file0: -2 [ 95.651987][ T7944] batman_adv: batadv0: Adding interface: veth1_vlan [ 95.658653][ T7944] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.692367][ T7944] batman_adv: batadv0: Interface activated: veth1_vlan [ 95.719504][ T7950] wireguard0: entered promiscuous mode [ 95.725050][ T7950] wireguard0: entered allmulticast mode [ 95.772391][ T7961] loop7: detected capacity change from 0 to 1024 [ 95.788833][ T7964] loop3: detected capacity change from 0 to 1024 [ 95.796073][ T7961] EXT4-fs: Ignoring removed orlov option [ 95.810693][ T7964] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.918156][ T7964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1816: bg 0: block 393: padding at end of block bitmap is not set [ 95.918555][ T7976] loop5: detected capacity change from 0 to 1024 [ 95.959530][ T7980] 9pnet_fd: p9_fd_create_unix (7980): problem connecting socket: ./file0: -2 [ 95.986702][ T7976] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1819: Allocating blocks 385-513 which overlap fs metadata [ 96.023766][ T7964] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 96.036387][ T7964] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.036387][ T7964] [ 96.060989][ T7985] EXT4-fs (loop5): pa ffff8881072d52a0: logic 16, phys. 129, len 24 [ 96.069115][ T7985] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 96.185796][ T7993] netlink: 'syz.3.1823': attribute type 10 has an invalid length. [ 96.195002][ T7993] __nla_validate_parse: 6 callbacks suppressed [ 96.195018][ T7993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1823'. [ 96.212245][ T7993] batman_adv: batadv0: Adding interface: veth1_vlan [ 96.218970][ T7993] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.259748][ T7993] batman_adv: batadv0: Interface activated: veth1_vlan [ 96.320909][ T10] IPVS: starting estimator thread 0... [ 96.344262][ T8004] loop3: detected capacity change from 0 to 1024 [ 96.352171][ T8003] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 96.397372][ T8004] EXT4-fs: Ignoring removed orlov option [ 96.418798][ T8002] IPVS: using max 2304 ests per chain, 115200 per kthread [ 96.447970][ T8010] wireguard0: entered promiscuous mode [ 96.453607][ T8010] wireguard0: entered allmulticast mode [ 96.503097][ T8020] loop0: detected capacity change from 0 to 1024 [ 96.557578][ T8020] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.612729][ T8036] IPv6: Can't replace route, no match found [ 96.677648][ T8040] loop8: detected capacity change from 0 to 1024 [ 96.709706][ T8040] EXT4-fs: Ignoring removed orlov option [ 96.741667][ T8020] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1836: bg 0: block 393: padding at end of block bitmap is not set [ 96.768158][ T8020] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 96.780848][ T8020] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.780848][ T8020] [ 96.879967][ T8047] rdma_op ffff888124910580 conn xmit_rdma 0000000000000000 [ 97.076193][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 97.076214][ T29] audit: type=1326 audit(1757669754.641:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.132159][ T29] audit: type=1326 audit(1757669754.641:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.196974][ T29] audit: type=1326 audit(1757669754.731:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.220544][ T29] audit: type=1326 audit(1757669754.731:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.244293][ T29] audit: type=1326 audit(1757669754.731:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.268183][ T29] audit: type=1326 audit(1757669754.731:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.292381][ T29] audit: type=1326 audit(1757669754.731:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.316112][ T29] audit: type=1326 audit(1757669754.731:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.339616][ T29] audit: type=1326 audit(1757669754.731:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.363194][ T29] audit: type=1326 audit(1757669754.731:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 97.395244][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1858'. [ 97.405788][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1858'. [ 97.439610][ T8076] loop5: detected capacity change from 0 to 1024 [ 97.456672][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1872'. [ 97.466029][ T8078] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1872'. [ 97.477673][ T8076] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.529730][ T8076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1861: bg 0: block 393: padding at end of block bitmap is not set [ 97.544655][ T8076] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 97.557402][ T8076] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.557402][ T8076] [ 97.607885][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1867'. [ 97.612260][ T8092] loop0: detected capacity change from 0 to 512 [ 97.913066][ T8119] loop7: detected capacity change from 0 to 1024 [ 97.940940][ T8119] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.020261][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 98.032859][ T8139] bridge0: port 1(batadv1) entered blocking state [ 98.039415][ T8139] bridge0: port 1(batadv1) entered disabled state [ 98.046296][ T8139] batadv1: entered allmulticast mode [ 98.050231][ T8119] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1881: bg 0: block 393: padding at end of block bitmap is not set [ 98.053503][ T8139] batadv1: entered promiscuous mode [ 98.077423][ T8119] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 98.090051][ T8119] EXT4-fs (loop7): This should not happen!! Data will be lost [ 98.090051][ T8119] [ 98.141935][ T8145] loop0: detected capacity change from 0 to 2048 [ 98.170470][ T8149] loop7: detected capacity change from 0 to 512 [ 98.177216][ T8149] EXT4-fs: Ignoring removed oldalloc option [ 98.187637][ T8149] EXT4-fs: Ignoring removed bh option [ 98.195832][ T8149] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1893: corrupted in-inode xattr: e_value size too large [ 98.198930][ T8145] Alternate GPT is invalid, using primary GPT. [ 98.216220][ T8145] loop0: p1 p2 p3 [ 98.220421][ T8149] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1893: couldn't read orphan inode 15 (err -117) [ 98.304476][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'. [ 98.322133][ T8164] loop7: detected capacity change from 0 to 2048 [ 98.379694][ T8164] Alternate GPT is invalid, using primary GPT. [ 98.386088][ T8164] loop7: p2 p3 p7 [ 98.444387][ T8179] capability: warning: `syz.0.1907' uses 32-bit capabilities (legacy support in use) [ 98.513584][ T8188] loop0: detected capacity change from 0 to 1024 [ 98.538145][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 98.547468][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 98.574844][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1915'. [ 98.591488][ T8188] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1911: Allocating blocks 385-513 which overlap fs metadata [ 98.618929][ T8188] EXT4-fs (loop0): pa ffff8881071f27e0: logic 16, phys. 129, len 24 [ 98.626998][ T8188] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 98.732255][ T8220] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 98.880814][ T8244] loop8: detected capacity change from 0 to 1024 [ 98.916051][ T8244] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.996466][ T8244] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1934: bg 0: block 393: padding at end of block bitmap is not set [ 99.013906][ T8244] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 99.026617][ T8244] EXT4-fs (loop8): This should not happen!! Data will be lost [ 99.026617][ T8244] [ 99.090078][ T8251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.125241][ T8251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.206226][ T8269] loop7: detected capacity change from 0 to 512 [ 99.222052][ T8269] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 99.239544][ T8273] netlink: 'syz.8.1945': attribute type 10 has an invalid length. [ 99.253517][ T8273] team0: Port device dummy0 added [ 99.254604][ T8269] EXT4-fs (loop7): 1 truncate cleaned up [ 99.270499][ T8273] netlink: 'syz.8.1945': attribute type 10 has an invalid length. [ 99.281757][ T8273] team0: Port device dummy0 removed [ 99.291298][ T8273] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.364303][ T8288] loop3: detected capacity change from 0 to 512 [ 99.389450][ T8292] loop7: detected capacity change from 0 to 512 [ 99.396648][ T8292] EXT4-fs: Ignoring removed oldalloc option [ 99.403216][ T8288] EXT4-fs (loop3): too many log groups per flexible block group [ 99.410990][ T8288] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 99.418814][ T8288] EXT4-fs (loop3): mount failed [ 99.423728][ T8292] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 99.437425][ T8292] EXT4-fs (loop7): 1 truncate cleaned up [ 100.025439][ T8350] SELinux: ebitmap: truncated map [ 100.032742][ T8350] SELinux: failed to load policy [ 100.091148][ T8355] loop0: detected capacity change from 0 to 2048 [ 100.124339][ T8355] Alternate GPT is invalid, using primary GPT. [ 100.130884][ T8355] loop0: p2 p3 p7 [ 100.278455][ T8366] netlink: 'syz.7.1986': attribute type 10 has an invalid length. [ 100.299632][ T8366] team0: Port device dummy0 added [ 100.312054][ T8366] netlink: 'syz.7.1986': attribute type 10 has an invalid length. [ 100.340301][ T8368] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 100.350076][ T8366] team0: Port device dummy0 removed [ 100.357554][ T8366] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 100.420279][ T8372] loop0: detected capacity change from 0 to 1024 [ 100.429892][ T8372] EXT4-fs: Ignoring removed bh option [ 100.438731][ T8374] netlink: 'syz.7.1990': attribute type 1 has an invalid length. [ 100.447858][ T8372] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 100.464688][ T8374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.502857][ T8382] loop3: detected capacity change from 0 to 164 [ 100.509949][ T8382] iso9660: Unknown parameter '18446744073709551615ã)-Çô껑¡Bè' [ 100.529606][ T8374] bond2: (slave geneve2): making interface the new active one [ 100.552553][ T8374] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 100.621228][ T8392] loop7: detected capacity change from 0 to 2048 [ 100.679390][ T8392] Alternate GPT is invalid, using primary GPT. [ 100.685896][ T8392] loop7: p1 p2 p3 [ 100.849136][ T8416] SELinux: ebitmap: truncated map [ 100.873544][ T8416] SELinux: failed to load policy [ 100.902486][ T8424] netlink: 'syz.8.2012': attribute type 10 has an invalid length. [ 100.914693][ T8429] netlink: 'syz.0.2023': attribute type 10 has an invalid length. [ 100.923278][ T8424] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 100.940805][ T8429] team0: Port device dummy0 added [ 100.969453][ T8429] netlink: 'syz.0.2023': attribute type 10 has an invalid length. [ 100.989449][ T8429] team0: Port device dummy0 removed [ 101.005560][ T8429] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.219901][ T8459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.423946][ T8462] loop8: detected capacity change from 0 to 512 [ 101.452593][ T8462] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 101.480554][ T8462] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2029: invalid indirect mapped block 4294967295 (level 0) [ 101.515258][ T8462] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2029: invalid indirect mapped block 4294967295 (level 1) [ 101.607529][ T8462] EXT4-fs (loop8): 1 orphan inode deleted [ 101.613912][ T8462] EXT4-fs (loop8): 1 truncate cleaned up [ 101.795069][ T8474] loop5: detected capacity change from 0 to 1024 [ 101.820078][ T8474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 101.841567][ T8462] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.2029: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 101.864412][ T8474] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2034: bg 0: block 88: padding at end of block bitmap is not set [ 102.035045][ T8497] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 102.092324][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 102.092341][ T29] audit: type=1326 audit(1757669759.661:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 102.125591][ T8503] loop7: detected capacity change from 0 to 1024 [ 102.133280][ T8503] EXT4-fs: Ignoring removed bh option [ 102.139313][ T29] audit: type=1326 audit(1757669759.691:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 102.162807][ T29] audit: type=1326 audit(1757669759.691:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 102.186545][ T29] audit: type=1326 audit(1757669759.691:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 102.210225][ T29] audit: type=1326 audit(1757669759.691:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 102.233845][ T29] audit: type=1326 audit(1757669759.691:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 102.270043][ T8503] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.290621][ T8511] loop3: detected capacity change from 0 to 1024 [ 102.321243][ T8503] EXT4-fs mount: 58 callbacks suppressed [ 102.321307][ T8503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.339623][ T8511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.398839][ T8511] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 102.430841][ T5147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.450573][ T8524] loop5: detected capacity change from 0 to 512 [ 102.463550][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.477980][ T8524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.493640][ T29] audit: type=1400 audit(1757669760.061:2171): avc: denied { create } for pid=8523 comm="syz.5.2055" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 102.547997][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.589270][ T8541] loop3: detected capacity change from 0 to 512 [ 102.596219][ T8541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.616921][ T8541] EXT4-fs (loop3): 1 truncate cleaned up [ 102.624730][ T29] audit: type=1326 audit(1757669760.191:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.5.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 102.625707][ T8541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.661397][ T29] audit: type=1326 audit(1757669760.221:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.5.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 102.684971][ T29] audit: type=1326 audit(1757669760.221:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.5.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 102.686628][ T8541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.791397][ T8554] loop3: detected capacity change from 0 to 256 [ 102.862755][ T8566] loop3: detected capacity change from 0 to 1024 [ 102.885930][ T8570] loop5: detected capacity change from 0 to 1024 [ 102.892921][ T8570] EXT4-fs: Ignoring removed nobh option [ 102.898820][ T8570] EXT4-fs: Ignoring removed bh option [ 102.905359][ T8566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.924144][ T8566] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2072: Allocating blocks 385-513 which overlap fs metadata [ 102.942126][ T8570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.957946][ T8565] EXT4-fs (loop3): pa ffff8881071f27e0: logic 16, phys. 129, len 24 [ 102.966007][ T8565] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 102.992534][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.006438][ T8580] loop0: detected capacity change from 0 to 128 [ 103.020920][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.030603][ T8580] __nla_validate_parse: 3 callbacks suppressed [ 103.030617][ T8580] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2079'. [ 103.046159][ T8582] loop5: detected capacity change from 0 to 512 [ 103.047982][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2079'. [ 103.064387][ T8582] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 103.077063][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2079'. [ 103.086244][ T8580] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2079'. [ 103.095698][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2079'. [ 103.097956][ T8582] EXT4-fs (loop5): 1 truncate cleaned up [ 103.105069][ T8580] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2079'. [ 103.112309][ T8582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.132452][ T8582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.180205][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 103.300868][ T8609] tipc: Started in network mode [ 103.305911][ T8609] tipc: Node identity ac14140f, cluster identity 4711 [ 103.326659][ T8609] tipc: New replicast peer: 255.255.255.255 [ 103.332976][ T8609] tipc: Enabled bearer , priority 10 [ 103.342899][ T8613] loop8: detected capacity change from 0 to 128 [ 103.365709][ T8613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 103.379591][ T8613] System zones: 1-3, 19-19, 35-36 [ 103.396180][ T8613] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.421185][ T8613] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.461514][ T8613] EXT4-fs (loop8): shut down requested (0) [ 103.493413][ T5735] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.526352][ T8633] loop7: detected capacity change from 0 to 512 [ 103.536294][ T8635] netlink: 'syz.5.2104': attribute type 1 has an invalid length. [ 103.545373][ T8633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.565581][ T8635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.592337][ T8633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.604378][ T8644] bond2: (slave geneve0): making interface the new active one [ 103.615572][ T8644] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 103.646368][ T8633] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.663536][ T8633] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.2113: corrupted xattr block 19: overlapping e_value [ 103.682504][ T8633] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 103.692058][ T8633] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.2113: corrupted xattr block 19: overlapping e_value [ 103.715772][ T8633] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 103.731670][ T8633] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.2113: corrupted xattr block 19: overlapping e_value [ 103.779116][ T5147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.023986][ T8671] loop8: detected capacity change from 0 to 1024 [ 104.053658][ T8671] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 104.064277][ T8679] loop5: detected capacity change from 0 to 256 [ 104.124063][ T8671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.161806][ T8693] loop0: detected capacity change from 0 to 512 [ 104.168781][ T8693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.198695][ T8693] EXT4-fs (loop0): filesystem is read-only [ 104.218993][ T8693] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 104.238547][ T8693] EXT4-fs (loop0): filesystem is read-only [ 104.244463][ T8693] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.253227][ T8699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.255594][ T8693] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.2128: iget: bad i_size value: 648518346341360424 [ 104.273481][ T8693] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2128: couldn't read orphan inode 16 (err -117) [ 104.307432][ T8703] bond1: (slave geneve2): making interface the new active one [ 104.328243][ T36] tipc: Node number set to 2886997007 [ 104.339957][ T8693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.359947][ T8703] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.369003][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.411322][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.464616][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 104.497895][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 104.518037][ T8715] SELinux: failed to load policy [ 104.617813][ T8740] loop5: detected capacity change from 0 to 1024 [ 104.668679][ T8740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.719870][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.972069][ T8767] loop7: detected capacity change from 0 to 128 [ 104.998008][ T8767] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2158'. [ 105.071185][ T8773] loop5: detected capacity change from 0 to 2048 [ 105.111984][ T8773] loop5: p1 < > p4 [ 105.145336][ T8773] loop5: p4 size 8388608 extends beyond EOD, truncated [ 105.196218][ T8784] SELinux: Context Ü is not valid (left unmapped). [ 105.203397][ T8784] SELinux: Context attr/f is not valid (left unmapped). [ 105.274065][ T8785] validate_nla: 1 callbacks suppressed [ 105.274085][ T8785] netlink: 'syz.3.2168': attribute type 4 has an invalid length. [ 105.298651][ T8785] netlink: 'syz.3.2168': attribute type 4 has an invalid length. [ 105.354102][ T8791] netlink: 'syz.5.2171': attribute type 30 has an invalid length. [ 105.708064][ T8829] loop3: detected capacity change from 0 to 1024 [ 105.732264][ T8829] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 105.744810][ T8735] syz.8.2147 (8735) used greatest stack depth: 7336 bytes left [ 105.760733][ T8829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.896206][ T8848] loop8: detected capacity change from 0 to 2048 [ 105.919632][ T8848] EXT4-fs: inline encryption not supported [ 105.949044][ T8848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.983464][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.996065][ T8848] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.2197: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 106.026719][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.103163][ T8866] netlink: 'syz.8.2205': attribute type 30 has an invalid length. [ 106.130468][ T8871] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 106.159833][ T8874] netlink: 'syz.0.2208': attribute type 6 has an invalid length. [ 106.341481][ T8908] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8908 comm=syz.0.2224 [ 106.625917][ T8934] loop8: detected capacity change from 0 to 1024 [ 106.632938][ T8934] EXT4-fs: Ignoring removed bh option [ 106.638476][ T8934] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.645341][ T8934] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 106.670704][ T8934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.697823][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.835046][ T8948] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 106.892106][ T8953] loop5: detected capacity change from 0 to 512 [ 106.899285][ T8953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.920440][ T8953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.956438][ T8953] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.975232][ T8953] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2244: corrupted xattr block 19: overlapping e_value [ 106.990050][ T8953] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 106.999222][ T8953] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2244: corrupted xattr block 19: overlapping e_value [ 107.018137][ T8953] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 107.034741][ T8953] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2244: corrupted xattr block 19: overlapping e_value [ 107.064412][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.115372][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 107.115388][ T29] audit: type=1400 audit(1757669764.681:2427): avc: denied { mount } for pid=8971 comm="syz.3.2252" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.154123][ T8974] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.165183][ T29] audit: type=1326 audit(1757669764.731:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.188765][ T29] audit: type=1326 audit(1757669764.731:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.212554][ T29] audit: type=1326 audit(1757669764.731:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.236136][ T29] audit: type=1326 audit(1757669764.731:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.259634][ T29] audit: type=1326 audit(1757669764.731:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.283063][ T29] audit: type=1326 audit(1757669764.741:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.307269][ T29] audit: type=1326 audit(1757669764.741:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.330773][ T29] audit: type=1326 audit(1757669764.741:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.354477][ T29] audit: type=1326 audit(1757669764.741:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8975 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 107.419023][ T8985] loop5: detected capacity change from 0 to 1024 [ 107.426112][ T8985] EXT4-fs: Ignoring removed i_version option [ 107.438812][ T8985] EXT4-fs: Ignoring removed orlov option [ 107.463224][ T8985] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.477196][ T8987] SELinux: failed to load policy [ 107.491992][ T8985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.513702][ T8995] pim6reg: entered allmulticast mode [ 107.533690][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.555398][ T8995] pim6reg: left allmulticast mode [ 107.640964][ T9011] tls_set_device_offload_rx: netdev not found [ 107.772232][ T9021] SELinux: ebitmap: truncated map [ 107.784084][ T9026] loop5: detected capacity change from 0 to 1024 [ 107.810398][ T9021] SELinux: failed to load policy [ 107.831911][ T9026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.864165][ T9026] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 107.876617][ T9026] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.876617][ T9026] [ 107.886528][ T9026] EXT4-fs (loop5): Total free blocks count 0 [ 107.892861][ T9026] EXT4-fs (loop5): Free/Dirty block details [ 107.899017][ T9026] EXT4-fs (loop5): free_blocks=0 [ 107.903976][ T9026] EXT4-fs (loop5): dirty_blocks=0 [ 107.909142][ T9026] EXT4-fs (loop5): Block reservation details [ 107.915177][ T9026] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 107.966318][ T9047] loop8: detected capacity change from 0 to 512 [ 107.976256][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.994564][ T9047] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2287: Invalid inode bitmap blk 4 in block_group 0 [ 108.007837][ T9047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.053112][ T9047] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 108.073998][ T9043] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 108.082530][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.127613][ T9056] pimreg: entered allmulticast mode [ 108.134392][ T4323] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.143447][ T4323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.153428][ T4323] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.162520][ T4323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.171664][ T9056] pimreg: left allmulticast mode [ 108.171842][ T9050] Falling back ldisc for ttyS3. [ 108.195880][ T4323] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.205557][ T4323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.218407][ T4323] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.227368][ T4323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.281402][ T9067] loop7: detected capacity change from 0 to 1024 [ 108.293880][ T9067] EXT4-fs: Ignoring removed bh option [ 108.299396][ T9067] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.308169][ T9067] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.330886][ T9067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.359894][ T5147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.437723][ T9090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.455927][ T9094] loop5: detected capacity change from 0 to 512 [ 108.470855][ T9094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.484194][ T9094] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.534390][ T9102] loop0: detected capacity change from 0 to 2048 [ 108.588847][ T9102] loop0: p1 < > p4 [ 108.593523][ T9102] loop0: p4 size 8388608 extends beyond EOD, truncated [ 108.606746][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.688962][ T9114] loop5: detected capacity change from 0 to 1024 [ 108.704879][ T9114] EXT4-fs: Ignoring removed bh option [ 108.710419][ T9114] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.724261][ T9120] loop0: detected capacity change from 0 to 128 [ 108.732366][ T9120] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.746392][ T9114] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.756830][ T9120] ext4 filesystem being mounted at /516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.813779][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.841804][ T9114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.881509][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.033708][ T9149] batadv2: entered promiscuous mode [ 109.276512][ T9197] __nla_validate_parse: 18 callbacks suppressed [ 109.276567][ T9197] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2354'. [ 109.276758][ T9199] netlink: 'syz.3.2353': attribute type 21 has an invalid length. [ 109.299965][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 109.313069][ T9199] netlink: 'syz.3.2353': attribute type 21 has an invalid length. [ 109.320983][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 109.371815][ T9211] pimreg: entered allmulticast mode [ 109.381169][ T9209] SELinux: failed to load policy [ 109.403580][ T9211] pimreg: left allmulticast mode [ 109.476717][ T9215] loop0: detected capacity change from 0 to 2048 [ 109.494579][ T9221] loop3: detected capacity change from 0 to 1024 [ 109.511681][ T9221] EXT4-fs: Ignoring removed i_version option [ 109.527276][ T9221] EXT4-fs: Ignoring removed orlov option [ 109.541131][ T9215] EXT4-fs (loop0): failed to initialize system zone (-117) [ 109.550006][ T9221] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.583617][ T9215] EXT4-fs (loop0): mount failed [ 109.602623][ T9221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.706498][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.805995][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.813255][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.992057][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.042015][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.093523][ T9278] loop8: detected capacity change from 0 to 1024 [ 110.108569][ T9278] EXT4-fs: Ignoring removed i_version option [ 110.119069][ T9278] EXT4-fs: Ignoring removed orlov option [ 110.130677][ T9252] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 110.139616][ T9278] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.161127][ T9278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.198148][ T4352] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.207099][ T4352] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.246634][ T4352] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.255643][ T4352] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.264917][ T4352] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.273950][ T4352] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.284044][ T4352] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.293150][ T4352] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.320430][ T9289] loop3: detected capacity change from 0 to 512 [ 110.350473][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.363305][ T9289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.426469][ T9289] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.596030][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.906493][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.913839][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.974046][ T9335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.985555][ T9335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.032333][ T4323] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.058162][ T4323] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.069465][ T9345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.077984][ T4323] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.098385][ T9347] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2409'. [ 111.119514][ T4323] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.207459][ T9356] SELinux: failed to load policy [ 111.398605][ T9381] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2421'. [ 111.412807][ T9382] loop0: detected capacity change from 0 to 512 [ 111.412859][ T9378] loop7: detected capacity change from 0 to 8192 [ 111.426820][ T9382] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2422: Invalid inode bitmap blk 4 in block_group 0 [ 111.442362][ T9382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.465894][ T9390] loop5: detected capacity change from 0 to 128 [ 111.467763][ T9382] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 111.474397][ T9378] loop7: p1 p2 < > p3 p4 < p5 > [ 111.485384][ T9378] loop7: partition table partially beyond EOD, truncated [ 111.493090][ T9378] loop7: p1 size 100663296 extends beyond EOD, truncated [ 111.512733][ T9378] loop7: p2 start 591104 is beyond EOD, truncated [ 111.519282][ T9378] loop7: p3 start 33572980 is beyond EOD, truncated [ 111.535737][ T9378] loop7: p5 size 100663296 extends beyond EOD, truncated [ 111.562777][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.592393][ T9401] siw: device registration error -23 [ 111.602676][ T9404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.620498][ T9405] netlink: 'syz.0.2429': attribute type 10 has an invalid length. [ 111.628525][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2429'. [ 111.645469][ T9405] dummy0: entered promiscuous mode [ 111.654321][ T9405] bond0: (slave dummy0): Releasing backup interface [ 111.665265][ T9405] bridge0: port 2(dummy0) entered blocking state [ 111.671852][ T9405] bridge0: port 2(dummy0) entered disabled state [ 111.681608][ T9405] dummy0: entered allmulticast mode [ 111.692959][ T9404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.734630][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'. [ 111.743861][ T9421] loop0: detected capacity change from 0 to 512 [ 111.772455][ T9421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.801182][ T9404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.811002][ T9421] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.896485][ T9431] loop3: detected capacity change from 0 to 8192 [ 111.920873][ T9404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.932834][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.980137][ T9431] loop3: p1 p2 < > p3 p4 < p5 > [ 111.985134][ T9431] loop3: partition table partially beyond EOD, truncated [ 111.993076][ T9431] loop3: p1 size 100663296 extends beyond EOD, truncated [ 111.996425][ T9443] SELinux: failed to load policy [ 112.003579][ T9431] loop3: p2 start 591104 is beyond EOD, truncated [ 112.011989][ T9431] loop3: p3 start 33572980 is beyond EOD, truncated [ 112.028553][ T4323] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.048423][ T4323] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.065665][ T9431] loop3: p5 size 100663296 extends beyond EOD, truncated [ 112.085467][ T4323] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.115237][ T4323] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.228583][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 112.228662][ T29] audit: type=1400 audit(1757669769.791:2603): avc: denied { write } for pid=9448 comm="syz.0.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.313165][ T9452] SELinux: failed to load policy [ 112.436797][ T29] audit: type=1400 audit(1757669770.001:2604): avc: denied { read } for pid=9455 comm="syz.7.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.560299][ T29] audit: type=1400 audit(1757669770.131:2605): avc: denied { kexec_image_load } for pid=9466 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 112.582883][ T9469] loop3: detected capacity change from 0 to 128 [ 112.589816][ T9469] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.605833][ T29] audit: type=1326 audit(1757669770.171:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.5.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 112.630820][ T29] audit: type=1326 audit(1757669770.171:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.5.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 112.654504][ T9469] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.654521][ T29] audit: type=1326 audit(1757669770.171:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.5.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 112.687110][ T29] audit: type=1326 audit(1757669770.171:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.5.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 112.710602][ T29] audit: type=1326 audit(1757669770.201:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.5.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x7ffc0000 [ 112.760327][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2463'. [ 112.769430][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2463'. [ 112.781860][ T4334] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.845782][ T29] audit: type=1326 audit(1757669770.411:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.7.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da63ceba9 code=0x7ffc0000 [ 112.869512][ T29] audit: type=1326 audit(1757669770.411:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.7.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da63ceba9 code=0x7ffc0000 [ 112.947370][ T9499] netlink: 'syz.3.2474': attribute type 22 has an invalid length. [ 112.955372][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 113.018604][ T9499] netlink: 'syz.3.2474': attribute type 22 has an invalid length. [ 113.256361][ T9538] loop5: detected capacity change from 0 to 512 [ 113.294278][ T9538] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2494: Invalid inode bitmap blk 4 in block_group 0 [ 113.344546][ T9538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.369495][ T9553] loop7: detected capacity change from 0 to 128 [ 113.390792][ T9553] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 113.415333][ T9553] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.443408][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.497410][ T5147] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.664418][ T9591] loop0: detected capacity change from 0 to 1024 [ 113.671611][ T9591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.680480][ T9591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 113.688824][ T9591] System zones: 0-1, 3-36 [ 113.697486][ T9591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.734658][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.783965][ T9597] netlink: 'syz.0.2518': attribute type 16 has an invalid length. [ 113.797671][ T9597] gretap0: left promiscuous mode [ 113.817130][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.826644][ T9597] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.838569][ T9597] bridge0: port 2(dummy0) entered blocking state [ 113.845281][ T9597] bridge0: port 2(dummy0) entered forwarding state [ 113.857503][ T9597] 0ªX¹¦À: left allmulticast mode [ 113.862929][ T9597] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 114.161565][ T9607] loop8: detected capacity change from 0 to 256 [ 114.183264][ T9607] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.220663][ T9607] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.517629][ T9625] __nla_validate_parse: 10 callbacks suppressed [ 114.517649][ T9625] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2532'. [ 114.614519][ T9634] loop0: detected capacity change from 0 to 1024 [ 114.621423][ T9634] EXT4-fs: Ignoring removed orlov option [ 114.627303][ T9634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.656653][ T9634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.687746][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.807045][ T9661] loop5: detected capacity change from 0 to 1024 [ 114.818131][ T9661] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.829235][ T9661] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.840092][ T9661] JBD2: no valid journal superblock found [ 114.846135][ T9661] EXT4-fs (loop5): Could not load journal inode [ 114.870138][ T9661] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 114.921571][ T9668] bridge0: port 3(dummy0) entered disabled state [ 114.928123][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.935377][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.970699][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.980678][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.997098][ T9668] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 115.044600][ T4352] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.053976][ T4352] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.080578][ T4352] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.089649][ T4352] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.103894][ T4352] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.112972][ T4352] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.124530][ T4352] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.133506][ T4352] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.194055][ T9695] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 115.194055][ T9695] program syz.7.2560 not setting count and/or reply_len properly [ 115.378727][ T9716] usb usb1: usbfs: process 9716 (syz.8.2568) did not claim interface 4 before use [ 115.439171][ T9718] loop8: detected capacity change from 0 to 512 [ 115.445737][ T9718] EXT4-fs: Ignoring removed oldalloc option [ 115.467377][ T9718] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 115.513111][ T9727] loop0: detected capacity change from 0 to 128 [ 115.521717][ T9718] EXT4-fs (loop8): 1 truncate cleaned up [ 115.575025][ T9727] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.842740][ T9774] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 115.842740][ T9774] program syz.3.2594 not setting count and/or reply_len properly [ 115.885074][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.894988][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.991729][ T9884] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2645'. [ 117.007144][ T9884] hsr_slave_0: left promiscuous mode [ 117.022651][ T9884] hsr_slave_1: left promiscuous mode [ 117.042052][ T10] syz1: Port: 1 Link DOWN [ 117.042094][ T4352] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.064921][ T9889] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2647'. [ 117.073953][ T4352] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.088483][ T4352] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.111943][ T4352] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.209955][ T9910] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.2657'. [ 117.239618][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 117.239635][ T29] audit: type=1326 audit(1757669774.811:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.5.2660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe0692eba9 code=0x0 [ 117.269471][ T29] audit: type=1400 audit(1757669774.811:2913): avc: denied { read write } for pid=5735 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.295224][ T29] audit: type=1400 audit(1757669774.841:2914): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.322172][ T29] audit: type=1400 audit(1757669774.861:2915): avc: denied { create } for pid=9919 comm="syz.8.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 117.342013][ T29] audit: type=1400 audit(1757669774.861:2916): avc: denied { create } for pid=9919 comm="syz.8.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 117.361895][ T29] audit: type=1400 audit(1757669774.861:2917): avc: denied { read write } for pid=9919 comm="syz.8.2661" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.388144][ T29] audit: type=1400 audit(1757669774.891:2918): avc: denied { prog_load } for pid=9918 comm="syz.0.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.407549][ T29] audit: type=1400 audit(1757669774.911:2919): avc: denied { read write } for pid=5735 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.431979][ T29] audit: type=1400 audit(1757669774.951:2920): avc: denied { allowed } for pid=9915 comm="syz.5.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 117.456266][ T29] audit: type=1400 audit(1757669774.961:2921): avc: denied { prog_load } for pid=9918 comm="syz.0.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.617914][ T9952] netlink: 'syz.7.2677': attribute type 21 has an invalid length. [ 117.625930][ T9952] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2677'. [ 118.700140][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2743'. [ 118.709197][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2743'. [ 121.128329][T10482] netlink: 'syz.5.2933': attribute type 3 has an invalid length. [ 121.138359][T10482] netlink: 'syz.5.2933': attribute type 3 has an invalid length. [ 121.869665][T10605] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2995'. [ 121.888517][T10605] 1ªX¹¦À: renamed from 60ªX¹¦À [ 121.907921][T10605] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 122.050472][T10638] netlink: 'syz.0.3010': attribute type 3 has an invalid length. [ 122.073313][T10638] netlink: 'syz.0.3010': attribute type 3 has an invalid length. [ 122.250939][ T29] kauditd_printk_skb: 1432 callbacks suppressed [ 122.250958][ T29] audit: type=1400 audit(1757669779.821:4354): avc: denied { map_create } for pid=10663 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.257947][T10668] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3025'. [ 122.285689][T10668] netem: unknown loss type 0 [ 122.290419][T10668] netem: change failed [ 122.294587][T10666] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.310537][ T29] audit: type=1400 audit(1757669779.821:4355): avc: denied { prog_load } for pid=10664 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.329769][ T29] audit: type=1400 audit(1757669779.851:4356): avc: denied { prog_load } for pid=10663 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.348945][ T29] audit: type=1400 audit(1757669779.851:4357): avc: denied { prog_load } for pid=10663 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.368175][ T29] audit: type=1400 audit(1757669779.851:4358): avc: denied { open } for pid=10663 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.387727][ T29] audit: type=1400 audit(1757669779.851:4359): avc: denied { prog_load } for pid=10665 comm="syz.5.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.406947][ T29] audit: type=1400 audit(1757669779.851:4360): avc: denied { prog_load } for pid=10665 comm="syz.5.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.426393][ T29] audit: type=1400 audit(1757669779.871:4361): avc: denied { read write } for pid=5735 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.450701][ T29] audit: type=1400 audit(1757669779.881:4362): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.496652][ T29] audit: type=1400 audit(1757669779.941:4363): avc: denied { create } for pid=10671 comm="syz.3.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 122.506565][T10681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10681 comm=syz.5.3030 [ 123.097388][T10785] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 123.393449][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3101'. [ 124.044226][T10879] netlink: 'GPL': attribute type 4 has an invalid length. [ 124.300820][T10919] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 124.307395][T10919] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.315085][T10919] vhci_hcd vhci_hcd.0: Device attached [ 124.329570][T10920] vhci_hcd: connection closed [ 124.330118][ T3407] Process accounting resumed [ 124.339594][ T4352] vhci_hcd: stop threads [ 124.343951][ T4352] vhci_hcd: release socket [ 124.348440][ T4352] vhci_hcd: disconnect device [ 126.006582][T11096] veth3: entered promiscuous mode [ 126.334754][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3258'. [ 126.367082][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3260'. [ 126.417417][T11163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11163 comm=syz.0.3261 [ 127.262559][ T29] kauditd_printk_skb: 1205 callbacks suppressed [ 127.262578][ T29] audit: type=1400 audit(1757669784.831:5569): avc: denied { prog_load } for pid=11251 comm="syz.7.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.297564][ T29] audit: type=1400 audit(1757669784.861:5570): avc: denied { map_create } for pid=11253 comm="syz.8.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.316976][ T29] audit: type=1400 audit(1757669784.861:5571): avc: denied { prog_load } for pid=11251 comm="syz.7.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.336442][ T29] audit: type=1400 audit(1757669784.861:5572): avc: denied { create } for pid=11251 comm="syz.7.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 127.357222][ T29] audit: type=1400 audit(1757669784.861:5573): avc: denied { prog_load } for pid=11253 comm="syz.8.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.376455][ T29] audit: type=1400 audit(1757669784.861:5574): avc: denied { prog_load } for pid=11253 comm="syz.8.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.395641][ T29] audit: type=1400 audit(1757669784.861:5575): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.435414][ T29] audit: type=1326 audit(1757669784.871:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.8.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202574eba9 code=0x7ffc0000 [ 127.459101][ T29] audit: type=1326 audit(1757669784.871:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.8.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f202574eba9 code=0x7ffc0000 [ 127.482816][ T29] audit: type=1326 audit(1757669784.871:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.8.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202574eba9 code=0x7ffc0000 [ 128.732931][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'. [ 129.033649][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3427'. [ 129.167380][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3441'. [ 129.476518][T11601] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3470'. [ 129.800517][T11654] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3493'. [ 129.878332][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3500'. [ 129.887455][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 129.896630][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3500'. [ 129.906385][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 129.915592][T11667] netlink: 'syz.3.3500': attribute type 6 has an invalid length. [ 130.241664][T11742] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 130.248338][T11742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.255924][T11742] vhci_hcd vhci_hcd.0: Device attached [ 130.299003][T11742] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 130.305577][T11742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.313292][T11742] vhci_hcd vhci_hcd.0: Device attached [ 130.353167][T11742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 130.376600][T11742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 130.389029][T11742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 130.410287][T11742] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 130.417014][T11742] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.424777][T11742] vhci_hcd vhci_hcd.0: Device attached [ 130.435462][T11773] vhci_hcd: connection closed [ 130.435647][ T4323] vhci_hcd: stop threads [ 130.437299][T11743] vhci_hcd: connection closed [ 130.440431][ T4323] vhci_hcd: release socket [ 130.453835][ T4323] vhci_hcd: disconnect device [ 130.459543][T11752] vhci_hcd: connection closed [ 130.468130][ T4323] vhci_hcd: stop threads [ 130.477095][ T4323] vhci_hcd: release socket [ 130.481720][ T4323] vhci_hcd: disconnect device [ 130.486837][ T4323] vhci_hcd: stop threads [ 130.491178][ T4323] vhci_hcd: release socket [ 130.495621][ T4323] vhci_hcd: disconnect device [ 130.508159][ T3386] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 130.515624][ T3386] usb 7-1: enqueue for inactive port 0 [ 130.521416][ T3386] usb 7-1: enqueue for inactive port 0 [ 130.527425][ T3386] usb 7-1: enqueue for inactive port 0 [ 130.598115][ T3386] vhci_hcd: vhci_device speed not set [ 130.993274][T11796] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.043415][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3562'. [ 131.332759][T11825] $Hÿ: renamed from .` [ 131.346295][T11825] $Hÿ: entered promiscuous mode [ 131.351419][T11825] bond_slave_0: entered promiscuous mode [ 131.357219][T11825] bond_slave_1: entered promiscuous mode [ 131.405604][T11836] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 131.590603][T11867] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 131.786131][T11904] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 131.891077][T11914] ipvlan2: entered promiscuous mode [ 131.896898][T11914] bridge0: port 3(ipvlan2) entered blocking state [ 131.903493][T11914] bridge0: port 3(ipvlan2) entered disabled state [ 131.910213][T11914] ipvlan2: entered allmulticast mode [ 131.915614][T11914] bridge0: entered allmulticast mode [ 131.921668][T11914] ipvlan2: left allmulticast mode [ 131.926886][T11914] bridge0: left allmulticast mode [ 132.072928][T11948] netlink: 'syz.7.3634': attribute type 3 has an invalid length. [ 132.080867][T11948] netlink: 'syz.7.3634': attribute type 4 has an invalid length. [ 132.272164][ T29] kauditd_printk_skb: 1435 callbacks suppressed [ 132.272181][ T29] audit: type=1400 audit(1757669789.841:7014): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.307033][ T29] audit: type=1326 audit(1757669789.871:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.3.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 132.334044][ T29] audit: type=1400 audit(1757669789.871:7016): avc: denied { read write } for pid=3726 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.358400][ T29] audit: type=1326 audit(1757669789.881:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 132.381986][ T29] audit: type=1326 audit(1757669789.881:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 132.405764][ T29] audit: type=1326 audit(1757669789.891:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11959 comm="syz.3.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7648fada9 code=0x7ffc0000 [ 132.429317][ T29] audit: type=1326 audit(1757669789.891:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11959 comm="syz.3.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 132.453867][ T29] audit: type=1326 audit(1757669789.891:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11959 comm="syz.3.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76495eba9 code=0x7ffc0000 [ 132.477669][ T29] audit: type=1326 audit(1757669789.901:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 132.501281][ T29] audit: type=1400 audit(1757669789.901:7023): avc: denied { map_create } for pid=11990 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.533606][T12003] tun0: tun_chr_ioctl cmd 1074025675 [ 132.539096][T12003] tun0: persist disabled [ 132.627772][T12024] binfmt_misc: register: failed to install interpreter file ./file2 [ 132.950262][T12082] sch_fq: defrate 4294967295 ignored. [ 133.029792][T12093] netlink: 'syz.5.3701': attribute type 21 has an invalid length. [ 133.037837][T12093] netlink: 'syz.5.3701': attribute type 1 has an invalid length. [ 133.115459][T12101] bridge: RTM_NEWNEIGH with invalid ether address [ 133.901700][T12183] batman_adv: batadv0: Removing interface: veth1_vlan [ 134.459112][T12204] __nla_validate_parse: 4 callbacks suppressed [ 134.459173][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 134.477292][T12206] netlink: 'syz.7.3755': attribute type 4 has an invalid length. [ 134.485267][T12206] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3755'. [ 134.577329][T12221] loop8: detected capacity change from 0 to 164 [ 134.587920][T12221] syz.8.3762: attempt to access beyond end of device [ 134.587920][T12221] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.601978][T12221] syz.8.3762: attempt to access beyond end of device [ 134.601978][T12221] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.713530][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3769'. [ 134.779145][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.787701][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.837651][T12229] chnl_net:caif_netlink_parms(): no params data found [ 134.878245][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.885444][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.892846][T12229] bridge_slave_0: entered allmulticast mode [ 134.899832][T12229] bridge_slave_0: entered promiscuous mode [ 134.909381][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.916574][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.923907][T12229] bridge_slave_1: entered allmulticast mode [ 134.930715][T12229] bridge_slave_1: entered promiscuous mode [ 134.956927][ T4352] bridge_slave_1: left allmulticast mode [ 134.962688][ T4352] bridge_slave_1: left promiscuous mode [ 134.968419][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.976718][ T4352] bridge_slave_0: left allmulticast mode [ 134.982420][ T4352] bridge_slave_0: left promiscuous mode [ 134.988220][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.011519][ T4352] bond2 (unregistering): (slave geneve2): Releasing active interface [ 135.071137][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.080643][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.090310][ T4352] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 135.099036][ T4352] bond0 (unregistering): Released all slaves [ 135.107357][ T4352] bond1 (unregistering): Released all slaves [ 135.115907][ T4352] bond2 (unregistering): Released all slaves [ 135.125469][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.136195][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.145727][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3774'. [ 135.154709][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3774'. [ 135.163715][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3774'. [ 135.172822][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3774'. [ 135.181824][T12259] netlink: 'syz.0.3774': attribute type 6 has an invalid length. [ 135.203465][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.211389][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.218878][ T4352] batman_adv: batadv0: Removing interface: veth1_vlan [ 135.249061][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 135.259098][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 135.292146][T12229] team0: Port device team_slave_0 added [ 135.298124][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3776'. [ 135.307999][T12229] team0: Port device team_slave_1 added [ 135.333102][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.340176][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.366231][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.378173][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.385155][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.411178][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.446712][T12229] hsr_slave_0: entered promiscuous mode [ 135.453308][T12229] hsr_slave_1: entered promiscuous mode [ 135.568804][T12229] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 135.579990][T12229] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 135.589530][T12229] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 135.600849][T12229] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 135.624366][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.631612][T12229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.639024][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.646132][T12229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.684244][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.699364][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.707470][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.720644][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.752870][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.760099][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.773587][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.780723][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.799643][T12229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.810241][T12229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.884548][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.020584][T12302] loop0: detected capacity change from 0 to 128 [ 136.148036][T12315] netlink: 'syz.0.3789': attribute type 10 has an invalid length. [ 136.156126][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3789'. [ 136.169121][T12315] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3789'. [ 136.222213][T12229] veth0_vlan: entered promiscuous mode [ 136.237706][T12229] veth1_vlan: entered promiscuous mode [ 136.279344][T12229] veth0_macvtap: entered promiscuous mode [ 136.301363][T12229] veth1_macvtap: entered promiscuous mode [ 136.324960][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.344877][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.392577][ T4323] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.401514][ T4323] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.419184][ T4323] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.506233][ T4323] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.683772][T12350] netlink: 'syz.5.3802': attribute type 21 has an invalid length. [ 136.740078][T12356] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.155165][T12368] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.253740][T12374] loop8: detected capacity change from 0 to 512 [ 137.281286][T12374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.291375][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 137.291394][ T29] audit: type=1326 audit(1757669794.861:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a308d5b67 code=0x7ffc0000 [ 137.359789][T12374] EXT4-fs mount: 4 callbacks suppressed [ 137.359867][T12374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.370256][ T29] audit: type=1326 audit(1757669794.861:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a3087ada9 code=0x7ffc0000 [ 137.401700][ T29] audit: type=1326 audit(1757669794.861:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a308d5b67 code=0x7ffc0000 [ 137.425537][ T29] audit: type=1326 audit(1757669794.861:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a3087ada9 code=0x7ffc0000 [ 137.449307][ T29] audit: type=1326 audit(1757669794.861:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 137.473075][ T29] audit: type=1326 audit(1757669794.871:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 137.496854][ T29] audit: type=1326 audit(1757669794.871:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 137.520484][ T29] audit: type=1326 audit(1757669794.871:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 137.544091][ T29] audit: type=1326 audit(1757669794.871:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 137.567662][ T29] audit: type=1326 audit(1757669794.871:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.0.3815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a308deba9 code=0x7ffc0000 [ 137.591912][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.599669][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.607342][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.615040][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.622503][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 137.635581][T12374] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.651428][T12374] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.3814: corrupted xattr block 19: overlapping e_value [ 137.666369][T12374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 137.694886][T12374] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.3814: corrupted xattr block 19: overlapping e_value [ 137.710506][T12374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 137.726623][T12374] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.3814: corrupted xattr block 19: overlapping e_value [ 137.794270][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.851518][T12409] sctp: [Deprecated]: syz.8.3825 (pid 12409) Use of int in maxseg socket option. [ 137.851518][T12409] Use struct sctp_assoc_value instead [ 137.951463][T12419] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 138.588303][T12481] loop9: detected capacity change from 0 to 512 [ 138.655423][T12481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.706523][T12481] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.731622][T12491] SELinux: ebitmap: truncated map [ 138.752201][T12491] SELinux: failed to load policy [ 138.873247][T12229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.002027][T12514] loop9: detected capacity change from 0 to 4096 [ 139.047809][T12514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.152342][T12229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.250718][T12534] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 139.409873][T12556] netlink: 'syz.5.3894': attribute type 1 has an invalid length. [ 139.426075][T12556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.626733][T12573] SELinux: failed to load policy [ 139.700626][T12582] program syz.8.3905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.711629][T12582] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.757413][T12586] loop8: detected capacity change from 0 to 1024 [ 139.765184][T12586] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 139.961324][T12602] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 140.194676][T12623] tipc: Failed to remove unknown binding: 66,1,1/0:3900646332/3900646334 [ 140.203295][T12623] tipc: Failed to remove unknown binding: 66,1,1/0:3900646332/3900646334 [ 140.222942][T12621] __nla_validate_parse: 6 callbacks suppressed [ 140.222990][T12621] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3923'. [ 140.238481][T12621] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3923'. [ 140.297743][T12629] loop9: detected capacity change from 0 to 512 [ 140.306012][T12629] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.312540][T12629] EXT4-fs: test_dummy_encryption option not supported [ 140.325168][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3928'. [ 140.350520][T12631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.437933][T12638] vlan2: entered allmulticast mode [ 140.766689][T12668] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3945'. [ 140.982984][T12708] veth0: entered promiscuous mode [ 140.989848][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3962'. [ 141.000739][T12708] veth0 (unregistering): left promiscuous mode [ 141.010496][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.020747][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.046650][T12713] loop8: detected capacity change from 0 to 2048 [ 141.079286][T12713] Alternate GPT is invalid, using primary GPT. [ 141.085646][T12713] loop8: p1 p2 p3 [ 141.133475][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 141.146323][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 141.163073][T12721] loop0: detected capacity change from 0 to 512 [ 141.170508][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 141.181830][T12721] EXT4-fs: Ignoring removed oldalloc option [ 141.189993][T12721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3971: Parent and EA inode have the same ino 15 [ 141.193597][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3970'. [ 141.204328][T12721] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.3971: Parent and EA inode have the same ino 15 [ 141.225060][T12721] EXT4-fs (loop0): 1 orphan inode deleted [ 141.231482][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3974'. [ 141.232907][T12721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.274078][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.298794][T12734] loop8: detected capacity change from 0 to 128 [ 141.320288][T12734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 141.339621][T12734] System zones: 1-3, 19-19, 35-36 [ 141.345416][T12734] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.364345][T12734] ext4 filesystem being mounted at /576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.421567][ T5735] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.529741][T12745] netlink: zone id is out of range [ 141.558034][T12745] netlink: zone id is out of range [ 141.596243][T12745] netlink: zone id is out of range [ 141.603460][T12745] netlink: zone id is out of range [ 141.623323][T12755] sd 0:0:1:0: device reset [ 141.748389][T12772] tap0: tun_chr_ioctl cmd 1074025675 [ 141.753919][T12772] tap0: persist enabled [ 141.760410][T12772] tap0: tun_chr_ioctl cmd 1074025675 [ 141.765760][T12772] tap0: persist enabled [ 141.833555][T12784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12784 comm=syz.9.4000 [ 141.910331][T12794] netlink: 'syz.8.4003': attribute type 1 has an invalid length. [ 142.395338][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 142.395359][ T29] audit: type=1400 audit(1757669799.961:7846): avc: denied { ioctl } for pid=12846 comm="syz.5.4028" path="socket:[37118]" dev="sockfs" ino=37118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.443301][T12850] netlink: 'syz.0.4030': attribute type 15 has an invalid length. [ 142.462971][T12850] netlink: 'syz.0.4030': attribute type 15 has an invalid length. [ 142.515176][ T29] audit: type=1400 audit(1757669800.081:7847): avc: denied { write } for pid=12842 comm="syz.8.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.590052][T12868] loop5: detected capacity change from 0 to 1024 [ 142.601013][ T29] audit: type=1400 audit(1757669800.171:7848): avc: denied { read } for pid=12869 comm="syz.8.4040" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.624364][ T29] audit: type=1400 audit(1757669800.171:7849): avc: denied { ioctl } for pid=12869 comm="syz.8.4040" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.653741][ T29] audit: type=1400 audit(1757669800.221:7850): avc: denied { read } for pid=12874 comm="syz.3.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.680754][T12868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.695535][T12868] ext4 filesystem being mounted at /775/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.710736][T12868] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.4038: lblock 0 mapped to illegal pblock 0 (length 1) [ 142.715511][ T29] audit: type=1400 audit(1757669800.281:7851): avc: denied { map } for pid=12867 comm="syz.5.4038" path="/775/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.733104][T12868] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 142.747108][ T29] audit: type=1400 audit(1757669800.281:7852): avc: denied { execute } for pid=12867 comm="syz.5.4038" path="/775/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.783037][T12868] EXT4-fs (loop5): This should not happen!! Data will be lost [ 142.783037][T12868] [ 142.865427][T12868] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.4038: lblock 3 mapped to illegal pblock 3 (length 3) [ 142.882950][T12868] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 142.895363][T12868] EXT4-fs (loop5): This should not happen!! Data will be lost [ 142.895363][T12868] [ 142.942367][ T4344] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 142.960718][ T4344] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 142.973079][ T4344] EXT4-fs (loop5): This should not happen!! Data will be lost [ 142.973079][ T4344] [ 142.992027][ T29] audit: type=1326 audit(1757669800.561:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.8.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202574eba9 code=0x7ffc0000 [ 143.000035][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.015871][ T29] audit: type=1326 audit(1757669800.561:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.8.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202574eba9 code=0x7ffc0000 [ 143.048420][ T29] audit: type=1326 audit(1757669800.561:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12892 comm="syz.8.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f202574eba9 code=0x7ffc0000 [ 143.108882][T12904] loop9: detected capacity change from 0 to 1024 [ 143.132629][T12904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.183227][T12913] tipc: Started in network mode [ 143.188202][T12913] tipc: Node identity 4, cluster identity 4711 [ 143.194532][T12913] tipc: Node number set to 4 [ 143.200227][T12229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.452894][T12960] loop8: detected capacity change from 0 to 512 [ 143.461439][T12960] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 143.477642][T12960] EXT4-fs (loop8): 1 truncate cleaned up [ 143.493145][T12960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.523080][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.664194][T12981] vlan2: entered allmulticast mode [ 143.686700][T12985] cgroup: Invalid name [ 143.846876][T12991] loop3: detected capacity change from 0 to 8192 [ 143.943531][T13016] loop5: detected capacity change from 0 to 128 [ 144.013150][T13024] loop5: detected capacity change from 0 to 512 [ 144.035841][T13024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.049848][T13024] ext4 filesystem being mounted at /793/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.090508][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.858430][T13097] Falling back ldisc for ttyS3. [ 144.937263][T13111] 0ªî{X¹¦: renamed from gretap0 [ 144.944620][T13111] 0ªî{X¹¦: entered allmulticast mode [ 144.952814][T13111] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 145.269788][T13158] loop3: detected capacity change from 0 to 512 [ 145.287404][T13161] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 145.360876][T13164] SELinux: failed to load policy [ 145.539358][T13200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.569498][T13203] can0: slcan on ttyS3. [ 145.616132][T13210] __nla_validate_parse: 13 callbacks suppressed [ 145.616151][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 145.639022][T13202] can0 (unregistered): slcan off ttyS3. [ 145.815241][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4204'. [ 145.920997][T13250] loop8: detected capacity change from 0 to 512 [ 145.927726][T13250] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.958258][T13250] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 145.985286][T13250] EXT4-fs (loop8): 1 truncate cleaned up [ 145.996265][T13250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.021456][T13261] loop5: detected capacity change from 0 to 512 [ 146.040688][T13261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.072684][T13261] ext4 filesystem being mounted at /839/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.137483][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.173603][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4221'. [ 146.232407][T13287] netlink: 'syz.9.4225': attribute type 4 has an invalid length. [ 146.287258][ T5735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.381806][T13304] dummy0: left allmulticast mode [ 146.387940][T13304] dummy0: left promiscuous mode [ 146.393070][T13304] bridge0: port 3(dummy0) entered disabled state [ 146.403759][T13304] bridge_slave_0: left allmulticast mode [ 146.409526][T13304] bridge_slave_0: left promiscuous mode [ 146.415312][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.425266][T13304] bridge_slave_1: left allmulticast mode [ 146.431108][T13304] bridge_slave_1: left promiscuous mode [ 146.436913][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.452639][T13304] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 146.462013][T13304] bond_slave_0: left promiscuous mode [ 146.470530][T13304] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 146.478535][T13304] bond_slave_1: left promiscuous mode [ 146.494073][T13312] loop5: detected capacity change from 0 to 128 [ 146.502181][T13304] team0: Port device team_slave_0 removed [ 146.510754][T13304] team0: Port device team_slave_1 removed [ 146.516754][T13304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.524867][T13304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.534291][T13304] batman_adv: batadv0: Removing interface: veth1_vlan [ 146.551086][T13304] bond1: (slave geneve2): Releasing active interface [ 146.573176][T13321] loop5: detected capacity change from 0 to 512 [ 146.599850][T13319] loop9: detected capacity change from 0 to 2048 [ 146.617263][T13321] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.633685][T13321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.649894][T13321] EXT4-fs (loop5): 1 truncate cleaned up [ 146.653112][T13319] loop9: p2 p3 p7 [ 146.656078][T13321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.724318][T13339] loop9: detected capacity change from 0 to 512 [ 146.742261][T13339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.813798][T13339] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.842207][T12229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.275640][T13384] loop3: detected capacity change from 0 to 1024 [ 147.282586][T13384] EXT4-fs: Ignoring removed nobh option [ 147.288254][T13384] EXT4-fs: Ignoring removed bh option [ 147.294770][T13342] ================================================================== [ 147.302914][T13342] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 147.312082][T13342] [ 147.314517][T13342] read-write to 0xffff888119cda140 of 8 bytes by task 13321 on cpu 1: [ 147.322689][T13342] __filemap_remove_folio+0x1bc/0x2a0 [ 147.328112][T13342] folio_unmap_invalidate+0x1dd/0x360 [ 147.333538][T13342] invalidate_inode_pages2_range+0x27c/0x3d0 [ 147.339549][T13342] filemap_invalidate_pages+0x16d/0x1a0 [ 147.345215][T13342] kiocb_invalidate_pages+0x6e/0x80 [ 147.350526][T13342] __iomap_dio_rw+0x5d4/0x1250 [ 147.355322][T13342] iomap_dio_rw+0x40/0x90 [ 147.359685][T13342] ext4_file_write_iter+0xad9/0xf00 [ 147.364936][T13342] iter_file_splice_write+0x663/0xa60 [ 147.370464][T13342] direct_splice_actor+0x153/0x2a0 [ 147.375621][T13342] splice_direct_to_actor+0x30f/0x680 [ 147.381029][T13342] do_splice_direct+0xda/0x150 [ 147.385829][T13342] do_sendfile+0x380/0x650 [ 147.390294][T13342] __x64_sys_sendfile64+0x105/0x150 [ 147.395531][T13342] x64_sys_call+0x2bb0/0x2ff0 [ 147.400250][T13342] do_syscall_64+0xd2/0x200 [ 147.404805][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.410730][T13342] [ 147.413075][T13342] read to 0xffff888119cda140 of 8 bytes by task 13342 on cpu 0: [ 147.420826][T13342] filemap_write_and_wait_range+0x59/0x340 [ 147.427082][T13342] ext4_file_write_iter+0xe04/0xf00 [ 147.432334][T13342] iter_file_splice_write+0x663/0xa60 [ 147.437741][T13342] direct_splice_actor+0x153/0x2a0 [ 147.442979][T13342] splice_direct_to_actor+0x30f/0x680 [ 147.448387][T13342] do_splice_direct+0xda/0x150 [ 147.453182][T13342] do_sendfile+0x380/0x650 [ 147.457650][T13342] __x64_sys_sendfile64+0x105/0x150 [ 147.462894][T13342] x64_sys_call+0x2bb0/0x2ff0 [ 147.467608][T13342] do_syscall_64+0xd2/0x200 [ 147.472165][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.478088][T13342] [ 147.480423][T13342] value changed: 0x000000000000000a -> 0x0000000000000009 [ 147.487547][T13342] [ 147.489887][T13342] Reported by Kernel Concurrency Sanitizer on: [ 147.496070][T13342] CPU: 0 UID: 0 PID: 13342 Comm: syz.5.4239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.505905][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.515985][T13342] ================================================================== [ 147.528350][T13384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.545557][T13384] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4266: Allocating blocks 481-513 which overlap fs metadata [ 147.623691][T13384] EXT4-fs (loop3): pa ffff8881072d54d0: logic 352, phys. 465, len 3 [ 147.631874][T13384] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 147.643093][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.663946][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.