last executing test programs: 1m7.555755025s ago: executing program 0 (id=88): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[@rights={{0x10}}], 0x10}, 0x20010123) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x40000001, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m7.283491256s ago: executing program 0 (id=93): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) unshare(0x2000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) fsmount(r0, 0x0, 0x0) 1m7.219663926s ago: executing program 0 (id=96): r0 = epoll_create1(0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) close_range(r0, r2, 0x0) 1m7.152042676s ago: executing program 0 (id=98): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 1m6.761708907s ago: executing program 0 (id=111): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000580)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x0) 1m6.512896138s ago: executing program 0 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m6.512652188s ago: executing program 32 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.738338476s ago: executing program 2 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1e4c, &(0x7f0000000440)={0x0, 0x7fe5, 0x0, 0x8000000, 0xfffffffe}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}]}, 0x8}, 0x1) 1.662943046s ago: executing program 2 (id=1734): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xd, &(0x7f0000000100), 0x0, 0x597, &(0x7f0000000bc0)="$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") 1.658029446s ago: executing program 3 (id=1735): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.591006246s ago: executing program 3 (id=1736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca", 0x3}], 0x1}, 0x4000) 1.494303617s ago: executing program 3 (id=1737): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000008090900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 1.461183376s ago: executing program 2 (id=1738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)="457a1a", 0x3}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.442879637s ago: executing program 3 (id=1739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @loopback, 0x8000000}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @empty}, 0x1c) 1.339451427s ago: executing program 3 (id=1741): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) brk(0x20001000) 1.339224477s ago: executing program 4 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r0, 0x4000, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 1.338704567s ago: executing program 3 (id=1743): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1.256971287s ago: executing program 4 (id=1744): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) 1.135499827s ago: executing program 4 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlockall(0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000587000/0x1000)=nil, 0x1000, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 1.018701758s ago: executing program 5 (id=1750): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 858.799398ms ago: executing program 5 (id=1751): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 688.420058ms ago: executing program 4 (id=1753): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0xe87}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 687.016788ms ago: executing program 5 (id=1754): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 628.210809ms ago: executing program 4 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r3}, 0x20) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e20, @dev}, 0xfffffffe}}, 0x2e) 627.734099ms ago: executing program 4 (id=1757): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x48) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x380, 0x380, 0x290, 0x0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 627.460139ms ago: executing program 5 (id=1758): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@data_err_ignore}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendfile(r0, r3, 0x0, 0x100001) 541.225669ms ago: executing program 2 (id=1761): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2, 0x600, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 540.927059ms ago: executing program 1 (id=1762): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write(r3, &(0x7f0000000140)='i', 0x1) read(r2, &(0x7f0000019440)=""/102391, 0x18ff7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$P9_RVERSION(r3, &(0x7f0000000880)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) dup2(r0, r1) 490.646609ms ago: executing program 5 (id=1763): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 391.307029ms ago: executing program 2 (id=1764): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280009a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$msr(r0, &(0x7f00000000c0)=""/192, 0xc0) 308.98056ms ago: executing program 5 (id=1765): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) io_uring_enter(0xffffffffffffffff, 0x291c, 0xa8b1, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 300.272009ms ago: executing program 1 (id=1766): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) personality(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f00000007c0)={[{@oldalloc}, {@noload}, {@lazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@grpid}, {@resuid}, {@usrquota}, {@nodioread_nolock}], [{@dont_measure}]}, 0x0, 0x518, &(0x7f00000013c0)="$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") process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 204.98254ms ago: executing program 1 (id=1767): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0xff02, 0x5, 0xfffc, 0x6, 0xa, "0500ff00001300"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 191.712479ms ago: executing program 2 (id=1768): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 97.07128ms ago: executing program 1 (id=1769): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209", 0x29}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) 56.30065ms ago: executing program 1 (id=1770): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0xfd9a2ffdf48b2275) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) getpgid(r2) unshare(0x40000000) 0s ago: executing program 1 (id=1771): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6}]}) kernel console output (not intermixed with test programs): e from 0 to 164 [ 59.897948][ T5629] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 59.909097][ T5629] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 59.923802][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 60.081035][ T5646] loop1: detected capacity change from 0 to 512 [ 60.083315][ T5647] loop4: detected capacity change from 0 to 1024 [ 60.094410][ T5647] EXT4-fs: Ignoring removed nobh option [ 60.100098][ T5647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.101437][ T5646] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.110503][ T5647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.114239][ T5646] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.724: bg 0: block 248: padding at end of block bitmap is not set [ 60.136008][ T5646] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.724: Failed to acquire dquot type 1 [ 60.147571][ T5647] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 60.148050][ T5646] EXT4-fs (loop1): 1 truncate cleaned up [ 60.259790][ T5659] loop1: detected capacity change from 0 to 512 [ 60.267009][ T5659] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.276266][ T5659] EXT4-fs (loop1): blocks per group (3008) and clusters per group (32768) inconsistent [ 60.345104][ T5661] loop5: detected capacity change from 0 to 512 [ 60.369170][ T5661] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.380394][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 60.380407][ T29] audit: type=1400 audit(1733888548.167:1978): avc: denied { setattr } for pid=5660 comm="syz.5.732" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.429978][ T29] audit: type=1326 audit(1733888548.217:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.454394][ T29] audit: type=1326 audit(1733888548.217:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.477809][ T29] audit: type=1326 audit(1733888548.217:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.501282][ T29] audit: type=1326 audit(1733888548.217:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.524610][ T29] audit: type=1326 audit(1733888548.217:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.548094][ T29] audit: type=1326 audit(1733888548.217:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.571412][ T29] audit: type=1326 audit(1733888548.217:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.594731][ T29] audit: type=1326 audit(1733888548.217:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.618099][ T29] audit: type=1326 audit(1733888548.217:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 60.761327][ T4283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.832227][ T4283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.851846][ T5686] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.860705][ T5686] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.869458][ T5686] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.878201][ T5686] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.887177][ T5686] vxlan0: entered promiscuous mode [ 60.892511][ T5686] vxlan0: entered allmulticast mode [ 60.899431][ T5686] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.908352][ T5686] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.917341][ T5686] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.926210][ T5686] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.943813][ T4283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.026912][ T4283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.053963][ T5698] bond0: entered promiscuous mode [ 61.055615][ T5701] loop3: detected capacity change from 0 to 512 [ 61.059040][ T5698] bond0: entered allmulticast mode [ 61.067312][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.085405][ T5698] bond0 (unregistering): Released all slaves [ 61.120270][ T5701] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.156289][ T4283] bridge_slave_1: left allmulticast mode [ 61.162055][ T4283] bridge_slave_1: left promiscuous mode [ 61.167749][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.176787][ T4283] bridge_slave_0: left allmulticast mode [ 61.183163][ T4283] bridge_slave_0: left promiscuous mode [ 61.189019][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.289440][ T5720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5720 comm=syz.5.752 [ 61.301845][ T5720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5720 comm=syz.5.752 [ 61.316541][ T5720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'. [ 61.325951][ T5720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=5720 comm=syz.5.752 [ 61.365848][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.379158][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.389272][ T4283] bond0 (unregistering): Released all slaves [ 61.404116][ T5678] chnl_net:caif_netlink_parms(): no params data found [ 61.454564][ T4283] hsr_slave_0: left promiscuous mode [ 61.460792][ T4283] hsr_slave_1: left promiscuous mode [ 61.467032][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.476544][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.484061][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.496172][ T4283] veth1_vlan: left promiscuous mode [ 61.501460][ T4283] veth0_vlan: left promiscuous mode [ 61.535258][ T5747] bpf_get_probe_write_proto: 5 callbacks suppressed [ 61.535274][ T5747] syz.4.756[5747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.551473][ T5747] syz.4.756[5747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.575461][ T5747] syz.4.756[5747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.607105][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 61.630039][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 61.667056][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.674271][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.687393][ T5678] bridge_slave_0: entered allmulticast mode [ 61.694009][ T5678] bridge_slave_0: entered promiscuous mode [ 61.729739][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.736801][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.750894][ T5678] bridge_slave_1: entered allmulticast mode [ 61.758207][ T5678] bridge_slave_1: entered promiscuous mode [ 61.783273][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.794903][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.825984][ T5678] team0: Port device team_slave_0 added [ 61.835618][ T5678] team0: Port device team_slave_1 added [ 61.849418][ T5758] netlink: 'syz.2.760': attribute type 13 has an invalid length. [ 61.890478][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.897508][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.923568][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.951158][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.958124][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.984117][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.023121][ T5678] hsr_slave_0: entered promiscuous mode [ 62.031460][ T5678] hsr_slave_1: entered promiscuous mode [ 62.037616][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.045201][ T5678] Cannot create hsr debugfs directory [ 62.181361][ T5786] loop2: detected capacity change from 0 to 128 [ 62.236177][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 62.467917][ T5678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.499727][ T5678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.528912][ T5678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.556017][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 62.583839][ T5827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.773'. [ 62.612851][ T5678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.691742][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.706401][ T5847] loop3: detected capacity change from 0 to 512 [ 62.711609][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.749118][ T5847] ext4: Unknown parameter 'noacl' [ 62.836830][ T5854] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.780'. [ 62.986868][ T5678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.997249][ T5678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.030915][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.038069][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.060678][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.067812][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.200001][ T5894] loop4: detected capacity change from 0 to 128 [ 63.226072][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.235024][ T5894] EXT4-fs: Ignoring removed nobh option [ 63.278063][ T5894] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.435473][ T5678] veth0_vlan: entered promiscuous mode [ 63.469700][ T5678] veth1_vlan: entered promiscuous mode [ 63.504361][ T5678] veth0_macvtap: entered promiscuous mode [ 63.518705][ T5678] veth1_macvtap: entered promiscuous mode [ 63.531957][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.542456][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.552316][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.562829][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.572668][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.583108][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.595418][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.610700][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.621180][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.631006][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.641449][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.651294][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.661757][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.673216][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.681494][ T5678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.690297][ T5678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.699074][ T5678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.707832][ T5678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.730453][ T5941] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 63.793484][ T5949] loop1: detected capacity change from 0 to 128 [ 63.810818][ T5949] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.235378][ T5989] loop4: detected capacity change from 0 to 128 [ 64.269038][ T5994] syz.5.812[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.269176][ T5994] syz.5.812[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.280710][ T5994] syz.5.812[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.297398][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 64.317496][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.324921][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.334017][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.341501][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.382380][ T6001] loop2: detected capacity change from 0 to 128 [ 64.396002][ T6001] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.403917][ T6001] FAT-fs (loop2): Filesystem has been set read-only [ 64.410598][ T6001] syz.2.814: attempt to access beyond end of device [ 64.410598][ T6001] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.426433][ T6001] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.434291][ T6001] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.442952][ T6001] syz.2.814: attempt to access beyond end of device [ 64.442952][ T6001] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.456191][ T6001] syz.2.814: attempt to access beyond end of device [ 64.456191][ T6001] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.471046][ T6001] syz.2.814: attempt to access beyond end of device [ 64.471046][ T6001] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.593770][ T6017] bridge0: port 3(vlan2) entered blocking state [ 64.600197][ T6017] bridge0: port 3(vlan2) entered disabled state [ 64.614221][ T6017] vlan2: entered allmulticast mode [ 64.621458][ T6017] vlan2: left allmulticast mode [ 64.635103][ T6018] netlink: 96 bytes leftover after parsing attributes in process `syz.3.823'. [ 65.107783][ T6075] loop1: detected capacity change from 0 to 128 [ 65.162534][ T6078] veth1_macvtap: left promiscuous mode [ 65.168139][ T6078] macsec0: entered promiscuous mode [ 65.315725][ T6093] loop2: detected capacity change from 0 to 1024 [ 65.338005][ T6093] EXT4-fs: Ignoring removed nobh option [ 65.343598][ T6093] EXT4-fs: Ignoring removed orlov option [ 65.460175][ T6108] xt_hashlimit: size too large, truncated to 1048576 [ 65.738537][ T6122] pim6reg1: entered promiscuous mode [ 65.743975][ T6122] pim6reg1: entered allmulticast mode [ 65.849580][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 65.849597][ T29] audit: type=1326 audit(1733888553.637:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.886122][ T29] audit: type=1326 audit(1733888553.667:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.909531][ T29] audit: type=1326 audit(1733888553.667:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933067][ T29] audit: type=1326 audit(1733888553.667:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933181][ T29] audit: type=1326 audit(1733888553.667:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933293][ T29] audit: type=1326 audit(1733888553.667:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933410][ T29] audit: type=1326 audit(1733888553.667:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933442][ T29] audit: type=1326 audit(1733888553.667:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933474][ T29] audit: type=1326 audit(1733888553.667:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 65.933515][ T29] audit: type=1326 audit(1733888553.667:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 66.086728][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 66.086750][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 66.257703][ T6156] loop2: detected capacity change from 0 to 512 [ 66.287364][ T6156] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.405308][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 66.414194][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 66.572806][ T6191] syz.5.897[6191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.572870][ T6191] syz.5.897[6191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.584290][ T6191] syz.5.897[6191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.625606][ T6193] loop5: detected capacity change from 0 to 512 [ 66.657948][ T6195] loop3: detected capacity change from 0 to 1024 [ 66.671018][ T6193] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.701041][ T6201] loop2: detected capacity change from 0 to 512 [ 66.726042][ T6201] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.825090][ T6214] loop2: detected capacity change from 0 to 128 [ 66.925182][ T6225] loop3: detected capacity change from 0 to 2048 [ 66.942548][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.911'. [ 67.069795][ T3300] EXT4-fs unmount: 47 callbacks suppressed [ 67.069812][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.087739][ T6234] loop2: detected capacity change from 0 to 256 [ 67.102029][ T6236] netlink: 64 bytes leftover after parsing attributes in process `syz.3.914'. [ 67.119608][ T6234] FAT-fs (loop2): Directory bread(block 64) failed [ 67.126257][ T6234] FAT-fs (loop2): Directory bread(block 65) failed [ 67.138844][ T6234] FAT-fs (loop2): Directory bread(block 66) failed [ 67.145539][ T6234] FAT-fs (loop2): Directory bread(block 67) failed [ 67.152349][ T6234] FAT-fs (loop2): Directory bread(block 68) failed [ 67.159230][ T6234] FAT-fs (loop2): Directory bread(block 69) failed [ 67.168207][ T6234] FAT-fs (loop2): Directory bread(block 70) failed [ 67.174780][ T6234] FAT-fs (loop2): Directory bread(block 71) failed [ 67.181740][ T6234] FAT-fs (loop2): Directory bread(block 72) failed [ 67.188352][ T6234] FAT-fs (loop2): Directory bread(block 73) failed [ 67.214866][ T6234] syz.2.913: attempt to access beyond end of device [ 67.214866][ T6234] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 67.274461][ T6246] pim6reg1: entered promiscuous mode [ 67.279891][ T6246] pim6reg1: entered allmulticast mode [ 67.590194][ T24] kernel write not supported for file [eventfd] (pid: 24 comm: kworker/1:0) [ 67.620489][ T6283] macvlan0: entered allmulticast mode [ 67.625932][ T6283] veth1_vlan: entered allmulticast mode [ 67.633715][ T6283] veth1_vlan: left allmulticast mode [ 67.640054][ T6285] syz.2.935 (6285): /proc/6284/oom_adj is deprecated, please use /proc/6284/oom_score_adj instead. [ 67.664254][ T6283] macvlan0 (unregistering): left allmulticast mode [ 67.688300][ T6289] loop1: detected capacity change from 0 to 128 [ 67.732350][ T6289] syz.1.938: attempt to access beyond end of device [ 67.732350][ T6289] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 67.734302][ T6295] syz.2.940[6295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.746091][ T6295] syz.2.940[6295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.757531][ T6295] syz.2.940[6295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.808772][ T6299] loop2: detected capacity change from 0 to 1024 [ 67.831438][ T6299] EXT4-fs: Ignoring removed bh option [ 67.837332][ T6299] EXT4-fs: Ignoring removed bh option [ 67.886981][ T6310] ref_ctr increment failed for inode: 0x6a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881046c79c0 [ 67.893050][ T6299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.907473][ T6309] uprobe: syz.1.946:6309 failed to unregister, leaking uprobe [ 67.953606][ T6317] loop5: detected capacity change from 0 to 512 [ 67.960999][ T6317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.975648][ T6317] EXT4-fs (loop5): 1 truncate cleaned up [ 67.981989][ T6317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.004156][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.082998][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.198922][ T6338] netlink: 56 bytes leftover after parsing attributes in process `syz.3.958'. [ 68.237939][ T6341] loop5: detected capacity change from 0 to 128 [ 68.247605][ T6341] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.260027][ T6341] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.271246][ T6341] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.815671][ T6356] netlink: 132 bytes leftover after parsing attributes in process `syz.5.964'. [ 68.825074][ T6356] netlink: 'syz.5.964': attribute type 10 has an invalid length. [ 68.837007][ T6356] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.196598][ T6395] loop1: detected capacity change from 0 to 2048 [ 69.253001][ T6395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.425392][ T6417] syz.5.990[6417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.425455][ T6417] syz.5.990[6417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.437619][ T6417] syz.5.990[6417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.463221][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.465533][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.497517][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.511552][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.523971][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.536408][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.548804][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.561170][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.573573][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.585941][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.598261][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=syz.2.991 [ 69.716162][ T6434] loop5: detected capacity change from 0 to 1024 [ 69.725401][ T6434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.753005][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.006135][ T6448] qrtr: Invalid version 0 [ 70.131086][ T6458] syzkaller0: entered allmulticast mode [ 70.139509][ T6458] syzkaller0 (unregistering): left allmulticast mode [ 70.364728][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 70.550155][ T6477] loop5: detected capacity change from 0 to 2048 [ 70.599811][ T6477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.682922][ T6485] syzkaller0: entered allmulticast mode [ 70.711191][ T6485] syzkaller0 (unregistering): left allmulticast mode [ 71.074351][ T6498] loop3: detected capacity change from 0 to 1024 [ 71.088594][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.192684][ T6498] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.207719][ T6498] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 71.220110][ T6498] EXT4-fs (loop3): This should not happen!! Data will be lost [ 71.220110][ T6498] [ 71.224117][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 71.229870][ T6498] EXT4-fs (loop3): Total free blocks count 0 [ 71.229886][ T6498] EXT4-fs (loop3): Free/Dirty block details [ 71.229898][ T6498] EXT4-fs (loop3): free_blocks=68451041280 [ 71.229911][ T6498] EXT4-fs (loop3): dirty_blocks=16 [ 71.229924][ T6498] EXT4-fs (loop3): Block reservation details [ 71.267621][ T6498] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 71.331063][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.386707][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 71.386721][ T29] audit: type=1400 audit(1733888559.167:2924): avc: denied { map } for pid=6512 comm="syz.3.1029" path="socket:[14516]" dev="sockfs" ino=14516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 71.397716][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'. [ 71.568508][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.584401][ T6531] loop3: detected capacity change from 0 to 128 [ 71.644727][ T29] audit: type=1326 audit(1733888559.427:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.668223][ T29] audit: type=1326 audit(1733888559.427:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.668351][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 71.691616][ T29] audit: type=1326 audit(1733888559.427:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.723928][ T29] audit: type=1326 audit(1733888559.427:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.747409][ T29] audit: type=1326 audit(1733888559.427:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.766265][ T6539] syz.3.1037: attempt to access beyond end of device [ 71.766265][ T6539] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 71.770858][ T29] audit: type=1326 audit(1733888559.427:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed035227c5 code=0x7ffc0000 [ 71.824296][ T29] audit: type=1326 audit(1733888559.447:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.847660][ T29] audit: type=1326 audit(1733888559.577:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.870965][ T29] audit: type=1326 audit(1733888559.587:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed034eff19 code=0x7ffc0000 [ 71.898617][ T6540] loop5: detected capacity change from 0 to 512 [ 71.905267][ T6540] EXT4-fs: Ignoring removed bh option [ 71.944799][ T6540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.964591][ T6548] pim6reg1: entered promiscuous mode [ 71.969982][ T6548] pim6reg1: entered allmulticast mode [ 71.986931][ T6540] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.004901][ T6542] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 72.042488][ T6540] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #19: comm syz.5.1032: corrupted inode contents [ 72.079146][ T6540] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #19: comm syz.5.1032: mark_inode_dirty error [ 72.095446][ T6540] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #19: comm syz.5.1032: corrupted inode contents [ 72.117457][ T6555] IPv4: Oversized IP packet from 127.202.26.0 [ 72.133463][ T6540] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.1032: mark_inode_dirty error [ 72.161776][ T6540] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.1032: mark inode dirty (error -117) [ 72.176096][ T6540] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 72.210060][ T6560] tipc: Started in network mode [ 72.214967][ T6560] tipc: Node identity 101, cluster identity 4711 [ 72.221359][ T6560] tipc: Node number set to 257 [ 72.266241][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.330065][ T6566] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Q [ 72.401644][ T6578] loop4: detected capacity change from 0 to 512 [ 72.410359][ T6571] loop1: detected capacity change from 0 to 4096 [ 72.417398][ T6575] syz.2.1054[6575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.417461][ T6575] syz.2.1054[6575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.437980][ T6578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.452315][ T6575] syz.2.1054[6575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.466808][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.560063][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.642608][ T6578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.655316][ T6578] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.735931][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.854785][ T6617] loop3: detected capacity change from 0 to 4096 [ 72.869496][ T6617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.914166][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.961452][ T6630] loop4: detected capacity change from 0 to 128 [ 72.976108][ T6632] loop2: detected capacity change from 0 to 1024 [ 72.983070][ T6632] EXT4-fs: Ignoring removed orlov option [ 72.988975][ T6632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.996821][ T6630] syz.4.1076: attempt to access beyond end of device [ 72.996821][ T6630] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 73.008788][ T6632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.069277][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.499805][ T6661] loop5: detected capacity change from 0 to 128 [ 73.618715][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.618715][ T6662] loop5: rw=2049, sector=420, nr_sectors = 8 limit=128 [ 73.632491][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.632491][ T6662] loop5: rw=2049, sector=444, nr_sectors = 8 limit=128 [ 73.646623][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.646623][ T6662] loop5: rw=2049, sector=484, nr_sectors = 8 limit=128 [ 73.660275][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.660275][ T6662] loop5: rw=2049, sector=500, nr_sectors = 16 limit=128 [ 73.674392][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.674392][ T6662] loop5: rw=2049, sector=524, nr_sectors = 8 limit=128 [ 73.688736][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.688736][ T6662] loop5: rw=2049, sector=540, nr_sectors = 8 limit=128 [ 73.703183][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.703183][ T6662] loop5: rw=2049, sector=556, nr_sectors = 8 limit=128 [ 73.717579][ T6662] syz.5.1090: attempt to access beyond end of device [ 73.717579][ T6662] loop5: rw=2049, sector=580, nr_sectors = 8 limit=128 [ 73.786858][ T6671] loop1: detected capacity change from 0 to 8192 [ 73.799013][ T6671] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.863140][ T6673] loop3: detected capacity change from 0 to 2048 [ 73.891126][ T6673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.932704][ T6671] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 73.941537][ T6671] FAT-fs (loop1): Filesystem has been set read-only [ 73.953376][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.962977][ T6671] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 73.972302][ T6671] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 73.988699][ T6678] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 74.050722][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1103'. [ 74.079887][ T5678] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 74.090940][ T6698] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1105'. [ 74.161557][ T6705] loop3: detected capacity change from 0 to 2048 [ 74.193275][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.227227][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.239606][ T6715] loop4: detected capacity change from 0 to 512 [ 74.246716][ T6715] EXT4-fs: Ignoring removed oldalloc option [ 74.267294][ T6715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.295733][ T6715] EXT4-fs (loop4): 1 truncate cleaned up [ 74.305646][ T6715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.316846][ T6726] loop3: detected capacity change from 0 to 256 [ 74.325089][ T6726] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.364412][ T6726] FAT-fs (loop3): Directory bread(block 64) failed [ 74.371069][ T6726] FAT-fs (loop3): Directory bread(block 65) failed [ 74.377742][ T6726] FAT-fs (loop3): Directory bread(block 66) failed [ 74.379129][ T3296] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 74.384266][ T6726] FAT-fs (loop3): Directory bread(block 67) failed [ 74.384373][ T6726] FAT-fs (loop3): Directory bread(block 68) failed [ 74.391848][ T3296] inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 74.421182][ T6726] FAT-fs (loop3): Directory bread(block 69) failed [ 74.430600][ T6726] FAT-fs (loop3): Directory bread(block 70) failed [ 74.435565][ T6736] syz.5.1123[6736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.437422][ T6736] syz.5.1123[6736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.438249][ T6726] FAT-fs (loop3): Directory bread(block 71) failed [ 74.449453][ T6736] syz.5.1123[6736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.460825][ T6726] FAT-fs (loop3): Directory bread(block 72) failed [ 74.467090][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.478031][ T6726] FAT-fs (loop3): Directory bread(block 73) failed [ 74.565050][ T6742] netlink: 'syz.3.1125': attribute type 4 has an invalid length. [ 74.609914][ T6747] vlan2: entered allmulticast mode [ 74.746499][ T6751] vlan1: entered promiscuous mode [ 74.762635][ T6751] vlan1: left promiscuous mode [ 74.797292][ T6760] syz.2.1132[6760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.797358][ T6760] syz.2.1132[6760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.818187][ T6760] syz.2.1132[6760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.986255][ T6774] tipc: Failed to remove unknown binding: 66,1,1/0:3738439785/3738439787 [ 75.006467][ T6774] tipc: Failed to remove unknown binding: 66,1,1/0:3738439785/3738439787 [ 75.034457][ T6776] loop1: detected capacity change from 0 to 164 [ 75.042108][ T6776] Unable to read rock-ridge attributes [ 75.058419][ T6776] Unable to read rock-ridge attributes [ 75.078669][ T6778] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1141'. [ 75.205097][ T6788] Process accounting resumed [ 75.376637][ T6795] loop4: detected capacity change from 0 to 256 [ 75.396941][ T6795] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.449837][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.458463][ T6795] FAT-fs (loop4): Filesystem has been set read-only [ 75.477419][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.495782][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.524786][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.534622][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.550514][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.564619][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.596541][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.605321][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.614103][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.623569][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.632197][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.640808][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.649432][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.687168][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.705924][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.721914][ T6801] loop2: detected capacity change from 0 to 128 [ 75.723000][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.736900][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.757680][ T6801] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.774531][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.789784][ T6801] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.799276][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.831283][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.839971][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.848819][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.857373][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.866024][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.874585][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.883170][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.891870][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.900430][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.913406][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.922466][ T6812] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 75.928561][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.939428][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.948131][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.956734][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.982620][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.992232][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.003606][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.017503][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.027906][ T6816] loop3: detected capacity change from 0 to 128 [ 76.029895][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.048284][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.056867][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.067518][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.078044][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.097342][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.105892][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.126718][ T6823] loop5: detected capacity change from 0 to 512 [ 76.134474][ T6823] ext4: Unknown parameter 'noacl' [ 76.140111][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.153360][ T6816] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 76.156613][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.167151][ T6816] Buffer I/O error on dev loop3, logical block 149, lost async page write [ 76.191644][ T6816] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 76.204256][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.211121][ T6816] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 76.215673][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.227157][ T6816] Buffer I/O error on dev loop3, logical block 152, lost async page write [ 76.253142][ T6830] loop5: detected capacity change from 0 to 512 [ 76.264828][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.277380][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.286378][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.295335][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.333120][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.341887][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.350469][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.359145][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.367770][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.376322][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.380831][ T6830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.386596][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.405797][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.417461][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.425997][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.434539][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.443436][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.452524][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.462557][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.471139][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.479986][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.488767][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.497369][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.506736][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.519889][ T6830] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.529154][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.530224][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 76.530234][ T29] audit: type=1326 audit(1733888564.317:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.558736][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.568215][ T29] audit: type=1326 audit(1733888564.317:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.580860][ T6846] loop1: detected capacity change from 0 to 512 [ 76.627224][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.633110][ T29] audit: type=1326 audit(1733888564.327:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.635786][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.659107][ T29] audit: type=1326 audit(1733888564.327:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.691154][ T29] audit: type=1326 audit(1733888564.327:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.714532][ T29] audit: type=1326 audit(1733888564.327:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.714641][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.737935][ T29] audit: type=1326 audit(1733888564.327:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.737967][ T29] audit: type=1326 audit(1733888564.327:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.793226][ T29] audit: type=1326 audit(1733888564.327:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.793254][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.816531][ T29] audit: type=1326 audit(1733888564.327:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecb6cff19 code=0x7ffc0000 [ 76.853474][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.862703][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.863259][ T6846] EXT4-fs (loop1): 1 truncate cleaned up [ 76.872157][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.877476][ T6846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.885429][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.935804][ T6854] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 76.944004][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.968126][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.994311][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 77.003552][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.012846][ T6795] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 77.159554][ T6870] capability: warning: `syz.5.1177' uses 32-bit capabilities (legacy support in use) [ 77.206050][ T6872] loop4: detected capacity change from 0 to 512 [ 77.222662][ T6872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.252324][ T6872] EXT4-fs (loop4): 1 truncate cleaned up [ 77.259194][ T6872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.351427][ T6856] loop3: detected capacity change from 0 to 65536 [ 77.358639][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 77.384808][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.394771][ T6885] pim6reg1: entered promiscuous mode [ 77.400227][ T6885] pim6reg1: entered allmulticast mode [ 77.477663][ T6893] loop1: detected capacity change from 0 to 128 [ 77.682507][ T6919] syz.3.1202[6919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.682613][ T6919] syz.3.1202[6919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.694306][ T6919] syz.3.1202[6919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.706408][ T6917] loop4: detected capacity change from 0 to 256 [ 77.738537][ T6917] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.759187][ T6917] FAT-fs (loop4): Directory bread(block 64) failed [ 77.768084][ T6917] FAT-fs (loop4): Directory bread(block 65) failed [ 77.774698][ T6917] FAT-fs (loop4): Directory bread(block 66) failed [ 77.786591][ T6917] FAT-fs (loop4): Directory bread(block 67) failed [ 77.793315][ T6917] FAT-fs (loop4): Directory bread(block 68) failed [ 77.800122][ T6917] FAT-fs (loop4): Directory bread(block 69) failed [ 77.806697][ T6917] FAT-fs (loop4): Directory bread(block 70) failed [ 77.813619][ T6917] FAT-fs (loop4): Directory bread(block 71) failed [ 77.820778][ T6917] FAT-fs (loop4): Directory bread(block 72) failed [ 77.850291][ T6917] FAT-fs (loop4): Directory bread(block 73) failed [ 77.970395][ T6933] syz.4.1208[6933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.970496][ T6933] syz.4.1208[6933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.986573][ T6933] syz.4.1208[6933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.105389][ T6943] syz.3.1211[6943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.142634][ T6943] syz.3.1211[6943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.158594][ T6943] syz.3.1211[6943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.178847][ T6941] Invalid ELF header magic: != ELF [ 78.214236][ T6913] loop5: detected capacity change from 0 to 65536 [ 78.420069][ T6956] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.1216'. [ 78.452489][ T6959] loop5: detected capacity change from 0 to 256 [ 78.473032][ T6961] selinux_netlink_send: 71 callbacks suppressed [ 78.473049][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.492065][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.504750][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.517940][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.530568][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.543626][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.556086][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.568765][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.581346][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.594167][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.1.1218 [ 78.860856][ T6991] loop5: detected capacity change from 0 to 1024 [ 78.874468][ T6991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.892002][ T6991] IPv6: Can't replace route, no match found [ 78.909319][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.054131][ T7006] tipc: Started in network mode [ 79.059178][ T7006] tipc: Node identity d21625c27af, cluster identity 4711 [ 79.066243][ T7006] tipc: Enabled bearer , priority 0 [ 79.081585][ T7006] syzkaller0: entered promiscuous mode [ 79.087176][ T7006] syzkaller0: entered allmulticast mode [ 79.093322][ T7006] tipc: Resetting bearer [ 79.102074][ T7004] tipc: Resetting bearer [ 79.128471][ T7004] tipc: Disabling bearer [ 79.227033][ T7022] loop5: detected capacity change from 0 to 256 [ 79.248512][ T7022] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.285730][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.294322][ T7022] FAT-fs (loop5): Filesystem has been set read-only [ 79.313380][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.338391][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.348983][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.357674][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.368408][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.377048][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.385630][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.394380][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.402990][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.411638][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.421151][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.429770][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.438399][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.446925][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.455599][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.464391][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.464423][ T7035] loop1: detected capacity change from 0 to 1024 [ 79.472988][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.491612][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.500328][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.510727][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.519428][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.528939][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.538054][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.546751][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.555373][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.567442][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.576054][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.586408][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595449][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595472][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595495][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595563][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595587][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595609][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595632][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595654][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595701][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595722][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595745][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595769][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.595792][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.607552][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.613172][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.623671][ T7035] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.637187][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.689919][ T7048] netlink: 'syz.4.1252': attribute type 12 has an invalid length. [ 79.718889][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.742573][ T7046] IPv4: Oversized IP packet from 127.202.26.0 [ 79.746221][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.778566][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.787140][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.795716][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.804286][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.812888][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.821441][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.829990][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.838556][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.847087][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.855672][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.864242][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.872849][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.881616][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.890286][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.898993][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.907622][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.916201][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.924883][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.933448][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.942038][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.942693][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.950740][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.950767][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.950789][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.985450][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 79.994060][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.002647][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.011269][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.019828][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.028386][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.036965][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.045562][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.054347][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.062944][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.071606][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.080219][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.088934][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.097485][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.106056][ T7022] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 80.148039][ T7060] loop5: detected capacity change from 0 to 512 [ 80.169637][ T7060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.182959][ T7060] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.197845][ T7060] Process accounting resumed [ 80.209362][ T7060] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 80.700840][ T7078] loop4: detected capacity change from 0 to 1024 [ 80.707573][ T7078] EXT4-fs: Ignoring removed nobh option [ 80.713174][ T7078] EXT4-fs: Ignoring removed orlov option [ 80.728220][ T7078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.886903][ T7060] syz.5.1256 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 80.901115][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.5.1256 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 80.911854][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.921960][ T7060] Call Trace: [ 80.925239][ T7060] [ 80.928170][ T7060] dump_stack_lvl+0xf2/0x150 [ 80.932837][ T7060] dump_stack+0x15/0x1a [ 80.937178][ T7060] dump_header+0x83/0x2d0 [ 80.941532][ T7060] oom_kill_process+0x341/0x4c0 [ 80.946429][ T7060] out_of_memory+0x9af/0xbe0 [ 80.951040][ T7060] ? css_next_descendant_pre+0x11c/0x140 [ 80.956749][ T7060] mem_cgroup_out_of_memory+0x13e/0x190 [ 80.962339][ T7060] try_charge_memcg+0x508/0x7f0 [ 80.967194][ T7060] obj_cgroup_charge_pages+0xbd/0x1a0 [ 80.972567][ T7060] __memcg_kmem_charge_page+0x9d/0x170 [ 80.978025][ T7060] __alloc_pages_noprof+0x1bc/0x340 [ 80.983273][ T7060] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 80.988671][ T7060] alloc_pages_noprof+0xe1/0x100 [ 80.993625][ T7060] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 80.999508][ T7060] __kvmalloc_node_noprof+0x121/0x170 [ 81.004888][ T7060] ? ip_set_alloc+0x1f/0x30 [ 81.009475][ T7060] ip_set_alloc+0x1f/0x30 [ 81.013825][ T7060] hash_netiface_create+0x273/0x730 [ 81.019109][ T7060] ? __nla_parse+0x40/0x60 [ 81.023571][ T7060] ? __pfx_hash_netiface_create+0x10/0x10 [ 81.029309][ T7060] ip_set_create+0x359/0x8a0 [ 81.033980][ T7060] ? memchr+0x1/0x50 [ 81.037940][ T7060] ? __nla_parse+0x40/0x60 [ 81.042374][ T7060] nfnetlink_rcv_msg+0x4a9/0x570 [ 81.047327][ T7060] netlink_rcv_skb+0x12c/0x230 [ 81.052089][ T7060] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 81.057553][ T7060] nfnetlink_rcv+0x16c/0x15d0 [ 81.062248][ T7060] ? kmem_cache_free+0xdc/0x2d0 [ 81.067109][ T7060] ? nlmon_xmit+0x51/0x60 [ 81.071464][ T7060] ? __kfree_skb+0x102/0x150 [ 81.076082][ T7060] ? consume_skb+0x49/0x160 [ 81.080578][ T7060] ? nlmon_xmit+0x51/0x60 [ 81.084957][ T7060] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 81.090241][ T7060] ? __dev_queue_xmit+0xb6e/0x2090 [ 81.095355][ T7060] ? ref_tracker_free+0x3a5/0x410 [ 81.100449][ T7060] ? __dev_queue_xmit+0x186/0x2090 [ 81.105699][ T7060] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 81.111161][ T7060] netlink_unicast+0x599/0x670 [ 81.115987][ T7060] netlink_sendmsg+0x5cc/0x6e0 [ 81.120764][ T7060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.126112][ T7060] __sock_sendmsg+0x140/0x180 [ 81.130793][ T7060] ____sys_sendmsg+0x312/0x410 [ 81.135595][ T7060] __sys_sendmsg+0x19d/0x230 [ 81.140196][ T7060] __x64_sys_sendmsg+0x46/0x50 [ 81.144962][ T7060] x64_sys_call+0x2734/0x2dc0 [ 81.149637][ T7060] do_syscall_64+0xc9/0x1c0 [ 81.154134][ T7060] ? clear_bhb_loop+0x55/0xb0 [ 81.158819][ T7060] ? clear_bhb_loop+0x55/0xb0 [ 81.163553][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.169480][ T7060] RIP: 0033:0x7ff1c936ff19 [ 81.173960][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.193581][ T7060] RSP: 002b:00007ff1c79e1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.202019][ T7060] RAX: ffffffffffffffda RBX: 00007ff1c9535fa0 RCX: 00007ff1c936ff19 [ 81.210061][ T7060] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 81.218039][ T7060] RBP: 00007ff1c93e3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 81.226129][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.234137][ T7060] R13: 0000000000000000 R14: 00007ff1c9535fa0 R15: 00007ffcb2bcc178 [ 81.242118][ T7060] [ 81.245619][ T7060] memory: usage 307200kB, limit 307200kB, failcnt 117 [ 81.252611][ T7060] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 81.260613][ T7060] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 81.267913][ T7060] Memory cgroup stats for /syz5: [ 81.268245][ T7060] cache 4096 [ 81.276578][ T7060] rss 0 [ 81.279415][ T7060] shmem 0 [ 81.282340][ T7060] mapped_file 0 [ 81.285787][ T7060] dirty 0 [ 81.288816][ T7060] writeback 8192 [ 81.292393][ T7060] workingset_refault_anon 234 [ 81.297101][ T7060] workingset_refault_file 0 [ 81.301633][ T7060] swap 561152 [ 81.304920][ T7060] swapcached 8192 [ 81.308604][ T7060] pgpgin 115292 [ 81.312133][ T7060] pgpgout 115289 [ 81.315686][ T7060] pgfault 126884 [ 81.319259][ T7060] pgmajfault 33 [ 81.322774][ T7060] inactive_anon 0 [ 81.326503][ T7060] active_anon 8192 [ 81.330248][ T7060] inactive_file 0 [ 81.333965][ T7060] active_file 4096 [ 81.337749][ T7060] unevictable 0 [ 81.341277][ T7060] hierarchical_memory_limit 314572800 [ 81.346650][ T7060] hierarchical_memsw_limit 9223372036854771712 [ 81.346686][ T7072] 9pnet_fd: p9_fd_create_tcp (7072): problem connecting socket to 127.0.0.1 [ 81.361672][ T7060] total_cache 4096 [ 81.365393][ T7060] total_rss 0 [ 81.368769][ T7060] total_shmem 0 [ 81.372229][ T7060] total_mapped_file 0 [ 81.376282][ T7060] total_dirty 0 [ 81.379770][ T7060] total_writeback 8192 [ 81.383838][ T7060] total_workingset_refault_anon 234 [ 81.389140][ T7060] total_workingset_refault_file 0 [ 81.394194][ T7060] total_swap 561152 [ 81.398071][ T7060] total_swapcached 8192 [ 81.402234][ T7060] total_pgpgin 115292 [ 81.406268][ T7060] total_pgpgout 115289 [ 81.410362][ T7060] total_pgfault 126884 [ 81.414431][ T7060] total_pgmajfault 33 [ 81.418452][ T7060] total_inactive_anon 0 [ 81.422754][ T7060] total_active_anon 8192 [ 81.426995][ T7060] total_inactive_file 0 [ 81.431183][ T7060] total_active_file 4096 [ 81.435501][ T7060] total_unevictable 0 [ 81.439568][ T7060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1256,pid=7059,uid=0 [ 81.454210][ T7060] Memory cgroup out of memory: Killed process 7059 (syz.5.1256) total-vm:95368kB, anon-rss:656kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 81.494402][ T7095] netlink: 'syz.1.1263': attribute type 21 has an invalid length. [ 81.502347][ T7095] netlink: 'syz.1.1263': attribute type 20 has an invalid length. [ 81.510248][ T7095] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.550750][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.557231][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 81.557245][ T29] audit: type=1400 audit(1733888569.337:3171): avc: denied { mount } for pid=7111 comm="syz.3.1266" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.600571][ T29] audit: type=1400 audit(1733888569.387:3172): avc: denied { read } for pid=7112 comm="syz.2.1264" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.623725][ T29] audit: type=1400 audit(1733888569.387:3173): avc: denied { open } for pid=7112 comm="syz.2.1264" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.647330][ T29] audit: type=1400 audit(1733888569.387:3174): avc: denied { ioctl } for pid=7112 comm="syz.2.1264" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.681769][ T29] audit: type=1400 audit(1733888569.457:3175): avc: denied { ioctl } for pid=7116 comm="syz.4.1267" path="socket:[16434]" dev="sockfs" ino=16434 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.706698][ T29] audit: type=1400 audit(1733888569.477:3176): avc: denied { write } for pid=7116 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.736102][ T29] audit: type=1400 audit(1733888569.517:3178): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.767146][ T29] audit: type=1400 audit(1733888569.517:3177): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.805280][ T29] audit: type=1400 audit(1733888569.577:3179): avc: denied { read } for pid=7116 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.834921][ T29] audit: type=1400 audit(1733888569.617:3180): avc: denied { create } for pid=7119 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.896917][ T7126] loop1: detected capacity change from 0 to 764 [ 81.921996][ T7130] loop2: detected capacity change from 0 to 512 [ 81.941466][ T7130] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1273: corrupted in-inode xattr: invalid ea_ino [ 81.956290][ T7130] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1273: couldn't read orphan inode 15 (err -117) [ 81.985561][ T7060] syz.5.1256 (7060) used greatest stack depth: 6360 bytes left [ 82.010688][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.028323][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.049153][ T7143] loop5: detected capacity change from 0 to 128 [ 82.079846][ T7143] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.093721][ T7143] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.096108][ T7145] netlink: 'syz.4.1280': attribute type 29 has an invalid length. [ 82.116420][ T7145] netlink: 'syz.4.1280': attribute type 29 has an invalid length. [ 82.137783][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.147642][ T3726] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.156913][ T7145] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1280'. [ 82.201759][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 82.222821][ T7160] loop4: detected capacity change from 0 to 512 [ 82.239740][ T7160] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.244544][ T7157] bridge_slave_1: left allmulticast mode [ 82.255296][ T7157] bridge_slave_1: left promiscuous mode [ 82.260992][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.263254][ T7162] loop1: detected capacity change from 0 to 128 [ 82.270260][ T7160] EXT4-fs (loop4): 1 truncate cleaned up [ 82.280115][ T7157] bridge_slave_0: left allmulticast mode [ 82.283825][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.285766][ T7157] bridge_slave_0: left promiscuous mode [ 82.309766][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.319267][ T7162] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.332032][ T7162] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.389214][ T5678] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.400363][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.421982][ T7166] veth0_vlan: entered allmulticast mode [ 82.467379][ T7167] veth0_vlan: left promiscuous mode [ 82.477012][ T7167] veth0_vlan: entered promiscuous mode [ 82.694402][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 82.735788][ T7198] ip6gre3: entered allmulticast mode [ 83.041571][ T7219] bridge0: port 1(vlan0) entered blocking state [ 83.048156][ T7219] bridge0: port 1(vlan0) entered disabled state [ 83.082031][ T7219] vlan0: entered allmulticast mode [ 83.098495][ T7219] vlan0: left allmulticast mode [ 83.300371][ T7234] IPv4: Oversized IP packet from 127.202.26.0 [ 83.643923][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1318'. [ 83.813790][ T7259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.876689][ T7259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.949544][ T7259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.040083][ T7259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.064450][ T7287] pim6reg1: entered promiscuous mode [ 84.069835][ T7287] pim6reg1: entered allmulticast mode [ 84.094544][ T7259] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.107020][ T7259] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118778][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.120839][ T7259] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.139935][ T7259] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.145040][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.250338][ T7308] loop1: detected capacity change from 0 to 1024 [ 84.270213][ T7308] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.299216][ T7312] wireguard0: entered promiscuous mode [ 84.304878][ T7312] wireguard0: entered allmulticast mode [ 84.314931][ T7308] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1347: Invalid block bitmap block 0 in block_group 0 [ 84.328741][ T7308] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1347: Failed to acquire dquot type 0 [ 84.340713][ T7308] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.1347: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.359352][ T7308] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1347: Invalid inode bitmap blk 0 in block_group 0 [ 84.375367][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 0 [ 84.379447][ T7308] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 84.395651][ T7308] EXT4-fs (loop1): 1 orphan inode deleted [ 84.401933][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.513620][ T7331] ALSA: seq fatal error: cannot create timer (-16) [ 84.602013][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.661692][ T7340] hsr_slave_0: left promiscuous mode [ 84.668223][ T7340] hsr_slave_1: left promiscuous mode [ 84.888066][ T7356] loop2: detected capacity change from 0 to 512 [ 84.915223][ T7356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.938524][ T7356] EXT4-fs (loop2): 1 truncate cleaned up [ 84.962754][ T7363] IPv4: Oversized IP packet from 127.202.26.0 [ 84.965391][ T7356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.055719][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.370544][ T7387] loop4: detected capacity change from 0 to 512 [ 85.400137][ T7387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.425198][ T7387] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.441461][ T7394] ip6gre1: entered allmulticast mode [ 85.469470][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.519866][ T7399] loop1: detected capacity change from 0 to 512 [ 85.539328][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.539407][ T7399] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.559961][ T7405] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.577003][ T7405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.636479][ T7399] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.1386: corrupted inode contents [ 85.636596][ T7399] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.1386: mark_inode_dirty error [ 85.636675][ T7399] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.1386: corrupted inode contents [ 85.636746][ T7399] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.1386: mark_inode_dirty error [ 85.636838][ T7399] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.1386: mark inode dirty (error -117) [ 85.636986][ T7399] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 85.656054][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.730512][ T7408] pim6reg1: entered promiscuous mode [ 85.730602][ T7408] pim6reg1: entered allmulticast mode [ 85.779967][ T7412] loop4: detected capacity change from 0 to 128 [ 85.822075][ T7412] bio_check_eod: 32 callbacks suppressed [ 85.822087][ T7412] syz.4.1391: attempt to access beyond end of device [ 85.822087][ T7412] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 85.896375][ T4283] kworker/u8:15: attempt to access beyond end of device [ 85.896375][ T4283] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 85.913546][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 85.979178][ T7430] loop4: detected capacity change from 0 to 164 [ 85.991400][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991400][ T7430] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 85.991493][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991493][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.991538][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991538][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.991587][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991587][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.991636][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991636][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.991755][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991755][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.991803][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991803][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.991849][ T7430] syz.4.1399: attempt to access beyond end of device [ 85.991849][ T7430] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.095071][ T7434] loop3: detected capacity change from 0 to 512 [ 86.222842][ T7434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.235964][ T7434] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.282463][ T7434] Process accounting resumed [ 86.357139][ T7440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.417192][ T7444] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1404'. [ 86.471024][ T7440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.530171][ T7440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.637624][ T7434] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 86.649603][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 86.649613][ T29] audit: type=1400 audit(1733888574.437:3288): avc: denied { read } for pid=7453 comm="syz.1.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.678296][ T7440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.757554][ T7440] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.777161][ T7440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.789413][ T7440] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.801450][ T7440] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.858464][ T7463] loop1: detected capacity change from 0 to 1024 [ 86.879937][ T7463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 86.890380][ T7463] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 86.907443][ T7463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 86.925832][ T7463] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 86.975160][ T29] audit: type=1326 audit(1733888574.757:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 86.998645][ T29] audit: type=1326 audit(1733888574.757:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 87.022024][ T29] audit: type=1326 audit(1733888574.757:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 87.206280][ T7485] loop2: detected capacity change from 0 to 2048 [ 87.229316][ T29] audit: type=1400 audit(1733888575.017:3292): avc: denied { append } for pid=7487 comm="syz.1.1421" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.274159][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 87.296288][ T29] audit: type=1400 audit(1733888575.037:3293): avc: denied { open } for pid=7487 comm="syz.1.1421" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.397151][ T29] audit: type=1400 audit(1733888575.177:3294): avc: denied { create } for pid=7496 comm="syz.5.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.417074][ T29] audit: type=1400 audit(1733888575.177:3295): avc: denied { bind } for pid=7496 comm="syz.5.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.436660][ T29] audit: type=1400 audit(1733888575.177:3296): avc: denied { listen } for pid=7496 comm="syz.5.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.488670][ T29] audit: type=1400 audit(1733888575.187:3297): avc: denied { read } for pid=7496 comm="syz.5.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.559160][ T7498] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.575209][ T7503] loop5: detected capacity change from 0 to 128 [ 87.662128][ T7505] loop5: detected capacity change from 0 to 128 [ 87.674183][ T7505] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.894335][ T7521] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 87.915865][ T7522] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1433'. [ 88.010656][ T7530] loop3: detected capacity change from 0 to 512 [ 88.051870][ T7530] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.082124][ T7530] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1437: Failed to acquire dquot type 0 [ 88.381683][ T7564] loop2: detected capacity change from 0 to 1024 [ 88.400734][ T7564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 88.411180][ T7564] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 88.422734][ T7564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 88.437388][ T7564] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 88.529956][ T7572] loop2: detected capacity change from 0 to 256 [ 88.669690][ T7579] ip6gre4: entered allmulticast mode [ 88.803081][ T7585] loop2: detected capacity change from 0 to 1024 [ 88.817718][ T7585] EXT4-fs: Ignoring removed oldalloc option [ 88.823973][ T7585] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 88.876007][ T7591] loop3: detected capacity change from 0 to 2048 [ 88.883137][ T7591] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.932047][ T7598] syz.5.1464[7598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.932164][ T7598] syz.5.1464[7598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.944045][ T7598] syz.5.1464[7598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.994179][ T7604] loop2: detected capacity change from 0 to 512 [ 89.037171][ T7604] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.128767][ T7604] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #19: comm syz.2.1467: corrupted inode contents [ 89.161172][ T7604] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #19: comm syz.2.1467: mark_inode_dirty error [ 89.195475][ T7604] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #19: comm syz.2.1467: corrupted inode contents [ 89.217433][ T7604] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1467: mark_inode_dirty error [ 89.236080][ T7604] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1467: mark inode dirty (error -117) [ 89.281626][ T7604] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 89.420570][ T7632] loop3: detected capacity change from 0 to 1024 [ 89.576171][ T7632] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 89.607316][ T7632] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 89.619870][ T7632] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.619870][ T7632] [ 89.629540][ T7632] EXT4-fs (loop3): Total free blocks count 0 [ 89.635553][ T7632] EXT4-fs (loop3): Free/Dirty block details [ 89.641557][ T7632] EXT4-fs (loop3): free_blocks=68451041280 [ 89.647399][ T7632] EXT4-fs (loop3): dirty_blocks=16 [ 89.652518][ T7632] EXT4-fs (loop3): Block reservation details [ 89.658586][ T7632] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 89.840442][ T7648] loop3: detected capacity change from 0 to 256 [ 90.200474][ T7662] loop3: detected capacity change from 0 to 2048 [ 90.306760][ T7669] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.401405][ T7675] loop1: detected capacity change from 0 to 128 [ 90.461987][ T7677] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1493'. [ 90.494083][ T7679] loop3: detected capacity change from 0 to 512 [ 90.543407][ T7679] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.045940][ T7700] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.054715][ T7700] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.063519][ T7700] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.072269][ T7700] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.090603][ T7700] vxlan0: entered promiscuous mode [ 91.095888][ T7700] vxlan0: entered allmulticast mode [ 91.119610][ T7700] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.128592][ T7700] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.137543][ T7700] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.146425][ T7700] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.256015][ T7712] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.298323][ T7712] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.442751][ T7735] loop3: detected capacity change from 0 to 128 [ 91.453592][ T7712] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.478430][ T7735] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.526258][ T7712] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.618347][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1521'. [ 91.629641][ T7745] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.656947][ T7712] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.667107][ T7751] loop3: detected capacity change from 0 to 1024 [ 91.669444][ T7712] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.674583][ T7751] EXT4-fs: Ignoring removed oldalloc option [ 91.690703][ T7751] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 91.693699][ T7712] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.711068][ T7745] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.725432][ T7712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.758861][ T7745] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.779541][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1525'. [ 91.797938][ T7757] all: renamed from ip_vti0 (while UP) [ 91.825693][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 91.825706][ T29] audit: type=1400 audit(1733888579.607:3397): avc: denied { create } for pid=7760 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.852602][ T7745] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.882333][ T29] audit: type=1400 audit(1733888579.667:3398): avc: denied { read } for pid=7762 comm="syz.5.1528" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.896999][ T7763] loop5: detected capacity change from 0 to 512 [ 91.909590][ T29] audit: type=1400 audit(1733888579.667:3399): avc: denied { open } for pid=7762 comm="syz.5.1528" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.942644][ T7745] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971060][ T7745] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.985322][ T7745] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.997307][ T7763] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 92.005357][ T7763] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.015284][ T7763] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 92.016790][ T7745] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.034412][ T7763] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.070269][ T7763] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 92.096416][ T7763] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1528: bg 0: block 40: padding at end of block bitmap is not set [ 92.120009][ T7763] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 92.129368][ T7763] EXT4-fs (loop5): 1 truncate cleaned up [ 92.138859][ T7763] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #16: comm syz.5.1528: corrupted xattr block 31: invalid header [ 92.153184][ T7763] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 92.157682][ T7780] loop3: detected capacity change from 0 to 512 [ 92.178823][ T7780] EXT4-fs: Ignoring removed oldalloc option [ 92.188192][ T7780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.204294][ T29] audit: type=1400 audit(1733888579.987:3400): avc: denied { bind } for pid=7781 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.214368][ T7780] EXT4-fs (loop3): 1 truncate cleaned up [ 92.223693][ T29] audit: type=1400 audit(1733888579.987:3401): avc: denied { name_bind } for pid=7781 comm="syz.5.1535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 92.250143][ T29] audit: type=1400 audit(1733888579.987:3402): avc: denied { node_bind } for pid=7781 comm="syz.5.1535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 92.270991][ T29] audit: type=1400 audit(1733888579.987:3403): avc: denied { listen } for pid=7781 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.290596][ T29] audit: type=1400 audit(1733888579.987:3404): avc: denied { accept } for pid=7781 comm="syz.5.1535" lport=41859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.317808][ T29] audit: type=1400 audit(1733888580.097:3405): avc: denied { setopt } for pid=7781 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.397210][ T7780] loop3: detected capacity change from 512 to 64 [ 92.429326][ T3300] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 92.519863][ T7804] loop3: detected capacity change from 0 to 128 [ 92.539713][ T7802] loop1: detected capacity change from 0 to 512 [ 92.556437][ T7804] bio_check_eod: 24848 callbacks suppressed [ 92.556454][ T7804] syz.3.1543: attempt to access beyond end of device [ 92.556454][ T7804] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 92.589896][ T7802] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.654021][ T7816] netem: change failed [ 92.676180][ T4292] kworker/u8:19: attempt to access beyond end of device [ 92.676180][ T4292] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 92.680214][ T7818] 9pnet_fd: Insufficient options for proto=fd [ 92.907677][ T7850] loop3: detected capacity change from 0 to 512 [ 92.918721][ T7850] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 92.933163][ T7850] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.944442][ T7850] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.960644][ T7850] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 92.967849][ T7850] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1566: bg 0: block 40: padding at end of block bitmap is not set [ 92.992405][ T7850] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 93.015287][ T7850] EXT4-fs (loop3): 1 truncate cleaned up [ 93.028034][ T7850] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1566: corrupted xattr block 31: invalid header [ 93.042350][ T7850] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 93.466147][ T7879] geneve0: entered allmulticast mode [ 93.763888][ T7887] loop1: detected capacity change from 0 to 2048 [ 93.774230][ T7887] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.423744][ T7927] syz.5.1598[7927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.423806][ T7927] syz.5.1598[7927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.461409][ T7927] syz.5.1598[7927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.711600][ T7951] loop1: detected capacity change from 0 to 512 [ 94.740414][ T7953] loop5: detected capacity change from 0 to 512 [ 94.747918][ T7953] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.749921][ T7951] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.773622][ T7953] EXT4-fs (loop5): 1 truncate cleaned up [ 94.919061][ T7972] loop1: detected capacity change from 0 to 128 [ 94.925996][ T7972] ext2: Unknown parameter 'obj_role' [ 94.959284][ T7976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1618'. [ 95.063668][ T7990] loop5: detected capacity change from 0 to 256 [ 95.086544][ T7990] FAT-fs (loop5): IO charset euc-jp not found [ 95.153283][ T8001] loop2: detected capacity change from 0 to 1024 [ 95.159951][ T8001] EXT4-fs: Ignoring removed orlov option [ 95.397284][ T8017] loop3: detected capacity change from 0 to 512 [ 95.431220][ T8017] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.525475][ T8027] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1635'. [ 95.538485][ T8024] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1635'. [ 95.550915][ T8029] loop3: detected capacity change from 0 to 512 [ 95.565240][ T8029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.580482][ T8029] EXT4-fs (loop3): 1 truncate cleaned up [ 95.669441][ T8036] loop3: detected capacity change from 0 to 256 [ 95.682014][ T8036] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.698738][ T8036] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.753127][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.760621][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.768054][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.775761][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.783246][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.790858][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.798282][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.805683][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.813147][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.820575][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.828016][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.835441][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.842868][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.850291][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.857750][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.865153][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.872659][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.880080][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.887541][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.895013][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.902408][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.909817][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.917282][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.924722][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.932146][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.939562][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.947187][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.954690][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.962174][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.969629][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.984495][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.998790][ T8045] loop1: detected capacity change from 0 to 512 [ 96.007620][ T8045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 96.015595][ T8045] System zones: 1-12 [ 96.025831][ T8045] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1646: invalid indirect mapped block 8 (level 2) [ 96.052282][ T8045] EXT4-fs (loop1): Remounting filesystem read-only [ 96.059228][ T8045] EXT4-fs (loop1): 1 truncate cleaned up [ 96.065448][ T8045] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 96.114044][ T8053] loop4: detected capacity change from 0 to 512 [ 96.122234][ T8053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.162556][ T8053] EXT4-fs (loop4): 1 truncate cleaned up [ 96.209877][ T8059] netlink: 'syz.5.1652': attribute type 1 has an invalid length. [ 96.229875][ T8059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.238204][ T8063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.245435][ T8063] IPv6: NLM_F_CREATE should be set when creating new route [ 96.294052][ T8059] bond1: (slave veth5): Enslaving as an active interface with a down link [ 96.323536][ T8070] tipc: New replicast peer: 100.1.1.1 [ 96.329033][ T8070] tipc: Enabled bearer , priority 10 [ 96.343144][ T8076] loop4: detected capacity change from 0 to 128 [ 96.351583][ T8076] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.354316][ T8059] batadv0: entered promiscuous mode [ 96.367364][ T8059] batadv0: entered allmulticast mode [ 96.378392][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.387734][ T8059] bond1: (slave batadv0): making interface the new active one [ 96.399818][ T8059] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 96.411801][ T8080] loop3: detected capacity change from 0 to 128 [ 96.433190][ T8080] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.559371][ T8080] EXT4-fs (loop3): shut down requested (0) [ 96.817752][ T8110] pim6reg1: entered promiscuous mode [ 96.823115][ T8110] pim6reg1: entered allmulticast mode [ 96.970527][ T8122] loop3: detected capacity change from 0 to 164 [ 96.981136][ T8122] syz.3.1678: attempt to access beyond end of device [ 96.981136][ T8122] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.005265][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.005265][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.021230][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.021230][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.034946][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.034946][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.050840][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.050840][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.079021][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.079021][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.094001][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.094001][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.108004][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.108004][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.124402][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 97.124424][ T29] audit: type=1400 audit(1733888584.907:3610): avc: denied { write } for pid=8125 comm="syz.4.1679" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.186274][ T29] audit: type=1400 audit(1733888584.907:3611): avc: denied { open } for pid=8125 comm="syz.4.1679" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.254790][ T29] audit: type=1400 audit(1733888585.037:3612): avc: denied { ioctl } for pid=8129 comm="syz.1.1682" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.308809][ T29] audit: type=1400 audit(1733888585.087:3613): avc: denied { write } for pid=8129 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.362765][ T8136] veth0_to_team: entered promiscuous mode [ 97.368590][ T8136] veth0_to_team: entered allmulticast mode [ 97.409685][ T8138] batadv_slave_1: entered promiscuous mode [ 97.422180][ T8138] batadv_slave_1: left promiscuous mode [ 97.435922][ T8096] uprobe: syz.2.1667:8096 failed to unregister, leaking uprobe [ 97.478860][ T29] audit: type=1326 audit(1733888585.257:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 97.502331][ T29] audit: type=1326 audit(1733888585.257:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.5.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 97.525795][ T29] audit: type=1326 audit(1733888585.257:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 97.548910][ T29] audit: type=1326 audit(1733888585.257:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 97.572007][ T29] audit: type=1326 audit(1733888585.257:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 97.574132][ T8122] bio_check_eod: 8147 callbacks suppressed [ 97.574146][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.574146][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.595211][ T29] audit: type=1326 audit(1733888585.257:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c936ff19 code=0x7ffc0000 [ 97.613352][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.613352][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.660913][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.660913][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.688372][ T8145] ip6gre1: entered allmulticast mode [ 97.724565][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.724565][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.751844][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.751844][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.776359][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.776359][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.810495][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.810495][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.829956][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.829956][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.854206][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.854206][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.872476][ T8158] loop1: detected capacity change from 0 to 128 [ 97.879118][ T8122] syz.3.1678: attempt to access beyond end of device [ 97.879118][ T8122] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.910062][ T8158] EXT4-fs mount: 55 callbacks suppressed [ 97.910101][ T8158] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.989463][ T8158] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.098095][ T8170] veth0_vlan: entered allmulticast mode [ 98.146972][ T5678] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.177978][ T8170] ÿÿÿÿÿÿ: renamed from vlan1 [ 98.230495][ T8183] selinux_netlink_send: 147 callbacks suppressed [ 98.230592][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8183 comm=syz.4.1705 [ 98.355016][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.369081][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.453401][ T8207] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1711'. [ 98.464065][ T8202] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1711'. [ 98.928340][ T8217] uprobe: syz.5.1718:8217 failed to unregister, leaking uprobe [ 99.032591][ T8223] loop5: detected capacity change from 0 to 164 [ 99.184722][ T8226] syz.1.1722[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.184833][ T8226] syz.1.1722[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.199519][ T8226] syz.1.1722[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.215425][ T8227] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1723'. [ 99.403634][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.422583][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.524262][ T8251] loop2: detected capacity change from 0 to 1024 [ 99.552406][ T8251] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.559305][ T8249] loop4: detected capacity change from 0 to 2048 [ 99.569434][ T8256] syz.3.1736[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.569534][ T8256] syz.3.1736[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.581214][ T8256] syz.3.1736[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.588991][ T8251] EXT4-fs (loop2): 1 truncate cleaned up [ 99.621676][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.639382][ T8249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.697220][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.725542][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.881208][ T8275] loop4: detected capacity change from 0 to 128 [ 99.888610][ T8276] serio: Serial port ptm0 [ 99.927945][ T8275] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.948996][ T8275] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.037825][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.181496][ T8291] loop5: detected capacity change from 0 to 2048 [ 100.237390][ T8291] loop5: p1 < > p4 [ 100.242883][ T8291] loop5: p4 size 8388608 extends beyond EOD, truncated [ 100.279314][ T2999] loop5: p1 < > p4 [ 100.285840][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 100.324240][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 100.338226][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.428399][ T8300] loop1: detected capacity change from 0 to 2048 [ 100.440496][ T8300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.514012][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.552730][ T8312] loop5: detected capacity change from 0 to 1024 [ 100.562851][ T8312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.583811][ T8312] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 100.624366][ T8312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.668249][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.776737][ T8330] loop2: detected capacity change from 0 to 256 [ 100.867039][ T8336] loop1: detected capacity change from 0 to 512 [ 100.869241][ T8337] loop5: detected capacity change from 0 to 1024 [ 100.873681][ T8336] EXT4-fs: Ignoring removed oldalloc option [ 100.886148][ T8336] ext3: Unknown parameter 'dont_measure' [ 100.902010][ T8337] EXT4-fs: Ignoring removed orlov option [ 100.914627][ T8337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.072655][ T8349] netlink: 'syz.1.1769': attribute type 21 has an invalid length. [ 101.080582][ T8349] netlink: 14577 bytes leftover after parsing attributes in process `syz.1.1769'. [ 101.239071][ T8341] ================================================================== [ 101.247194][ T8341] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 101.256863][ T8341] [ 101.259192][ T8341] write to 0xffff8881066a37b8 of 4 bytes by task 8337 on cpu 0: [ 101.266845][ T8341] inode_cgwb_move_to_attached+0x9a/0x300 [ 101.272595][ T8341] writeback_single_inode+0x2b5/0x3f0 [ 101.277977][ T8341] sync_inode_metadata+0x5c/0x90 [ 101.282948][ T8341] generic_buffers_fsync_noflush+0xd8/0x120 [ 101.288884][ T8341] ext4_sync_file+0x1ff/0x6c0 [ 101.293579][ T8341] vfs_fsync_range+0x116/0x130 [ 101.298371][ T8341] ext4_buffered_write_iter+0x326/0x370 [ 101.303951][ T8341] ext4_file_write_iter+0x383/0xf20 [ 101.309173][ T8341] iter_file_splice_write+0x5f1/0x980 [ 101.314557][ T8341] direct_splice_actor+0x160/0x2c0 [ 101.319687][ T8341] splice_direct_to_actor+0x302/0x670 [ 101.325169][ T8341] do_splice_direct+0xd7/0x150 [ 101.329941][ T8341] do_sendfile+0x398/0x660 [ 101.334368][ T8341] __x64_sys_sendfile64+0x110/0x150 [ 101.339582][ T8341] x64_sys_call+0xfbd/0x2dc0 [ 101.344187][ T8341] do_syscall_64+0xc9/0x1c0 [ 101.348697][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.354612][ T8341] [ 101.356939][ T8341] read to 0xffff8881066a37b8 of 4 bytes by task 8341 on cpu 1: [ 101.364486][ T8341] generic_buffers_fsync_noflush+0x83/0x120 [ 101.370411][ T8341] ext4_sync_file+0x1ff/0x6c0 [ 101.375119][ T8341] vfs_fsync_range+0x116/0x130 [ 101.379888][ T8341] ext4_buffered_write_iter+0x326/0x370 [ 101.385459][ T8341] ext4_file_write_iter+0x383/0xf20 [ 101.390668][ T8341] iter_file_splice_write+0x5f1/0x980 [ 101.396052][ T8341] direct_splice_actor+0x160/0x2c0 [ 101.401169][ T8341] splice_direct_to_actor+0x302/0x670 [ 101.406558][ T8341] do_splice_direct+0xd7/0x150 [ 101.411349][ T8341] do_sendfile+0x398/0x660 [ 101.415767][ T8341] __x64_sys_sendfile64+0x110/0x150 [ 101.420980][ T8341] x64_sys_call+0xfbd/0x2dc0 [ 101.425594][ T8341] do_syscall_64+0xc9/0x1c0 [ 101.430110][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.436036][ T8341] [ 101.438360][ T8341] value changed: 0x00000002 -> 0x00000020 [ 101.444098][ T8341] [ 101.446423][ T8341] Reported by Kernel Concurrency Sanitizer on: [ 101.452572][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.5.1765 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 101.463252][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.473322][ T8341] ================================================================== [ 101.494904][ T8356] loop1: detected capacity change from 0 to 512 [ 101.501449][ T8356] EXT4-fs: Ignoring removed oldalloc option [ 101.513223][ T8356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.528050][ T8356] EXT4-fs (loop1): 1 truncate cleaned up [ 101.534261][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.560221][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.770899][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.