last executing test programs: 2.997428445s ago: executing program 1 (id=1674): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 2.621948161s ago: executing program 4 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @nfc={0x27, r1, 0x1, 0x3}, @tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x4}, 0x3}}, @sco={0x1f, @none}, 0xe49a, 0x0, 0x0, 0x0, 0x60a, &(0x7f0000000080)='netpci0\x00', 0xd5, 0x4, 0xa4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x20) 2.202496007s ago: executing program 1 (id=1686): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/softnet_stat\x00') readv(r1, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4e) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000480)=0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, r4, &(0x7f0000000040)='./bus\x00') ftruncate(r2, 0x7ffffffffffffa) setfsgid(0x0) 2.200985327s ago: executing program 4 (id=1687): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x4, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x8}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0xc804) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x7fff}}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x8}, @fwd={0x10}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x24, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000380)=""/172, 0x7c, 0xac, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/252, 0xfc, 0x0, 0x0}}, 0x10) r9 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000740), 0x10800, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x10, r0}, 0x18) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r14, &(0x7f0000004200)='t', 0x1) sendfile(r14, r13, 0x0, 0x3ffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r10, @ANYRESHEX, @ANYRESHEX=r13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r18}, 0x18) r19 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r19, 0xc0f85403, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0xbc, &(0x7f00000001c0)=""/188, 0x41100, 0x39, '\x00', r5, @cgroup_sockopt=0x16, r7, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x9, 0x9, 0x1ff}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r9, r10, r11, r12, r13, r15, 0xffffffffffffffff, r16, 0xffffffffffffffff], 0x0, 0x10, 0x8001, @void, @value}, 0x94) 2.01360773s ago: executing program 2 (id=1689): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x9280, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000100)=0x10, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="911000000000400095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.01289831s ago: executing program 1 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.01103687s ago: executing program 3 (id=1691): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)="cacdec4b", 0x4}, {&(0x7f0000000600)}, {&(0x7f0000000640)}], 0x3, 0xffffffff, 0x4) 1.910612352s ago: executing program 3 (id=1692): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.627983916s ago: executing program 2 (id=1693): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) signalfd(r2, &(0x7f0000000180)={[0x53c105ae]}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700b5185ccf33ea0b1ca0641e8100", @ANYRES16=r1, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(r3, &(0x7f0000000080)='./mnt\x00', r3, &(0x7f0000000100)='./mnt\x00') r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000140)='./bus\x00', 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.595083386s ago: executing program 2 (id=1694): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001f00)=""/4093, 0xffd) 1.041176774s ago: executing program 3 (id=1695): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.040039244s ago: executing program 4 (id=1697): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000003c0)=0x2, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) 898.574556ms ago: executing program 4 (id=1698): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008050) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0xfc4f) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x42fe) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 897.805946ms ago: executing program 1 (id=1699): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000180), &(0x7f0000000580)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 887.141076ms ago: executing program 3 (id=1700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x12, 0xfffffffffffffffe, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) mmap(&(0x7f0000212000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 862.659557ms ago: executing program 4 (id=1701): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x2800, 0x14, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x8) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10870a, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) 543.412131ms ago: executing program 2 (id=1702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 481.975162ms ago: executing program 2 (id=1703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/48, 0x30) getdents64(r4, 0xfffffffffffffffe, 0x29) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x36, 0xb, 0x2, 0x1d, 0x0, 0x0, 0x2, 0x89}) 481.135362ms ago: executing program 1 (id=1704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xfff}, &(0x7f0000000380)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000d40)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000180000000000000000000000006001e"], 0x24}}, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 405.051134ms ago: executing program 0 (id=1705): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x0, 0x5fd, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) 379.747214ms ago: executing program 2 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x3e}, 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000000a000000380003801400020076657468305f76697274"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffff", @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 334.382755ms ago: executing program 1 (id=1707): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) unlinkat(0xffffffffffffffff, 0x0, 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) 332.563405ms ago: executing program 0 (id=1708): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 268.698616ms ago: executing program 0 (id=1709): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51c, &(0x7f0000002400)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY7dRpK0g+qqg1vdrTCYhZJIJmUndhKIpfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7tP/nEvmzH043BvAlfVSRLwdEWMR8WpETBfT0yLFXiflyz1+9P5inpLIsnf/lkRSTNvfVl4ej4gbxWqTEfH1r0R8Kzket7mzu7ZQr9e2inK1tb5Zbe7s3lldX1iprdQ25uZm786/Mf/6/ExWOFc7yxHx5pf+9KPv/+zLb/7qM9/+/b2/3P5OXq0vfKxT74hYPFeAHjrbLrX3xb58H21dRLAhydtTGht2LQAA6Ed+jP/hiPhk+/h/OsbaR3MAAADAKMnemop/JREZAAAAMLLSiJiKJK0UYwGmIk0rlc4Y3o/G9bTeaLY+vdzY3ljK50WUo5Qur9ZrM8VY4XKUkrw8W4yx3S+/dqQ8FxHPRcQPp6+1y5XFRn1p2Bc/AAAA4Iq48eLh8/9/TqftPAAAADBiyj0LAAAAwKhwyg8AAACjz/k/AAAAjLSvvvNOnrL993gvvbezvdZ4785SrblWWd9erCw2tjYrK43GSvuZfeunba/eaGx+Nja271dbtWar2tzZvbfe2N5o3Vs99ApsAAAA4BI99+KD3yURsff5a+0UxXMAAQ7547ArAAzS2LArAAzN+LArAAxN6dQl9BAw6pJT5h8fvNO5Vhi/vpj6AAAAg3fr48fv/08U806/NgD8PzPWBwCuHnf34OoqnXUE4M1B1wQYlg91Pp7pNb/nwzv6uP/fucaQZWeqGAAAMDBT7ZSkleI4fSrStFKJeLb9WoBSsrxar80U5we/nS49k5dn22smp44ZBgAAAAAAAAAAAAAAAAAAAAAAAAA6siyJDAAAABhpEemfk/bT/CNuTb8ydfjqwJG3fv303R/fX2i1tmYjJpK/T+eTJiKi9ZNi+muZVwIAAADAU6Bznl58zg67NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMmseP3l/cT5cZ969fjIhyt/jjMdn+nIxSRFz/RxLjB9ZLImJsAPH3PoiIm93iJ/Eky7JyUYtu8a9dcPxye9d0j59GxI0BxIer7EHe/7zd7fuXxkvtz+7fv/EinVfv/i/9b/831qP/efZIuZfnH/6i2jP+BxHPj3fvf/bjJ534h0LkhZf7bOM3v7G723XGgU12i38wVrW1vllt7uzeWV1fWKmt1Dbm5mbvzr8x//r8THV5tV4r/nYN84NP/PLJSe2/3iN++XD7j+3/V/pqfRb/fnj/0Uc6hVK3+Ldf7v77e7NH/LT47ftUkc/n39rP73XyB73w89+8cFL7l3q0f/KU9t/uq/3xuVe/9r0/dJ1zbG8AAJehubO7tlCv17ZOyEz2scwlZ956OqoxwEyctEySPAU1vNBM9t3O/+P5tnPO1Y9lsvOsPh4DqMbEse/pWJx1g0nEXr6tPv8hC3cnhtMzAQAAg/a/g/6T7iABAAAAAAAAAAAAAAAAAAAAF+mMjyWbjIi+Fz4ac284TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONF/AgAA//9BS9DT") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2226021, 0x0) 194.606307ms ago: executing program 3 (id=1710): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x10) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000300)='./cgroup/../file0\x00') write$cgroup_pid(r1, &(0x7f0000000880), 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 179.050167ms ago: executing program 0 (id=1711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 148.539137ms ago: executing program 4 (id=1712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 58.454459ms ago: executing program 0 (id=1713): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x102}, &(0x7f0000000340), &(0x7f0000000040)) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x101, 0x0, 0xe}) 14.838689ms ago: executing program 0 (id=1714): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=1715): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 65.335929][ T29] audit: type=1326 audit(1750132518.986:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 65.505841][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 65.709987][ T5003] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.616'. [ 65.719221][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 65.831858][ T5016] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 65.981799][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 65.990796][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 66.000875][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 66.112852][ T5043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 66.236900][ T5050] loop4: detected capacity change from 0 to 1024 [ 66.244666][ T5050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.255503][ T5050] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.266536][ T5050] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.279507][ T5050] JBD2: no valid journal superblock found [ 66.286100][ T5050] EXT4-fs (loop4): Could not load journal inode [ 66.334202][ T5055] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 66.342047][ T5055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'. [ 66.351937][ T5055] dummy0: entered promiscuous mode [ 66.358038][ T5055] bridge0: port 3(dummy0) entered blocking state [ 66.364608][ T5055] bridge0: port 3(dummy0) entered disabled state [ 66.371565][ T5055] dummy0: entered allmulticast mode [ 66.377807][ T5055] bridge0: port 3(dummy0) entered blocking state [ 66.384281][ T5055] bridge0: port 3(dummy0) entered forwarding state [ 66.632160][ T5073] loop0: detected capacity change from 0 to 2048 [ 66.653530][ T5073] EXT4-fs: Ignoring removed nobh option [ 66.690081][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.765038][ T5079] ref_ctr increment failed for inode: 0x2d5 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888104276780 [ 66.821369][ T5078] uprobe: syz.3.643:5078 failed to unregister, leaking uprobe [ 66.868098][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.970899][ T5083] loop2: detected capacity change from 0 to 2048 [ 67.004820][ T5083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.056836][ T5083] Invalid ELF header magic: != ELF [ 67.318591][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.636582][ T5101] loop0: detected capacity change from 0 to 512 [ 67.643514][ T5101] EXT4-fs: inline encryption not supported [ 67.651495][ T5101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.772518][ T5109] tipc: Enabled bearer , priority 0 [ 67.816235][ T5108] tipc: Resetting bearer [ 67.830765][ T5108] tipc: Disabling bearer [ 67.906928][ T5115] loop3: detected capacity change from 0 to 512 [ 67.913676][ T5115] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.920416][ T5115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.929778][ T5115] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.658: iget: bad extended attribute block 1 [ 67.942527][ T5115] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.658: couldn't read orphan inode 15 (err -117) [ 67.956431][ T5115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.011274][ T5124] loop2: detected capacity change from 0 to 1024 [ 68.018572][ T5124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.034538][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.043992][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.053023][ T5124] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 68.067272][ T5124] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.080106][ T5124] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.091054][ T5124] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.098919][ T5124] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.661: Inode bitmap for bg 0 marked uninitialized [ 68.127630][ T5124] EXT4-fs (loop2): Remounting filesystem read-only [ 68.137996][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.186714][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.278426][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.304501][ T5132] loop4: detected capacity change from 0 to 1024 [ 68.311931][ T5132] EXT4-fs: Ignoring removed orlov option [ 68.351122][ T5132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.390019][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.633746][ T5169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 68.717821][ T5177] loop0: detected capacity change from 0 to 1024 [ 68.726140][ T5177] EXT4-fs: Ignoring removed oldalloc option [ 68.732850][ T5177] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 68.754256][ T5179] pim6reg1: entered promiscuous mode [ 68.759689][ T5179] pim6reg1: entered allmulticast mode [ 68.767525][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.814658][ T5183] loop3: detected capacity change from 0 to 1024 [ 68.821627][ T5183] EXT4-fs: Ignoring removed nobh option [ 68.828075][ T5183] EXT4-fs: Ignoring removed bh option [ 68.866116][ T5183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.891389][ T5183] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 68.963005][ T5183] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.675: Allocating blocks 497-513 which overlap fs metadata [ 69.066116][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.104076][ T5196] SELinux: failed to load policy [ 69.149789][ T5203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.197197][ T5203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.258327][ T5203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.297600][ T5203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.370694][ T5203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.384441][ T5203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.397499][ T5203] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.411626][ T5203] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.494239][ T5221] IPv4: Oversized IP packet from 127.202.26.0 [ 69.585323][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.608991][ T5233] loop4: detected capacity change from 0 to 512 [ 69.645741][ T5233] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.655034][ T5233] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.676392][ T5233] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.699: iget: bad extended attribute block 1 [ 69.689888][ T5233] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.699: couldn't read orphan inode 15 (err -117) [ 69.703145][ T5246] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 69.711139][ T5246] __nla_validate_parse: 1 callbacks suppressed [ 69.711183][ T5246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.704'. [ 69.714451][ T5249] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 69.718967][ T5246] dummy0: entered promiscuous mode [ 69.726870][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 69.726892][ T29] audit: type=1107 audit(1750132523.526:2751): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 69.734000][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.737841][ T5246] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 69.854835][ T29] audit: type=1400 audit(1750132523.676:2752): avc: denied { write } for pid=5253 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.260579][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.300781][ T5289] loop4: detected capacity change from 0 to 1024 [ 70.307993][ T5289] EXT4-fs: Ignoring removed oldalloc option [ 70.319779][ T5289] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 70.351510][ T5289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.449207][ T5306] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.710'. [ 70.458576][ T5306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 70.661818][ T5320] bond_slave_1: mtu less than device minimum [ 70.812028][ T5361] netlink: 'syz.3.714': attribute type 33 has an invalid length. [ 70.820824][ T5361] netlink: 152 bytes leftover after parsing attributes in process `syz.3.714'. [ 70.845107][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 70.942424][ T5368] loop0: detected capacity change from 0 to 1024 [ 70.950216][ T5368] EXT4-fs: Ignoring removed orlov option [ 70.956031][ T5368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.977116][ T5368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.018128][ T5372] loop1: detected capacity change from 0 to 512 [ 71.025349][ T5372] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.032255][ T5372] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 71.041397][ T5374] loop0: detected capacity change from 0 to 2048 [ 71.041801][ T5372] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.720: iget: bad extended attribute block 1 [ 71.065074][ T5372] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.720: couldn't read orphan inode 15 (err -117) [ 71.094396][ T5374] loop0: p1 < > p4 [ 71.099464][ T5374] loop0: p4 size 8388608 extends beyond EOD, truncated [ 71.171468][ T3309] EXT4-fs unmount: 2 callbacks suppressed [ 71.171487][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.305993][ T5389] pim6reg1: entered promiscuous mode [ 71.311568][ T5389] pim6reg1: entered allmulticast mode [ 71.367999][ T29] audit: type=1400 audit(1750132525.186:2753): avc: denied { read write } for pid=5397 comm="syz.2.731" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.391780][ T29] audit: type=1400 audit(1750132525.186:2754): avc: denied { open } for pid=5397 comm="syz.2.731" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.428511][ T29] audit: type=1400 audit(1750132525.246:2755): avc: denied { ioctl } for pid=5397 comm="syz.2.731" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.471032][ T29] audit: type=1400 audit(1750132525.286:2756): avc: denied { read } for pid=5401 comm="syz.4.733" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.507671][ T29] audit: type=1400 audit(1750132525.286:2757): avc: denied { open } for pid=5401 comm="syz.4.733" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.532471][ T29] audit: type=1400 audit(1750132525.316:2758): avc: denied { ioctl } for pid=5401 comm="syz.4.733" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.575088][ T5404] loop2: detected capacity change from 0 to 1024 [ 71.582039][ T5404] EXT4-fs: Ignoring removed oldalloc option [ 71.590648][ T5404] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 71.602936][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.636976][ T29] audit: type=1400 audit(1750132525.456:2759): avc: denied { create } for pid=5407 comm="syz.0.737" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.661002][ T5408] tipc: New replicast peer: 255.255.255.255 [ 71.667434][ T5408] tipc: Enabled bearer , priority 10 [ 71.670514][ T5411] loop4: detected capacity change from 0 to 512 [ 71.691722][ T29] audit: type=1400 audit(1750132525.506:2760): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.716452][ T5411] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 71.725727][ T5404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.809686][ T5424] tipc: Enabled bearer , priority 0 [ 71.829459][ T5424] tipc: Disabling bearer [ 71.939075][ T2961] IPVS: starting estimator thread 0... [ 72.033317][ T5431] IPVS: using max 2304 ests per chain, 115200 per kthread [ 72.155886][ T5445] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 72.169671][ T5445] dummy0: left promiscuous mode [ 72.180141][ T5445] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 72.191142][ T5445] dummy0: entered promiscuous mode [ 72.198589][ T5445] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 72.378214][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.683707][ T2961] tipc: Node number set to 3513452289 [ 72.993651][ T5492] 9pnet: p9_errstr2errno: server reported unknown error [ 73.174009][ T5501] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 73.181857][ T5501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.773'. [ 73.340896][ T5516] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 73.425371][ T5527] loop2: detected capacity change from 0 to 128 [ 73.489623][ T5537] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.568836][ T5537] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.595819][ T5539] random: crng reseeded on system resumption [ 73.627450][ T5537] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.682395][ T5549] loop2: detected capacity change from 0 to 512 [ 73.691339][ T5537] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.702900][ T5549] EXT4-fs: Ignoring removed oldalloc option [ 73.709006][ T5549] EXT4-fs: Ignoring removed nobh option [ 73.718656][ T5549] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.796: iget: bad extended attribute block 1 [ 73.731561][ T5549] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.796: couldn't read orphan inode 15 (err -117) [ 73.745366][ T5549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.777933][ T5537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.793174][ T5537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.804879][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.805912][ T5537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.825777][ T5537] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926921][ T5564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5564 comm=syz.1.802 [ 74.019469][ T5577] macvlan2: entered promiscuous mode [ 74.025745][ T5577] macvlan2: entered allmulticast mode [ 74.036355][ T5577] batadv0: entered promiscuous mode [ 74.042129][ T5577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.051189][ T5577] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 74.093422][ T5583] loop2: detected capacity change from 0 to 764 [ 74.119964][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 74.131998][ T5587] netlink: 'syz.1.812': attribute type 3 has an invalid length. [ 74.203364][ T5585] dummy0: left allmulticast mode [ 74.212096][ T5585] bridge0: port 3(dummy0) entered disabled state [ 74.221750][ T5585] bridge_slave_1: left allmulticast mode [ 74.227609][ T5585] bridge_slave_1: left promiscuous mode [ 74.233425][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.243083][ T5585] bridge_slave_0: left allmulticast mode [ 74.248833][ T5585] bridge_slave_0: left promiscuous mode [ 74.254989][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.353119][ T5600] loop3: detected capacity change from 0 to 256 [ 74.379508][ T5600] FAT-fs (loop3): Directory bread(block 64) failed [ 74.387635][ T5600] FAT-fs (loop3): Directory bread(block 65) failed [ 74.396438][ T5600] FAT-fs (loop3): Directory bread(block 66) failed [ 74.406266][ T5600] FAT-fs (loop3): Directory bread(block 67) failed [ 74.415464][ T5600] FAT-fs (loop3): Directory bread(block 68) failed [ 74.422394][ T5600] FAT-fs (loop3): Directory bread(block 69) failed [ 74.432810][ T5600] FAT-fs (loop3): Directory bread(block 70) failed [ 74.448242][ T5600] FAT-fs (loop3): Directory bread(block 71) failed [ 74.457512][ T5600] FAT-fs (loop3): Directory bread(block 72) failed [ 74.505412][ T5600] FAT-fs (loop3): Directory bread(block 73) failed [ 74.861720][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 74.861739][ T29] audit: type=1326 audit(1750132528.676:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ee52e929 code=0x7ffc0000 [ 74.895553][ T29] audit: type=1326 audit(1750132528.676:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13ee52e929 code=0x7ffc0000 [ 74.919784][ T29] audit: type=1326 audit(1750132528.676:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ee52e929 code=0x7ffc0000 [ 74.944717][ T29] audit: type=1326 audit(1750132528.676:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f13ee52e929 code=0x7ffc0000 [ 74.968108][ T29] audit: type=1326 audit(1750132528.676:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ee52e929 code=0x7ffc0000 [ 74.992982][ T29] audit: type=1326 audit(1750132528.686:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ee52e929 code=0x7ffc0000 [ 75.044860][ T29] audit: type=1400 audit(1750132528.866:2841): avc: denied { name_bind } for pid=5620 comm="syz.3.823" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.068788][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 75.070718][ T29] audit: type=1400 audit(1750132528.886:2842): avc: denied { bind } for pid=5622 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.204708][ T5632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.239937][ T29] audit: type=1400 audit(1750132529.056:2843): avc: denied { read } for pid=5635 comm="syz.1.831" path="socket:[11214]" dev="sockfs" ino=11214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.278451][ T5632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.291879][ T29] audit: type=1400 audit(1750132529.106:2844): avc: denied { ioctl } for pid=5635 comm="syz.1.831" path="socket:[11214]" dev="sockfs" ino=11214 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.367521][ T5632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.438014][ T5632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.505204][ T5632] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.517593][ T5632] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.531758][ T5632] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.544391][ T5632] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685429][ T5658] loop2: detected capacity change from 0 to 256 [ 76.209081][ T5668] usb usb8: usbfs: process 5668 (syz.3.842) did not claim interface 0 before use [ 76.400015][ T5677] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.464962][ T5677] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.490684][ T5683] Process accounting resumed [ 76.516774][ T5677] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.575520][ T5677] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.687704][ T5677] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708788][ T5677] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.722089][ T5677] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736757][ T5677] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810185][ T5712] pim6reg1: entered promiscuous mode [ 76.815655][ T5712] pim6reg1: entered allmulticast mode [ 76.835275][ T5714] bridge0: entered promiscuous mode [ 76.840600][ T5714] macvtap1: entered allmulticast mode [ 76.846209][ T5714] bridge0: entered allmulticast mode [ 76.853449][ T5714] bridge0: port 1(macvtap1) entered blocking state [ 76.860066][ T5714] bridge0: port 1(macvtap1) entered disabled state [ 76.869032][ T5714] bridge0: left allmulticast mode [ 76.874743][ T5714] bridge0: left promiscuous mode [ 76.899939][ T5722] serio: Serial port ptm0 [ 77.007832][ T5735] loop3: detected capacity change from 0 to 1024 [ 77.029410][ T5735] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.040520][ T5735] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.054521][ T5740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.055436][ T5735] JBD2: no valid journal superblock found [ 77.070137][ T5735] EXT4-fs (loop3): Could not load journal inode [ 77.135090][ T5740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.243664][ T5740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.295674][ T5740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.733880][ T5761] serio: Serial port ptm0 [ 78.041990][ T5780] loop2: detected capacity change from 0 to 8192 [ 78.083858][ T5780] loop2: p1 < > p2 < p5 > p3 p4 [ 78.090601][ T5780] loop2: p3 start 83890176 is beyond EOD, truncated [ 78.097387][ T5780] loop2: p4 size 16776960 extends beyond EOD, truncated [ 78.111330][ T5780] loop2: p5 size 16776960 extends beyond EOD, truncated [ 78.196895][ T5790] loop3: detected capacity change from 0 to 512 [ 78.218499][ T5790] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 78.614668][ T5808] loop3: detected capacity change from 0 to 1024 [ 78.624802][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.637654][ T5808] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.654842][ T5808] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 78.670700][ T5808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 78.687153][ T5808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.687153][ T5808] [ 78.697278][ T5808] EXT4-fs (loop3): Total free blocks count 0 [ 78.703404][ T5808] EXT4-fs (loop3): Free/Dirty block details [ 78.709682][ T5808] EXT4-fs (loop3): free_blocks=4293918720 [ 78.715915][ T5808] EXT4-fs (loop3): dirty_blocks=64 [ 78.723126][ T5808] EXT4-fs (loop3): Block reservation details [ 78.729424][ T5808] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 78.754045][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.948853][ T5820] loop3: detected capacity change from 0 to 128 [ 78.957351][ T5820] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.971965][ T5820] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.999379][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.202462][ T5825] loop3: detected capacity change from 0 to 764 [ 79.211518][ T5825] rock: directory entry would overflow storage [ 79.218825][ T5825] rock: sig=0x5850, size=36, remaining=7 [ 79.293178][ T5837] loop9: detected capacity change from 0 to 7 [ 79.312504][ T5837] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.322706][ T5839] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.342454][ T5837] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.350600][ T5837] loop9: unable to read partition table [ 79.393125][ T5844] tipc: Enabled bearer , priority 0 [ 79.406981][ T5844] syzkaller0: MTU too low for tipc bearer [ 79.409922][ T5837] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 79.409922][ T5837] ) failed (rc=-5) [ 79.412857][ T5844] tipc: Disabling bearer [ 79.485360][ T3390] IPVS: starting estimator thread 0... [ 79.579036][ T5865] loop4: detected capacity change from 0 to 512 [ 79.583600][ T5849] IPVS: using max 2352 ests per chain, 117600 per kthread [ 79.605292][ T5865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.620227][ T5865] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.645252][ T5872] loop2: detected capacity change from 0 to 1024 [ 79.652776][ T5872] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.663851][ T5872] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.675681][ T5872] JBD2: no valid journal superblock found [ 79.681449][ T5872] EXT4-fs (loop2): Could not load journal inode [ 79.689623][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.803806][ T5887] netlink: 'syz.4.932': attribute type 4 has an invalid length. [ 80.124659][ T5905] loop2: detected capacity change from 0 to 1024 [ 80.131523][ T5905] EXT4-fs: Ignoring removed orlov option [ 80.139617][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 80.139632][ T29] audit: type=1326 audit(1750132533.896:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.169690][ T29] audit: type=1326 audit(1750132533.896:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.193629][ T29] audit: type=1326 audit(1750132533.896:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.219918][ T29] audit: type=1326 audit(1750132533.896:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.244587][ T29] audit: type=1326 audit(1750132533.896:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.267972][ T29] audit: type=1326 audit(1750132533.896:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.291484][ T29] audit: type=1326 audit(1750132533.896:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.321136][ T29] audit: type=1326 audit(1750132533.896:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.346020][ T29] audit: type=1326 audit(1750132533.896:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.371515][ T29] audit: type=1326 audit(1750132533.896:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 80.403150][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.658787][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.721863][ T5913] loop4: detected capacity change from 0 to 512 [ 80.736186][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.749146][ T5913] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.778848][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.860327][ T5925] netlink: 'syz.4.951': attribute type 13 has an invalid length. [ 80.943612][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.954469][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.997031][ T5925] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.006269][ T5925] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.018671][ T5925] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.028817][ T5925] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.054693][ T5740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.066896][ T5740] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079612][ T5740] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.092617][ T5740] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.134405][ T5931] $Hÿ: (slave dummy0): Releasing backup interface [ 81.150580][ T5931] dummy0: left promiscuous mode [ 81.164246][ T5931] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 81.180505][ T5931] bond_slave_0: left promiscuous mode [ 81.200980][ T5931] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 81.224231][ T5931] bond_slave_1: left promiscuous mode [ 81.232448][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.240048][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.251588][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.259111][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.335240][ T5936] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.343069][ T5936] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.388120][ T5944] loop4: detected capacity change from 0 to 1024 [ 81.395789][ T5942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.403093][ T5942] IPv6: NLM_F_CREATE should be set when creating new route [ 81.414271][ T5944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.448122][ T5939] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.497825][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.533040][ T5939] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.651610][ T5939] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.729645][ T5959] vlan3: entered allmulticast mode [ 81.749962][ T5939] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.875051][ T5969] loop4: detected capacity change from 0 to 1024 [ 81.898961][ T5969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.926232][ T5969] EXT4-fs (loop4): shut down requested (1) [ 81.943463][ T5969] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 82.186842][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.187495][ T5939] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210158][ T5939] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.222316][ T5939] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237063][ T5939] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.299602][ T5976] smc: net device bond0 applied user defined pnetid SYZ0 [ 82.308083][ T5976] smc: net device bond0 erased user defined pnetid SYZ0 [ 82.606390][ T5994] netlink: 68 bytes leftover after parsing attributes in process `syz.3.980'. [ 82.758714][ T6008] loop3: detected capacity change from 0 to 512 [ 82.793760][ T6008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.817668][ T6008] EXT4-fs (loop3): 1 truncate cleaned up [ 82.852022][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.979980][ T6008] syz.3.986 (6008) used greatest stack depth: 7160 bytes left [ 83.996615][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.137289][ T6093] 9pnet: p9_errstr2errno: server reported unknown error [ 84.190126][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1019'. [ 84.222206][ T6110] bridge: RTM_NEWNEIGH with invalid ether address [ 84.900071][ T6143] tipc: Enabling of bearer rejected, failed to enable media [ 85.244002][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 85.244021][ T29] audit: type=1326 audit(1750132539.066:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.273929][ T29] audit: type=1326 audit(1750132539.066:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.370490][ T29] audit: type=1326 audit(1750132539.126:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.394613][ T29] audit: type=1326 audit(1750132539.126:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.419188][ T29] audit: type=1326 audit(1750132539.126:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.443340][ T29] audit: type=1326 audit(1750132539.126:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.468660][ T29] audit: type=1326 audit(1750132539.126:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.492463][ T29] audit: type=1326 audit(1750132539.126:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.516524][ T29] audit: type=1326 audit(1750132539.126:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.540325][ T29] audit: type=1326 audit(1750132539.126:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 85.792673][ T6174] block device autoloading is deprecated and will be removed. [ 85.832868][ T6178] @: renamed from vlan0 [ 85.941192][ T6185] loop4: detected capacity change from 0 to 1024 [ 85.976402][ T6185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.028648][ T6185] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1049: bg 0: block 88: padding at end of block bitmap is not set [ 86.193687][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.653040][ T6208] loop3: detected capacity change from 0 to 1024 [ 86.695742][ T6208] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.707625][ T6208] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.743062][ T6208] JBD2: no valid journal superblock found [ 86.749580][ T6208] EXT4-fs (loop3): Could not load journal inode [ 86.851062][ T6215] loop2: detected capacity change from 0 to 512 [ 86.860928][ T6216] SELinux: Context Ü is not valid (left unmapped). [ 86.880729][ T6215] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 86.907046][ T6215] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1061: iget: bogus i_mode (5) [ 86.944632][ T6215] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1061: couldn't read orphan inode 15 (err -117) [ 86.999804][ T6215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.035550][ T6215] ext2 filesystem being mounted at /208/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.219330][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.445112][ T6243] tipc: New replicast peer: 255.255.255.255 [ 87.451323][ T6243] tipc: Enabled bearer , priority 10 [ 87.517248][ T6245] netlink: 'syz.2.1072': attribute type 4 has an invalid length. [ 87.547484][ T6245] netlink: 'syz.2.1072': attribute type 4 has an invalid length. [ 87.939082][ T6279] loop3: detected capacity change from 0 to 512 [ 87.966849][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.986220][ T6279] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.168703][ T6286] loop1: detected capacity change from 0 to 512 [ 88.189082][ T6286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.220077][ T6288] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 88.235094][ T6284] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 88.247832][ T6288] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 88.256741][ T6284] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 88.270170][ T6288] dummy0: entered promiscuous mode [ 88.276016][ T6288] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 88.288300][ T6286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.313458][ T6286] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.325137][ T6284] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 88.398951][ T6284] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 88.428162][ T6284] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 88.428323][ T6284] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 88.452083][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.557080][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.607339][ T6313] loop4: detected capacity change from 0 to 1764 [ 88.723372][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 88.747438][ T6320] hsr_slave_0: left promiscuous mode [ 88.757300][ T6320] hsr_slave_1: left promiscuous mode [ 88.766774][ T6334] loop1: detected capacity change from 0 to 512 [ 88.782335][ T6334] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.791626][ T6334] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 88.807785][ T6334] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 88.827108][ T6334] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 88.837178][ T6334] System zones: 0-2, 18-18, 34-35 [ 88.843158][ T6334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.876934][ T6334] syz_tun: entered allmulticast mode [ 88.883592][ T6333] syz_tun: left allmulticast mode [ 88.900806][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.939297][ T6346] loop1: detected capacity change from 0 to 512 [ 88.958177][ T6348] loop3: detected capacity change from 0 to 512 [ 88.959069][ T6346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.978530][ T6346] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.996007][ T6348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.009400][ T6348] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.027512][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1102: corrupted inode contents [ 89.040040][ T6348] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1102: mark_inode_dirty error [ 89.053078][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1102: corrupted inode contents [ 89.072388][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1102: corrupted inode contents [ 89.085846][ T6348] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1102: mark_inode_dirty error [ 89.100939][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1102: corrupted inode contents [ 89.113382][ T6348] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1102: mark_inode_dirty error [ 89.127781][ T6348] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1102: corrupted inode contents [ 89.132181][ T6353] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 89.143348][ T6348] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1102: mark_inode_dirty error [ 89.155721][ T6353] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 89.180649][ T6353] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 89.193393][ T6353] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 89.208428][ T6353] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 89.223225][ T6353] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 89.237236][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.299829][ T6360] loop3: detected capacity change from 0 to 1764 [ 89.323162][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.447499][ T6370] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 89.503337][ T6375] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 89.511322][ T6375] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1110'. [ 89.539112][ T6372] syzkaller0: entered promiscuous mode [ 89.546628][ T6372] syzkaller0: entered allmulticast mode [ 89.596521][ T6370] batman_adv: batadv0: Adding interface: team0 [ 89.602977][ T6370] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.630838][ T6370] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 89.642993][ T6375] team0: entered promiscuous mode [ 89.651032][ T6375] team_slave_0: entered promiscuous mode [ 89.658585][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.686794][ T6375] batman_adv: batadv0: Interface activated: team0 [ 89.694384][ T6375] batman_adv: batadv0: Interface deactivated: team0 [ 89.701104][ T6375] batman_adv: batadv0: Removing interface: team0 [ 89.729661][ T6375] bridge0: port 3(team0) entered blocking state [ 89.736093][ T6375] bridge0: port 3(team0) entered disabled state [ 89.742841][ T6375] team0: entered allmulticast mode [ 89.748438][ T6375] team_slave_0: entered allmulticast mode [ 89.755857][ T6375] bridge0: port 3(team0) entered blocking state [ 89.762638][ T6375] bridge0: port 3(team0) entered forwarding state [ 89.792156][ T6382] pim6reg1: entered promiscuous mode [ 89.797604][ T6382] pim6reg1: entered allmulticast mode [ 89.870448][ T6393] netlink: 'syz.2.1121': attribute type 39 has an invalid length. [ 90.086795][ T6399] loop2: detected capacity change from 0 to 1764 [ 90.148593][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 90.182288][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 90.290257][ T6408] netlink: 'syz.2.1128': attribute type 6 has an invalid length. [ 90.291858][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 90.291877][ T29] audit: type=1326 audit(1750132544.106:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.330269][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1130'. [ 90.354154][ T29] audit: type=1326 audit(1750132544.156:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.379549][ T29] audit: type=1326 audit(1750132544.166:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.403309][ T29] audit: type=1326 audit(1750132544.166:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.429209][ T29] audit: type=1326 audit(1750132544.196:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.452740][ T29] audit: type=1326 audit(1750132544.196:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.478280][ T29] audit: type=1326 audit(1750132544.196:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.501773][ T29] audit: type=1326 audit(1750132544.246:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.528369][ T29] audit: type=1326 audit(1750132544.246:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.553217][ T29] audit: type=1326 audit(1750132544.246:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 90.685394][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1133'. [ 90.726568][ T6432] loop8: detected capacity change from 0 to 16384 [ 90.752649][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 90.787121][ T6436] loop1: detected capacity change from 0 to 256 [ 90.903897][ T6439] loop8: detected capacity change from 16384 to 0 [ 90.916022][ C0] I/O error, dev loop8, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 91.545976][ T6492] syzkaller0: entered promiscuous mode [ 91.551532][ T6492] syzkaller0: entered allmulticast mode [ 91.615320][ T6504] capability: warning: `syz.2.1147' uses 32-bit capabilities (legacy support in use) [ 91.797904][ T6516] syzkaller0: entered promiscuous mode [ 91.803542][ T6516] syzkaller0: entered allmulticast mode [ 91.904219][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 91.936405][ T6527] netlink: 'syz.4.1154': attribute type 39 has an invalid length. [ 91.968150][ T6525] bond2: entered promiscuous mode [ 91.983700][ T6525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.186307][ T6543] bond_slave_1: mtu less than device minimum [ 92.292604][ T6546] loop2: detected capacity change from 0 to 512 [ 92.382703][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.445571][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.457581][ T6546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.476702][ T6556] loop1: detected capacity change from 0 to 1024 [ 92.493973][ T6556] EXT4-fs: Ignoring removed bh option [ 92.509747][ T6546] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.546118][ T6556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.629310][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.652968][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.712934][ T6563] pim6reg1: entered promiscuous mode [ 92.718415][ T6563] pim6reg1: entered allmulticast mode [ 93.362015][ T6577] loop2: detected capacity change from 0 to 1024 [ 93.495783][ T6577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.530046][ T6577] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 93.563884][ T6586] loop1: detected capacity change from 0 to 2048 [ 93.596544][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.633526][ T6586] Alternate GPT is invalid, using primary GPT. [ 93.640062][ T6586] loop1: p2 p3 p7 [ 93.764725][ T6600] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 93.825456][ T6602] tipc: Enabled bearer , priority 0 [ 93.832956][ T6601] tipc: Resetting bearer [ 93.846343][ T6601] tipc: Disabling bearer [ 93.910046][ T6608] loop1: detected capacity change from 0 to 2048 [ 93.943739][ T6608] loop1: p1 < > p4 [ 93.948218][ T6608] loop1: p4 size 8388608 extends beyond EOD, truncated [ 94.370492][ T6642] tipc: Enabling of bearer rejected, failed to enable media [ 94.747748][ T6650] SELinux: failed to load policy [ 94.790684][ T6654] netlink: 'syz.2.1204': attribute type 4 has an invalid length. [ 94.892725][ T6660] netlink: 'syz.2.1204': attribute type 4 has an invalid length. [ 95.393757][ T6677] loop1: detected capacity change from 0 to 1024 [ 95.406433][ T6677] EXT4-fs: Ignoring removed bh option [ 95.415284][ T6677] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.434443][ T6677] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.451416][ T6677] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.459563][ T6677] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1211: Invalid inode table block 0 in block_group 0 [ 95.477772][ T6677] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 95.490034][ T6675] team0 (unregistering): Port device team_slave_0 removed [ 95.501793][ T6677] EXT4-fs error (device loop1): ext4_quota_write:7322: inode #3: comm syz.1.1211: mark_inode_dirty error [ 95.521054][ T6675] team0 (unregistering): Port device team_slave_1 removed [ 95.532882][ T6677] __quota_error: 54 callbacks suppressed [ 95.532900][ T6677] Quota error (device loop1): write_blk: dquota write failed [ 95.548377][ T6677] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 95.558345][ T6677] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1211: Failed to acquire dquot type 0 [ 95.573332][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 95.604876][ T6677] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1211: Invalid inode table block 0 in block_group 0 [ 95.618223][ T6677] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 95.628036][ T6677] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.1211: mark_inode_dirty error [ 95.641740][ T6688] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.652680][ T6677] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1211: Invalid inode table block 0 in block_group 0 [ 95.652781][ T6677] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 95.652842][ T6677] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 95.652966][ T6677] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1211: Invalid inode table block 0 in block_group 0 [ 95.653081][ T6677] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 95.653169][ T6677] EXT4-fs error (device loop1): ext4_truncate:4597: inode #15: comm syz.1.1211: mark_inode_dirty error [ 95.663497][ T6677] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 95.728837][ T6677] EXT4-fs (loop1): 1 truncate cleaned up [ 95.735852][ T6677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.776493][ T6688] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.799215][ T6697] loop2: detected capacity change from 0 to 512 [ 95.805377][ T6695] bridge: RTM_NEWNEIGH with invalid ether address [ 95.808108][ T6697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.812549][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.832415][ T6697] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1220: invalid block [ 95.845383][ T6697] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1220: invalid indirect mapped block 4294967295 (level 1) [ 95.864827][ T6697] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1220: invalid indirect mapped block 4294967295 (level 1) [ 95.892610][ T6688] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.912006][ T6697] EXT4-fs (loop2): 2 truncates cleaned up [ 95.918577][ T6697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.939914][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 95.979867][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.990672][ T6688] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.019301][ T29] audit: type=1326 audit(1750132549.836:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.046348][ T29] audit: type=1326 audit(1750132549.836:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.070092][ T29] audit: type=1326 audit(1750132549.836:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.094003][ T29] audit: type=1326 audit(1750132549.836:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.117408][ T29] audit: type=1326 audit(1750132549.836:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.140995][ T29] audit: type=1326 audit(1750132549.836:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.164512][ T29] audit: type=1326 audit(1750132549.836:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.187984][ T29] audit: type=1326 audit(1750132549.836:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 96.230210][ T6688] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.242064][ T6688] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.254081][ T6688] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.277345][ T6688] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.589963][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 96.655570][ T6739] loop4: detected capacity change from 0 to 1024 [ 96.686955][ T6739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.706195][ T6739] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.745437][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.785517][ T3404] IPVS: starting estimator thread 0... [ 96.873334][ T6752] IPVS: using max 2304 ests per chain, 115200 per kthread [ 97.135114][ T6714] syz.2.1225 (6714) used greatest stack depth: 6952 bytes left [ 97.162220][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 97.668202][ T6777] loop3: detected capacity change from 0 to 512 [ 97.690263][ T6779] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 97.755452][ T6777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.766658][ T6777] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1250: invalid block [ 97.783607][ T6777] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1250: invalid indirect mapped block 4294967295 (level 1) [ 97.797882][ T6777] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1250: invalid indirect mapped block 4294967295 (level 1) [ 97.813718][ T6777] EXT4-fs (loop3): 2 truncates cleaned up [ 97.819986][ T6777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.849121][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 97.883167][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.915069][ T6784] loop4: detected capacity change from 0 to 256 [ 97.922878][ T6784] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.000625][ T6792] loop3: detected capacity change from 0 to 1024 [ 98.010636][ T6792] EXT4-fs: Ignoring removed bh option [ 98.056831][ T6792] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.072858][ T6792] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.098399][ T6792] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.108125][ T6792] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.1252: Invalid inode table block 0 in block_group 0 [ 98.110491][ T6796] loop4: detected capacity change from 0 to 512 [ 98.130541][ T6792] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 98.140466][ T6792] EXT4-fs error (device loop3): ext4_quota_write:7322: inode #3: comm syz.3.1252: mark_inode_dirty error [ 98.154693][ T6796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.167768][ T6792] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1252: Failed to acquire dquot type 0 [ 98.179273][ T6796] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.189969][ T6792] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.1252: Invalid inode table block 0 in block_group 0 [ 98.203666][ T6792] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 98.218816][ T6792] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.1252: mark_inode_dirty error [ 98.252485][ T6792] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.1252: Invalid inode table block 0 in block_group 0 [ 98.279127][ T6792] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 98.308543][ T6792] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 98.330416][ T6792] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.1252: Invalid inode table block 0 in block_group 0 [ 98.330585][ T6800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1256: corrupted inode contents [ 98.358483][ T6792] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 98.365698][ T6800] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.1256: mark_inode_dirty error [ 98.380842][ T6800] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1256: corrupted inode contents [ 98.406141][ T6800] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.1256: mark_inode_dirty error [ 98.409731][ T6792] EXT4-fs error (device loop3): ext4_truncate:4597: inode #15: comm syz.3.1252: mark_inode_dirty error [ 98.424949][ T6800] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.1256: mark inode dirty (error -117) [ 98.457947][ T6800] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 98.469103][ T6792] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 98.494397][ T6806] loop2: detected capacity change from 0 to 1024 [ 98.505121][ T6792] EXT4-fs (loop3): 1 truncate cleaned up [ 98.512520][ T6792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.536614][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.550774][ T6806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.566144][ T6806] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.587984][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.602712][ T6811] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 98.616189][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.627413][ T6814] pim6reg1: entered promiscuous mode [ 98.632789][ T6814] pim6reg1: entered allmulticast mode [ 98.672991][ T6820] veth1_macvtap: left promiscuous mode [ 98.680012][ T6820] macsec0: entered promiscuous mode [ 98.839785][ T6847] loop3: detected capacity change from 0 to 256 [ 98.848337][ T6847] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.878333][ T6850] loop4: detected capacity change from 0 to 1024 [ 98.887332][ T6850] EXT4-fs: Ignoring removed bh option [ 98.893892][ T6850] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.906703][ T6850] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 98.918702][ T6850] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.937781][ T6850] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.1276: Invalid inode table block 0 in block_group 0 [ 98.955018][ T6850] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 98.965418][ T6850] EXT4-fs error (device loop4): ext4_quota_write:7322: inode #3: comm syz.4.1276: mark_inode_dirty error [ 98.977286][ T6850] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1276: Failed to acquire dquot type 0 [ 98.990010][ T6850] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.1276: Invalid inode table block 0 in block_group 0 [ 99.004469][ T6850] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 99.077868][ T6850] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.1276: mark_inode_dirty error [ 99.096135][ T6850] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.1276: Invalid inode table block 0 in block_group 0 [ 99.122519][ T6850] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 99.142397][ T6850] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 99.158894][ T6850] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.1276: Invalid inode table block 0 in block_group 0 [ 99.181325][ T6850] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 99.203279][ T6850] EXT4-fs error (device loop4): ext4_truncate:4597: inode #15: comm syz.4.1276: mark_inode_dirty error [ 99.225922][ T6850] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 99.252712][ T6850] EXT4-fs (loop4): 1 truncate cleaned up [ 99.272188][ T6850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.327009][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.661156][ T6873] loop4: detected capacity change from 0 to 512 [ 99.726304][ T6873] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1288: iget: bad i_size value: 38620345925642 [ 99.769595][ T6882] loop2: detected capacity change from 0 to 256 [ 99.786782][ T6882] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.812474][ T6873] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1288: couldn't read orphan inode 15 (err -117) [ 99.876935][ T6873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.972317][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 100.064871][ T6891] loop2: detected capacity change from 0 to 512 [ 100.071574][ T6891] EXT4-fs: Ignoring removed bh option [ 100.077181][ T6891] EXT4-fs: Ignoring removed bh option [ 100.090458][ T6891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.099879][ T6891] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 100.135250][ T6891] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.152384][ T6891] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.160402][ T6891] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.285059][ T6891] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 100.299223][ T6891] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1295: Invalid block bitmap block 0 in block_group 0 [ 100.353381][ T6891] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 100.465713][ T6891] EXT4-fs (loop2): 1 orphan inode deleted [ 100.472012][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.541589][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.557791][ T6447] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 100.571814][ T6447] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 100.585402][ T6447] EXT4-fs (loop4): This should not happen!! Data will be lost [ 100.585402][ T6447] [ 100.595451][ T6447] EXT4-fs (loop4): Total free blocks count 0 [ 100.601527][ T6447] EXT4-fs (loop4): Free/Dirty block details [ 100.607501][ T6447] EXT4-fs (loop4): free_blocks=0 [ 100.612544][ T6447] EXT4-fs (loop4): dirty_blocks=12472 [ 100.618620][ T6447] EXT4-fs (loop4): Block reservation details [ 100.624690][ T6447] EXT4-fs (loop4): i_reserved_data_blocks=12472 [ 100.656749][ T6447] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 100.746788][ T6901] loop2: detected capacity change from 0 to 2048 [ 100.790387][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.812971][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 100.812989][ T29] audit: type=1400 audit(1750132554.626:3654): avc: denied { mounton } for pid=6900 comm="syz.2.1307" path="/265/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.878198][ T3312] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 100.893011][ T29] audit: type=1400 audit(1750132554.696:3655): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.918911][ T3312] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 100.931304][ T29] audit: type=1400 audit(1750132554.746:3656): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 100.969852][ T29] audit: type=1400 audit(1750132554.786:3657): avc: denied { unlink } for pid=3312 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.005600][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.114485][ T29] audit: type=1326 audit(1750132554.926:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25618358e7 code=0x7ffc0000 [ 101.139433][ T29] audit: type=1326 audit(1750132554.926:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25617dab19 code=0x7ffc0000 [ 101.165150][ T29] audit: type=1326 audit(1750132554.926:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25618358e7 code=0x7ffc0000 [ 101.189094][ T29] audit: type=1326 audit(1750132554.926:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25617dab19 code=0x7ffc0000 [ 101.214636][ T29] audit: type=1326 audit(1750132554.926:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25618358e7 code=0x7ffc0000 [ 101.238705][ T29] audit: type=1326 audit(1750132554.926:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25617dab19 code=0x7ffc0000 [ 101.336195][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 101.348461][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 101.359679][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 101.404678][ T6931] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.489431][ T6938] loop3: detected capacity change from 0 to 512 [ 101.496852][ T6938] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 101.497285][ T6931] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.586682][ T6931] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.665100][ T6931] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.923546][ T6931] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.955582][ T6931] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.980296][ T6931] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.992768][ T6931] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.277402][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 102.288663][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 102.574992][ T6972] uprobe: syz.1.1327:6972 failed to unregister, leaking uprobe [ 103.216366][ T6984] loop2: detected capacity change from 0 to 1024 [ 103.224546][ T6984] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.236410][ T6984] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.266549][ T6984] JBD2: no valid journal superblock found [ 103.272363][ T6984] EXT4-fs (loop2): Could not load journal inode [ 103.539900][ T6992] loop4: detected capacity change from 0 to 512 [ 103.558216][ T6992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.626507][ T6992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.641005][ T6992] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.745383][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.871840][ T7008] loop4: detected capacity change from 0 to 128 [ 104.074949][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 104.207219][ T7010] loop3: detected capacity change from 0 to 256 [ 104.561424][ T7029] random: crng reseeded on system resumption [ 104.628590][ T7028] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1347'. [ 104.638577][ T7031] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 104.777448][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 104.827889][ T7047] loop2: detected capacity change from 0 to 256 [ 104.956741][ T7054] loop1: detected capacity change from 0 to 164 [ 105.095900][ T7057] loop4: detected capacity change from 0 to 512 [ 105.337137][ T7057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.347683][ T7054] isofs_fill_super: root inode is not a directory. Corrupted media? [ 105.368174][ T7057] EXT4-fs (loop4): failed to initialize system zone (-117) [ 105.382626][ T7057] EXT4-fs (loop4): mount failed [ 105.420454][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 105.655581][ T7091] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.757203][ T7091] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.778702][ T7101] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1373'. [ 105.813649][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 105.813731][ T29] audit: type=1400 audit(1750132559.636:3881): avc: denied { setattr } for pid=7105 comm="syz.4.1375" name="file0" dev="tmpfs" ino=1469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.848742][ T7091] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.071192][ T7091] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.112831][ T7117] tipc: Enabled bearer , priority 0 [ 106.125526][ T7116] tipc: Resetting bearer [ 106.150046][ T7116] tipc: Disabling bearer [ 106.198848][ T7091] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.321846][ T7091] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.416621][ T7091] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.565780][ T7091] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.594689][ T7129] loop2: detected capacity change from 0 to 512 [ 106.625678][ T7129] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1386: iget: bad i_size value: 38620345925642 [ 106.653986][ T7129] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1386: couldn't read orphan inode 15 (err -117) [ 106.671997][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.009106][ T7145] 9pnet_fd: Insufficient options for proto=fd [ 107.212586][ T7148] IPv6: sit2: Disabled Multicast RS [ 107.426923][ T6486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:49: bg 0: block 5: invalid block bitmap [ 107.440915][ T6486] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.453654][ T6486] EXT4-fs (loop2): This should not happen!! Data will be lost [ 107.453654][ T6486] [ 107.464021][ T6486] EXT4-fs (loop2): Total free blocks count 0 [ 107.470309][ T6486] EXT4-fs (loop2): Free/Dirty block details [ 107.476422][ T6486] EXT4-fs (loop2): free_blocks=0 [ 107.481483][ T6486] EXT4-fs (loop2): dirty_blocks=10864 [ 107.486985][ T6486] EXT4-fs (loop2): Block reservation details [ 107.493080][ T6486] EXT4-fs (loop2): i_reserved_data_blocks=10864 [ 107.504317][ T7154] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 107.694571][ T7157] loop1: detected capacity change from 0 to 512 [ 107.750104][ T6486] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 107.808384][ T7157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.915500][ T7157] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1396: invalid block [ 107.944830][ T7157] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1396: invalid indirect mapped block 4294967295 (level 1) [ 107.965051][ T7157] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1396: invalid indirect mapped block 4294967295 (level 1) [ 107.995447][ T7157] EXT4-fs (loop1): 2 truncates cleaned up [ 108.001722][ T7157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.040802][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.069979][ T7182] tipc: Enabled bearer , priority 0 [ 108.078957][ T7182] syzkaller0: MTU too low for tipc bearer [ 108.084794][ T7182] tipc: Disabling bearer [ 108.151786][ T29] audit: type=1400 audit(1750132561.966:3882): avc: denied { mount } for pid=7188 comm="syz.1.1407" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.168211][ T7189] __nla_validate_parse: 2 callbacks suppressed [ 108.168230][ T7189] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1407'. [ 108.176610][ T29] audit: type=1400 audit(1750132561.966:3883): avc: denied { map } for pid=7188 comm="syz.1.1407" path="socket:[17491]" dev="sockfs" ino=17491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.213053][ T29] audit: type=1400 audit(1750132561.966:3884): avc: denied { read } for pid=7188 comm="syz.1.1407" path="socket:[17491]" dev="sockfs" ino=17491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.249992][ T7191] loop2: detected capacity change from 0 to 2048 [ 108.276409][ T7191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.306451][ T29] audit: type=1400 audit(1750132562.116:3885): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 108.444771][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.476062][ T7203] loop2: detected capacity change from 0 to 2048 [ 108.506907][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.535846][ T7203] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1411: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 108.563448][ T7203] EXT4-fs (loop2): Remounting filesystem read-only [ 108.592617][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.646930][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 108.697385][ T7209] loop3: detected capacity change from 0 to 1024 [ 108.710675][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.845314][ T7222] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1418'. [ 109.459614][ T7232] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1432'. [ 109.468844][ T7232] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1432'. [ 109.496909][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.549058][ T7238] loop3: detected capacity change from 0 to 512 [ 109.566390][ T7238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.595013][ T7238] EXT4-fs (loop3): failed to initialize system zone (-117) [ 109.640389][ T7238] EXT4-fs (loop3): mount failed [ 109.729704][ T29] audit: type=1326 audit(1750132563.546:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c23eae929 code=0x7ffc0000 [ 109.775133][ T7247] loop3: detected capacity change from 0 to 1024 [ 109.798074][ T29] audit: type=1326 audit(1750132563.576:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f5c23eae929 code=0x7ffc0000 [ 109.824873][ T29] audit: type=1326 audit(1750132563.576:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c23eae929 code=0x7ffc0000 [ 109.848876][ T29] audit: type=1326 audit(1750132563.576:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c23eae929 code=0x7ffc0000 [ 109.874481][ T29] audit: type=1326 audit(1750132563.576:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5c23eae929 code=0x7ffc0000 [ 110.025602][ T7247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.054236][ T7247] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.104815][ T7247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 110.154603][ T7247] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1426: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.266044][ T7247] EXT4-fs (loop3): Remounting filesystem read-only [ 110.273057][ T7247] EXT4-fs (loop3): 1 orphan inode deleted [ 110.291199][ T7247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.334075][ T7247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.513113][ T7267] loop4: detected capacity change from 0 to 1024 [ 110.558066][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.599786][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.663110][ T7262] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1433'. [ 110.718206][ T7276] loop3: detected capacity change from 0 to 512 [ 110.726460][ T7276] journal_path: Lookup failure for './file0' [ 110.732955][ T7276] EXT4-fs: error: could not find journal device path [ 110.988186][ T7292] pim6reg1: entered promiscuous mode [ 110.993658][ T7292] pim6reg1: entered allmulticast mode [ 111.121046][ T7297] pim6reg1: entered promiscuous mode [ 111.126463][ T7297] pim6reg1: entered allmulticast mode [ 111.228014][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 111.228030][ T29] audit: type=1326 audit(1750132565.046:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.263711][ T29] audit: type=1326 audit(1750132565.046:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.287338][ T29] audit: type=1326 audit(1750132565.046:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.311010][ T29] audit: type=1326 audit(1750132565.046:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.334751][ T29] audit: type=1326 audit(1750132565.046:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.358267][ T29] audit: type=1326 audit(1750132565.046:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.381704][ T29] audit: type=1326 audit(1750132565.046:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.405244][ T29] audit: type=1326 audit(1750132565.046:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.428974][ T29] audit: type=1326 audit(1750132565.046:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.452446][ T29] audit: type=1326 audit(1750132565.056:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256183e929 code=0x7ffc0000 [ 111.647624][ T2961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=2961 comm=kworker/0:2 [ 111.662745][ T7312] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 111.956200][ T7327] tipc: Enabled bearer , priority 0 [ 111.980443][ T7329] bridge0: entered promiscuous mode [ 111.985987][ T7329] macvtap1: entered allmulticast mode [ 111.991415][ T7329] bridge0: entered allmulticast mode [ 111.997626][ T7329] bridge0: port 1(macvtap1) entered blocking state [ 112.005629][ T7329] bridge0: port 1(macvtap1) entered disabled state [ 112.015899][ T7329] bridge0: left allmulticast mode [ 112.021074][ T7329] bridge0: left promiscuous mode [ 112.031361][ T7332] syzkaller0: entered promiscuous mode [ 112.036962][ T7332] syzkaller0: entered allmulticast mode [ 112.047053][ T7327] tipc: Resetting bearer [ 112.054564][ T7326] tipc: Resetting bearer [ 112.061902][ T7326] tipc: Disabling bearer [ 112.129246][ T7336] netlink: 'syz.0.1461': attribute type 4 has an invalid length. [ 112.168538][ T7336] netlink: 'syz.0.1461': attribute type 4 has an invalid length. [ 112.407151][ T7360] pim6reg: entered allmulticast mode [ 112.422779][ T7360] pim6reg: left allmulticast mode [ 112.460392][ T7364] tipc: Enabled bearer , priority 0 [ 112.469839][ T7364] syzkaller0: entered promiscuous mode [ 112.475717][ T7364] syzkaller0: entered allmulticast mode [ 112.508594][ T7364] tipc: Resetting bearer [ 112.518561][ T7363] tipc: Resetting bearer [ 112.543616][ T7363] tipc: Disabling bearer [ 112.675692][ T7374] tipc: Enabled bearer , priority 0 [ 112.691817][ T7373] tipc: Resetting bearer [ 112.722415][ T7373] tipc: Disabling bearer [ 112.810857][ T7377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'. [ 113.614540][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'. [ 113.850784][ T7399] loop2: detected capacity change from 0 to 512 [ 113.871779][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.933463][ T7399] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.006062][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.050142][ T7407] smc: net device bond0 applied user defined pnetid SYZ0 [ 114.104364][ T7409] vhci_hcd: invalid port number 96 [ 114.109745][ T7409] vhci_hcd: default hub control req: 0400 v1b14 i0060 l0 [ 114.205782][ T7423] loop1: detected capacity change from 0 to 512 [ 114.255749][ T7423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.282037][ T7423] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.300873][ T7437] loop4: detected capacity change from 0 to 1024 [ 114.331318][ T7437] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 114.412750][ T7440] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 114.435489][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 114.437659][ T7440] syzkaller0: entered promiscuous mode [ 114.445777][ T7437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.463528][ T7440] syzkaller0: entered allmulticast mode [ 114.493595][ T7437] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.502263][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.541209][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.602551][ T7447] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 114.620558][ T7447] bond1: entered promiscuous mode [ 114.626114][ T7447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.636195][ T7447] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1505'. [ 114.648090][ T7447] batadv1: entered promiscuous mode [ 114.653373][ T7447] batadv1: entered allmulticast mode [ 114.660051][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.675472][ T7447] bond1: (slave batadv1): making interface the new active one [ 114.684152][ T7447] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 114.716316][ T7460] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1505'. [ 114.731903][ T7458] loop4: detected capacity change from 0 to 256 [ 114.771592][ T7460] batadv2: entered promiscuous mode [ 114.776984][ T7460] batadv2: entered allmulticast mode [ 114.807346][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 114.837391][ T7460] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 115.016780][ T3641] IPVS: starting estimator thread 0... [ 115.094794][ T7485] netlink: 'syz.4.1517': attribute type 4 has an invalid length. [ 115.103374][ T7481] IPVS: using max 2304 ests per chain, 115200 per kthread [ 115.113896][ T7485] netlink: 'syz.4.1517': attribute type 4 has an invalid length. [ 115.164181][ T7489] xt_hashlimit: size too large, truncated to 1048576 [ 115.316158][ T7496] bond_slave_1: mtu less than device minimum [ 115.326180][ T7492] veth1_to_bond: entered allmulticast mode [ 115.372747][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 115.410098][ T7492] bond0: (slave bond_slave_1): Releasing backup interface [ 115.459578][ T7492] veth1_to_bond (unregistering): left allmulticast mode [ 115.524242][ T7504] $Hÿ: renamed from bond0 (while UP) [ 115.564193][ T7504] $Hÿ: entered promiscuous mode [ 115.569295][ T7504] bond_slave_0: entered promiscuous mode [ 115.642300][ T7512] syzkaller0: entered promiscuous mode [ 115.649258][ T7512] syzkaller0: entered allmulticast mode [ 115.658321][ T7510] ªªªªªª: renamed from tunl0 [ 115.764714][ T7523] loop2: detected capacity change from 0 to 512 [ 115.796961][ T7523] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.1534: inode #0: comm syz.2.1534: iget: illegal inode # [ 115.842103][ T7533] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 115.850190][ T7523] EXT4-fs (loop2): get orphan inode failed [ 115.858091][ T7523] EXT4-fs (loop2): mount failed [ 115.878482][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.913982][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 115.935531][ T7533] ipvlan2: entered promiscuous mode [ 115.946728][ T7533] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 115.964603][ T7533] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.982981][ T7536] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1538'. [ 115.998642][ T7536] hsr_slave_0: left promiscuous mode [ 116.007228][ T7536] hsr_slave_1: left promiscuous mode [ 116.018858][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'. [ 116.028051][ T7538] netem: change failed [ 116.077166][ T7543] loop3: detected capacity change from 0 to 1024 [ 116.089140][ T7546] loop4: detected capacity change from 0 to 512 [ 116.098730][ T7543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.113044][ T7543] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.131975][ T7546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.148292][ T7543] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.1542: lblock 3 mapped to illegal pblock 3 (length 13) [ 116.162864][ T7546] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.163811][ T7543] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 116.185613][ T7543] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.185613][ T7543] [ 116.227877][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.238410][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.279861][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 116.279879][ T29] audit: type=1326 audit(1750132570.096:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.324753][ T29] audit: type=1326 audit(1750132570.136:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.348355][ T29] audit: type=1326 audit(1750132570.136:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.371846][ T29] audit: type=1326 audit(1750132570.136:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.395200][ T29] audit: type=1326 audit(1750132570.136:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.418914][ T29] audit: type=1326 audit(1750132570.136:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.442816][ T29] audit: type=1326 audit(1750132570.136:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.466595][ T29] audit: type=1326 audit(1750132570.146:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.491603][ T29] audit: type=1326 audit(1750132570.146:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.516303][ T29] audit: type=1326 audit(1750132570.146:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 116.568950][ T7562] syzkaller0: entered promiscuous mode [ 116.574664][ T7562] syzkaller0: entered allmulticast mode [ 116.593846][ T7568] loop3: detected capacity change from 0 to 512 [ 116.600623][ T7568] EXT4-fs: Ignoring removed i_version option [ 116.609132][ T7568] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.621371][ T7568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 116.629417][ T7568] System zones: 1-12 [ 116.637243][ T7568] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.644314][ T7568] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1549: invalid indirect mapped block 12 (level 1) [ 116.681913][ T7568] EXT4-fs (loop3): Remounting filesystem read-only [ 116.697358][ T7574] loop4: detected capacity change from 0 to 4096 [ 116.711221][ T7568] EXT4-fs (loop3): 1 truncate cleaned up [ 116.718210][ T7568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 116.730988][ T7568] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 116.797223][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1554'. [ 116.836537][ T7582] loop2: detected capacity change from 0 to 1024 [ 116.861415][ T7582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.821949][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.947545][ T7614] loop3: detected capacity change from 0 to 512 [ 117.959176][ T7614] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1567: corrupted in-inode xattr: invalid ea_ino [ 117.983237][ T7614] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1567: couldn't read orphan inode 15 (err -117) [ 118.005706][ T7614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.029009][ T7621] bridge: RTM_NEWNEIGH with invalid ether address [ 118.058043][ T7614] Invalid ELF header magic: != ELF [ 118.085202][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.118292][ T7634] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 118.126805][ T7634] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 118.175629][ T7636] tipc: Enabled bearer , priority 0 [ 118.182866][ T7636] syzkaller0: entered promiscuous mode [ 118.188580][ T7636] syzkaller0: entered allmulticast mode [ 118.198880][ T7636] tipc: Resetting bearer [ 118.205458][ T7635] tipc: Resetting bearer [ 118.213145][ T7635] tipc: Disabling bearer [ 118.995739][ T7656] syzkaller0: entered promiscuous mode [ 119.001384][ T7656] syzkaller0: entered allmulticast mode [ 119.094332][ T7662] loop4: detected capacity change from 0 to 1024 [ 119.109150][ T7662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.139230][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.281843][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.400150][ T7691] loop2: detected capacity change from 0 to 128 [ 119.408564][ T7691] EXT4-fs: Ignoring removed oldalloc option [ 119.429447][ T7691] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.453812][ T7691] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.675745][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.877601][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1600'. [ 120.055477][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'. [ 120.091390][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 120.127714][ T7727] loop1: detected capacity change from 0 to 1024 [ 120.136986][ T7727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.457491][ T7737] loop2: detected capacity change from 0 to 512 [ 120.565903][ T7737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.664674][ T7737] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.681778][ T7741] loop3: detected capacity change from 0 to 128 [ 120.704410][ T7741] EXT4-fs: Ignoring removed oldalloc option [ 120.757201][ T7741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.770671][ T7737] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.844929][ T7741] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.875157][ T7743] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1609'. [ 120.974587][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.039154][ T7745] loop2: detected capacity change from 0 to 512 [ 121.081360][ T7745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.103437][ T7745] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.176309][ T7745] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 121.187229][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.232445][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.260724][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.292983][ T7762] tipc: New replicast peer: 255.255.255.255 [ 121.299249][ T7762] tipc: Enabled bearer , priority 10 [ 121.406957][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 121.406975][ T29] audit: type=1326 audit(1750132575.226:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.457333][ T7782] loop2: detected capacity change from 0 to 1024 [ 121.464940][ T29] audit: type=1326 audit(1750132575.266:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.489694][ T7782] EXT4-fs: inline encryption not supported [ 121.496044][ T7782] EXT4-fs: Ignoring removed bh option [ 121.509647][ T7783] loop4: detected capacity change from 0 to 1024 [ 121.516267][ T29] audit: type=1326 audit(1750132575.306:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516336][ T29] audit: type=1326 audit(1750132575.306:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516367][ T29] audit: type=1326 audit(1750132575.306:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516456][ T29] audit: type=1326 audit(1750132575.306:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516487][ T29] audit: type=1326 audit(1750132575.306:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516525][ T29] audit: type=1326 audit(1750132575.306:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516637][ T29] audit: type=1326 audit(1750132575.306:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.516671][ T29] audit: type=1326 audit(1750132575.306:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d5a1e929 code=0x7ffc0000 [ 121.557986][ T7783] EXT4-fs: Ignoring removed orlov option [ 121.717178][ T7783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.746864][ T7782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.763772][ T7783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.780409][ T7782] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 497-513 which overlap fs metadata [ 121.806662][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.822945][ T7782] EXT4-fs (loop2): Remounting filesystem read-only [ 121.847703][ T7796] wg2: left promiscuous mode [ 121.852529][ T7796] wg2: left allmulticast mode [ 121.918169][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.976222][ T7806] loop2: detected capacity change from 0 to 512 [ 121.982367][ T7807] tipc: Enabling of bearer rejected, failed to enable media [ 122.027680][ T7809] loop4: detected capacity change from 0 to 512 [ 122.037792][ T7806] EXT4-fs (loop2): 1 orphan inode deleted [ 122.039232][ T7809] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.050760][ T7806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.068273][ T6495] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 1 [ 122.089212][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.106559][ T7806] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.120285][ T7809] netlink: 'syz.4.1635': attribute type 13 has an invalid length. [ 122.217413][ T7806] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.226584][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.267520][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.312446][ T7824] loop2: detected capacity change from 0 to 512 [ 122.335874][ T7824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.357417][ T7824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.372357][ T7829] block device autoloading is deprecated and will be removed. [ 122.403360][ T7829] syz.4.1643: attempt to access beyond end of device [ 122.403360][ T7829] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.418186][ T7824] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.465717][ T7824] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 122.500387][ T7835] loop4: detected capacity change from 0 to 512 [ 122.541848][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.542356][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.565188][ T7835] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.705377][ T7818] ref_ctr_offset mismatch. inode: 0x73c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 122.718831][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.799371][ T7850] sch_fq: defrate 4294967295 ignored. [ 122.977553][ T7859] IPv4: Oversized IP packet from 127.202.26.0 [ 124.004623][ T7884] bridge0: entered allmulticast mode [ 124.139729][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 124.413047][ T7902] loop4: detected capacity change from 0 to 256 [ 124.466036][ T7902] FAT-fs (loop4): bogus number of FAT sectors [ 124.472232][ T7902] FAT-fs (loop4): Can't find a valid FAT filesystem [ 124.882529][ T7904] syzkaller0: entered promiscuous mode [ 124.888845][ T7904] syzkaller0: entered allmulticast mode [ 124.897155][ T7908] loop2: detected capacity change from 0 to 128 [ 124.928816][ T7913] loop4: detected capacity change from 0 to 128 [ 124.935955][ T7914] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 124.957089][ T7907] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 124.965047][ T7907] FAT-fs (loop2): Filesystem has been set read-only [ 124.971726][ T7907] syz.2.1673: attempt to access beyond end of device [ 124.971726][ T7907] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 125.003321][ T7907] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.011215][ T7907] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.051564][ T7908] syz.2.1673: attempt to access beyond end of device [ 125.051564][ T7908] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.080807][ T7914] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 125.112661][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.119857][ T6455] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.135102][ T7908] syz.2.1673: attempt to access beyond end of device [ 125.135102][ T7908] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.243636][ T6495] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.298160][ T7932] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.312117][ T7934] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 125.327779][ T7934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.340732][ T7934] vlan0: entered promiscuous mode [ 125.345873][ T7934] bond1: entered promiscuous mode [ 125.351182][ T7934] vlan0: entered allmulticast mode [ 125.356353][ T7934] bond1: entered allmulticast mode [ 125.372650][ T7934] bond1: (slave gretap1): making interface the new active one [ 125.380479][ T7934] gretap1: entered promiscuous mode [ 125.386916][ T7934] gretap1: entered allmulticast mode [ 125.401678][ T7934] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.424305][ T7932] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.446999][ T7940] loop2: detected capacity change from 0 to 512 [ 125.462316][ T7940] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.470074][ T7940] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.489330][ T7940] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 125.497593][ T7932] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.510735][ T7940] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1684: bg 0: block 248: padding at end of block bitmap is not set [ 125.527413][ T7940] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 125.531831][ T7943] gtp0: entered promiscuous mode [ 125.538243][ T7940] EXT4-fs (loop2): 1 orphan inode deleted [ 125.547899][ T7940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.568189][ T7932] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.637543][ T7932] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.669990][ T7932] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.684893][ T7932] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.718184][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.728735][ T7932] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.840993][ T7954] wg2: entered promiscuous mode [ 125.845961][ T7954] wg2: entered allmulticast mode [ 126.977558][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 126.977575][ T29] audit: type=1326 audit(1750132580.796:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.064508][ T29] audit: type=1326 audit(1750132580.826:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.089458][ T29] audit: type=1326 audit(1750132580.826:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.113105][ T29] audit: type=1326 audit(1750132580.826:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.138139][ T29] audit: type=1326 audit(1750132580.826:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.161796][ T29] audit: type=1326 audit(1750132580.826:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.186723][ T29] audit: type=1326 audit(1750132580.826:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.210317][ T29] audit: type=1326 audit(1750132580.826:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.235267][ T29] audit: type=1326 audit(1750132580.826:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.258724][ T29] audit: type=1326 audit(1750132580.826:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7981 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a94e929 code=0x7ffc0000 [ 127.411085][ T7999] loop1: detected capacity change from 0 to 128 [ 127.418027][ T8000] loop2: detected capacity change from 0 to 128 [ 127.429405][ T7999] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.442730][ T8000] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.457045][ T7999] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.491148][ T8000] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.505105][ T7999] netlink: 'syz.1.1704': attribute type 30 has an invalid length. [ 127.572217][ T3308] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.590859][ T8007] infiniband syz!: set down [ 127.595475][ T8007] infiniband syz!: added team_slave_0 [ 127.626010][ T8007] RDS/IB: syz!: added [ 127.630367][ T8007] smc: adding ib device syz! with port count 1 [ 127.637787][ T8007] smc: ib device syz! port 1 has pnetid [ 127.676718][ T8016] loop3: detected capacity change from 0 to 512 [ 127.685120][ T8016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.709715][ T8016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.722563][ T8016] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.768121][ T8022] loop4: detected capacity change from 0 to 1024 [ 127.820632][ T8022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.909089][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.937828][ T8029] ================================================================== [ 127.946006][ T8029] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 127.954303][ T8029] [ 127.956643][ T8029] write to 0xffff88811ac176ac of 4 bytes by task 8022 on cpu 0: [ 127.964295][ T8029] xas_set_mark+0x12b/0x140 [ 127.968845][ T8029] __folio_start_writeback+0x1dd/0x440 [ 127.974337][ T8029] ext4_bio_write_folio+0x5ad/0x9f0 [ 127.979575][ T8029] mpage_submit_folio+0xe4/0x170 [ 127.984639][ T8029] mpage_process_page_bufs+0x39b/0x4a0 [ 127.990221][ T8029] mpage_prepare_extent_to_map+0x741/0xaa0 [ 127.996083][ T8029] ext4_do_writepages+0xa1a/0x21c0 [ 128.001319][ T8029] ext4_writepages+0x176/0x300 [ 128.006115][ T8029] do_writepages+0x1c6/0x310 [ 128.010736][ T8029] file_write_and_wait_range+0x156/0x2c0 [ 128.016397][ T8029] generic_buffers_fsync_noflush+0x45/0x120 [ 128.022334][ T8029] ext4_sync_file+0x1ab/0x690 [ 128.027050][ T8029] vfs_fsync_range+0x10d/0x130 [ 128.031850][ T8029] ext4_buffered_write_iter+0x34f/0x3c0 [ 128.037458][ T8029] ext4_file_write_iter+0xdbf/0xf00 [ 128.042683][ T8029] iter_file_splice_write+0x5f2/0x970 [ 128.048084][ T8029] direct_splice_actor+0x156/0x2a0 [ 128.053225][ T8029] splice_direct_to_actor+0x312/0x680 [ 128.058625][ T8029] do_splice_direct+0xda/0x150 [ 128.063418][ T8029] do_sendfile+0x380/0x650 [ 128.067851][ T8029] __x64_sys_sendfile64+0x105/0x150 [ 128.073071][ T8029] x64_sys_call+0xb39/0x2fb0 [ 128.077682][ T8029] do_syscall_64+0xd2/0x200 [ 128.082200][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.088110][ T8029] [ 128.090447][ T8029] read to 0xffff88811ac176ac of 4 bytes by task 8029 on cpu 1: [ 128.098003][ T8029] filemap_write_and_wait_range+0xfc/0x340 [ 128.103933][ T8029] filemap_invalidate_pages+0xa4/0x1a0 [ 128.109435][ T8029] kiocb_invalidate_pages+0x6e/0x80 [ 128.114672][ T8029] __iomap_dio_rw+0x5d4/0x1250 [ 128.119467][ T8029] iomap_dio_rw+0x40/0x90 [ 128.123824][ T8029] ext4_file_write_iter+0xad9/0xf00 [ 128.129045][ T8029] iter_file_splice_write+0x5f2/0x970 [ 128.134444][ T8029] direct_splice_actor+0x156/0x2a0 [ 128.139685][ T8029] splice_direct_to_actor+0x312/0x680 [ 128.145099][ T8029] do_splice_direct+0xda/0x150 [ 128.149904][ T8029] do_sendfile+0x380/0x650 [ 128.154341][ T8029] __x64_sys_sendfile64+0x105/0x150 [ 128.159559][ T8029] x64_sys_call+0xb39/0x2fb0 [ 128.164166][ T8029] do_syscall_64+0xd2/0x200 [ 128.168684][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.174600][ T8029] [ 128.177040][ T8029] value changed: 0x0a000021 -> 0x04000021 [ 128.182799][ T8029] [ 128.185138][ T8029] Reported by Kernel Concurrency Sanitizer on: [ 128.191397][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.4.1712 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 128.203849][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.214016][ T8029] ================================================================== [ 128.270862][ T8032] loop3: detected capacity change from 0 to 512 [ 128.297728][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.401314][ T8032] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.610992][ T8037] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.