last executing test programs: 52.403085315s ago: executing program 0 (id=560): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xcd8, 0x0, &(0x7f0000000340), 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000780)={[{@nodelalloc}, {@min_batch_time}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noblock_validity}]}, 0xfe, 0x4f7, &(0x7f0000000180)="$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") readlink(&(0x7f0000000680)='./file2\x00', &(0x7f0000000880)=""/89, 0x59) 52.177791709s ago: executing program 0 (id=566): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 52.094183361s ago: executing program 0 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 52.088713001s ago: executing program 0 (id=574): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 52.032056882s ago: executing program 0 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 51.890588765s ago: executing program 0 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in=@loopback}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020"], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 51.855750495s ago: executing program 32 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in=@loopback}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020"], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 45.939642399s ago: executing program 3 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r2 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 45.647232234s ago: executing program 3 (id=741): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x8000fffffffc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) 45.392059249s ago: executing program 3 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 45.35839123s ago: executing program 3 (id=750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000030030000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f0) 44.693781022s ago: executing program 3 (id=767): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 44.669951863s ago: executing program 3 (id=769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 29.442132415s ago: executing program 33 (id=769): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2.08362933s ago: executing program 6 (id=1595): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.107671159s ago: executing program 6 (id=1603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 888.218903ms ago: executing program 5 (id=1613): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f00000004c0)={@val={0xa}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x9}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x12, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x12, 0x0, @gue={{0x2, 0x0, 0x1, 0x5, 0x100}, "a3d4"}}}}}}}}, 0x50) 864.758313ms ago: executing program 1 (id=1615): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) 802.634684ms ago: executing program 5 (id=1617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)=';', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) 654.287447ms ago: executing program 1 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 605.331558ms ago: executing program 5 (id=1623): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, r4, 0x80000001}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 598.260499ms ago: executing program 2 (id=1624): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x23}}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@journal_async_commit}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") 560.023009ms ago: executing program 1 (id=1625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0xfffffd70, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 506.120361ms ago: executing program 4 (id=1626): bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='\v'], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) add_key$user(&(0x7f0000001040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 505.525991ms ago: executing program 5 (id=1638): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\x00!\x00', 0x3}], 0x1, 0x6, 0x1) 492.93594ms ago: executing program 2 (id=1627): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 476.950951ms ago: executing program 4 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) 474.149661ms ago: executing program 2 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) 452.037981ms ago: executing program 5 (id=1631): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './cgroup/../file0'}, 0x15) prctl$PR_GET_CHILD_SUBREAPER(0xe) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r2 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 444.645452ms ago: executing program 4 (id=1632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 428.110762ms ago: executing program 2 (id=1634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 341.259403ms ago: executing program 1 (id=1635): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000140)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 246.850045ms ago: executing program 6 (id=1636): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 238.871065ms ago: executing program 5 (id=1647): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 237.924005ms ago: executing program 4 (id=1648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) 179.950167ms ago: executing program 2 (id=1637): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 174.271196ms ago: executing program 4 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x1a, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 133.615317ms ago: executing program 6 (id=1640): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), 0x0}, 0x20) 90.902568ms ago: executing program 6 (id=1641): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r1], 0x80}}, 0x0) 67.138189ms ago: executing program 2 (id=1642): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 52.787149ms ago: executing program 1 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') 35.463209ms ago: executing program 6 (id=1644): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 198.02µs ago: executing program 1 (id=1645): r0 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7fff, 0x401}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x2, 0x1, 0x3, 0x10, 0x0, 0x7f, 0x201, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1000, 0x4}, 0x14006, 0xe, 0x3, 0x9, 0x0, 0x2c, 0x1, 0x0, 0x3, 0x0, 0x3}, r1, 0xc, r0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 0s ago: executing program 4 (id=1646): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) kernel console output (not intermixed with test programs): d_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 51.787499][ T4939] batadv2: entered promiscuous mode [ 51.794587][ T4939] batadv2: entered allmulticast mode [ 51.827700][ T4939] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 51.836897][ T4939] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 52.009545][ T29] audit: type=1400 audit(1758283293.795:823): avc: denied { map } for pid=4961 comm="syz.1.359" path="socket:[8296]" dev="sockfs" ino=8296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.058338][ T29] audit: type=1400 audit(1758283293.795:824): avc: denied { read write } for pid=4961 comm="syz.1.359" path="socket:[8296]" dev="sockfs" ino=8296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.165628][ T29] audit: type=1400 audit(1758283293.945:825): avc: denied { read write } for pid=4973 comm="syz.4.366" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.189272][ T29] audit: type=1400 audit(1758283293.945:826): avc: denied { open } for pid=4973 comm="syz.4.366" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.218694][ T29] audit: type=1400 audit(1758283293.955:827): avc: denied { ioctl } for pid=4973 comm="syz.4.366" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.311454][ T4982] bond1: entered promiscuous mode [ 52.333733][ T4982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.370383][ T4982] batadv1: entered promiscuous mode [ 52.375874][ T4982] batadv1: entered allmulticast mode [ 52.384049][ T4982] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.392327][ T4982] bond1: (slave batadv1): making interface the new active one [ 52.408023][ T4982] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 52.582136][ T4982] batadv2: entered promiscuous mode [ 52.587438][ T4982] batadv2: entered allmulticast mode [ 52.593665][ T4982] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 52.602048][ T4982] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 52.666470][ T5007] bond2: entered promiscuous mode [ 52.680644][ T5007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.732387][ T5007] batadv3: entered promiscuous mode [ 52.737744][ T5007] batadv3: entered allmulticast mode [ 52.744227][ T5007] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 52.758831][ T5007] bond2: (slave batadv3): making interface the new active one [ 52.792091][ T5007] bond2: (slave batadv3): Enslaving as an active interface with an up link [ 52.819409][ T5014] batadv4: entered promiscuous mode [ 52.824891][ T5014] batadv4: entered allmulticast mode [ 52.842837][ T5014] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 52.851561][ T5014] bond2: (slave batadv4): Enslaving as an active interface with an up link [ 52.941801][ T29] audit: type=1400 audit(1758283294.725:828): avc: denied { read write } for pid=5021 comm="syz.0.382" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.967645][ T29] audit: type=1400 audit(1758283294.725:829): avc: denied { open } for pid=5021 comm="syz.0.382" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.047740][ T29] audit: type=1400 audit(1758283294.825:830): avc: denied { create } for pid=5027 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.168423][ T5051] __nla_validate_parse: 10 callbacks suppressed [ 53.168465][ T5050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 53.168477][ T5051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 53.218952][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.226686][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.242035][ T5053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.249729][ T5053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.581035][ T5082] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 53.606932][ T5086] loop3: detected capacity change from 0 to 512 [ 53.626478][ T5088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.414'. [ 53.657028][ T5086] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.701402][ T5086] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.413: bad orphan inode 13 [ 53.729133][ T5099] loop2: detected capacity change from 0 to 512 [ 53.737157][ T5099] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.748953][ T5086] ext4_test_bit(bit=12, block=18) = 1 [ 53.754347][ T5086] is_bad_inode(inode)=0 [ 53.758551][ T5086] NEXT_ORPHAN(inode)=2130706432 [ 53.763513][ T5086] max_ino=32 [ 53.766904][ T5086] i_nlink=1 [ 53.772125][ T5099] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.419: bad orphan inode 131083 [ 53.791970][ T5099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.798689][ T5086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.841578][ T5105] netlink: zone id is out of range [ 53.846940][ T5105] netlink: zone id is out of range [ 53.850979][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.852153][ T5105] netlink: zone id is out of range [ 53.866640][ T5105] netlink: zone id is out of range [ 53.875418][ T5105] netlink: zone id is out of range [ 53.883352][ T5105] netlink: zone id is out of range [ 53.894480][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 53.900353][ T5105] netlink: zone id is out of range [ 53.904473][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 53.921797][ T5111] validate_nla: 2 callbacks suppressed [ 53.921809][ T5111] netlink: 'syz.3.422': attribute type 12 has an invalid length. [ 53.928113][ T5110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.424'. [ 53.935593][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 53.958779][ T5111] netlink: 'syz.3.422': attribute type 12 has an invalid length. [ 53.962345][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.966696][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 53.968415][ T5105] netlink: zone id is out of range [ 53.977856][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.002959][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.012095][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.032295][ T5105] netlink: zone id is out of range [ 54.065998][ T5105] netlink: zone id is out of range [ 54.137052][ T5133] loop3: detected capacity change from 0 to 128 [ 54.177020][ T5133] FAT-fs (loop3): Directory bread(block 32) failed [ 54.184616][ T5133] FAT-fs (loop3): Directory bread(block 33) failed [ 54.191900][ T5133] FAT-fs (loop3): Directory bread(block 34) failed [ 54.201464][ T5133] FAT-fs (loop3): Directory bread(block 35) failed [ 54.218064][ T5133] FAT-fs (loop3): Directory bread(block 36) failed [ 54.224920][ T5133] FAT-fs (loop3): Directory bread(block 37) failed [ 54.233601][ T5133] FAT-fs (loop3): Directory bread(block 38) failed [ 54.242924][ T5133] FAT-fs (loop3): Directory bread(block 39) failed [ 54.262630][ T5133] FAT-fs (loop3): Directory bread(block 40) failed [ 54.273797][ T5133] FAT-fs (loop3): Directory bread(block 41) failed [ 54.443578][ T5154] tipc: Started in network mode [ 54.448667][ T5154] tipc: Node identity ee4b9acb0e18, cluster identity 4711 [ 54.456211][ T5154] tipc: Enabled bearer , priority 0 [ 54.481779][ T5154] tipc: Disabling bearer [ 54.501344][ T5157] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 54.509553][ T5157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.445'. [ 54.526090][ T5157] dummy0: entered promiscuous mode [ 54.537145][ T5157] bridge0: port 3(dummy0) entered blocking state [ 54.546042][ T5157] bridge0: port 3(dummy0) entered disabled state [ 54.556480][ T5157] dummy0: entered allmulticast mode [ 54.587148][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.593298][ T5157] bridge0: port 3(dummy0) entered blocking state [ 54.603288][ T5157] bridge0: port 3(dummy0) entered forwarding state [ 54.636222][ T5165] veth0: entered promiscuous mode [ 54.650288][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 54.697362][ T5172] loop4: detected capacity change from 0 to 512 [ 54.727560][ T5172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.743620][ T5172] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.801145][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.883039][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.890563][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.902893][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.910449][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.554010][ T5251] loop1: detected capacity change from 0 to 1024 [ 55.641328][ T5251] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.679048][ T5251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.738035][ T5251] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.812996][ T5256] pim6reg1: entered promiscuous mode [ 55.818659][ T5256] pim6reg1: entered allmulticast mode [ 55.834467][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.879565][ T5258] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 55.891757][ T5258] team0: Port device dummy0 added [ 55.900004][ T5258] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 55.926974][ T5258] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 55.938016][ T5258] team0: Failed to send options change via netlink (err -105) [ 55.945610][ T5258] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 55.971351][ T5258] team0: Port device dummy0 removed [ 55.994778][ T5264] loop2: detected capacity change from 0 to 1024 [ 56.006354][ T5258] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.015890][ T5264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.050703][ T5258] syz.1.486 (5258) used greatest stack depth: 10080 bytes left [ 56.129852][ T5264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 56.143696][ T5264] System zones: 0-1, 3-36 [ 56.156146][ T5264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.232788][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.279780][ T5277] loop4: detected capacity change from 0 to 4096 [ 56.293157][ T5277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.303224][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.381071][ T5288] loop1: detected capacity change from 0 to 512 [ 56.387644][ T5286] loop2: detected capacity change from 0 to 512 [ 56.389401][ T5288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.405599][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 56.405614][ T29] audit: type=1400 audit(1758283298.195:1065): avc: denied { append } for pid=5274 comm="syz.4.493" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.439163][ T5288] EXT4-fs (loop1): 1 truncate cleaned up [ 56.445498][ T5288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.464999][ T5286] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.473281][ T5286] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.498085][ T5286] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.495: corrupted inode contents [ 56.510863][ T5286] EXT4-fs (loop2): Remounting filesystem read-only [ 56.517671][ T5286] EXT4-fs (loop2): 1 truncate cleaned up [ 56.528348][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.539610][ T12] Quota error (device loop2): write_blk: dquota write failed [ 56.547225][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 56.557707][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.570231][ T12] Quota error (device loop2): write_blk: dquota write failed [ 56.577928][ T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 56.609514][ T29] audit: type=1326 audit(1758283298.375:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa358d0ec29 code=0x7ffc0000 [ 56.636272][ T29] audit: type=1326 audit(1758283298.375:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa358d0ec29 code=0x7ffc0000 [ 56.660770][ T29] audit: type=1326 audit(1758283298.375:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa358d0ec29 code=0x7ffc0000 [ 56.685388][ T29] audit: type=1326 audit(1758283298.385:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa358d0ec29 code=0x7ffc0000 [ 56.704093][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 56.717339][ T29] audit: type=1326 audit(1758283298.445:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 56.778381][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.812621][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.826789][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.865015][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.865683][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.883846][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.173417][ T5345] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 57.622841][ T5422] loop2: detected capacity change from 0 to 512 [ 57.637511][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.664980][ T5422] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.695815][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.836032][ T5437] loop2: detected capacity change from 0 to 128 [ 57.852195][ T5437] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.888212][ T5437] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.970462][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.023310][ T5443] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 58.066224][ T5443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.087233][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 58.126488][ T5451] bond2: (slave batadv3): making interface the new active one [ 58.143835][ T5451] bond2: (slave batadv3): Enslaving as an active interface with an up link [ 58.606231][ T5491] loop0: detected capacity change from 0 to 512 [ 58.617531][ T5491] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 58.626053][ T5491] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.635843][ T5491] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.560: Failed to acquire dquot type 1 [ 58.647489][ T5491] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.560: bg 0: block 40: padding at end of block bitmap is not set [ 58.662758][ T5491] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 58.672547][ T5491] EXT4-fs (loop0): 1 truncate cleaned up [ 58.679934][ T5491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.696904][ T5491] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.560: corrupted xattr block 31: invalid header [ 58.712467][ T5491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 58.721966][ T5491] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.560: corrupted xattr block 31: invalid header [ 58.735613][ T5491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 58.745045][ T5491] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.560: bad symlink. [ 58.764885][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.807679][ T5506] __nla_validate_parse: 6 callbacks suppressed [ 58.807693][ T5506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.567'. [ 58.839755][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 58.851325][ T5510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.881197][ T5514] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 58.957303][ T5523] rdma_op ffff88811ac82580 conn xmit_rdma 0000000000000000 [ 59.026612][ T5538] loop3: detected capacity change from 0 to 128 [ 59.061406][ T5538] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 59.074417][ T5538] tipc: New replicast peer: 255.255.255.255 [ 59.080570][ T5538] tipc: Enabled bearer , priority 10 [ 59.116806][ T5403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.178956][ T5403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.243232][ T5403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.275182][ T5554] loop2: detected capacity change from 0 to 128 [ 59.321690][ T5403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.415480][ T5566] syz.2.591: attempt to access beyond end of device [ 59.415480][ T5566] loop2: rw=2049, sector=905, nr_sectors = 136 limit=128 [ 59.429797][ T5403] bridge_slave_1: left allmulticast mode [ 59.435457][ T5403] bridge_slave_1: left promiscuous mode [ 59.441380][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.470902][ T5403] bridge_slave_0: left allmulticast mode [ 59.476896][ T5403] bridge_slave_0: left promiscuous mode [ 59.482795][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.752739][ T5403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.763235][ T5403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.773529][ T5403] bond0 (unregistering): Released all slaves [ 59.783431][ T5403] bond1 (unregistering): (slave batadv1): Releasing active interface [ 59.793409][ T5403] bond1 (unregistering): (slave batadv2): Releasing active interface [ 59.803741][ T5403] bond1 (unregistering): Released all slaves [ 59.812910][ T5403] bond2 (unregistering): (slave batadv3): Releasing active interface [ 59.823202][ T5403] bond2 (unregistering): (slave batadv4): Releasing active interface [ 59.832412][ T5403] bond2 (unregistering): Released all slaves [ 59.908925][ T5403] tipc: Left network mode [ 59.923925][ T5584] process 'syz.4.599' launched './file0' with NULL argv: empty string added [ 59.977996][ T5403] hsr_slave_0: left promiscuous mode [ 59.985721][ T5403] hsr_slave_1: left promiscuous mode [ 59.999132][ T5403] veth1_macvtap: left promiscuous mode [ 60.005388][ T5403] veth0_macvtap: left promiscuous mode [ 60.011384][ T5403] veth1_vlan: left promiscuous mode [ 60.017124][ T5403] veth0_vlan: left promiscuous mode [ 60.077615][ T5602] loop1: detected capacity change from 0 to 1024 [ 60.085275][ T5602] EXT4-fs: inline encryption not supported [ 60.094474][ T5602] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 60.110002][ T5602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.141774][ T5403] team0 (unregistering): Port device team_slave_1 removed [ 60.153904][ T5403] team0 (unregistering): Port device team_slave_0 removed [ 60.171447][ T5404] smc: removing ib device syz! [ 60.198034][ T1035] tipc: Node number set to 1019912306 [ 60.221424][ T5597] wireguard0: entered promiscuous mode [ 60.227009][ T5597] wireguard0: entered allmulticast mode [ 60.257175][ T5615] loop3: detected capacity change from 0 to 128 [ 60.288310][ T5618] netlink: 64 bytes leftover after parsing attributes in process `syz.2.609'. [ 60.305820][ T5615] syz.3.610: attempt to access beyond end of device [ 60.305820][ T5615] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 60.321974][ T5552] chnl_net:caif_netlink_parms(): no params data found [ 60.406645][ T5621] syz_tun: entered allmulticast mode [ 60.439495][ T5620] syz_tun: left allmulticast mode [ 60.542449][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.550266][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.574904][ T5552] bridge_slave_0: entered allmulticast mode [ 60.593596][ T5552] bridge_slave_0: entered promiscuous mode [ 60.648256][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.655559][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.663455][ T5552] bridge_slave_1: entered allmulticast mode [ 60.676077][ T5552] bridge_slave_1: entered promiscuous mode [ 60.733002][ T5552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.744477][ T5552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.782637][ T5636] syzkaller0: entered allmulticast mode [ 60.794893][ T5552] team0: Port device team_slave_0 added [ 60.801029][ T5636] syzkaller0: entered promiscuous mode [ 60.807610][ T5552] team0: Port device team_slave_1 added [ 60.827868][ T5636] syzkaller0 (unregistering): left allmulticast mode [ 60.834631][ T5636] syzkaller0 (unregistering): left promiscuous mode [ 60.882062][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.890335][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.918383][ T5552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.938464][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.946223][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.975178][ T5552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.987249][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.011830][ T5552] hsr_slave_0: entered promiscuous mode [ 61.022113][ T5552] hsr_slave_1: entered promiscuous mode [ 61.028947][ T5647] net_ratelimit: 1 callbacks suppressed [ 61.028962][ T5647] IPv4: Oversized IP packet from 127.202.26.0 [ 61.030062][ T5552] debugfs: 'hsr0' already exists in 'hsr' [ 61.046962][ T5552] Cannot create hsr debugfs directory [ 61.164744][ T5658] loop2: detected capacity change from 0 to 512 [ 61.178470][ T5658] EXT4-fs: Ignoring removed bh option [ 61.182135][ T5552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.199100][ T5552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.213916][ T5658] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.627: corrupted inode contents [ 61.231854][ T5658] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.627: mark_inode_dirty error [ 61.246141][ T5552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.247608][ T5658] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.627: corrupted inode contents [ 61.266662][ T5658] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.627: mark_inode_dirty error [ 61.282706][ T5658] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.627: Failed to acquire dquot type 0 [ 61.297415][ T5552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.310669][ T5658] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.627: corrupted inode contents [ 61.325965][ T5658] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.627: mark_inode_dirty error [ 61.339713][ T5658] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.627: corrupted inode contents [ 61.352793][ T5658] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.627: mark_inode_dirty error [ 61.368113][ T5658] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.627: corrupted inode contents [ 61.396941][ T5658] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 61.398955][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.417789][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 61.425655][ T5552] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.434660][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.442804][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.450414][ T5658] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.627: corrupted inode contents [ 61.462642][ T5680] loop1: detected capacity change from 0 to 1024 [ 61.462849][ T5658] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.627: mark_inode_dirty error [ 61.474251][ T5680] __quota_error: 77 callbacks suppressed [ 61.474267][ T5680] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 61.481865][ T5658] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 61.487612][ T5680] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 61.499665][ T5658] EXT4-fs (loop2): 1 truncate cleaned up [ 61.505755][ T5680] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.634: Failed to acquire dquot type 0 [ 61.517585][ T5658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.522662][ T5680] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, [ 61.533254][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.545363][ T5680] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 61.545502][ T5680] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.634: corrupted inode contents [ 61.553797][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.558773][ T5658] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.562195][ T5680] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.634: mark_inode_dirty error [ 61.613645][ T5680] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.634: corrupted inode contents [ 61.630482][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.637608][ T5386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.645092][ T5658] syz.2.627 (5658) used greatest stack depth: 9760 bytes left [ 61.645414][ T5680] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.634: mark_inode_dirty error [ 61.666329][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.666778][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.683243][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.691628][ T5680] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.634: corrupted inode contents [ 61.704606][ T5552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.715505][ T5552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.728220][ T5680] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 61.737892][ T5680] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.634: corrupted inode contents [ 61.760960][ T5680] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.634: mark_inode_dirty error [ 61.775924][ T5680] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 61.787567][ T5680] EXT4-fs (loop1): 1 truncate cleaned up [ 61.814953][ T5680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.832561][ T5694] loop2: detected capacity change from 0 to 1024 [ 61.839602][ T5694] EXT4-fs: Ignoring removed orlov option [ 61.863269][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.898831][ T5705] veth1_to_bond: entered allmulticast mode [ 61.906456][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.916612][ T5705] veth1_to_bond: left allmulticast mode [ 61.925635][ T5707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5707 comm=syz.3.639 [ 61.938364][ T5707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5707 comm=syz.3.639 [ 61.943470][ T5694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.124818][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.132419][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.165177][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.176357][ T5730] veth0_to_team: left promiscuous mode [ 62.224710][ T5730] ip6gre1: left allmulticast mode [ 62.231720][ T5730] bond2: left promiscuous mode [ 62.237530][ T5730] batadv1: left promiscuous mode [ 62.242823][ T5730] batadv1: left allmulticast mode [ 62.249104][ T5730] batadv2: left promiscuous mode [ 62.254069][ T5730] batadv2: left allmulticast mode [ 62.268665][ T5381] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.278416][ T5381] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.295351][ T5381] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.304666][ T5381] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.306480][ T29] audit: type=1326 audit(1758283304.095:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.320415][ T5381] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.349142][ T5381] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.359456][ T5381] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.368710][ T5381] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.378119][ T5552] veth0_vlan: entered promiscuous mode [ 62.383704][ T29] audit: type=1326 audit(1758283304.135:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.386215][ T5552] veth1_vlan: entered promiscuous mode [ 62.407991][ T29] audit: type=1326 audit(1758283304.135:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.438898][ T29] audit: type=1326 audit(1758283304.135:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.461664][ T5552] veth0_macvtap: entered promiscuous mode [ 62.462852][ T29] audit: type=1326 audit(1758283304.135:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.488765][ T5552] veth1_macvtap: entered promiscuous mode [ 62.492670][ T29] audit: type=1326 audit(1758283304.135:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.513633][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.522625][ T29] audit: type=1326 audit(1758283304.135:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.535409][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.554083][ T29] audit: type=1326 audit(1758283304.135:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.3.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b779ec29 code=0x7ffc0000 [ 62.568021][ T5403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.598875][ T5403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.610746][ T5403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.619913][ T5403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.699333][ T5754] tipc: Started in network mode [ 62.704446][ T5754] tipc: Node identity 6af8dcf9984a, cluster identity 4711 [ 62.712399][ T5754] tipc: Enabled bearer , priority 0 [ 62.721316][ T5754] tipc: Disabling bearer [ 62.857734][ T5761] IPVS: Error connecting to the multicast addr [ 63.006807][ T5777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5777 comm=syz.1.664 [ 63.128504][ T5790] dummy0: left allmulticast mode [ 63.137672][ T5790] bridge0: port 3(dummy0) entered disabled state [ 63.151162][ T5783] netlink: 'syz.1.666': attribute type 32 has an invalid length. [ 63.170385][ T5790] bridge_slave_1: left allmulticast mode [ 63.176723][ T5790] bridge_slave_1: left promiscuous mode [ 63.183327][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.192451][ T5790] bridge_slave_0: left allmulticast mode [ 63.198446][ T5790] bridge_slave_0: left promiscuous mode [ 63.204433][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.230513][ T5801] loop2: detected capacity change from 0 to 512 [ 63.252251][ T5801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.265861][ T5801] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.471676][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'. [ 63.504870][ T5824] wg2: entered promiscuous mode [ 63.510027][ T5824] wg2: entered allmulticast mode [ 63.662886][ T5839] netlink: 100 bytes leftover after parsing attributes in process `syz.3.689'. [ 63.727950][ T5845] loop4: detected capacity change from 0 to 128 [ 63.751298][ T5845] syz.4.692: attempt to access beyond end of device [ 63.751298][ T5845] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 63.793893][ T5851] loop3: detected capacity change from 0 to 128 [ 63.869922][ T5863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5863 comm=syz.3.700 [ 63.883318][ T5863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5863 comm=syz.3.700 [ 63.914311][ T5869] netlink: 'syz.1.703': attribute type 13 has an invalid length. [ 63.930061][ T5869] gretap0: refused to change device tx_queue_len [ 63.937534][ T5869] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.015201][ T5874] SELinux: failed to load policy [ 64.148403][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.169642][ T5895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5895 comm=syz.3.716 [ 64.259285][ T5908] loop2: detected capacity change from 0 to 128 [ 64.287220][ T5908] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.295843][ T5908] FAT-fs (loop2): Filesystem has been set read-only [ 64.305565][ T5908] syz.2.715: attempt to access beyond end of device [ 64.305565][ T5908] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.323154][ T5908] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.331215][ T5908] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.342007][ T5908] syz.2.715: attempt to access beyond end of device [ 64.342007][ T5908] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.355898][ T5908] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.370509][ T5908] syz.2.715: attempt to access beyond end of device [ 64.370509][ T5908] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.375253][ T5919] loop5: detected capacity change from 0 to 2048 [ 64.385882][ T5908] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.400889][ T5908] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.409103][ T5908] syz.2.715: attempt to access beyond end of device [ 64.409103][ T5908] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.422820][ T5917] syz.2.715: attempt to access beyond end of device [ 64.422820][ T5917] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 64.437284][ T5917] Buffer I/O error on dev loop2, logical block 2065, async page read [ 64.446164][ T5917] syz.2.715: attempt to access beyond end of device [ 64.446164][ T5917] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 64.446935][ T5919] loop5: p1 < > p4 [ 64.459802][ T5917] Buffer I/O error on dev loop2, logical block 2066, async page read [ 64.459898][ T5917] syz.2.715: attempt to access beyond end of device [ 64.459898][ T5917] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 64.459916][ T5917] Buffer I/O error on dev loop2, logical block 2067, async page read [ 64.459937][ T5917] syz.2.715: attempt to access beyond end of device [ 64.459937][ T5917] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 64.466800][ T5919] loop5: p4 size 8388608 extends beyond EOD, [ 64.472324][ T5917] Buffer I/O error on dev loop2, logical block 2068, async page read [ 64.486648][ T5919] truncated [ 64.495435][ T5917] syz.2.715: attempt to access beyond end of device [ 64.495435][ T5917] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 64.541120][ T5917] Buffer I/O error on dev loop2, logical block 2069, async page read [ 64.552465][ T5917] syz.2.715: attempt to access beyond end of device [ 64.552465][ T5917] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 64.566719][ T5917] Buffer I/O error on dev loop2, logical block 2070, async page read [ 64.577636][ T5917] syz.2.715: attempt to access beyond end of device [ 64.577636][ T5917] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 64.590984][ T5917] Buffer I/O error on dev loop2, logical block 2071, async page read [ 64.599649][ T5917] syz.2.715: attempt to access beyond end of device [ 64.599649][ T5917] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 64.613807][ T5917] Buffer I/O error on dev loop2, logical block 2072, async page read [ 64.622368][ T5917] syz.2.715: attempt to access beyond end of device [ 64.622368][ T5917] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 64.636146][ T5917] Buffer I/O error on dev loop2, logical block 2065, async page read [ 64.644894][ T5917] syz.2.715: attempt to access beyond end of device [ 64.644894][ T5917] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 64.659266][ T5917] Buffer I/O error on dev loop2, logical block 2066, async page read [ 64.900982][ T5925] netlink: zone id is out of range [ 64.906479][ T5925] netlink: zone id is out of range [ 64.913396][ T5925] netlink: zone id is out of range [ 64.918966][ T5925] netlink: zone id is out of range [ 64.924895][ T5925] netlink: zone id is out of range [ 64.930601][ T5925] netlink: zone id is out of range [ 64.936049][ T5925] netlink: zone id is out of range [ 64.943379][ T5925] netlink: zone id is out of range [ 65.082338][ T5933] loop3: detected capacity change from 0 to 1024 [ 65.098933][ T5933] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.730: Failed to acquire dquot type 0 [ 65.118766][ T5933] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 65.136745][ T5933] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.730: corrupted inode contents [ 65.152316][ T5933] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.730: mark_inode_dirty error [ 65.167113][ T5933] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.730: corrupted inode contents [ 65.180354][ T5933] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.730: mark_inode_dirty error [ 65.198383][ T5933] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.730: corrupted inode contents [ 65.211456][ T5933] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 65.224882][ T5933] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.730: corrupted inode contents [ 65.259930][ T5933] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.730: mark_inode_dirty error [ 65.272990][ T5950] loop1: detected capacity change from 0 to 1024 [ 65.274937][ T5933] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 65.291394][ T5950] EXT4-fs: Ignoring removed orlov option [ 65.294722][ T5933] EXT4-fs (loop3): 1 truncate cleaned up [ 65.304805][ T5933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.330507][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.344026][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.371672][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.749812][ T6016] loop1: detected capacity change from 0 to 128 [ 65.782203][ T6016] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 65.811623][ T6016] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.920813][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.001528][ T6028] netlink: 96 bytes leftover after parsing attributes in process `syz.2.757'. [ 66.266027][ T6045] vhci_hcd: invalid port number 254 [ 66.271585][ T6045] vhci_hcd: invalid port number 254 [ 66.335676][ T6053] loop5: detected capacity change from 0 to 2048 [ 66.720951][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 66.720966][ T29] audit: type=1400 audit(1758283308.505:1349): avc: granted { setsecparam } for pid=6080 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 66.986222][ T29] audit: type=1400 audit(1758283308.765:1350): avc: denied { getopt } for pid=6089 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.181529][ T6100] loop1: detected capacity change from 0 to 512 [ 67.198656][ T6100] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 67.208432][ T29] audit: type=1400 audit(1758283308.985:1351): avc: denied { ioctl } for pid=6101 comm="syz.2.791" path="socket:[11168]" dev="sockfs" ino=11168 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.208531][ T6102] lo speed is unknown, defaulting to 1000 [ 67.280211][ T6102] lo speed is unknown, defaulting to 1000 [ 67.297549][ T6102] lo speed is unknown, defaulting to 1000 [ 67.307684][ T6102] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.327736][ T6102] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.368464][ T6102] lo speed is unknown, defaulting to 1000 [ 67.375064][ T6102] lo speed is unknown, defaulting to 1000 [ 67.391634][ T6102] lo speed is unknown, defaulting to 1000 [ 67.406579][ T6109] netlink: 96 bytes leftover after parsing attributes in process `syz.5.793'. [ 67.421872][ T6102] lo speed is unknown, defaulting to 1000 [ 67.438300][ T6102] lo speed is unknown, defaulting to 1000 [ 67.600050][ T29] audit: type=1326 audit(1758283309.385:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 67.651246][ T29] audit: type=1326 audit(1758283309.425:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 67.675937][ T29] audit: type=1326 audit(1758283309.425:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 67.700921][ T29] audit: type=1326 audit(1758283309.425:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 67.725689][ T29] audit: type=1326 audit(1758283309.425:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 67.749990][ T29] audit: type=1326 audit(1758283309.425:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 67.774388][ T29] audit: type=1326 audit(1758283309.425:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdeec29 code=0x7ffc0000 [ 68.150301][ T6155] sg_write: data in/out 46582/42 bytes for SCSI command 0x1-- guessing data in; [ 68.150301][ T6155] program syz.1.813 not setting count and/or reply_len properly [ 68.223198][ T6157] loop5: detected capacity change from 0 to 8192 [ 68.301272][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 68.336507][ T6166] xfrm1: entered promiscuous mode [ 68.341861][ T6166] xfrm1: entered allmulticast mode [ 68.370080][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 68.457622][ T6177] 9pnet: p9_errstr2errno: server reported unknown error [ 69.181395][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.840'. [ 69.193739][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.840'. [ 69.373010][ T6240] lo speed is unknown, defaulting to 1000 [ 69.387490][ T6244] netlink: 'syz.1.849': attribute type 83 has an invalid length. [ 69.500344][ T6252] loop4: detected capacity change from 0 to 4096 [ 69.518380][ T6252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.526786][ T6250] loop5: detected capacity change from 0 to 2048 [ 69.540170][ T6252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.588985][ T6250] Alternate GPT is invalid, using primary GPT. [ 69.595536][ T6250] loop5: p1 p2 p3 [ 69.870879][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.920661][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 69.936524][ T6261] bond_slave_0: entered promiscuous mode [ 69.942794][ T6261] bond_slave_1: entered promiscuous mode [ 69.950722][ T6261] macvlan2: entered promiscuous mode [ 69.956591][ T6261] bond0: entered promiscuous mode [ 69.968103][ T6261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.048440][ T6280] 9pnet: p9_errstr2errno: server reported unknown error [ 70.156095][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.871'. [ 70.232111][ T6297] dummy0: left promiscuous mode [ 70.251237][ T6297] net_ratelimit: 3 callbacks suppressed [ 70.251248][ T6297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.383571][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'. [ 70.392951][ T6282] netlink: 21 bytes leftover after parsing attributes in process `syz.1.865'. [ 70.402456][ T6282] netlink: 'syz.1.865': attribute type 2 has an invalid length. [ 70.458777][ T6310] pim6reg1: entered promiscuous mode [ 70.464585][ T6310] pim6reg1: entered allmulticast mode [ 70.719274][ T6316] infiniband syz!: set active [ 70.724308][ T6316] infiniband syz!: added team_slave_0 [ 70.755096][ T6316] RDS/IB: syz!: added [ 70.759263][ T6316] smc: adding ib device syz! with port count 1 [ 70.766125][ T6316] smc: ib device syz! port 1 has pnetid [ 70.817501][ T6323] ip6gre1: entered allmulticast mode [ 81.613453][ T6345] netlink: 'syz.4.889': attribute type 83 has an invalid length. [ 81.714581][ T6356] vlan2: entered allmulticast mode [ 81.724420][ T6356] dummy0: entered allmulticast mode [ 81.810409][ T6346] lo speed is unknown, defaulting to 1000 [ 81.919688][ T6374] loop2: detected capacity change from 0 to 256 [ 81.940258][ T6374] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.968592][ T6374] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.001030][ T6346] chnl_net:caif_netlink_parms(): no params data found [ 82.082005][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.089350][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.107574][ T6346] bridge_slave_0: entered allmulticast mode [ 82.127710][ T6346] bridge_slave_0: entered promiscuous mode [ 82.139499][ T6390] loop1: detected capacity change from 0 to 256 [ 82.140478][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 82.140490][ T29] audit: type=1326 audit(1758283323.925:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.146536][ T6390] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.152156][ T29] audit: type=1326 audit(1758283323.925:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.152181][ T29] audit: type=1326 audit(1758283323.925:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.152202][ T29] audit: type=1326 audit(1758283323.925:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.180059][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.267926][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.281422][ T6390] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.308016][ T29] audit: type=1326 audit(1758283323.975:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.316060][ T6346] bridge_slave_1: entered allmulticast mode [ 82.331614][ T29] audit: type=1326 audit(1758283323.975:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.331645][ T29] audit: type=1326 audit(1758283323.975:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.356337][ T6346] bridge_slave_1: entered promiscuous mode [ 82.361843][ T29] audit: type=1326 audit(1758283323.975:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.417376][ T29] audit: type=1326 audit(1758283324.075:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.442040][ T29] audit: type=1326 audit(1758283324.075:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 82.507568][ T6399] vlan2: entered allmulticast mode [ 82.519686][ T6399] dummy0: entered allmulticast mode [ 82.598011][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.619452][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.632960][ T6414] loop1: detected capacity change from 0 to 128 [ 82.643218][ T6414] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.655939][ T6414] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.689951][ T6346] team0: Port device team_slave_0 added [ 82.706808][ T6346] team0: Port device team_slave_1 added [ 82.716199][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.740138][ T6419] vlan0: entered allmulticast mode [ 82.745363][ T6419] dummy0: entered allmulticast mode [ 82.756002][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.763300][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.789853][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.811634][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.818855][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.846418][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.886087][ T6427] loop5: detected capacity change from 0 to 256 [ 82.910267][ T6427] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.925453][ T6346] hsr_slave_0: entered promiscuous mode [ 82.932102][ T6427] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.943653][ T6346] hsr_slave_1: entered promiscuous mode [ 82.952106][ T6346] debugfs: 'hsr0' already exists in 'hsr' [ 82.958091][ T6346] Cannot create hsr debugfs directory [ 82.980655][ T6434] loop1: detected capacity change from 0 to 512 [ 83.001180][ T6434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.019269][ T6434] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.073967][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.142826][ T6346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.154856][ T6346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.167271][ T6346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.182099][ T6346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.223296][ T6456] loop5: detected capacity change from 0 to 128 [ 83.234735][ T6456] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.236290][ T6455] vlan2: entered allmulticast mode [ 83.249485][ T6456] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.316583][ T5552] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.350352][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.379867][ T6346] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.394360][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.402267][ T5392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.415490][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.423050][ T5392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.502989][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.537740][ T6346] veth0_vlan: entered promiscuous mode [ 83.547770][ T6346] veth1_vlan: entered promiscuous mode [ 83.565785][ T6505] __nla_validate_parse: 1 callbacks suppressed [ 83.565802][ T6505] netlink: 64 bytes leftover after parsing attributes in process `syz.5.954'. [ 83.587622][ T6346] veth0_macvtap: entered promiscuous mode [ 83.600408][ T6346] veth1_macvtap: entered promiscuous mode [ 83.632744][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.645866][ T6513] netlink: 204 bytes leftover after parsing attributes in process `syz.1.948'. [ 83.654060][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.672273][ T6516] loop5: detected capacity change from 0 to 512 [ 83.685280][ T5404] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.708287][ T6516] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.714678][ T5404] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.725493][ T6516] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.748528][ T5404] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.749255][ T6516] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.951: corrupted inode contents [ 83.757936][ T5404] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.781004][ T6516] EXT4-fs (loop5): Remounting filesystem read-only [ 83.788564][ T6516] EXT4-fs (loop5): 1 truncate cleaned up [ 83.794563][ T5386] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.805671][ T5386] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.831276][ T5386] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.846576][ T6516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.881710][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.942706][ T6535] vlan2: entered allmulticast mode [ 83.952674][ T6535] dummy0: entered allmulticast mode [ 83.987434][ T6545] loop5: detected capacity change from 0 to 512 [ 84.005104][ T6545] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.020312][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.1.960'. [ 84.041478][ T6545] EXT4-fs (loop5): 1 truncate cleaned up [ 84.047792][ T6545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.074047][ T6550] loop2: detected capacity change from 0 to 4096 [ 84.082648][ T6550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.095237][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.121056][ T6559] netlink: 204 bytes leftover after parsing attributes in process `syz.4.968'. [ 84.128694][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 84.148317][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.977'. [ 84.195638][ T6563] loop4: detected capacity change from 0 to 512 [ 84.239210][ T6563] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 84.256360][ T6568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.971'. [ 84.257794][ T6563] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.307723][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 84.321776][ T6563] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.969: corrupted inode contents [ 84.336321][ T6572] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.354441][ T6563] EXT4-fs (loop4): Remounting filesystem read-only [ 84.375323][ T6563] EXT4-fs (loop4): 1 truncate cleaned up [ 84.375508][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.392342][ T5404] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.403580][ T5404] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.417352][ T5404] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 84.433417][ T6563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.462124][ T6580] netlink: 'syz.5.975': attribute type 1 has an invalid length. [ 84.470953][ T6572] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.482221][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.504407][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.516287][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.975'. [ 84.533311][ T6572] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.551964][ T6584] bond1 (unregistering): Released all slaves [ 84.580644][ T6572] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.599162][ T6589] loop4: detected capacity change from 0 to 1024 [ 84.625134][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.635304][ T6589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.667623][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.690802][ T6598] loop2: detected capacity change from 0 to 512 [ 84.697667][ T6598] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.706459][ T6598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.718441][ T6598] EXT4-fs (loop2): 1 truncate cleaned up [ 84.724616][ T6598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.935233][ T6619] loop4: detected capacity change from 0 to 1024 [ 84.942452][ T6619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.954236][ T6619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.965982][ T6617] loop5: detected capacity change from 0 to 8192 [ 85.011510][ T6619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.213955][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.332778][ T6633] geneve2: entered promiscuous mode [ 85.338194][ T6633] geneve2: entered allmulticast mode [ 85.439170][ T6639] loop5: detected capacity change from 0 to 1024 [ 85.447648][ T6639] EXT4-fs: Ignoring removed bh option [ 85.458436][ T6639] EXT4-fs: inline encryption not supported [ 85.465071][ T6639] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.477206][ T6639] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 85.493983][ T6639] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.999: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.541854][ T6639] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.999: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.592312][ T6639] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.999: Failed to acquire dquot type 0 [ 85.631221][ T6639] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 85.655438][ T6639] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.999: mark_inode_dirty error [ 85.676726][ T6648] pim6reg1: entered promiscuous mode [ 85.682214][ T6648] pim6reg1: entered allmulticast mode [ 85.686150][ T6639] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 85.698434][ T6639] EXT4-fs (loop5): 1 orphan inode deleted [ 85.704354][ T5392] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:49: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.704632][ T6639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.732680][ T5392] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:49: Failed to release dquot type 0 [ 85.748700][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.761300][ T6639] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.797356][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.879442][ T6664] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.126207][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 86.170797][ T6690] Falling back ldisc for ttyS3. [ 86.202017][ T6698] loop5: detected capacity change from 0 to 1024 [ 86.229820][ T6698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.242721][ T6698] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.351122][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.641979][ T6723] netlink: 'syz.1.1035': attribute type 7 has an invalid length. [ 86.716628][ T6734] batadv0: entered promiscuous mode [ 86.722064][ T6734] batadv0: entered allmulticast mode [ 86.880210][ T6746] tipc: Started in network mode [ 86.885109][ T6746] tipc: Node identity fe5b7325959c, cluster identity 4711 [ 86.892703][ T6746] tipc: Enabled bearer , priority 0 [ 86.911247][ T6746] tipc: Disabling bearer [ 87.054045][ T5404] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.085855][ T5404] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.101345][ T5404] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.113746][ T5404] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.190710][ T6774] netlink: 'syz.6.1059': attribute type 10 has an invalid length. [ 87.200277][ T6774] dummy0: entered promiscuous mode [ 87.213084][ T6774] bridge0: port 3(dummy0) entered blocking state [ 87.220052][ T6774] bridge0: port 3(dummy0) entered disabled state [ 87.253972][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 87.253986][ T29] audit: type=1326 audit(1758283329.035:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.257347][ T6774] bridge0: port 3(dummy0) entered blocking state [ 87.291408][ T6774] bridge0: port 3(dummy0) entered forwarding state [ 87.326125][ T29] audit: type=1326 audit(1758283329.035:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.350008][ T29] audit: type=1326 audit(1758283329.035:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.374816][ T29] audit: type=1326 audit(1758283329.035:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.398862][ T29] audit: type=1326 audit(1758283329.035:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.423299][ T29] audit: type=1326 audit(1758283329.035:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.447618][ T29] audit: type=1326 audit(1758283329.035:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.472649][ T29] audit: type=1326 audit(1758283329.035:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.496744][ T29] audit: type=1326 audit(1758283329.035:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.521261][ T29] audit: type=1326 audit(1758283329.035:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6781 comm="syz.5.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 87.561870][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.569929][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.585810][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.593603][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.655552][ T6801] loop1: detected capacity change from 0 to 1024 [ 87.684287][ T6801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.712233][ T6807] vlan0: entered allmulticast mode [ 87.724465][ T6801] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.807519][ T5381] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:38: bg 0: block 393: padding at end of block bitmap is not set [ 87.851118][ T5381] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 87.866806][ T5381] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.866806][ T5381] [ 87.893383][ T6818] loop2: detected capacity change from 0 to 1024 [ 87.898830][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.920064][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.935004][ T6818] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.960384][ T5386] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:43: bg 0: block 393: padding at end of block bitmap is not set [ 88.006102][ T5386] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 88.019707][ T5386] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.019707][ T5386] [ 88.035161][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.129926][ T6849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6849 comm=syz.4.1092 [ 88.209053][ T6855] loop2: detected capacity change from 0 to 2048 [ 88.240131][ T6859] loop5: detected capacity change from 0 to 1024 [ 88.244544][ T6855] loop2: p2 p3 p7 [ 88.263035][ T6859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.275652][ T6859] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.326424][ T5386] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:43: bg 0: block 393: padding at end of block bitmap is not set [ 88.344920][ T5386] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 88.359475][ T5386] EXT4-fs (loop5): This should not happen!! Data will be lost [ 88.359475][ T5386] [ 88.376394][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.467691][ T6882] tipc: Started in network mode [ 88.472887][ T6882] tipc: Node identity 0e0ad112c235, cluster identity 4711 [ 88.480600][ T6882] tipc: Enabled bearer , priority 0 [ 88.526141][ T6882] tipc: Disabling bearer [ 88.579051][ T6893] loop5: detected capacity change from 0 to 2048 [ 88.623280][ T6893] loop5: p2 p3 p7 [ 88.729027][ T6910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.780267][ T6913] __nla_validate_parse: 9 callbacks suppressed [ 88.780356][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1119'. [ 88.817504][ T6910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.922619][ T6927] tipc: Enabled bearer , priority 0 [ 88.939971][ T6910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.952620][ T6924] tipc: Disabling bearer [ 88.986816][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 88.996996][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1136'. [ 89.036298][ T6910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.131776][ T5381] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.168095][ T5381] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.186730][ T5381] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.195334][ T5381] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.324942][ T6961] vhci_hcd: invalid port number 96 [ 91.330418][ T6961] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 91.396787][ T6967] tipc: Started in network mode [ 91.402029][ T6967] tipc: Node identity 76a0a406b6ae, cluster identity 4711 [ 91.403997][ T6953] Falling back ldisc for ttyS3. [ 91.409432][ T6967] tipc: Enabled bearer , priority 0 [ 91.456354][ T6967] tipc: Disabling bearer [ 91.491725][ T6969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.548273][ T6980] loop2: detected capacity change from 0 to 1024 [ 91.565693][ T6983] loop1: detected capacity change from 0 to 256 [ 91.575861][ T6983] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.593052][ T6980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.595392][ T6969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.619715][ T6980] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.632602][ T6983] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.723006][ T6969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.795412][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.807519][ T6969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.891620][ T5381] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.909187][ T5381] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.917866][ T5381] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.934580][ T5381] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971927][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1161'. [ 92.019273][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.026835][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.034590][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.042701][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.050519][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.058436][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.066523][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.074393][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.081839][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.089579][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.099438][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.220027][ T7047] loop2: detected capacity change from 0 to 128 [ 92.234498][ T7047] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.263303][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 92.263316][ T29] audit: type=1326 audit(1758283334.045:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe772195be7 code=0x7ffc0000 [ 92.295841][ T29] audit: type=1326 audit(1758283334.055:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe77213ae09 code=0x7ffc0000 [ 92.323989][ T29] audit: type=1326 audit(1758283334.055:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 92.330897][ T7047] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.348448][ T29] audit: type=1326 audit(1758283334.075:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe772195be7 code=0x7ffc0000 [ 92.384695][ T29] audit: type=1326 audit(1758283334.075:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe77213ae09 code=0x7ffc0000 [ 92.388238][ T7055] loop5: detected capacity change from 0 to 1024 [ 92.409042][ T29] audit: type=1326 audit(1758283334.075:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 92.409176][ T29] audit: type=1326 audit(1758283334.105:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe772195be7 code=0x7ffc0000 [ 92.446454][ T7055] EXT4-fs: test_dummy_encryption option not supported [ 92.463958][ T29] audit: type=1326 audit(1758283334.105:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe77213ae09 code=0x7ffc0000 [ 92.495203][ T29] audit: type=1326 audit(1758283334.105:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 92.518926][ T29] audit: type=1326 audit(1758283334.155:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe772195be7 code=0x7ffc0000 [ 92.589926][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.626169][ T7068] loop5: detected capacity change from 0 to 256 [ 92.643476][ T7068] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 92.662501][ T7072] loop4: detected capacity change from 0 to 512 [ 92.670704][ T7072] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 92.682021][ T7068] bio_check_eod: 44278 callbacks suppressed [ 92.682039][ T7068] syz.5.1186: attempt to access beyond end of device [ 92.682039][ T7068] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 92.702461][ T7072] EXT4-fs (loop4): failed to open journal device unknown-block(0,4) -6 [ 92.713768][ T7068] syz.5.1186: attempt to access beyond end of device [ 92.713768][ T7068] loop5: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 92.737047][ T7068] syz.5.1186: attempt to access beyond end of device [ 92.737047][ T7068] loop5: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 92.808351][ T7068] syz.5.1186: attempt to access beyond end of device [ 92.808351][ T7068] loop5: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 92.978264][ T7116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7116 comm=syz.5.1207 [ 93.004889][ T7118] hub 8-0:1.0: USB hub found [ 93.010225][ T7118] hub 8-0:1.0: 8 ports detected [ 93.020143][ T7123] loop5: detected capacity change from 0 to 512 [ 93.046227][ T7123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.061881][ T7123] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.073714][ T7123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.128336][ T7121] netlink: 'syz.2.1209': attribute type 32 has an invalid length. [ 93.366995][ T7160] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1221'. [ 93.409325][ T7166] loop5: detected capacity change from 0 to 512 [ 93.416166][ T7166] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 93.523741][ T7173] loop2: detected capacity change from 0 to 2048 [ 93.544504][ T7175] loop5: detected capacity change from 0 to 512 [ 93.558870][ T7173] loop2: p1 < > p4 [ 93.564039][ T7173] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.571961][ T7175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.585210][ T7175] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.598212][ T7178] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 93.621733][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.813899][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 93.874824][ T7210] unsupported nla_type 52263 [ 93.948023][ T7216] loop1: detected capacity change from 0 to 8192 [ 94.027242][ T7227] loop1: detected capacity change from 0 to 512 [ 94.040638][ T7227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.056020][ T7227] EXT4-fs (loop1): 1 truncate cleaned up [ 94.071353][ T7227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.112870][ T7236] 9pnet: p9_errstr2errno: server reported unknown error [ 94.152765][ T7241] siw: device registration error -23 [ 94.246222][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.321084][ T7255] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.399700][ T7255] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.432144][ T7268] loop5: detected capacity change from 0 to 256 [ 94.442309][ T7268] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.454940][ T7268] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.477475][ T7259] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1264' sets config #0 [ 94.520905][ T7255] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.611091][ T7255] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.621964][ T7279] loop1: detected capacity change from 0 to 128 [ 94.633921][ T7279] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.651761][ T7283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7283 comm=syz.2.1275 [ 94.651904][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1273'. [ 94.673748][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1273'. [ 94.682762][ T7279] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.706830][ T7288] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1277'. [ 94.718025][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1274'. [ 94.738286][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1273'. [ 94.741485][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.747544][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1273'. [ 94.787167][ T5404] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811365][ T5404] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.825698][ T5404] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.838538][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1280'. [ 94.846770][ T5404] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.856984][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 95.182236][ T7341] bridge: RTM_NEWNEIGH with invalid ether address [ 95.258826][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1307'. [ 95.436043][ T7379] loop2: detected capacity change from 0 to 512 [ 95.577058][ T7379] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 95.601157][ T7379] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.609159][ T7379] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.626048][ T7379] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 95.634113][ T7379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1316: bg 0: block 40: padding at end of block bitmap is not set [ 95.653619][ T7379] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 95.684614][ T7379] EXT4-fs (loop2): 1 truncate cleaned up [ 95.690789][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.759938][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.059409][ T7428] loop2: detected capacity change from 0 to 2048 [ 96.082325][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.106287][ T7428] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.1338: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 96.155892][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.392860][ T7452] loop1: detected capacity change from 0 to 164 [ 96.608490][ T7464] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1353' sets config #0 [ 96.750956][ T7484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7484 comm=syz.5.1372 [ 96.831901][ T7498] loop2: detected capacity change from 0 to 128 [ 96.854334][ T7498] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.870614][ T7498] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.895346][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.955481][ T7508] loop2: detected capacity change from 0 to 256 [ 96.963169][ T7508] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.984403][ T7508] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.123446][ T7518] ref_ctr increment failed for inode: 0x392 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888103f5b980 [ 97.135764][ T7517] uprobe: syz.5.1387:7517 failed to unregister, leaking uprobe [ 97.174209][ T7525] syz_tun: entered allmulticast mode [ 97.183986][ T7525] dvmrp1: entered allmulticast mode [ 97.194001][ T7524] syz_tun: left allmulticast mode [ 97.770504][ T7601] loop1: detected capacity change from 0 to 256 [ 97.777922][ T7601] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.793179][ T7601] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.145328][ T7639] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1391' sets config #0 [ 98.657892][ T7663] syz_tun: entered allmulticast mode [ 98.659930][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 98.659944][ T29] audit: type=1326 audit(1758283340.435:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 98.679288][ T7663] dvmrp1: entered allmulticast mode [ 98.703952][ T29] audit: type=1326 audit(1758283340.455:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 98.728258][ T29] audit: type=1326 audit(1758283340.455:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 98.752624][ T29] audit: type=1326 audit(1758283340.485:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 98.777100][ T29] audit: type=1326 audit(1758283340.495:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 98.801322][ T29] audit: type=1326 audit(1758283340.495:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7666 comm="syz.2.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9c3dec29 code=0x7ffc0000 [ 98.825444][ T29] audit: type=1326 audit(1758283340.495:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 98.850125][ T29] audit: type=1326 audit(1758283340.495:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 98.875121][ T29] audit: type=1326 audit(1758283340.495:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 98.899384][ T29] audit: type=1326 audit(1758283340.495:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7661 comm="syz.1.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77219ec29 code=0x7ffc0000 [ 98.933102][ T7662] syz_tun: left allmulticast mode [ 98.984239][ T7682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.013168][ T7672] loop4: detected capacity change from 0 to 2048 [ 99.053557][ T7672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.070757][ T7672] EXT4-fs error (device loop4): ext4_ext_precache:649: inode #2: comm syz.4.1400: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 99.090196][ T7682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.100652][ T7692] loop6: detected capacity change from 0 to 512 [ 99.121126][ T7692] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 99.121487][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.130425][ T7692] EXT4-fs (loop6): orphan cleanup on readonly fs [ 99.148936][ T7692] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.166620][ T7692] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 99.175004][ T7692] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1407: bg 0: block 40: padding at end of block bitmap is not set [ 99.191251][ T7682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.216576][ T7692] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 99.227803][ T7692] EXT4-fs (loop6): 1 truncate cleaned up [ 99.235008][ T7692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.286173][ T7682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.311217][ T6346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.333171][ T5404] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.344541][ T7701] loop2: detected capacity change from 0 to 512 [ 99.350616][ T5404] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.362979][ T5404] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.373076][ T5386] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.389663][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.410290][ T7701] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.426178][ T7701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.705907][ T7727] loop2: detected capacity change from 0 to 8192 [ 99.827660][ T7740] loop1: detected capacity change from 0 to 2048 [ 99.878320][ T7740] loop1: p1 < > p4 [ 99.884362][ T7740] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.895049][ T7743] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.914470][ T7746] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 99.940074][ T7743] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.991077][ T7743] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.008721][ T7756] __nla_validate_parse: 6 callbacks suppressed [ 100.008814][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 100.040047][ T7743] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.067159][ T7759] loop6: detected capacity change from 0 to 164 [ 100.151029][ T5403] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.165912][ T5403] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.174797][ T5403] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.192599][ T5403] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.205978][ T7773] loop5: detected capacity change from 0 to 512 [ 100.222997][ T7773] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.224686][ T7779] netlink: 'syz.2.1443': attribute type 27 has an invalid length. [ 100.231816][ T7773] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.248285][ T7773] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.268036][ T7773] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 100.275198][ T7773] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1441: bg 0: block 40: padding at end of block bitmap is not set [ 100.292637][ T7773] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 100.303713][ T7773] EXT4-fs (loop5): 1 truncate cleaned up [ 100.310090][ T7773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.327705][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.334970][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.355703][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.379914][ T7788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7788 comm=syz.6.1445 [ 100.436211][ T7779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.452767][ T7779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.524330][ T7779] bond0: left promiscuous mode [ 100.529883][ T7779] bond_slave_0: left promiscuous mode [ 100.535686][ T7779] bond_slave_1: left promiscuous mode [ 100.542276][ T7779] macvlan2: left promiscuous mode [ 100.548827][ T7779] bond1: left promiscuous mode [ 100.555136][ T7779] batadv1: left promiscuous mode [ 100.561556][ T7779] batadv1: left allmulticast mode [ 100.569032][ T7779] batadv2: left promiscuous mode [ 100.574252][ T7779] batadv2: left allmulticast mode [ 100.593437][ T3419] lo speed is unknown, defaulting to 1000 [ 100.599903][ T3419] syz2: Port: 1 Link DOWN [ 100.636194][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.646164][ T7782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.666162][ T5403] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.678109][ T3419] lo speed is unknown, defaulting to 1000 [ 100.684347][ T3419] syz2: Port: 1 Link ACTIVE [ 100.690026][ T5403] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.699372][ T5403] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.718631][ T5403] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.745912][ T2957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.878370][ T5403] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.937403][ T7831] lo speed is unknown, defaulting to 1000 [ 100.945333][ T7833] netlink: 'syz.2.1465': attribute type 10 has an invalid length. [ 100.966701][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1465'. [ 100.986430][ T2957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 100.996598][ T7833] dummy0: entered promiscuous mode [ 101.008790][ T7833] bridge0: port 3(dummy0) entered blocking state [ 101.016581][ T7833] bridge0: port 3(dummy0) entered disabled state [ 101.033010][ T7833] bridge0: port 3(dummy0) entered blocking state [ 101.041010][ T7833] bridge0: port 3(dummy0) entered forwarding state [ 101.104749][ T7839] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1467'. [ 101.114500][ T7839] netlink: 'syz.2.1467': attribute type 9 has an invalid length. [ 101.122497][ T7839] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1467'. [ 101.132071][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1467'. [ 101.337179][ T7850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.348997][ T7851] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.389531][ T7850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.406920][ T7860] loop6: detected capacity change from 0 to 128 [ 101.415675][ T7860] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.429016][ T7860] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.451494][ T7850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.467119][ T6346] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.481224][ T7866] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1478'. [ 101.499854][ T7850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.556313][ T5404] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.568579][ T5404] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.581332][ T5404] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.593876][ T5404] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.687578][ T7876] loop4: detected capacity change from 0 to 512 [ 101.698739][ T7876] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.707893][ T7876] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.715863][ T7876] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.731486][ T7876] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 101.738997][ T7876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1482: bg 0: block 40: padding at end of block bitmap is not set [ 101.754263][ T7876] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.763608][ T7876] EXT4-fs (loop4): 1 truncate cleaned up [ 101.770090][ T7876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.797198][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.958302][ T5392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 101.966213][ T5392] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.368048][ T2957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.461115][ T7897] loop4: detected capacity change from 0 to 128 [ 102.471438][ T7897] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.485249][ T7897] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.494651][ T7905] netlink: 'syz.5.1501': attribute type 27 has an invalid length. [ 102.523291][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.559662][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.567466][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.611193][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.632934][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.711547][ T7905] bond0: left promiscuous mode [ 102.716722][ T7905] bond_slave_0: left promiscuous mode [ 102.722328][ T7905] bond_slave_1: left promiscuous mode [ 102.729416][ T7905] macvlan2: left promiscuous mode [ 102.735454][ T7905] ip6gre1: left allmulticast mode [ 102.778842][ T7908] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.814314][ T7908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.833751][ T5403] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.853237][ T5403] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.863364][ T2957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.874370][ T5403] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.887802][ T5403] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.907737][ T5403] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 102.930190][ T7924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7924 comm=syz.4.1502 [ 103.081920][ T7935] loop6: detected capacity change from 0 to 4096 [ 103.089264][ T7935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.098995][ T7935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.272184][ T6346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.440435][ T7968] loop2: detected capacity change from 0 to 2048 [ 103.478842][ T7968] Alternate GPT is invalid, using primary GPT. [ 103.485420][ T7968] loop2: p1 p2 p3 [ 103.659796][ T29] kauditd_printk_skb: 935 callbacks suppressed [ 103.659828][ T29] audit: type=1326 audit(1758283345.445:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56ebd55be7 code=0x7ffc0000 [ 103.690236][ T29] audit: type=1326 audit(1758283345.445:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56ebcfae09 code=0x7ffc0000 [ 103.713783][ T29] audit: type=1326 audit(1758283345.445:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 103.737875][ T29] audit: type=1326 audit(1758283345.455:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56ebd55be7 code=0x7ffc0000 [ 103.761632][ T29] audit: type=1326 audit(1758283345.455:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56ebcfae09 code=0x7ffc0000 [ 103.785707][ T29] audit: type=1326 audit(1758283345.455:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 103.809565][ T29] audit: type=1326 audit(1758283345.465:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56ebd55be7 code=0x7ffc0000 [ 103.812197][ T2957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 103.833784][ T29] audit: type=1326 audit(1758283345.465:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56ebcfae09 code=0x7ffc0000 [ 103.866014][ T29] audit: type=1326 audit(1758283345.465:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f56ebd5ec29 code=0x7ffc0000 [ 103.890174][ T29] audit: type=1326 audit(1758283345.475:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56ebd55be7 code=0x7ffc0000 [ 103.958218][ T5404] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 104.792850][ T7981] netlink: 'syz.4.1524': attribute type 27 has an invalid length. [ 104.898291][ T7981] wg2: left promiscuous mode [ 104.902962][ T7981] wg2: left allmulticast mode [ 104.916392][ T7991] loop5: detected capacity change from 0 to 4096 [ 104.925642][ T7991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.934889][ T7991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.021352][ T7981] bond1: left promiscuous mode [ 105.026967][ T7981] batadv1: left promiscuous mode [ 105.032274][ T7981] batadv1: left allmulticast mode [ 105.038233][ T7981] batadv2: left promiscuous mode [ 105.043369][ T7981] batadv2: left allmulticast mode [ 105.103763][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.133853][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.147777][ T7986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.160320][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.178041][ T5403] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.190185][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7995 comm=syz.6.1541 [ 105.202758][ T5403] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.214892][ T5403] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.233089][ T5403] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.374333][ T8011] SELinux: failed to load policy [ 105.958189][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 105.958205][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.197094][ T8028] loop6: detected capacity change from 0 to 512 [ 106.210370][ T8028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.225377][ T8028] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.348477][ T8036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8036 comm=syz.4.1558 [ 106.361940][ T8036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8036 comm=syz.4.1558 [ 106.405660][ T8042] loop4: detected capacity change from 0 to 128 [ 106.505194][ T8046] loop1: detected capacity change from 0 to 128 [ 106.515014][ T8046] syz.1.1552: attempt to access beyond end of device [ 106.515014][ T8046] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 106.548623][ T8049] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1554'. [ 106.617609][ T8058] veth1_to_bond: entered allmulticast mode [ 106.626251][ T8058] veth1_to_bond: left allmulticast mode [ 106.647522][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 106.656651][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.664355][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.672441][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.680225][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.053969][ T6346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.074299][ T8070] loop6: detected capacity change from 0 to 1024 [ 107.082628][ T8070] EXT4-fs: inline encryption not supported [ 107.089179][ T8070] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 107.109419][ T8070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.311196][ T8083] wireguard0: entered promiscuous mode [ 107.317018][ T8083] wireguard0: entered allmulticast mode [ 107.439632][ T8086] loop4: detected capacity change from 0 to 128 [ 107.474754][ T8086] syz.4.1569: attempt to access beyond end of device [ 107.474754][ T8086] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 107.531136][ T8094] loop4: detected capacity change from 0 to 128 [ 107.538807][ T8094] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 107.555125][ T8094] tipc: New replicast peer: 255.255.255.255 [ 107.562402][ T8094] tipc: Enabled bearer , priority 10 [ 107.827882][ T8112] lo speed is unknown, defaulting to 1000 [ 107.944394][ T8115] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 107.984726][ T8115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.024752][ T6346] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.038931][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.053560][ T8115] bond2: (slave batadv0): making interface the new active one [ 108.063998][ T8115] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 108.090730][ T8123] loop5: detected capacity change from 0 to 512 [ 108.123430][ T8123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.137114][ T8123] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.137632][ T8128] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.1585'. [ 108.157281][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1585'. [ 108.179041][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.358035][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 108.496693][ T8139] loop5: detected capacity change from 0 to 4096 [ 108.503565][ T8139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.512425][ T8139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.678087][ T36] tipc: Node number set to 1808233253 [ 108.695847][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.715754][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 108.715769][ T29] audit: type=1326 audit(1758283350.495:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.748065][ T29] audit: type=1326 audit(1758283350.495:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.771498][ T29] audit: type=1326 audit(1758283350.495:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.794908][ T29] audit: type=1326 audit(1758283350.495:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.818680][ T29] audit: type=1326 audit(1758283350.495:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.844041][ T29] audit: type=1326 audit(1758283350.495:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.872197][ T29] audit: type=1326 audit(1758283350.495:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.899235][ T29] audit: type=1326 audit(1758283350.495:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.924678][ T29] audit: type=1326 audit(1758283350.495:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.948975][ T29] audit: type=1326 audit(1758283350.495:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ebd5ec29 code=0x50000 [ 108.992005][ T8148] loop4: detected capacity change from 0 to 1024 [ 109.005027][ T8148] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 109.082512][ T8148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.149773][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.312156][ T8165] netlink: 'syz.4.1600': attribute type 32 has an invalid length. [ 109.941074][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 109.963966][ T8191] netlink: 'syz.5.1610': attribute type 12 has an invalid length. [ 109.972188][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 109.985085][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 109.995508][ T5404] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.006511][ T8191] netlink: 'syz.5.1610': attribute type 12 has an invalid length. [ 110.014616][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 110.024776][ T5404] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.043172][ T5404] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.055287][ T5404] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.097143][ T8195] loop4: detected capacity change from 0 to 512 [ 110.109531][ T8195] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.134359][ T8195] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1612: bad orphan inode 13 [ 110.145491][ T8195] ext4_test_bit(bit=12, block=18) = 1 [ 110.151069][ T8195] is_bad_inode(inode)=0 [ 110.155266][ T8195] NEXT_ORPHAN(inode)=2130706432 [ 110.160173][ T8195] max_ino=32 [ 110.163462][ T8195] i_nlink=1 [ 110.169079][ T8195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.209871][ T8204] loop5: detected capacity change from 0 to 256 [ 110.217201][ T8204] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.230469][ T8204] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.258772][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.414280][ T8223] loop2: detected capacity change from 0 to 512 [ 110.443481][ T8223] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 110.471539][ T8223] EXT4-fs (loop2): failed to open journal device unknown-block(0,4) -6 [ 110.571298][ T36] hid_parser_main: 16 callbacks suppressed [ 110.571317][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.585042][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.588391][ T8247] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 110.592592][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.608795][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.616947][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.625225][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.633176][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.641452][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.649467][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.657311][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.674291][ T8250] loop1: detected capacity change from 0 to 1024 [ 110.677054][ T8247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.681036][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 110.691048][ T8250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.713421][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 110.719582][ T8250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.736024][ T8250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.750648][ T8247] bond3 (unregistering): Released all slaves [ 110.763271][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 110.774742][ T8255] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.888250][ T8259] Falling back ldisc for ttyS3. [ 110.946584][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.008443][ T8273] ================================================================== [ 111.017568][ T8273] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 111.025198][ T8273] [ 111.027640][ T8273] write to 0xffff888237c1b260 of 8 bytes by interrupt on cpu 0: [ 111.036694][ T8273] hrtimer_interrupt+0x193/0x460 [ 111.042599][ T8273] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 111.052265][ T8273] sysvec_apic_timer_interrupt+0x6f/0x80 [ 111.059136][ T8273] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.067074][ T8273] kcsan_setup_watchpoint+0x415/0x430 [ 111.074141][ T8273] dnotify_flush+0x26/0x360 [ 111.079186][ T8273] filp_flush+0xb8/0x110 [ 111.083606][ T8273] filp_close+0x1d/0x40 [ 111.088208][ T8273] put_files_struct+0x11a/0x210 [ 111.093154][ T8273] exit_files+0x65/0x80 [ 111.097328][ T8273] do_exit+0x43d/0x15c0 [ 111.101654][ T8273] do_group_exit+0xff/0x140 [ 111.106596][ T8273] get_signal+0xe59/0xf70 [ 111.111010][ T8273] arch_do_signal_or_restart+0x96/0x480 [ 111.116673][ T8273] exit_to_user_mode_loop+0x7a/0x100 [ 111.122053][ T8273] do_syscall_64+0x1d6/0x200 [ 111.127076][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.133084][ T8273] [ 111.135636][ T8273] read to 0xffff888237c1b260 of 8 bytes by task 8273 on cpu 1: [ 111.143257][ T8273] print_cpu+0x30b/0x680 [ 111.147777][ T8273] timer_list_show+0x107/0x170 [ 111.152704][ T8273] seq_read_iter+0x62a/0x940 [ 111.157398][ T8273] proc_reg_read_iter+0x110/0x180 [ 111.162643][ T8273] copy_splice_read+0x43f/0x660 [ 111.167656][ T8273] splice_direct_to_actor+0x26c/0x680 [ 111.173192][ T8273] do_splice_direct+0xda/0x150 [ 111.178463][ T8273] do_sendfile+0x380/0x650 [ 111.182884][ T8273] __x64_sys_sendfile64+0x105/0x150 [ 111.188604][ T8273] x64_sys_call+0x2bb0/0x2ff0 [ 111.193368][ T8273] do_syscall_64+0xd2/0x200 [ 111.198093][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.204599][ T8273] [ 111.207122][ T8273] value changed: 0x00000019d6f2b2ab -> 0x00000019d784ff80 [ 111.214844][ T8273] [ 111.217628][ T8273] Reported by Kernel Concurrency Sanitizer on: [ 111.224331][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.4.1646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.234560][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.245389][ T8273] ================================================================== [ 114.288115][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.478115][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!