last executing test programs: 51.797841278s ago: executing program 3 (id=386): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) 51.76661988s ago: executing program 3 (id=387): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e80", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 51.707212765s ago: executing program 3 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4ffd, 0xd, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 51.633153991s ago: executing program 3 (id=389): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 51.603181314s ago: executing program 3 (id=391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, &(0x7f0000001a80)=""/4058, 0xfffffffffffffef5, 0x40010000, 0x0, 0x0) 51.498931622s ago: executing program 3 (id=396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 51.485470623s ago: executing program 32 (id=396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 9.081832534s ago: executing program 2 (id=924): socket$key(0xf, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 8.925019896s ago: executing program 2 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='nl80211\x00', 0xfffffffffffffffd) 4.977815742s ago: executing program 2 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 4.701547554s ago: executing program 1 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='./file1\x00', 0x1b6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x47}, 0x18) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat(r2, 0x0, 0x8200, 0x1c1) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 1.864060291s ago: executing program 2 (id=967): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1.676347965s ago: executing program 1 (id=968): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.133459889s ago: executing program 1 (id=970): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) 1.133271469s ago: executing program 2 (id=971): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0052dbf04300"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.101497482s ago: executing program 5 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) splice(r4, 0x0, r3, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 993.476711ms ago: executing program 5 (id=975): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 943.407724ms ago: executing program 5 (id=976): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x70b}, 0x18) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x1d6}, 0x18) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 742.28874ms ago: executing program 0 (id=983): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 738.040871ms ago: executing program 4 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) 716.677422ms ago: executing program 0 (id=985): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 709.592653ms ago: executing program 4 (id=986): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 687.213284ms ago: executing program 4 (id=987): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r3, 0xffffffffffffffff, 0x0) 672.545606ms ago: executing program 0 (id=988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x9, 0x1c, 0xca, &(0x7f0000000600)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = getpgrp(0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 637.054719ms ago: executing program 4 (id=989): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000314a8f2c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 618.91867ms ago: executing program 4 (id=990): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 618.35448ms ago: executing program 0 (id=1000): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000540)='./file0\x00', 0xc4000ce7) close_range(r3, 0xffffffffffffffff, 0x0) 601.361371ms ago: executing program 0 (id=991): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 593.226062ms ago: executing program 4 (id=992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r3 = gettid() r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 421.913236ms ago: executing program 0 (id=993): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000680)={@local, @broadcast, 0xffffffffffffffff, "f3b047feedecf9a697cef5b255f5ba858e3bdf2d1b48404999d1156001438b8c", 0x4, 0x9, 0x7fff, 0x8}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1, 0x0, 0x800000000006}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 279.288078ms ago: executing program 1 (id=994): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) iopl(0x3) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, 0x0) msgctl$IPC_RMID(r1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 265.683548ms ago: executing program 2 (id=995): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314", 0x15}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b", 0xc7}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 213.546842ms ago: executing program 1 (id=996): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 190.023764ms ago: executing program 1 (id=997): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x15, 0x5, 0x0) 48.851236ms ago: executing program 5 (id=998): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 31.071367ms ago: executing program 5 (id=999): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 0s ago: executing program 5 (id=1001): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) kernel console output (not intermixed with test programs): w without journal. Quota mode: writeback. [ 26.466254][ T3488] netem: unknown loss type 12 [ 26.483406][ T3488] netem: change failed [ 26.512488][ T3489] loop2: detected capacity change from 0 to 512 [ 26.526228][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.550448][ T3489] ======================================================= [ 26.550448][ T3489] WARNING: The mand mount option has been deprecated and [ 26.550448][ T3489] and is ignored by this kernel. Remove the mand [ 26.550448][ T3489] option from the mount to silence this warning. [ 26.550448][ T3489] ======================================================= [ 26.599328][ T3488] loop3: detected capacity change from 0 to 512 [ 26.621779][ T3489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.631657][ T3488] __quota_error: 43 callbacks suppressed [ 26.631669][ T3488] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (16979335168 > 6144). [ 26.650007][ T3488] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 26.651533][ T3489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2843c018, mo2=0002] [ 26.676052][ T3488] EXT4-fs (loop3): mount failed [ 26.682894][ T3489] System zones: 0-2, 18-18, 34-34 [ 26.693523][ T3489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.706351][ T3489] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.725047][ T29] audit: type=1400 audit(1756321544.188:115): avc: denied { create } for pid=3495 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 26.745056][ T29] audit: type=1400 audit(1756321544.188:116): avc: denied { rename } for pid=3487 comm="syz.2.3" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.767472][ T29] audit: type=1400 audit(1756321544.188:117): avc: denied { add_name } for pid=3487 comm="syz.2.3" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.789465][ T29] audit: type=1400 audit(1756321544.188:118): avc: denied { rename } for pid=3487 comm="syz.2.3" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.811375][ T29] audit: type=1400 audit(1756321544.188:119): avc: denied { unlink } for pid=3487 comm="syz.2.3" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.812325][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.834025][ T29] audit: type=1400 audit(1756321544.208:120): avc: denied { read } for pid=3495 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 26.885467][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 26.905593][ T3508] pim6reg1: entered promiscuous mode [ 26.910989][ T3508] pim6reg1: entered allmulticast mode [ 26.949056][ T29] audit: type=1400 audit(1756321544.408:121): avc: denied { create } for pid=3515 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.968857][ T29] audit: type=1400 audit(1756321544.408:122): avc: denied { setopt } for pid=3515 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.988167][ T29] audit: type=1400 audit(1756321544.408:123): avc: denied { bind } for pid=3515 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.038706][ C0] hrtimer: interrupt took 47448 ns [ 27.085765][ T3520] loop0: detected capacity change from 0 to 512 [ 27.096893][ T3520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.105787][ T3520] EXT4-fs: Ignoring removed i_version option [ 27.145130][ T3520] EXT4-fs (loop0): 1 orphan inode deleted [ 27.154296][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.178932][ T3527] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 27.189614][ T3520] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 27.225603][ T3520] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 27.254568][ T3520] syz.0.16 (3520) used greatest stack depth: 10184 bytes left [ 27.264705][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.343675][ T3536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 27.354542][ T3536] bond0: (slave dummy0): Releasing backup interface [ 27.364341][ T3536] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 27.371989][ T3536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 27.382726][ T3536] dummy0: entered promiscuous mode [ 27.435704][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 27.670230][ T3556] random: crng reseeded on system resumption [ 27.842303][ T3561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 27.931742][ T3566] bridge0: entered promiscuous mode [ 27.939034][ T3566] bridge0: port 3(macsec1) entered blocking state [ 27.945591][ T3566] bridge0: port 3(macsec1) entered disabled state [ 27.952363][ T3566] macsec1: entered allmulticast mode [ 27.957773][ T3566] bridge0: entered allmulticast mode [ 27.963599][ T3566] macsec1: left allmulticast mode [ 27.968676][ T3566] bridge0: left allmulticast mode [ 27.974092][ T3566] bridge0: left promiscuous mode [ 28.046777][ T3571] loop1: detected capacity change from 0 to 1024 [ 28.054894][ T3571] EXT4-fs: Ignoring removed orlov option [ 28.070674][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.089138][ T3571] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37: bg 0: block 88: padding at end of block bitmap is not set [ 28.106906][ T3571] syz.1.37 (3571) used greatest stack depth: 10128 bytes left [ 28.122298][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.141363][ T3577] loop1: detected capacity change from 0 to 512 [ 28.148942][ T3577] EXT4-fs: Ignoring removed oldalloc option [ 28.155488][ T3577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.167750][ T3577] EXT4-fs (loop1): 1 truncate cleaned up [ 28.174310][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.195356][ T3581] loop4: detected capacity change from 0 to 1024 [ 28.202903][ T3581] EXT4-fs: Ignoring removed nobh option [ 28.210019][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.210072][ T3581] EXT4-fs: Ignoring removed bh option [ 28.235862][ T3581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.263677][ T3581] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 28.290342][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.317393][ T3589] process 'syz.1.43' launched '/dev/fd/3' with NULL argv: empty string added [ 28.381175][ T3403] IPVS: starting estimator thread 0... [ 28.473196][ T3599] IPVS: using max 2880 ests per chain, 144000 per kthread [ 28.492694][ T3609] loop1: detected capacity change from 0 to 1024 [ 28.505023][ T3609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.523377][ T3609] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.51: Allocating blocks 385-513 which overlap fs metadata [ 28.540056][ T3609] EXT4-fs (loop1): pa ffff888105d1a150: logic 16, phys. 129, len 24 [ 28.548161][ T3609] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 28.570415][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.590324][ T3614] loop1: detected capacity change from 0 to 512 [ 28.623896][ T3614] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 28.632087][ T3614] System zones: 0-2, 18-18, 34-35 [ 28.638319][ T3614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.651167][ T3614] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.684629][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.791460][ T3627] loop2: detected capacity change from 0 to 256 [ 28.935912][ T3638] loop2: detected capacity change from 0 to 1024 [ 28.942737][ T3638] EXT4-fs: Ignoring removed orlov option [ 28.969457][ T3638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.223609][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.298302][ T3655] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 29.320326][ T3655] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 29.378236][ T3661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.448918][ T3669] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.64'. [ 29.536080][ T3681] netlink: zone id is out of range [ 29.542807][ T3681] netlink: zone id is out of range [ 29.550032][ T3681] netlink: zone id is out of range [ 29.555179][ T3681] netlink: zone id is out of range [ 29.562651][ T3681] netlink: zone id is out of range [ 29.569149][ T3681] netlink: zone id is out of range [ 29.574457][ T3681] netlink: zone id is out of range [ 29.579606][ T3681] netlink: zone id is out of range [ 29.585932][ T3681] netlink: zone id is out of range [ 29.591121][ T3681] netlink: zone id is out of range [ 29.609840][ T3682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 29.661356][ T3685] syzkaller0: entered allmulticast mode [ 29.672919][ T3687] loop1: detected capacity change from 0 to 164 [ 29.689510][ T3685] syzkaller0: entered promiscuous mode [ 29.724937][ T3685] syzkaller0 (unregistering): left allmulticast mode [ 29.731664][ T3685] syzkaller0 (unregistering): left promiscuous mode [ 29.746151][ T3692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'. [ 29.757622][ T3693] loop2: detected capacity change from 0 to 128 [ 29.768750][ T3690] loop4: detected capacity change from 0 to 128 [ 29.779709][ T3693] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.793478][ T3690] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.806957][ T3690] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.842024][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.872028][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 29.892504][ T3693] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.035399][ T3709] mmap: syz.1.93 (3709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.058862][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.086657][ T3711] loop3: detected capacity change from 0 to 2048 [ 30.103006][ T3713] futex_wake_op: syz.2.92 tries to shift op by -1; fix this program [ 30.197364][ T3723] syz.3.99 uses obsolete (PF_INET,SOCK_PACKET) [ 30.248360][ T3728] ALSA: seq fatal error: cannot create timer (-19) [ 30.372133][ T3745] loop4: detected capacity change from 0 to 128 [ 30.411378][ T3742] syzkaller0: entered promiscuous mode [ 30.417763][ T3742] syzkaller0: entered allmulticast mode [ 30.459495][ T3740] loop3: detected capacity change from 0 to 512 [ 30.498604][ T3740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.515557][ T3740] EXT4-fs: Ignoring removed i_version option [ 30.622013][ T3740] EXT4-fs (loop3): 1 orphan inode deleted [ 30.631343][ T3740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.723378][ T3774] 9pnet_fd: Insufficient options for proto=fd [ 30.735531][ T3774] loop0: detected capacity change from 0 to 512 [ 30.755471][ T3774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.115: bg 0: block 248: padding at end of block bitmap is not set [ 30.778842][ T3775] loop2: detected capacity change from 0 to 8192 [ 30.789309][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.798617][ T3774] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.115: Failed to acquire dquot type 1 [ 30.818698][ T3774] EXT4-fs (loop0): 1 truncate cleaned up [ 30.831157][ T3774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.847657][ T3774] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.884535][ T3774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.919311][ T3786] loop3: detected capacity change from 0 to 512 [ 30.940324][ T3786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.954871][ T3786] EXT4-fs (loop3): 1 truncate cleaned up [ 30.962156][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.012510][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.846870][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 31.846885][ T29] audit: type=1326 audit(1756321549.308:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 31.878375][ T29] audit: type=1326 audit(1756321549.308:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 31.931028][ T3774] syz.0.115 (3774) used greatest stack depth: 9200 bytes left [ 31.966864][ T3795] loop3: detected capacity change from 0 to 512 [ 31.986689][ T3797] loop0: detected capacity change from 0 to 512 [ 31.996910][ T3795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.032248][ T3795] EXT4-fs (loop3): 1 truncate cleaned up [ 32.049944][ T3795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.092485][ T29] audit: type=1400 audit(1756321549.478:893): avc: denied { write } for pid=3798 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.111890][ T29] audit: type=1400 audit(1756321549.538:894): avc: denied { create } for pid=3801 comm="syz.4.125" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.132515][ T29] audit: type=1400 audit(1756321549.548:895): avc: denied { execmem } for pid=3801 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.317817][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.344892][ T29] audit: type=1400 audit(1756321549.618:896): avc: denied { write } for pid=3794 comm="syz.3.123" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 32.450208][ T29] audit: type=1400 audit(1756321549.908:897): avc: denied { unlink } for pid=3307 comm="syz-executor" name="file1" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.709209][ T29] audit: type=1400 audit(1756321550.168:898): avc: denied { cpu } for pid=3819 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.800451][ T3831] SELinux: failed to load policy [ 32.809695][ T29] audit: type=1400 audit(1756321550.258:899): avc: denied { load_policy } for pid=3827 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.903086][ T29] audit: type=1400 audit(1756321550.348:900): avc: denied { create } for pid=3834 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.220078][ T3840] __nla_validate_parse: 3 callbacks suppressed [ 33.220093][ T3840] netlink: 68 bytes leftover after parsing attributes in process `syz.1.136'. [ 34.086467][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 34.105688][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 34.181386][ T3865] lo speed is unknown, defaulting to 1000 [ 34.188174][ T3865] lo speed is unknown, defaulting to 1000 [ 34.195360][ T3865] lo speed is unknown, defaulting to 1000 [ 34.201615][ T3865] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.210142][ T3865] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 34.221628][ T3865] lo speed is unknown, defaulting to 1000 [ 34.227996][ T3865] lo speed is unknown, defaulting to 1000 [ 34.234152][ T3865] lo speed is unknown, defaulting to 1000 [ 34.240148][ T3865] lo speed is unknown, defaulting to 1000 [ 34.246433][ T3865] lo speed is unknown, defaulting to 1000 [ 34.277427][ T3874] veth0_to_team: entered promiscuous mode [ 34.419229][ T3877] loop3: detected capacity change from 0 to 32768 [ 34.488661][ T3890] serio: Serial port ptm0 [ 34.510215][ T3893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.160'. [ 34.536740][ T3895] loop0: detected capacity change from 0 to 512 [ 34.555696][ T3895] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.570773][ T3895] EXT4-fs (loop0): mount failed [ 34.595644][ T3901] loop0: detected capacity change from 0 to 512 [ 34.605100][ T3901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.617672][ T3901] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.647089][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.665739][ T3905] sd 0:0:1:0: device reset [ 34.965252][ T3926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 34.973066][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'. [ 34.983171][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'. [ 34.994495][ T3927] Zero length message leads to an empty skb [ 35.019101][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 35.028348][ T3931] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 35.112374][ T3931] team1: entered promiscuous mode [ 35.117490][ T3931] team1: entered allmulticast mode [ 35.171075][ T3940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.228238][ T3950] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 35.266080][ T3940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.274376][ T3954] netlink: 'syz.2.185': attribute type 27 has an invalid length. [ 35.311572][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.318850][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.364678][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.378699][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.448019][ T3954] team1: left promiscuous mode [ 35.453113][ T3954] team1: left allmulticast mode [ 35.470571][ T3940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.486928][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.502256][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.515851][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.528775][ T3940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.547742][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.592806][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.610578][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.626763][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.640059][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.689301][ T3968] loop3: detected capacity change from 0 to 128 [ 35.701009][ T3968] FAT-fs (loop3): Directory bread(block 162) failed [ 35.712849][ T3968] FAT-fs (loop3): Directory bread(block 163) failed [ 35.721447][ T3968] FAT-fs (loop3): Directory bread(block 164) failed [ 35.728259][ T3968] FAT-fs (loop3): Directory bread(block 165) failed [ 35.735059][ T3968] FAT-fs (loop3): Directory bread(block 166) failed [ 35.742202][ T3968] FAT-fs (loop3): Directory bread(block 167) failed [ 35.749131][ T3968] FAT-fs (loop3): Directory bread(block 168) failed [ 35.755970][ T3968] FAT-fs (loop3): Directory bread(block 169) failed [ 35.769808][ T3968] FAT-fs (loop3): Directory bread(block 162) failed [ 35.777289][ T3968] FAT-fs (loop3): Directory bread(block 163) failed [ 35.786383][ T3968] syz.3.191: attempt to access beyond end of device [ 35.786383][ T3968] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 35.799591][ T3968] syz.3.191: attempt to access beyond end of device [ 35.799591][ T3968] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 35.831061][ T3977] loop4: detected capacity change from 0 to 512 [ 35.850102][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 35.862157][ T3981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'. [ 35.874954][ T3977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.891972][ T3977] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.914645][ T3987] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.946989][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.012345][ T3993] loop0: detected capacity change from 0 to 2048 [ 36.025443][ T3987] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.036389][ T3993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.085417][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.095415][ T3987] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.128068][ T4004] tipc: Started in network mode [ 36.133031][ T4004] tipc: Node identity ac14140f, cluster identity 4711 [ 36.144648][ T4004] tipc: New replicast peer: 255.255.255.255 [ 36.150721][ T4004] tipc: Enabled bearer , priority 10 [ 36.150782][ T4006] loop0: detected capacity change from 0 to 1024 [ 36.165707][ T3987] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.177859][ T4010] loop4: detected capacity change from 0 to 128 [ 36.194383][ T4010] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.208780][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.223422][ T4008] loop2: detected capacity change from 0 to 1024 [ 36.231825][ T4010] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.246405][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.263744][ T4008] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.330806][ T3435] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.350432][ T3435] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 36.362848][ T3435] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.362848][ T3435] [ 36.372596][ T3435] EXT4-fs (loop0): Total free blocks count 0 [ 36.378694][ T3435] EXT4-fs (loop0): Free/Dirty block details [ 36.384612][ T3435] EXT4-fs (loop0): free_blocks=68451041280 [ 36.390438][ T3435] EXT4-fs (loop0): dirty_blocks=320 [ 36.395671][ T3435] EXT4-fs (loop0): Block reservation details [ 36.401778][ T3435] EXT4-fs (loop0): i_reserved_data_blocks=20 [ 36.409512][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.409865][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.488319][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.520918][ T4039] loop3: detected capacity change from 0 to 512 [ 36.531857][ T4042] smc: net device bond0 applied user defined pnetid SYZ0 [ 36.539349][ T4042] smc: net device bond0 erased user defined pnetid SYZ0 [ 36.577293][ T4039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.596662][ T4047] vhci_hcd: invalid port number 96 [ 36.601816][ T4047] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 36.663704][ T4039] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.784617][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.837943][ T4067] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 36.937683][ T4076] loop0: detected capacity change from 0 to 512 [ 36.945717][ T4076] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 37.024654][ T4076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 37.032677][ T4076] System zones: 1-12 [ 37.037390][ T4076] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.222: corrupted in-inode xattr: e_value size too large [ 37.051745][ T4076] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.222: couldn't read orphan inode 15 (err -117) [ 37.064739][ T4076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.263186][ T3390] tipc: Node number set to 2886997007 [ 37.428389][ T4087] net_ratelimit: 2 callbacks suppressed [ 37.428402][ T4087] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 37.478464][ T4089] loop2: detected capacity change from 0 to 256 [ 37.521917][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 37.521979][ T29] audit: type=1400 audit(1756321554.978:1110): avc: denied { relabelfrom } for pid=4088 comm="syz.2.231" name="NETLINK" dev="sockfs" ino=6823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 37.557051][ T4089] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 37.620394][ T29] audit: type=1400 audit(1756321555.028:1111): avc: denied { relabelto } for pid=4088 comm="syz.2.231" name="NETLINK" dev="sockfs" ino=6823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:smartcard_device_t:s0" [ 37.917441][ T4094] smc: net device bond0 applied user defined pnetid SYZ0 [ 37.945053][ T4094] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.284913][ T29] audit: type=1400 audit(1756321555.738:1112): avc: denied { setcheckreqprot } for pid=4098 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.384498][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.438970][ T4115] loop2: detected capacity change from 0 to 1024 [ 38.455678][ T4115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.467855][ T4115] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.534285][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.539206][ T4120] tipc: Started in network mode [ 38.548341][ T4120] tipc: Node identity 7ee066b30e03, cluster identity 4711 [ 38.555580][ T4120] tipc: Enabled bearer , priority 0 [ 38.567633][ T4119] tipc: Resetting bearer [ 38.582662][ T4119] tipc: Disabling bearer [ 38.875036][ T4139] tipc: Enabled bearer , priority 0 [ 38.882451][ T4138] tipc: Resetting bearer [ 38.895484][ T4138] tipc: Disabling bearer [ 38.963243][ T29] audit: type=1400 audit(1756321556.418:1113): avc: denied { create } for pid=4144 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.982751][ T29] audit: type=1400 audit(1756321556.418:1114): avc: denied { ioctl } for pid=4144 comm="syz.3.253" path="socket:[7222]" dev="sockfs" ino=7222 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.007324][ T29] audit: type=1400 audit(1756321556.418:1115): avc: denied { write } for pid=4144 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.031837][ T29] audit: type=1400 audit(1756321556.488:1116): avc: denied { read write } for pid=4146 comm="syz.3.254" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.055922][ T29] audit: type=1400 audit(1756321556.488:1117): avc: denied { open } for pid=4146 comm="syz.3.254" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.079250][ T29] audit: type=1400 audit(1756321556.488:1118): avc: denied { ioctl } for pid=4146 comm="syz.3.254" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.127961][ T29] audit: type=1326 audit(1756321556.588:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 39.212636][ T4161] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 39.219863][ T4154] lo speed is unknown, defaulting to 1000 [ 39.548035][ T4181] IPv6: sit1: Disabled Multicast RS [ 39.651194][ T4188] __nla_validate_parse: 2 callbacks suppressed [ 39.651211][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 39.709957][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.723549][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.741648][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.756352][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.860535][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 39.877087][ T4199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.896077][ T4199] vlan2: entered allmulticast mode [ 39.901239][ T4199] bond1: entered allmulticast mode [ 39.973799][ T4202] loop3: detected capacity change from 0 to 1024 [ 39.981454][ T4202] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.993261][ T4202] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 40.001443][ T4202] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.008962][ T4202] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.274: Invalid inode table block 0 in block_group 0 [ 40.033375][ T4202] EXT4-fs (loop3): Remounting filesystem read-only [ 40.062645][ T4202] EXT4-fs (loop3): 1 truncate cleaned up [ 40.078230][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.098390][ T4207] ref_ctr increment failed for inode: 0x15c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888119f6d640 [ 40.138655][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.165137][ T4214] loop3: detected capacity change from 0 to 2048 [ 40.176933][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.322305][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.359971][ T4220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.375887][ T4220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.712477][ T4227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.728147][ T36] lo speed is unknown, defaulting to 1000 [ 41.025117][ T4246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.186478][ T4246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.246731][ T4246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.297541][ T4246] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.357556][ T3435] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.376733][ T3435] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.394031][ T3435] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.423878][ T3435] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.483602][ T4257] pim6reg1: entered promiscuous mode [ 41.488947][ T4257] pim6reg1: entered allmulticast mode [ 41.504292][ T4259] netlink: 'syz.3.297': attribute type 11 has an invalid length. [ 41.589338][ T4263] lo speed is unknown, defaulting to 1000 [ 41.753122][ T4268] loop4: detected capacity change from 0 to 1024 [ 41.766640][ T4268] ext4: Unknown parameter 'uid<00000000000000000000' [ 41.799254][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 41.806735][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 41.814143][ T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 41.834214][ T36] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.891613][ T4270] loop2: detected capacity change from 0 to 8192 [ 41.956186][ T4270] loop2: p1 p2[DM] p4 [ 41.960523][ T4270] loop2: p1 size 196608 extends beyond EOD, truncated [ 41.979169][ T4270] loop2: p2 start 4292936063 is beyond EOD, truncated [ 41.986109][ T4270] loop2: p4 size 50331648 extends beyond EOD, truncated [ 42.082375][ T4290] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 42.109027][ T4290] bond2: entered promiscuous mode [ 42.114328][ T4290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 42.180008][ T4290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 42.187039][ T4297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.194281][ T4297] IPv6: NLM_F_CREATE should be set when creating new route [ 42.201501][ T4297] IPv6: NLM_F_CREATE should be set when creating new route [ 42.302639][ T4290] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 42.313229][ T4290] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 42.349336][ T4290] bond2: (slave wireguard0): making interface the new active one [ 42.357216][ T4290] wireguard0: entered promiscuous mode [ 42.420686][ T4297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.429609][ T4290] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 42.495534][ T4297] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 42.538763][ T4297] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 42.587446][ T4306] lo speed is unknown, defaulting to 1000 [ 42.688779][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 42.688791][ T29] audit: type=1400 audit(1756321560.148:1176): avc: denied { write } for pid=4307 comm="syz.4.317" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.824984][ T29] audit: type=1400 audit(1756321560.188:1177): avc: denied { ioctl } for pid=4307 comm="syz.4.317" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.072568][ T4323] loop4: detected capacity change from 0 to 128 [ 43.091980][ T4323] FAT-fs (loop4): Directory bread(block 32) failed [ 43.103214][ T4323] FAT-fs (loop4): Directory bread(block 33) failed [ 43.109764][ T4323] FAT-fs (loop4): Directory bread(block 34) failed [ 43.123180][ T4323] FAT-fs (loop4): Directory bread(block 35) failed [ 43.129732][ T4323] FAT-fs (loop4): Directory bread(block 36) failed [ 43.141265][ T4323] FAT-fs (loop4): Directory bread(block 37) failed [ 43.161309][ T4323] FAT-fs (loop4): Directory bread(block 38) failed [ 43.174383][ T4323] FAT-fs (loop4): Directory bread(block 39) failed [ 43.180995][ T4323] FAT-fs (loop4): Directory bread(block 40) failed [ 43.197191][ T4323] FAT-fs (loop4): Directory bread(block 41) failed [ 43.215696][ T29] audit: type=1326 audit(1756321560.678:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 43.239104][ T29] audit: type=1326 audit(1756321560.678:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 43.264432][ T4325] loop2: detected capacity change from 0 to 2048 [ 43.292391][ T4323] syz.4.321: attempt to access beyond end of device [ 43.292391][ T4323] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 43.305625][ T4323] Buffer I/O error on dev loop4, logical block 1028, async page read [ 43.316684][ T4325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.331146][ T4323] syz.4.321: attempt to access beyond end of device [ 43.331146][ T4323] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 43.341698][ T29] audit: type=1326 audit(1756321560.698:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 43.344505][ T4323] Buffer I/O error on dev loop4, logical block 41991, async page read [ 43.344538][ T4323] FAT-fs (loop4): Filesystem has been set read-only [ 43.382817][ T29] audit: type=1326 audit(1756321560.698:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 43.406376][ T29] audit: type=1326 audit(1756321560.698:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 43.429706][ T29] audit: type=1326 audit(1756321560.698:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 43.453102][ T29] audit: type=1326 audit(1756321560.698:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67916dec23 code=0x7ffc0000 [ 43.476318][ T29] audit: type=1326 audit(1756321560.698:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67916dd69f code=0x7ffc0000 [ 43.500758][ T4323] syz.4.321: attempt to access beyond end of device [ 43.500758][ T4323] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 43.513964][ T4323] Buffer I/O error on dev loop4, logical block 1028, async page read [ 43.522110][ T4323] syz.4.321: attempt to access beyond end of device [ 43.522110][ T4323] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 43.535614][ T4323] Buffer I/O error on dev loop4, logical block 41991, async page read [ 43.590240][ T4334] bond1: entered promiscuous mode [ 43.595504][ T4334] bond1: entered allmulticast mode [ 43.609222][ T4334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.616739][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.646721][ T4334] bond1 (unregistering): Released all slaves [ 43.648072][ T4337] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.670715][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 43.719174][ T4343] netlink: 'syz.3.328': attribute type 7 has an invalid length. [ 43.726990][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 43.731936][ T4349] loop1: detected capacity change from 0 to 512 [ 43.782717][ T4349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.796358][ T4349] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.815609][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 43.856202][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 43.888444][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.949594][ T4369] lo speed is unknown, defaulting to 1000 [ 44.078083][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 44.094973][ T4396] lo speed is unknown, defaulting to 1000 [ 44.124504][ T4437] team0: entered promiscuous mode [ 44.129647][ T4437] team0: entered allmulticast mode [ 44.185725][ T4442] loop0: detected capacity change from 0 to 512 [ 44.201071][ T4442] EXT4-fs: Mount option(s) incompatible with ext2 [ 44.330856][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 44.400044][ T4453] netlink: 332 bytes leftover after parsing attributes in process `syz.2.348'. [ 44.890026][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 44.953075][ T4485] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 45.047021][ T4493] lo speed is unknown, defaulting to 1000 [ 45.059501][ T4503] loop4: detected capacity change from 0 to 512 [ 45.067065][ T4503] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.091182][ T4503] EXT4-fs (loop4): 1 truncate cleaned up [ 45.103848][ T4503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.149647][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.245486][ T4521] geneve2: entered promiscuous mode [ 45.250822][ T4521] geneve2: entered allmulticast mode [ 45.258791][ T4394] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.277890][ T4394] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.295422][ T4394] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.313229][ T4394] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 45.477759][ T4534] wg2: entered promiscuous mode [ 45.482707][ T4534] wg2: entered allmulticast mode [ 45.500061][ T4536] loop2: detected capacity change from 0 to 1024 [ 45.521407][ T4536] EXT4-fs: Ignoring removed nobh option [ 45.546191][ T4536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.595373][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.597105][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.604285][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.635348][ T4546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 45.644293][ T4546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 45.662486][ T4546] ip6gretap0: entered promiscuous mode [ 45.669326][ T4546] syz_tun: entered promiscuous mode [ 45.676718][ T4550] bridge_slave_1: left allmulticast mode [ 45.682404][ T4550] bridge_slave_1: left promiscuous mode [ 45.688101][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.697097][ T4550] bridge_slave_0: left allmulticast mode [ 45.702745][ T4550] bridge_slave_0: left promiscuous mode [ 45.708607][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.721191][ T4554] loop3: detected capacity change from 0 to 512 [ 45.728834][ T4554] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.738042][ T4554] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 45.747305][ T4554] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 45.758526][ T4554] System zones: 0-2, 18-18, 34-35 [ 45.764613][ T4554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.790549][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.920154][ T4568] sd 0:0:1:0: device reset [ 45.925622][ T4394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.963177][ T4571] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 45.997263][ T4394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.049178][ T4394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.077642][ T4572] lo speed is unknown, defaulting to 1000 [ 46.096257][ T4394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.130927][ T4586] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 46.140513][ T4586] dummy0: left promiscuous mode [ 46.148121][ T4586] team0: Port device dummy0 added [ 46.157052][ T4586] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 46.175105][ T4572] chnl_net:caif_netlink_parms(): no params data found [ 46.184815][ T4586] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.195650][ T4586] team0: Failed to send options change via netlink (err -105) [ 46.203237][ T4586] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.212256][ T4586] team0: Port device dummy0 removed [ 46.220460][ T4586] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.261078][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.268213][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.283967][ T4572] bridge_slave_0: entered allmulticast mode [ 46.291757][ T4572] bridge_slave_0: entered promiscuous mode [ 46.298685][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.305796][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.312955][ T4572] bridge_slave_1: entered allmulticast mode [ 46.319634][ T4572] bridge_slave_1: entered promiscuous mode [ 46.354471][ T4572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.370469][ T4394] bridge_slave_1: left allmulticast mode [ 46.376194][ T4394] bridge_slave_1: left promiscuous mode [ 46.381905][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.389972][ T4394] bridge_slave_0: left allmulticast mode [ 46.395757][ T4394] bridge_slave_0: left promiscuous mode [ 46.401472][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.555501][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.574910][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.584358][ T4394] bond0 (unregistering): Released all slaves [ 46.595840][ T4394] bond1 (unregistering): Released all slaves [ 46.614959][ T4394] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 46.623823][ T4394] wireguard0: left promiscuous mode [ 46.630280][ T4394] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 46.639634][ T4394] bond2 (unregistering): Released all slaves [ 46.648708][ T4572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.688092][ T4394] tipc: Disabling bearer [ 46.693426][ T4394] tipc: Left network mode [ 46.698817][ T4572] team0: Port device team_slave_0 added [ 46.710121][ T4394] hsr_slave_0: left promiscuous mode [ 46.717863][ T4394] hsr_slave_1: left promiscuous mode [ 46.723964][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.731377][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.739329][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.746817][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.759116][ T4394] veth1_macvtap: left promiscuous mode [ 46.764731][ T4394] veth0_macvtap: left promiscuous mode [ 46.770354][ T4394] veth1_vlan: left promiscuous mode [ 46.776837][ T4394] veth0_vlan: left promiscuous mode [ 46.859939][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 46.867576][ T4630] loop1: detected capacity change from 0 to 8192 [ 46.875552][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 46.906559][ T4572] team0: Port device team_slave_1 added [ 46.925933][ T4572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.932892][ T4572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.958869][ T4572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.993719][ T4572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.000876][ T4572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.026885][ T4572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.051011][ T4572] hsr_slave_0: entered promiscuous mode [ 47.057447][ T4572] hsr_slave_1: entered promiscuous mode [ 47.120583][ T4572] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.129253][ T4572] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.137757][ T4572] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.147007][ T4572] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.179873][ T4572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.192389][ T4572] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.201538][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.208730][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.220838][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.227905][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.305296][ T4572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.361879][ T4660] loop4: detected capacity change from 0 to 128 [ 47.462447][ T4673] loop0: detected capacity change from 0 to 4096 [ 47.469428][ T4673] EXT4-fs: test_dummy_encryption option not supported [ 47.529066][ T4572] veth0_vlan: entered promiscuous mode [ 47.536852][ T4572] veth1_vlan: entered promiscuous mode [ 47.572733][ T4673] lo speed is unknown, defaulting to 1000 [ 47.580596][ T4572] veth0_macvtap: entered promiscuous mode [ 47.588495][ T4572] veth1_macvtap: entered promiscuous mode [ 47.600384][ T4572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.664506][ T4572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.685132][ T4376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.720050][ T4387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.730131][ T4387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.779611][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 47.779626][ T29] audit: type=1400 audit(1756321565.238:1632): avc: denied { mounton } for pid=4572 comm="syz-executor" path="/root/syzkaller.5Za7z7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.812902][ T4387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.997211][ T4690] lo speed is unknown, defaulting to 1000 [ 48.053061][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 48.088470][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 48.127208][ T4706] loop1: detected capacity change from 0 to 512 [ 48.143789][ T29] audit: type=1400 audit(1756321565.568:1633): avc: denied { create } for pid=4695 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rxrpc_socket permissive=1 [ 48.166901][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.182023][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 48.191284][ T4706] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.224955][ T4711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.234531][ T4711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.269369][ T4714] loop2: detected capacity change from 0 to 1024 [ 48.288497][ T4716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 48.309796][ T4714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.316869][ T4716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.359964][ T4716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 48.389513][ T4716] bond1 (unregistering): Released all slaves [ 48.437101][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.668097][ T4730] tmpfs: Bad value for 'mpol' [ 48.722507][ T29] audit: type=1400 audit(1756321566.128:1634): avc: denied { mounton } for pid=4723 comm="syz.4.440" path="/77/file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.938680][ T29] audit: type=1400 audit(1756321566.398:1635): avc: denied { ioctl } for pid=4741 comm="syz.5.447" path="socket:[10411]" dev="sockfs" ino=10411 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.938686][ T4742] : renamed from bond0 (while UP) [ 49.016577][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 49.027400][ T29] audit: type=1400 audit(1756321566.478:1636): avc: denied { setopt } for pid=4748 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.054900][ T4750] netlink: 96 bytes leftover after parsing attributes in process `syz.0.448'. [ 49.108217][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.146586][ T4757] loop5: detected capacity change from 0 to 512 [ 49.155123][ T29] audit: type=1326 audit(1756321566.618:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 49.182156][ T29] audit: type=1326 audit(1756321566.638:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f263fa90b07 code=0x7ffc0000 [ 49.192204][ T4757] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.205504][ T29] audit: type=1326 audit(1756321566.638:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 49.240670][ T29] audit: type=1326 audit(1756321566.638:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 49.264145][ T29] audit: type=1326 audit(1756321566.638:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.0.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 49.499127][ T4787] loop5: detected capacity change from 0 to 164 [ 49.509360][ T4787] syz.5.466: attempt to access beyond end of device [ 49.509360][ T4787] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 49.523746][ T4787] syz.5.466: attempt to access beyond end of device [ 49.523746][ T4787] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 49.558235][ T4790] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 49.572230][ T4790] team0: Port device dummy0 added [ 49.586180][ T4790] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 49.596166][ T4790] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.607453][ T4790] team0: Failed to send options change via netlink (err -105) [ 49.616366][ T4790] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.625801][ T4790] team0: Port device dummy0 removed [ 49.633954][ T4790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.695441][ T4804] loop0: detected capacity change from 0 to 2048 [ 49.710799][ T4806] @ÿ: renamed from bond_slave_0 (while UP) [ 49.718990][ T4804] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.474: bad orphan inode 61 [ 49.747424][ T4804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.917827][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.424832][ T4822] tipc: Started in network mode [ 50.429747][ T4822] tipc: Node identity 8af75b90b0a3, cluster identity 4711 [ 50.437017][ T4822] tipc: Enabled bearer , priority 0 [ 50.565595][ T4822] tipc: Disabling bearer [ 50.623229][ T4828] netlink: 'syz.4.483': attribute type 10 has an invalid length. [ 50.741911][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 50.763304][ T4828] netlink: 'syz.4.483': attribute type 10 has an invalid length. [ 50.819704][ T4842] netlink: 'syz.5.488': attribute type 1 has an invalid length. [ 50.835752][ T4836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.845618][ T4828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.858795][ T4840] vlan2: entered allmulticast mode [ 50.864008][ T4840] bond1: entered allmulticast mode [ 50.904721][ T4843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.488'. [ 50.922102][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.968635][ T4843] bridge_slave_0 (unregistering): left allmulticast mode [ 50.975791][ T4843] bridge_slave_0 (unregistering): left promiscuous mode [ 50.982764][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.156291][ T4860] lo speed is unknown, defaulting to 1000 [ 51.460621][ T4892] wg2: entered promiscuous mode [ 51.465609][ T4892] wg2: entered allmulticast mode [ 51.549475][ T4902] loop2: detected capacity change from 0 to 512 [ 51.634446][ T4902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.658918][ T4903] pim6reg1: entered promiscuous mode [ 51.664312][ T4903] pim6reg1: entered allmulticast mode [ 51.723779][ T4902] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.874573][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.900478][ T4914] netlink: 5 bytes leftover after parsing attributes in process `syz.5.517'. [ 51.913485][ T4914] 0ªX¹¦D: renamed from gretap0 (while UP) [ 51.924750][ T4914] 0ªX¹¦D: entered allmulticast mode [ 51.930469][ T4914] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 52.147337][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.164579][ T4929] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 52.164579][ T4929] The task syz.5.521 (4929) triggered the difference, watch for misbehavior. [ 52.173619][ T3403] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.309437][ T4934] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 52.317316][ T4933] wg2: entered promiscuous mode [ 52.322215][ T4933] wg2: entered allmulticast mode [ 52.330373][ T4934] team0: Port device dummy0 added [ 52.337598][ T4934] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 52.347124][ T4934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.356916][ T4934] team0: Failed to send options change via netlink (err -105) [ 52.365836][ T4934] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.375116][ T4934] team0: Port device dummy0 removed [ 52.381932][ T4934] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.570275][ T4940] tipc: Started in network mode [ 52.575312][ T4940] tipc: Node identity 96e2836c92d, cluster identity 4711 [ 52.582506][ T4940] tipc: Enabled bearer , priority 0 [ 52.622417][ T4943] tipc: Disabling bearer [ 52.957005][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.527'. [ 53.036655][ T4953] loop1: detected capacity change from 0 to 128 [ 53.061937][ T4951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.069509][ T4951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.089934][ T4954] loop5: detected capacity change from 0 to 1024 [ 53.104853][ T4953] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.118126][ T4953] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.129349][ T4951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.137043][ T4951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.145716][ T4954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.238421][ T4572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.287589][ T4962] serio: Serial port ptm0 [ 53.310718][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.327214][ T3403] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.335619][ T3403] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.421861][ T4979] loop0: detected capacity change from 0 to 512 [ 53.431289][ T4979] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.443651][ T4979] EXT4-fs (loop0): 1 truncate cleaned up [ 53.449640][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.524584][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.535888][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.545'. [ 53.564541][ T4988] 8021q: VLANs not supported on ipvlan1 [ 53.627088][ T4995] netlink: 'syz.5.547': attribute type 1 has an invalid length. [ 53.636555][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.547'. [ 53.743833][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 53.743846][ T29] audit: type=1400 audit(1756321571.208:1739): avc: denied { read } for pid=5001 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.744261][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 53.956543][ T5030] loop0: detected capacity change from 0 to 164 [ 53.957750][ T5033] loop2: detected capacity change from 0 to 512 [ 53.975421][ T5033] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.994891][ T5030] syz.0.561: attempt to access beyond end of device [ 53.994891][ T5030] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 54.022474][ T5033] EXT4-fs (loop2): 1 truncate cleaned up [ 54.058352][ T5033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.080759][ T5030] syz.0.561: attempt to access beyond end of device [ 54.080759][ T5030] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.169413][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.280506][ T5067] loop4: detected capacity change from 0 to 512 [ 54.293903][ T5067] ext4: Unknown parameter 'euid>00000000000000000000' [ 54.335665][ T5067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.574'. [ 54.374729][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 54.389173][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.396861][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.404947][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.412352][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.429697][ T5074] loop4: detected capacity change from 0 to 1024 [ 54.446105][ T5074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.565017][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.579649][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 54.621500][ T5088] loop1: detected capacity change from 0 to 512 [ 54.638867][ T5088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.650655][ T5088] EXT4-fs (loop1): 1 truncate cleaned up [ 54.657263][ T5088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.688471][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.736497][ T5096] lo speed is unknown, defaulting to 1000 [ 54.751537][ T5098] loop1: detected capacity change from 0 to 164 [ 54.765712][ T5098] syz.1.583: attempt to access beyond end of device [ 54.765712][ T5098] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 54.780597][ T5098] syz.1.583: attempt to access beyond end of device [ 54.780597][ T5098] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.812612][ T5102] lo speed is unknown, defaulting to 1000 [ 54.952447][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.960080][ T5112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.967927][ T5112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.975374][ T5112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.018344][ T5115] loop1: detected capacity change from 0 to 1024 [ 55.036137][ T5115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.081641][ T5119] 0ªX¹¦D: left allmulticast mode [ 55.129162][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.141642][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.164563][ T29] audit: type=1400 audit(1756321572.628:1740): avc: denied { read } for pid=5120 comm="syz.0.592" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.187726][ T29] audit: type=1400 audit(1756321572.628:1741): avc: denied { open } for pid=5120 comm="syz.0.592" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.211882][ T29] audit: type=1400 audit(1756321572.628:1742): avc: denied { ioctl } for pid=5120 comm="syz.0.592" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.288464][ T4419] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.307451][ T4419] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.316687][ T4419] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.341602][ T4419] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.379010][ T5130] loop5: detected capacity change from 0 to 512 [ 55.379618][ T5130] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.381157][ T5130] EXT4-fs (loop5): 1 truncate cleaned up [ 55.402972][ T5130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.439245][ T4572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.616800][ T5151] loop4: detected capacity change from 0 to 164 [ 55.628728][ T5151] syz.4.597: attempt to access beyond end of device [ 55.628728][ T5151] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.642790][ T5151] syz.4.597: attempt to access beyond end of device [ 55.642790][ T5151] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.737261][ T5159] lo speed is unknown, defaulting to 1000 [ 55.835219][ T5158] __nla_validate_parse: 3 callbacks suppressed [ 55.835332][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 55.885374][ T5169] loop0: detected capacity change from 0 to 512 [ 55.892143][ T5170] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 55.902042][ T5169] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.928755][ T5169] EXT4-fs (loop0): 1 truncate cleaned up [ 55.935436][ T5173] loop1: detected capacity change from 0 to 2048 [ 55.942485][ T5169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.998722][ T5175] lo speed is unknown, defaulting to 1000 [ 56.146477][ T5173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.159295][ T5173] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.191654][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.213493][ T5173] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.611: bit already cleared for inode 15 [ 56.230289][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 56.323506][ T29] audit: type=1400 audit(1756321573.668:1743): avc: denied { link } for pid=5171 comm="syz.1.611" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.779440][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.895723][ T29] audit: type=1326 audit(1756321574.358:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 56.956170][ T5189] loop1: detected capacity change from 0 to 1024 [ 56.967619][ T5188] syzkaller0: entered allmulticast mode [ 56.968729][ T29] audit: type=1326 audit(1756321574.358:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 56.973925][ T5189] EXT4-fs: Ignoring removed nobh option [ 56.996651][ T29] audit: type=1326 audit(1756321574.378:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 57.002493][ T5188] syzkaller0: entered promiscuous mode [ 57.025561][ T29] audit: type=1326 audit(1756321574.388:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 57.054394][ T29] audit: type=1326 audit(1756321574.398:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 57.079345][ T5188] syzkaller0 (unregistering): left allmulticast mode [ 57.086106][ T5188] syzkaller0 (unregistering): left promiscuous mode [ 57.086155][ T5189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.146445][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.214174][ T5197] loop2: detected capacity change from 0 to 164 [ 57.225007][ T5197] syz.2.617: attempt to access beyond end of device [ 57.225007][ T5197] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 57.239332][ T5197] syz.2.617: attempt to access beyond end of device [ 57.239332][ T5197] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 58.077126][ T5211] loop4: detected capacity change from 0 to 128 [ 58.112392][ T5211] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.138119][ T5211] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.168411][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.626'. [ 58.338796][ T5230] pim6reg1: entered promiscuous mode [ 58.344428][ T5230] pim6reg1: entered allmulticast mode [ 58.371562][ T5232] bridge_slave_1: left allmulticast mode [ 58.377331][ T5232] bridge_slave_1: left promiscuous mode [ 58.383054][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.454868][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.571449][ T5242] loop5: detected capacity change from 0 to 1024 [ 58.579066][ T5242] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.590243][ T5242] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.601019][ T5242] JBD2: no valid journal superblock found [ 58.606864][ T5242] EXT4-fs (loop5): Could not load journal inode [ 58.617914][ T5242] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 59.303636][ T5258] loop1: detected capacity change from 0 to 512 [ 59.316089][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.329640][ T5258] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.416722][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.713927][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 59.713942][ T29] audit: type=1326 audit(1756321577.178:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.746442][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 59.749185][ T29] audit: type=1326 audit(1756321577.208:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.779045][ T29] audit: type=1326 audit(1756321577.208:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.802577][ T29] audit: type=1326 audit(1756321577.208:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.826168][ T29] audit: type=1326 audit(1756321577.208:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.849049][ T5271] loop2: detected capacity change from 0 to 128 [ 59.850125][ T29] audit: type=1326 audit(1756321577.208:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.879659][ T29] audit: type=1326 audit(1756321577.208:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.903083][ T29] audit: type=1326 audit(1756321577.208:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.926669][ T29] audit: type=1326 audit(1756321577.208:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 59.950063][ T29] audit: type=1326 audit(1756321577.208:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1a777ebe9 code=0x7ffc0000 [ 60.615611][ T5376] loop5: detected capacity change from 0 to 1024 [ 60.622668][ T5376] EXT4-fs: Ignoring removed nobh option [ 60.929375][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 61.860396][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 61.911930][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 61.979605][ T5475] netlink: 100 bytes leftover after parsing attributes in process `syz.1.677'. [ 62.069375][ T5477] netlink: 64 bytes leftover after parsing attributes in process `syz.5.678'. [ 62.241000][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 62.683733][ T5490] loop1: detected capacity change from 0 to 1024 [ 62.831492][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 62.840482][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.847881][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.863636][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.871065][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.896807][ T5513] loop0: detected capacity change from 0 to 1024 [ 62.911710][ T5512] lo speed is unknown, defaulting to 1000 [ 63.196179][ T5526] syz.0.691 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.548216][ T5534] loop4: detected capacity change from 0 to 512 [ 63.550322][ T5535] syzkaller0: entered allmulticast mode [ 63.565570][ T5534] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.854414][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 63.930400][ T5558] loop4: detected capacity change from 0 to 1024 [ 64.867919][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 64.867990][ T29] audit: type=1326 audit(1756321582.328:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 64.897678][ T29] audit: type=1326 audit(1756321582.328:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 64.983284][ T29] audit: type=1400 audit(1756321582.358:2149): avc: denied { name_bind } for pid=5580 comm="syz.5.714" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 65.004492][ T29] audit: type=1326 audit(1756321582.388:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.027918][ T29] audit: type=1326 audit(1756321582.388:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.051587][ T29] audit: type=1326 audit(1756321582.398:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.075141][ T29] audit: type=1326 audit(1756321582.398:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.098591][ T29] audit: type=1326 audit(1756321582.398:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.122125][ T29] audit: type=1326 audit(1756321582.398:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.145519][ T29] audit: type=1326 audit(1756321582.418:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 65.254502][ T5600] loop5: detected capacity change from 0 to 2048 [ 65.265581][ T5600] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.279006][ T5600] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.719: bit already cleared for inode 15 [ 65.843085][ T5613] loop5: detected capacity change from 0 to 1024 [ 65.898917][ T4572] EXT4-fs unmount: 13 callbacks suppressed [ 65.898983][ T4572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.986490][ T5625] loop5: detected capacity change from 0 to 256 [ 66.441351][ T5640] lo speed is unknown, defaulting to 1000 [ 67.283786][ T5663] loop4: detected capacity change from 0 to 2048 [ 67.365458][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.383587][ T5663] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.421089][ T5663] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.736: bit already cleared for inode 15 [ 67.705243][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.626522][ T5790] ref_ctr increment failed for inode: 0x318 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888119f69700 [ 68.895319][ T5822] loop0: detected capacity change from 0 to 1024 [ 68.905690][ T5822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.940676][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.660398][ T5937] loop1: detected capacity change from 0 to 8192 [ 69.694307][ T5937] loop1: p1 p2[DM] p4 [ 69.698514][ T5937] loop1: p1 size 196608 extends beyond EOD, truncated [ 69.707330][ T5937] loop1: p2 start 4292936063 is beyond EOD, truncated [ 69.714236][ T5937] loop1: p4 size 50331648 extends beyond EOD, truncated [ 69.897264][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 69.897276][ T29] audit: type=1400 audit(1756321587.358:2241): avc: denied { search } for pid=5949 comm="syz.5.753" name="/" dev="configfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.919611][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 69.926673][ T29] audit: type=1326 audit(1756321587.378:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 69.958213][ T29] audit: type=1326 audit(1756321587.378:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 69.982005][ T29] audit: type=1326 audit(1756321587.378:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 69.991416][ T5954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.005543][ T29] audit: type=1326 audit(1756321587.378:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 70.035458][ T29] audit: type=1326 audit(1756321587.378:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 70.059064][ T29] audit: type=1326 audit(1756321587.378:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263fa8ebe9 code=0x7ffc0000 [ 70.082630][ T29] audit: type=1400 audit(1756321587.378:2248): avc: denied { search } for pid=5949 comm="syz.5.753" name="/" dev="configfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.083706][ T5954] vlan2: entered allmulticast mode [ 70.104780][ T29] audit: type=1400 audit(1756321587.378:2249): avc: denied { read open } for pid=5949 comm="syz.5.753" path="/" dev="configfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.132330][ T5954] bond2: entered allmulticast mode [ 70.235946][ T5965] IPv6: sit1: Disabled Multicast RS [ 70.273085][ T29] audit: type=1326 audit(1756321587.728:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67916debe9 code=0x7ffc0000 [ 70.276046][ T5967] netlink: 168 bytes leftover after parsing attributes in process `syz.2.760'. [ 70.305701][ T5967] C: renamed from team_slave_0 [ 71.040693][ T5975] ÿÿÿÿÿÿ: renamed from vlan1 [ 71.113635][ T5973] loop0: detected capacity change from 0 to 8192 [ 71.163724][ T5973] loop0: p1 p2[DM] p4 [ 71.173466][ T5973] loop0: p1 size 196608 extends beyond EOD, truncated [ 71.193861][ T5973] loop0: p2 start 4292936063 is beyond EOD, truncated [ 71.200706][ T5973] loop0: p4 size 50331648 extends beyond EOD, truncated [ 71.921530][ T6111] loop4: detected capacity change from 0 to 1024 [ 71.929567][ T6111] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.940743][ T6111] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.949007][ T6111] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.956324][ T6111] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.768: Invalid inode table block 0 in block_group 0 [ 71.969200][ T6111] EXT4-fs (loop4): Remounting filesystem read-only [ 71.976072][ T6111] EXT4-fs (loop4): 1 truncate cleaned up [ 71.982733][ T6111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.013966][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.029791][ T6121] loop5: detected capacity change from 0 to 1024 [ 72.045267][ T6121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.072374][ T6121] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.169243][ T4572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.326777][ T6138] loop1: detected capacity change from 0 to 2048 [ 72.367836][ T6138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.427867][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 72.608109][ T6142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.665245][ T6145] vlan2: entered allmulticast mode [ 72.670498][ T6145] bond1: entered allmulticast mode [ 72.768630][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.988119][ T6153] loop4: detected capacity change from 0 to 8192 [ 73.059763][ T6159] lo speed is unknown, defaulting to 1000 [ 73.193855][ T6153] loop4: p1 p2[DM] p4 [ 73.198201][ T6153] loop4: p1 size 196608 extends beyond EOD, truncated [ 73.219572][ T6153] loop4: p2 start 4292936063 is beyond EOD, truncated [ 73.226437][ T6153] loop4: p4 size 50331648 extends beyond EOD, truncated [ 74.442422][ T6168] loop0: detected capacity change from 0 to 1024 [ 74.461690][ T6168] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.488803][ T6168] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.497114][ T6168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.504467][ T6168] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.784: Invalid inode table block 0 in block_group 0 [ 74.517355][ T6168] EXT4-fs (loop0): Remounting filesystem read-only [ 74.524295][ T6168] EXT4-fs (loop0): 1 truncate cleaned up [ 74.530718][ T6168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.583335][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.682904][ T6178] IPv6: sit1: Disabled Multicast RS [ 74.914450][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 74.914465][ T29] audit: type=1326 audit(1756321592.378:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 74.976148][ T29] audit: type=1326 audit(1756321592.408:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 74.999639][ T29] audit: type=1326 audit(1756321592.408:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.023035][ T29] audit: type=1326 audit(1756321592.408:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.046394][ T29] audit: type=1326 audit(1756321592.408:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.069783][ T29] audit: type=1326 audit(1756321592.408:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.093136][ T29] audit: type=1326 audit(1756321592.408:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.116494][ T29] audit: type=1326 audit(1756321592.408:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.139908][ T29] audit: type=1326 audit(1756321592.408:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.163386][ T29] audit: type=1326 audit(1756321592.408:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.5.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8194ebe9 code=0x7ffc0000 [ 75.806691][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 75.833961][ T6199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.848714][ T6199] vlan1: entered allmulticast mode [ 75.853998][ T6199] bond1: entered allmulticast mode [ 76.686692][ T6215] lo speed is unknown, defaulting to 1000 [ 77.274152][ T6216] lo speed is unknown, defaulting to 1000 [ 77.422730][ T6210] loop5: detected capacity change from 0 to 8192 [ 78.434427][ T6210] loop5: p1 p2[DM] p4 [ 78.451347][ T6210] loop5: p1 size 196608 extends beyond EOD, truncated [ 78.491366][ T6210] loop5: p2 start 4292936063 is beyond EOD, truncated [ 78.498269][ T6210] loop5: p4 size 50331648 extends beyond EOD, truncated [ 78.723304][ T6231] lo speed is unknown, defaulting to 1000 [ 78.759834][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 78.804481][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.948522][ T6241] vlan0: entered allmulticast mode [ 78.953716][ T6241] bond1: entered allmulticast mode [ 79.366152][ T6253] netlink: 'gtp': attribute type 30 has an invalid length. [ 79.860536][ T6264] lo speed is unknown, defaulting to 1000 [ 80.773962][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 80.894001][ T6282] tipc: Enabled bearer , priority 0 [ 80.902422][ T6281] tipc: Resetting bearer [ 80.944034][ T6281] tipc: Disabling bearer [ 81.010534][ T6289] loop4: detected capacity change from 0 to 512 [ 81.038128][ T6289] EXT4-fs (loop4): too many log groups per flexible block group [ 81.046173][ T6289] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 81.075372][ T6289] EXT4-fs (loop4): mount failed [ 81.080646][ T6293] loop5: detected capacity change from 0 to 164 [ 81.090547][ T6293] syz.5.824: attempt to access beyond end of device [ 81.090547][ T6293] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.104890][ T6293] syz.5.824: attempt to access beyond end of device [ 81.104890][ T6293] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.140202][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.826'. [ 81.174859][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.191885][ T6298] vlan0: entered allmulticast mode [ 81.197149][ T6298] bond0: entered allmulticast mode [ 81.393823][ T6310] loop1: detected capacity change from 0 to 512 [ 81.401175][ T6310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.414849][ T6310] EXT4-fs (loop1): 1 truncate cleaned up [ 81.426507][ T6310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.552850][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.736947][ T6326] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 81.782094][ T6328] sd 0:0:1:0: device reset [ 81.834627][ T6330] veth0_to_team: entered promiscuous mode [ 81.885711][ T6323] tipc: Enabled bearer , priority 0 [ 81.900958][ T6335] siw: device registration error -23 [ 81.961789][ T6321] tipc: Resetting bearer [ 81.985703][ T6321] tipc: Disabling bearer [ 82.007870][ T6336] lo speed is unknown, defaulting to 1000 [ 82.186162][ T6334] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.309706][ T6334] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.414011][ T6342] loop2: detected capacity change from 0 to 512 [ 82.445469][ T6334] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.464772][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 82.781460][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 82.797052][ T6334] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.850593][ T6348] loop2: detected capacity change from 0 to 1024 [ 82.867467][ T6348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.935769][ T6353] loop0: detected capacity change from 0 to 512 [ 82.943334][ T6353] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.954150][ T4390] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.955749][ T6353] EXT4-fs (loop0): 1 truncate cleaned up [ 82.969788][ T4390] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 82.975680][ T6353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.986981][ T4390] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.986981][ T4390] [ 82.987000][ T4390] EXT4-fs (loop2): Total free blocks count 0 [ 83.009465][ T6340] lo speed is unknown, defaulting to 1000 [ 83.014859][ T4390] EXT4-fs (loop2): Free/Dirty block details [ 83.014925][ T4390] EXT4-fs (loop2): free_blocks=68451041280 [ 83.014939][ T4390] EXT4-fs (loop2): dirty_blocks=320 [ 83.014951][ T4390] EXT4-fs (loop2): Block reservation details [ 83.014962][ T4390] EXT4-fs (loop2): i_reserved_data_blocks=20 [ 83.105343][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.126645][ T6356] loop5: detected capacity change from 0 to 2048 [ 83.179313][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.189494][ T4390] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.198296][ T4390] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.207082][ T4390] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.222190][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 83.222203][ T29] audit: type=1326 audit(1756321600.678:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.252309][ T4390] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.279832][ T29] audit: type=1326 audit(1756321600.688:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.303212][ T29] audit: type=1326 audit(1756321600.688:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.327050][ T29] audit: type=1326 audit(1756321600.688:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.350799][ T29] audit: type=1326 audit(1756321600.688:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.374723][ T29] audit: type=1326 audit(1756321600.688:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.398413][ T29] audit: type=1326 audit(1756321600.688:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.421872][ T29] audit: type=1326 audit(1756321600.688:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.445244][ T29] audit: type=1326 audit(1756321600.688:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.446999][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 83.468902][ T29] audit: type=1326 audit(1756321600.688:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 83.554181][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 83.678767][ T6379] loop2: detected capacity change from 0 to 512 [ 83.732755][ T6379] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.763164][ T6379] EXT4-fs (loop2): mount failed [ 84.442762][ T6388] loop2: detected capacity change from 0 to 512 [ 84.451993][ T6388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.459613][ T6388] EXT4-fs: Ignoring removed i_version option [ 84.474687][ T6388] EXT4-fs (loop2): 1 orphan inode deleted [ 84.480849][ T6391] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.858'. [ 84.484395][ T6388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.492404][ T6390] 9pnet_fd: Insufficient options for proto=fd [ 84.551801][ T6390] loop1: detected capacity change from 0 to 512 [ 84.558309][ T6391] loop0: detected capacity change from 0 to 8192 [ 84.577694][ T6390] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.867: bg 0: block 248: padding at end of block bitmap is not set [ 84.593835][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.629543][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 84.661684][ T6399] lo speed is unknown, defaulting to 1000 [ 84.832856][ T6390] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.867: Failed to acquire dquot type 1 [ 84.892609][ T6404] loop2: detected capacity change from 0 to 512 [ 84.913356][ T6390] EXT4-fs (loop1): 1 truncate cleaned up [ 84.933716][ T6404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.967477][ T6390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.009879][ T6390] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.027499][ T6404] EXT4-fs (loop2): 1 truncate cleaned up [ 85.048833][ T6404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.112360][ T6404] openvswitch: netlink: Message has 6 unknown bytes. [ 85.491379][ T6415] loop0: detected capacity change from 0 to 128 [ 85.500467][ T6415] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.512905][ T6415] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.544820][ T6390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.554940][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.578983][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.620792][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 85.638958][ T6420] bond0: (slave dummy0): Releasing backup interface [ 85.659888][ T6424] netlink: 'syz.5.872': attribute type 4 has an invalid length. [ 85.669954][ T6424] netlink: 'syz.5.872': attribute type 4 has an invalid length. [ 85.698302][ T6430] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 85.709706][ T6431] loop5: detected capacity change from 0 to 512 [ 85.721149][ T6431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.734436][ T6431] EXT4-fs (loop5): 1 truncate cleaned up [ 85.743098][ T6431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.816259][ T4572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.828101][ T6439] loop0: detected capacity change from 0 to 512 [ 85.853408][ T6439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.890450][ T6439] EXT4-fs (loop0): 1 truncate cleaned up [ 85.903547][ T6439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.928466][ T6439] openvswitch: netlink: Message has 6 unknown bytes. [ 85.955371][ T6450] syzkaller0: entered promiscuous mode [ 85.960902][ T6450] syzkaller0: entered allmulticast mode [ 85.964538][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.994256][ T6452] loop2: detected capacity change from 0 to 512 [ 86.003494][ T6452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.011050][ T6452] EXT4-fs: Ignoring removed i_version option [ 86.045656][ T6458] 9pnet_fd: Insufficient options for proto=fd [ 86.060926][ T6452] EXT4-fs (loop2): 1 orphan inode deleted [ 86.068336][ T6458] loop5: detected capacity change from 0 to 512 [ 86.070346][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.148980][ T6452] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 86.164447][ T6458] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.883: bg 0: block 248: padding at end of block bitmap is not set [ 86.190422][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.199997][ T6458] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.883: Failed to acquire dquot type 1 [ 86.217043][ T6458] EXT4-fs (loop5): 1 truncate cleaned up [ 86.223534][ T6458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.240335][ T6458] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.251293][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.884'. [ 86.268624][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 86.278791][ T6458] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.289117][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 86.610177][ T6479] loop2: detected capacity change from 0 to 512 [ 86.677880][ T6479] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.703565][ T6479] EXT4-fs (loop2): mount failed [ 86.766718][ T6489] loop0: detected capacity change from 0 to 128 [ 86.784118][ T6487] loop4: detected capacity change from 0 to 2048 [ 86.784285][ T6489] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.817686][ T6489] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.966820][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.986709][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 87.014778][ T6494] loop4: detected capacity change from 0 to 512 [ 87.026482][ T6494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.038813][ T6494] EXT4-fs: Ignoring removed i_version option [ 87.065566][ T6504] loop5: detected capacity change from 0 to 1024 [ 87.078167][ T6504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.091431][ T6494] EXT4-fs (loop4): 1 orphan inode deleted [ 87.205991][ T4390] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.226698][ T6494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.242709][ T4390] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 87.255101][ T4390] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.255101][ T4390] [ 87.264855][ T4390] EXT4-fs (loop5): Total free blocks count 0 [ 87.270915][ T4390] EXT4-fs (loop5): Free/Dirty block details [ 87.276835][ T4390] EXT4-fs (loop5): free_blocks=68451041280 [ 87.282699][ T4390] EXT4-fs (loop5): dirty_blocks=320 [ 87.287973][ T4390] EXT4-fs (loop5): Block reservation details [ 87.294062][ T4390] EXT4-fs (loop5): i_reserved_data_blocks=20 [ 87.305584][ T4572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.315648][ T6494] netlink: 'syz.4.897': attribute type 10 has an invalid length. [ 87.350425][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.371449][ T6512] netlink: 'syz.5.903': attribute type 4 has an invalid length. [ 87.459294][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'. [ 87.476187][ T6521] loop0: detected capacity change from 0 to 2048 [ 87.516692][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 87.555037][ T6530] loop5: detected capacity change from 0 to 128 [ 87.563386][ T6530] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.575527][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.582307][ T6530] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.613836][ T6532] bond0: (slave dummy0): Releasing backup interface [ 87.641038][ T6532] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 87.711866][ T6524] netlink: 'syz.4.909': attribute type 10 has an invalid length. [ 87.719734][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.909'. [ 87.756463][ T6524] dummy0: entered promiscuous mode [ 87.767448][ T6524] bond2: (slave dummy0): Releasing backup interface [ 87.831029][ T6536] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 87.865819][ T6543] loop1: detected capacity change from 0 to 512 [ 87.865954][ T6536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.880243][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 87.881887][ T6543] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.901975][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 87.915621][ T6536] bond3 (unregistering): Released all slaves [ 87.922599][ T6543] EXT4-fs (loop1): 1 truncate cleaned up [ 87.934224][ T6546] loop0: detected capacity change from 0 to 512 [ 87.942190][ T4572] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.945944][ T6543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.952248][ T6546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.981813][ T6546] EXT4-fs (loop0): 1 truncate cleaned up [ 87.984150][ T6543] openvswitch: netlink: Message has 6 unknown bytes. [ 87.995421][ T6546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.019896][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.119843][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.135528][ T6552] loop1: detected capacity change from 0 to 512 [ 88.151974][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 88.163989][ T6552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.176136][ T6552] EXT4-fs: Ignoring removed i_version option [ 88.201925][ T6552] EXT4-fs (loop1): 1 orphan inode deleted [ 88.211576][ T6552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.445403][ T6552] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 88.521662][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.055515][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 89.055538][ T29] audit: type=1326 audit(1756321606.518:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.175231][ T29] audit: type=1326 audit(1756321606.548:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.199024][ T29] audit: type=1326 audit(1756321606.548:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.222490][ T29] audit: type=1326 audit(1756321606.548:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.245836][ T29] audit: type=1326 audit(1756321606.548:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.269597][ T29] audit: type=1326 audit(1756321606.548:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.292985][ T29] audit: type=1326 audit(1756321606.548:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.316501][ T29] audit: type=1326 audit(1756321606.548:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 89.339983][ T29] audit: type=1326 audit(1756321606.548:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcb945d69f code=0x7ffc0000 [ 89.363125][ T29] audit: type=1326 audit(1756321606.548:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6580 comm="syz.4.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb945ebe9 code=0x7ffc0000 [ 90.671174][ T6598] loop1: detected capacity change from 0 to 512 [ 90.690938][ T6598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.709715][ T6598] EXT4-fs (loop1): 1 truncate cleaned up [ 90.716007][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.759831][ T6601] 0ªî{X¹¦: renamed from 30ªX¹¦D [ 90.789363][ T6601] 0ªî{X¹¦: entered allmulticast mode [ 90.807339][ T6601] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 90.843465][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.890987][ T6603] syzkaller0: entered promiscuous mode [ 90.896556][ T6603] syzkaller0: entered allmulticast mode [ 91.175395][ T6612] loop4: detected capacity change from 0 to 4096 [ 91.190020][ T6612] EXT4-fs: test_dummy_encryption option not supported [ 91.253832][ T6612] lo speed is unknown, defaulting to 1000 [ 91.515401][ T6616] veth0: entered promiscuous mode [ 91.521063][ T6616] __nla_validate_parse: 3 callbacks suppressed [ 91.521074][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 92.105303][ T6652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.207846][ T6652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.291434][ T6652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.389823][ T6652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.478937][ T4390] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.506457][ T4390] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.525312][ T4390] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.543261][ T4390] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.726597][ T6670] loop1: detected capacity change from 0 to 512 [ 92.740799][ T6670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.795626][ T6670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.863348][ T6670] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.079685][ T29] kauditd_printk_skb: 1756 callbacks suppressed [ 94.079700][ T29] audit: type=1326 audit(1756321611.538:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f263fa85ba7 code=0x7ffc0000 [ 94.109493][ T29] audit: type=1326 audit(1756321611.538:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f263fa2ade9 code=0x7ffc0000 [ 94.132778][ T29] audit: type=1326 audit(1756321611.538:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f263fa85ba7 code=0x7ffc0000 [ 94.156006][ T29] audit: type=1326 audit(1756321611.538:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f263fa2ade9 code=0x7ffc0000 [ 94.179309][ T29] audit: type=1326 audit(1756321611.538:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f263fa85ba7 code=0x7ffc0000 [ 94.202715][ T29] audit: type=1326 audit(1756321611.538:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f263fa2ade9 code=0x7ffc0000 [ 94.226018][ T29] audit: type=1326 audit(1756321611.538:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f263fa85ba7 code=0x7ffc0000 [ 94.249845][ T29] audit: type=1326 audit(1756321611.538:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f263fa2ade9 code=0x7ffc0000 [ 94.273366][ T29] audit: type=1326 audit(1756321611.538:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f263fa85ba7 code=0x7ffc0000 [ 94.296648][ T29] audit: type=1326 audit(1756321611.538:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f263fa2ade9 code=0x7ffc0000 [ 94.983414][ T6676] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.743668][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.792687][ T6681] netlink: 'syz.1.968': attribute type 1 has an invalid length. [ 95.806840][ T6681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.821347][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 95.833257][ T6681] bond2 (unregistering): Released all slaves [ 96.354609][ T6695] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 96.362275][ T6695] netlink: 'syz.0.974': attribute type 4 has an invalid length. [ 96.370040][ T6695] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.974'. [ 96.371901][ T6693] lo speed is unknown, defaulting to 1000 [ 96.380201][ T6695] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 96.385705][ T6692] loop4: detected capacity change from 0 to 512 [ 96.392512][ T6695] netlink: 'syz.0.974': attribute type 4 has an invalid length. [ 96.392525][ T6695] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.974'. [ 96.406094][ T6697] tipc: Started in network mode [ 96.406164][ T6697] tipc: Node identity ac14140f, cluster identity 4711 [ 96.406229][ T6697] tipc: New replicast peer: 255.255.255.255 [ 96.406435][ T6697] tipc: Enabled bearer , priority 10 [ 96.465366][ T6692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.481857][ T6692] EXT4-fs: Ignoring removed i_version option [ 96.577360][ T6692] EXT4-fs (loop4): 1 orphan inode deleted [ 96.595939][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.641828][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.236565][ T6755] loop1: detected capacity change from 0 to 128 [ 97.490535][ T6756] ================================================================== [ 97.498726][ T6756] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 97.506958][ T6756] [ 97.509283][ T6756] write to 0xffff888109606b28 of 4 bytes by task 6755 on cpu 1: [ 97.516908][ T6756] writeback_single_inode+0x14a/0x3e0 [ 97.522287][ T6756] sync_inode_metadata+0x5b/0x90 [ 97.527230][ T6756] __generic_file_fsync+0xf8/0x140 [ 97.532431][ T6756] fat_file_fsync+0x49/0x100 [ 97.537024][ T6756] vfs_fsync_range+0x10d/0x130 [ 97.541797][ T6756] generic_file_write_iter+0x1b8/0x2f0 [ 97.547264][ T6756] iter_file_splice_write+0x663/0xa60 [ 97.552640][ T6756] direct_splice_actor+0x153/0x2a0 [ 97.557753][ T6756] splice_direct_to_actor+0x30f/0x680 [ 97.563122][ T6756] do_splice_direct+0xda/0x150 [ 97.567888][ T6756] do_sendfile+0x380/0x650 [ 97.572395][ T6756] __x64_sys_sendfile64+0x105/0x150 [ 97.577593][ T6756] x64_sys_call+0x2bb0/0x2ff0 [ 97.582269][ T6756] do_syscall_64+0xd2/0x200 [ 97.586868][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.592755][ T6756] [ 97.595068][ T6756] read to 0xffff888109606b28 of 4 bytes by task 6756 on cpu 0: [ 97.602596][ T6756] __mark_inode_dirty+0x191/0x750 [ 97.607794][ T6756] fat_update_time+0x1ec/0x200 [ 97.612563][ T6756] touch_atime+0x148/0x340 [ 97.616989][ T6756] filemap_splice_read+0x6ba/0x740 [ 97.622107][ T6756] splice_direct_to_actor+0x26f/0x680 [ 97.627473][ T6756] do_splice_direct+0xda/0x150 [ 97.632235][ T6756] do_sendfile+0x380/0x650 [ 97.636649][ T6756] __x64_sys_sendfile64+0x105/0x150 [ 97.641872][ T6756] x64_sys_call+0x2bb0/0x2ff0 [ 97.646554][ T6756] do_syscall_64+0xd2/0x200 [ 97.651062][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.656959][ T6756] [ 97.659276][ T6756] value changed: 0x00000020 -> 0x00000008 [ 97.665018][ T6756] [ 97.667333][ T6756] Reported by Kernel Concurrency Sanitizer on: [ 97.673753][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.1.997 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.683384][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.693434][ T6756] ================================================================== [ 97.701689][ T9] tipc: Node number set to 2886997007