last executing test programs: 20.297241364s ago: executing program 1 (id=456): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 19.315544233s ago: executing program 1 (id=484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 18.44255395s ago: executing program 1 (id=515): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xbeaf}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 18.376894121s ago: executing program 1 (id=517): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 18.264383883s ago: executing program 1 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 17.848845411s ago: executing program 1 (id=529): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_switch\x00', r1, 0x0, 0x101}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) 17.848553541s ago: executing program 32 (id=529): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_switch\x00', r1, 0x0, 0x101}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) 4.336754155s ago: executing program 0 (id=752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.628038948s ago: executing program 0 (id=781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 1.724677106s ago: executing program 0 (id=807): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c3a, 0x106a, 0x22, 0x0, 0x0) 1.606725668s ago: executing program 0 (id=810): gettid() socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) read$snapshot(r3, 0x0, 0xffffffbf) 1.445771242s ago: executing program 5 (id=811): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) 1.00217272s ago: executing program 4 (id=823): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 922.626602ms ago: executing program 4 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 900.212382ms ago: executing program 4 (id=825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 775.114224ms ago: executing program 4 (id=826): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 757.915295ms ago: executing program 2 (id=828): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 699.786896ms ago: executing program 0 (id=829): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000001000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x4, 0x2) 582.253348ms ago: executing program 2 (id=831): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x80}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 581.978428ms ago: executing program 3 (id=832): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d38}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 581.230658ms ago: executing program 4 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 565.833688ms ago: executing program 5 (id=834): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0xffffffff}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x5}}, 0x26) close_range(r0, 0xffffffffffffffff, 0x0) 488.82646ms ago: executing program 5 (id=835): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 484.37762ms ago: executing program 4 (id=845): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 415.127642ms ago: executing program 5 (id=836): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x20000}, 0x18) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 409.233712ms ago: executing program 3 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 389.938232ms ago: executing program 0 (id=838): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x1cc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf5", 0x2) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@sr0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 370.259733ms ago: executing program 2 (id=839): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 348.049413ms ago: executing program 3 (id=840): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200800000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 283.238464ms ago: executing program 2 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x101}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) 259.684445ms ago: executing program 3 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syncfs(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 210.337956ms ago: executing program 2 (id=843): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 208.922876ms ago: executing program 5 (id=844): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x89, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 116.950828ms ago: executing program 5 (id=846): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) 116.375987ms ago: executing program 3 (id=847): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) 88.780378ms ago: executing program 3 (id=848): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 0s ago: executing program 2 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 38.457133][ T3313] veth0_vlan: entered promiscuous mode [ 38.467754][ T3305] veth0_vlan: entered promiscuous mode [ 38.488573][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.501325][ T3313] veth1_vlan: entered promiscuous mode [ 38.509559][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.519619][ T3305] veth1_vlan: entered promiscuous mode [ 38.559905][ T3474] loop0: detected capacity change from 0 to 512 [ 38.564393][ T3306] veth0_vlan: entered promiscuous mode [ 38.572897][ T3311] veth0_vlan: entered promiscuous mode [ 38.587479][ T3306] veth1_vlan: entered promiscuous mode [ 38.595470][ T3474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.605949][ T3306] veth0_macvtap: entered promiscuous mode [ 38.615176][ T3474] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.616272][ T3311] veth1_vlan: entered promiscuous mode [ 38.638610][ T3305] veth0_macvtap: entered promiscuous mode [ 38.646535][ T3306] veth1_macvtap: entered promiscuous mode [ 38.660735][ T3313] veth0_macvtap: entered promiscuous mode [ 38.669188][ T3305] veth1_macvtap: entered promiscuous mode [ 38.682965][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.688864][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.702955][ T3313] veth1_macvtap: entered promiscuous mode [ 38.715141][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.722862][ T3311] veth0_macvtap: entered promiscuous mode [ 38.735999][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.749786][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.758766][ T3311] veth1_macvtap: entered promiscuous mode [ 38.769438][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.786020][ T1914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.795750][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.809348][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.821492][ T1914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836439][ T1914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.846641][ T1914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.859725][ T1914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.869277][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.876590][ T1914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.904569][ T1914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.920658][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.930035][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.940724][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.949951][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.959173][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.980349][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.007474][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028885][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 39.028900][ T29] audit: type=1400 audit(1758440598.605:109): avc: denied { read } for pid=3486 comm="syz.1.2" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.033792][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.035361][ T29] audit: type=1400 audit(1758440598.605:110): avc: denied { open } for pid=3486 comm="syz.1.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.086397][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.111918][ T3494] mmap: syz.2.3 (3494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.141843][ T29] audit: type=1400 audit(1758440598.715:111): avc: denied { create } for pid=3495 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.205617][ T29] audit: type=1400 audit(1758440598.755:112): avc: denied { write } for pid=3495 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.287454][ T29] audit: type=1400 audit(1758440598.805:113): avc: denied { create } for pid=3504 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.306793][ T29] audit: type=1400 audit(1758440598.805:114): avc: denied { setopt } for pid=3504 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.326084][ T29] audit: type=1400 audit(1758440598.815:115): avc: denied { bind } for pid=3504 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.361626][ T29] audit: type=1400 audit(1758440598.935:116): avc: denied { open } for pid=3507 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.382850][ T29] audit: type=1400 audit(1758440598.935:117): avc: denied { kernel } for pid=3507 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.409293][ T29] audit: type=1400 audit(1758440598.985:118): avc: denied { create } for pid=3509 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.546187][ C0] hrtimer: interrupt took 25012 ns [ 39.639937][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 39.684486][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.691954][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.729387][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.739948][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.777160][ T3529] veth1_to_bond: entered allmulticast mode [ 39.804933][ T3535] pimreg: entered allmulticast mode [ 39.811392][ T1914] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.828869][ T3533] veth1_to_bond: left allmulticast mode [ 39.835487][ T3535] pimreg: left allmulticast mode [ 39.843525][ T3527] syz.4.17 (3527) used greatest stack depth: 10928 bytes left [ 39.865525][ T1914] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.890799][ T1914] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.905261][ T1914] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.933424][ T3540] geneve2: entered promiscuous mode [ 39.938765][ T3540] geneve2: entered allmulticast mode [ 39.943203][ T3538] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.258377][ T3553] syz.0.29 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.767472][ T3565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3565 comm=syz.0.35 [ 40.780065][ T3565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3565 comm=syz.0.35 [ 40.929500][ T3571] loop4: detected capacity change from 0 to 512 [ 41.124971][ T3581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 41.142905][ T3554] syz.1.30 (3554) used greatest stack depth: 9992 bytes left [ 41.188524][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.196126][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.261678][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.269206][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.536946][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 41.545817][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 41.572342][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 41.581285][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 41.599660][ T3615] loop4: detected capacity change from 0 to 512 [ 41.617773][ T3615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.645472][ T3620] netlink: 'syz.0.62': attribute type 10 has an invalid length. [ 41.653462][ T3615] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.663153][ T3615] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.677620][ T3620] team0: Port device dummy0 added [ 41.683484][ T3618] tipc: Started in network mode [ 41.687757][ T3620] netlink: 'syz.0.62': attribute type 10 has an invalid length. [ 41.688489][ T3618] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 41.703311][ T3618] tipc: Enabled bearer , priority 0 [ 41.711162][ T3615] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.60: corrupted inode contents [ 41.719945][ T3620] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 41.724784][ T3615] EXT4-fs (loop4): Remounting filesystem read-only [ 41.738726][ T3615] EXT4-fs (loop4): 1 truncate cleaned up [ 41.744809][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.755498][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.766306][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.766473][ T3620] team0: Failed to send options change via netlink (err -105) [ 41.784567][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.794025][ T3620] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 41.797777][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.808723][ T3620] team0: Port device dummy0 removed [ 41.839759][ T3620] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.878587][ T3626] bridge_slave_0: left allmulticast mode [ 41.884374][ T3626] bridge_slave_0: left promiscuous mode [ 41.890088][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.908400][ T3626] bridge_slave_1: left allmulticast mode [ 41.912676][ T3631] netlink: 'syz.3.64': attribute type 10 has an invalid length. [ 41.914368][ T3626] bridge_slave_1: left promiscuous mode [ 41.922000][ T3631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.64'. [ 41.927845][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.967072][ T3626] bond0: (slave bond_slave_0): Releasing backup interface [ 41.974700][ T3620] syz.0.62 (3620) used greatest stack depth: 9872 bytes left [ 41.999551][ T3635] loop2: detected capacity change from 0 to 4096 [ 42.010079][ T3626] bond0: (slave bond_slave_1): Releasing backup interface [ 42.025409][ T3626] team0: Port device team_slave_0 removed [ 42.035812][ T3626] team0: Port device team_slave_1 removed [ 42.043538][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.046480][ T3635] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.051169][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.068671][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.076306][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.125618][ T3631] batman_adv: batadv0: Adding interface: veth1_vlan [ 42.132265][ T3631] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.161004][ T3631] batman_adv: batadv0: Interface activated: veth1_vlan [ 42.207411][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 42.250391][ T3654] loop3: detected capacity change from 0 to 512 [ 42.259697][ T3635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.279278][ T3654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.306638][ T3654] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.74: invalid indirect mapped block 4294967295 (level 0) [ 42.340307][ T3654] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.74: invalid indirect mapped block 4294967295 (level 1) [ 42.390068][ T3654] EXT4-fs (loop3): 1 orphan inode deleted [ 42.395919][ T3654] EXT4-fs (loop3): 1 truncate cleaned up [ 42.404332][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.434924][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.519206][ T3673] netlink: 'syz.4.78': attribute type 39 has an invalid length. [ 42.575742][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.703812][ T3388] tipc: Node number set to 11578026 [ 42.822080][ T3695] 9pnet: p9_errstr2errno: server reported unknown error [ 43.224671][ T3715] loop1: detected capacity change from 0 to 512 [ 43.258869][ T3715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.301892][ T3715] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.343154][ T3719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.409084][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 43.425489][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.457136][ T3719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.527470][ T3719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.594955][ T3719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.647080][ T3736] loop1: detected capacity change from 0 to 512 [ 43.691888][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.707129][ T3736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.734491][ T3740] IPv4: Oversized IP packet from 127.202.26.0 [ 43.744469][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.753114][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.754081][ T3736] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.761843][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.924954][ T3748] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.101: corrupted inode contents [ 43.938840][ T3748] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #19: comm syz.1.101: mark_inode_dirty error [ 43.955117][ T3748] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #19: comm syz.1.101: corrupted inode contents [ 43.989088][ T3748] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.101: mark_inode_dirty error [ 44.009373][ T3748] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.101: mark inode dirty (error -117) [ 44.023145][ T3748] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 44.043738][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 44.043758][ T29] audit: type=1326 audit(1758440603.605:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.088875][ T29] audit: type=1326 audit(1758440603.655:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.112321][ T29] audit: type=1326 audit(1758440603.655:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.135613][ T29] audit: type=1326 audit(1758440603.655:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.159124][ T29] audit: type=1326 audit(1758440603.655:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.182450][ T29] audit: type=1326 audit(1758440603.655:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.204791][ T3750] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 44.205848][ T29] audit: type=1326 audit(1758440603.655:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.205955][ T29] audit: type=1326 audit(1758440603.655:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.205987][ T29] audit: type=1326 audit(1758440603.655:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.285593][ T29] audit: type=1326 audit(1758440603.655:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 44.623612][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.806377][ T3774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.902173][ T3774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.968412][ T3774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.990491][ T3786] ======================================================= [ 44.990491][ T3786] WARNING: The mand mount option has been deprecated and [ 44.990491][ T3786] and is ignored by this kernel. Remove the mand [ 44.990491][ T3786] option from the mount to silence this warning. [ 44.990491][ T3786] ======================================================= [ 45.068355][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 45.080313][ T3774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.140789][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.162767][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.177493][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.189577][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 45.205860][ T3800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.214263][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.228398][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 45.239830][ T3800] bond1 (unregistering): Released all slaves [ 45.333511][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 45.344912][ T3809] loop4: detected capacity change from 0 to 1024 [ 45.355754][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 45.373050][ T3809] EXT4-fs: Ignoring removed bh option [ 45.392724][ T3815] lo speed is unknown, defaulting to 1000 [ 45.405899][ T3815] lo speed is unknown, defaulting to 1000 [ 45.418814][ T3815] lo speed is unknown, defaulting to 1000 [ 45.425618][ T3815] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.433550][ T3815] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.443542][ T3809] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.466081][ T3815] lo speed is unknown, defaulting to 1000 [ 45.484314][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.503192][ T3815] lo speed is unknown, defaulting to 1000 [ 45.521808][ T3815] lo speed is unknown, defaulting to 1000 [ 45.529532][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.543586][ T3815] lo speed is unknown, defaulting to 1000 [ 45.568686][ T3815] lo speed is unknown, defaulting to 1000 [ 46.822920][ T3906] process 'syz.2.169' launched '/dev/fd/6' with NULL argv: empty string added [ 46.912209][ T3914] unsupported nla_type 52263 [ 46.924378][ T3916] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3916 comm=syz.1.174 [ 46.971469][ T3919] syz.0.172 (3919) used obsolete PPPIOCDETACH ioctl [ 46.988788][ T3925] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.085423][ T3929] netlink: 248 bytes leftover after parsing attributes in process `syz.2.179'. [ 47.238068][ T3947] loop2: detected capacity change from 0 to 1024 [ 47.245897][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 47.259524][ T3947] EXT4-fs: Ignoring removed orlov option [ 47.276998][ T3942] loop1: detected capacity change from 0 to 8192 [ 47.286781][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 47.290031][ T3947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.334119][ T3299] loop1: p1 p2 < > p3 p4 < p5 > [ 47.339258][ T3299] loop1: partition table partially beyond EOD, truncated [ 47.368087][ T3953] loop7: detected capacity change from 0 to 16384 [ 47.385465][ T3299] loop1: p1 size 100663296 extends beyond EOD, truncated [ 47.460911][ T3299] loop1: p2 start 591104 is beyond EOD, truncated [ 47.467427][ T3299] loop1: p3 start 33572980 is beyond EOD, truncated [ 47.494823][ T3299] loop1: p5 size 100663296 extends beyond EOD, truncated [ 47.507057][ T3956] pim6reg: entered allmulticast mode [ 47.526086][ T3956] pim6reg: left allmulticast mode [ 47.553621][ T3942] loop1: p1 p2 < > p3 p4 < p5 > [ 47.558682][ T3942] loop1: partition table partially beyond EOD, truncated [ 47.566567][ T3942] loop1: p1 size 100663296 extends beyond EOD, truncated [ 47.574756][ T3942] loop1: p2 start 591104 is beyond EOD, truncated [ 47.581221][ T3942] loop1: p3 start 33572980 is beyond EOD, truncated [ 47.590209][ T3942] loop1: p5 size 100663296 extends beyond EOD, truncated [ 47.704682][ T3961] syz_tun: entered allmulticast mode [ 47.727515][ T3960] syz_tun: left allmulticast mode [ 47.757893][ T3958] udevd[3958]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 47.762372][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.785185][ T3959] udevd[3959]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 47.804524][ T3965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.192'. [ 47.840841][ T3965] hsr_slave_0: left promiscuous mode [ 47.862634][ T3965] hsr_slave_1: left promiscuous mode [ 47.877116][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 47.883136][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 47.891147][ T3968] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.193'. [ 47.918784][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.968158][ T3971] dummy0: entered allmulticast mode [ 47.988276][ T3971] dummy0: left allmulticast mode [ 48.091992][ T3985] loop2: detected capacity change from 0 to 256 [ 48.122988][ T3985] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.184519][ T3985] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.977667][ T4076] wg2: entered promiscuous mode [ 48.982603][ T4076] wg2: entered allmulticast mode [ 49.055726][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 49.055740][ T29] audit: type=1326 audit(49.038:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.117378][ T4080] geneve2: entered promiscuous mode [ 49.122703][ T4080] geneve2: entered allmulticast mode [ 49.163921][ T29] audit: type=1326 audit(49.098:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.186726][ T29] audit: type=1326 audit(49.098:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.209477][ T29] audit: type=1326 audit(49.098:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.231989][ T29] audit: type=1326 audit(49.098:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.254652][ T29] audit: type=1326 audit(49.098:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.277205][ T29] audit: type=1326 audit(49.098:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 49.299958][ T29] audit: type=1326 audit(49.098:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c2805be7 code=0x7ffc0000 [ 49.322471][ T29] audit: type=1326 audit(49.098:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe9c27aae09 code=0x7ffc0000 [ 49.345053][ T29] audit: type=1326 audit(49.098:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c2805be7 code=0x7ffc0000 [ 49.576848][ T4112] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.626362][ T4112] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.675703][ T4112] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.689537][ T4134] netlink: 'syz.4.236': attribute type 13 has an invalid length. [ 49.702482][ T4134] gretap0: refused to change device tx_queue_len [ 49.709295][ T4134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.735897][ T4112] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.793149][ T4004] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.806235][ T4020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.819976][ T4020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.834911][ T4020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.428822][ T4231] loop1: detected capacity change from 0 to 1024 [ 50.438348][ T4231] EXT4-fs: Ignoring removed orlov option [ 50.454607][ T4235] netlink: zone id is out of range [ 50.459790][ T4235] netlink: zone id is out of range [ 50.468538][ T4231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.482029][ T4235] netlink: zone id is out of range [ 50.487341][ T4235] netlink: zone id is out of range [ 50.493978][ T4235] netlink: zone id is out of range [ 50.499152][ T4235] netlink: zone id is out of range [ 50.505054][ T4235] netlink: zone id is out of range [ 50.517633][ T4235] netlink: zone id is out of range [ 50.522879][ T4235] netlink: zone id is out of range [ 50.818234][ T4279] __nla_validate_parse: 3 callbacks suppressed [ 50.818250][ T4279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 50.836035][ T4279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.250'. [ 50.901064][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.088614][ T4305] loop1: detected capacity change from 0 to 4096 [ 51.096696][ T4305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.116905][ T4305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.332979][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.455147][ T4311] netlink: 96 bytes leftover after parsing attributes in process `syz.4.255'. [ 52.003222][ T4331] loop2: detected capacity change from 0 to 2048 [ 52.008650][ T4335] loop3: detected capacity change from 0 to 128 [ 52.047473][ T4335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 52.062184][ T4335] System zones: 1-3, 19-19, 35-36 [ 52.077226][ T4331] loop2: p2 p3 p7 [ 52.083905][ T4335] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.162803][ T4339] macsec1: entered promiscuous mode [ 52.168146][ T4339] bridge0: entered promiscuous mode [ 52.203990][ T4339] bridge0: port 3(macsec1) entered blocking state [ 52.210519][ T4339] bridge0: port 3(macsec1) entered disabled state [ 52.242867][ T4339] macsec1: entered allmulticast mode [ 52.248271][ T4339] bridge0: entered allmulticast mode [ 52.286572][ T4339] macsec1: left allmulticast mode [ 52.291780][ T4339] bridge0: left allmulticast mode [ 52.315801][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 52.327856][ T4339] bridge0: left promiscuous mode [ 52.473627][ T4355] netlink: 39 bytes leftover after parsing attributes in process `syz.2.273'. [ 52.589550][ T4369] loop4: detected capacity change from 0 to 128 [ 52.601527][ T4369] syz.4.279: attempt to access beyond end of device [ 52.601527][ T4369] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 52.621129][ T4369] syz.4.279: attempt to access beyond end of device [ 52.621129][ T4369] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 52.634578][ T4369] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 52.645338][ T4369] syz.4.279: attempt to access beyond end of device [ 52.645338][ T4369] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 52.658842][ T4369] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 52.668713][ T4369] syz.4.279: attempt to access beyond end of device [ 52.668713][ T4369] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 52.683099][ T4369] syz.4.279: attempt to access beyond end of device [ 52.683099][ T4369] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 52.696493][ T4369] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 52.707055][ T4369] syz.4.279: attempt to access beyond end of device [ 52.707055][ T4369] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 52.720489][ T4369] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 52.730669][ T4369] syz.4.279: attempt to access beyond end of device [ 52.730669][ T4369] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 52.745423][ T4369] syz.4.279: attempt to access beyond end of device [ 52.745423][ T4369] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 52.758844][ T4369] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 52.786818][ T4369] syz.4.279: attempt to access beyond end of device [ 52.786818][ T4369] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 52.800266][ T4369] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 52.811510][ T4369] syz.4.279: attempt to access beyond end of device [ 52.811510][ T4369] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 52.840915][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.858172][ T4369] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 52.867810][ T4369] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 52.907712][ T4369] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 52.921084][ T4369] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 53.078189][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 53.099741][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 53.272609][ T4416] bridge0: entered promiscuous mode [ 53.280027][ T4416] macsec1: entered promiscuous mode [ 53.287850][ T4416] bridge0: port 3(macsec1) entered blocking state [ 53.294454][ T4416] bridge0: port 3(macsec1) entered disabled state [ 53.310603][ T4416] macsec1: entered allmulticast mode [ 53.316060][ T4416] bridge0: entered allmulticast mode [ 53.324364][ T4416] macsec1: left allmulticast mode [ 53.329453][ T4416] bridge0: left allmulticast mode [ 53.336295][ T4416] bridge0: left promiscuous mode [ 53.415376][ T4428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.427973][ T4431] loop1: detected capacity change from 0 to 128 [ 53.440075][ T4431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 53.469505][ T4428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.481248][ T4431] System zones: 1-3, 19-19, 35-36 [ 53.488803][ T4431] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.537621][ T4428] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.594278][ T4428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.643244][ T4056] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.656288][ T4056] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.667617][ T4056] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.679448][ T4056] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.065937][ T29] kauditd_printk_skb: 1169 callbacks suppressed [ 54.065954][ T29] audit: type=1326 audit(54.048:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aec475be7 code=0x7ffc0000 [ 54.095182][ T29] audit: type=1326 audit(54.048:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aec41ae09 code=0x7ffc0000 [ 54.117770][ T29] audit: type=1326 audit(54.048:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 54.140699][ T29] audit: type=1326 audit(54.048:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aec475be7 code=0x7ffc0000 [ 54.163380][ T29] audit: type=1326 audit(54.048:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aec41ae09 code=0x7ffc0000 [ 54.186039][ T29] audit: type=1326 audit(54.048:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 54.208632][ T29] audit: type=1326 audit(54.048:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aec475be7 code=0x7ffc0000 [ 54.231507][ T29] audit: type=1326 audit(54.048:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aec41ae09 code=0x7ffc0000 [ 54.254083][ T29] audit: type=1326 audit(54.048:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4aec47ec29 code=0x7ffc0000 [ 54.276649][ T29] audit: type=1326 audit(54.078:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aec475be7 code=0x7ffc0000 [ 54.312361][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.529312][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 54.550957][ T4539] bridge0: entered promiscuous mode [ 54.594932][ T4539] macsec1: entered promiscuous mode [ 54.601724][ T4539] bridge0: port 3(macsec1) entered blocking state [ 54.602325][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 54.608228][ T4539] bridge0: port 3(macsec1) entered disabled state [ 54.643398][ T4539] macsec1: entered allmulticast mode [ 54.648835][ T4539] bridge0: entered allmulticast mode [ 54.665229][ T4539] macsec1: left allmulticast mode [ 54.670299][ T4539] bridge0: left allmulticast mode [ 54.705411][ T4539] bridge0: left promiscuous mode [ 55.046638][ T4560] loop2: detected capacity change from 0 to 4096 [ 55.078809][ T4560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.112436][ T4560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.515747][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.579283][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 55.729307][ T4647] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.761827][ T4652] syz.2.325 uses obsolete (PF_INET,SOCK_PACKET) [ 55.795865][ T4647] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.875426][ T4647] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.926761][ T4647] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.483605][ T4731] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.535328][ T4731] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.585773][ T4731] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.614053][ T4737] loop2: detected capacity change from 0 to 128 [ 56.635283][ T4731] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.672279][ T4740] __nla_validate_parse: 1 callbacks suppressed [ 56.672293][ T4740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.332'. [ 56.687630][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 56.704871][ T4004] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.725340][ T4004] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.740751][ T4742] loop4: detected capacity change from 0 to 512 [ 56.747189][ T4004] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.756289][ T4742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.766255][ T4004] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.794003][ T4742] EXT4-fs (loop4): 1 truncate cleaned up [ 56.800098][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.918202][ T4755] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.944780][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.975837][ T4755] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.033133][ T4763] bridge0: entered promiscuous mode [ 57.038858][ T4763] macsec1: entered promiscuous mode [ 57.045112][ T4763] bridge0: port 1(macsec1) entered blocking state [ 57.051608][ T4763] bridge0: port 1(macsec1) entered disabled state [ 57.058395][ T4763] macsec1: entered allmulticast mode [ 57.063741][ T4763] bridge0: entered allmulticast mode [ 57.070416][ T4763] macsec1: left allmulticast mode [ 57.075556][ T4763] bridge0: left allmulticast mode [ 57.082748][ T4763] bridge0: left promiscuous mode [ 57.104523][ T4755] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.166442][ T4755] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.243730][ T4004] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.261885][ T4004] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.262739][ T4772] loop4: detected capacity change from 0 to 128 [ 57.274691][ T4004] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.291816][ T4004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.310190][ T4772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 57.331446][ T4772] System zones: 1-3, 19-19, 35-36 [ 57.340862][ T4772] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.358103][ T4776] loop1: detected capacity change from 0 to 512 [ 57.369386][ T4004] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.378067][ T4004] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.472400][ T4004] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.486275][ T4004] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.522895][ T4776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.696672][ T4776] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.344: invalid indirect mapped block 4294967295 (level 0) [ 57.749104][ T4776] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.344: invalid indirect mapped block 4294967295 (level 1) [ 57.765133][ T4776] EXT4-fs (loop1): 1 orphan inode deleted [ 57.770891][ T4776] EXT4-fs (loop1): 1 truncate cleaned up [ 57.777337][ T4776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.856061][ T4784] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.869023][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.925576][ T4784] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.979917][ T4788] netlink: 'syz.2.348': attribute type 30 has an invalid length. [ 57.990101][ T4784] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.047129][ T4784] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.064528][ T4788] Zero length message leads to an empty skb [ 58.068727][ T4787] loop1: detected capacity change from 0 to 128 [ 58.083572][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.116838][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 58.165777][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 58.174789][ T4794] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 58.186024][ T4794] team0: Port device dummy0 added [ 58.200380][ T4794] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 58.238571][ T4794] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.249596][ T4794] team0: Failed to send options change via netlink (err -105) [ 58.260817][ T4794] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.271434][ T4794] team0: Port device dummy0 removed [ 58.278405][ T4794] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.159109][ T4027] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.170549][ T4004] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.181792][ T4004] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.193462][ T4027] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.221933][ T4801] $Hÿ: renamed from bond0 (while UP) [ 61.243946][ T4801] $Hÿ: entered promiscuous mode [ 61.249074][ T4801] bond_slave_0: entered promiscuous mode [ 61.254825][ T4801] bond_slave_1: entered promiscuous mode [ 61.261098][ T4808] loop4: detected capacity change from 0 to 512 [ 61.279669][ T4806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.291757][ T4808] EXT4-fs: Ignoring removed nobh option [ 61.320016][ T4808] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 61.328831][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 61.328843][ T29] audit: type=1326 audit(61.308:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.379353][ T4808] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.361: invalid indirect mapped block 256 (level 1) [ 61.397773][ T4806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.415160][ T29] audit: type=1326 audit(61.338:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.437861][ T29] audit: type=1326 audit(61.338:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.460536][ T29] audit: type=1326 audit(61.338:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.483407][ T29] audit: type=1326 audit(61.338:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.506146][ T29] audit: type=1326 audit(61.338:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.517753][ T4808] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.361: invalid indirect mapped block 2683928664 (level 1) [ 61.528842][ T29] audit: type=1326 audit(61.338:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.565431][ T29] audit: type=1326 audit(61.338:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.588126][ T29] audit: type=1326 audit(61.338:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.1.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 61.610981][ T29] audit: type=1400 audit(61.338:1774): avc: denied { read } for pid=4811 comm="syz.1.362" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.664177][ T4806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.679498][ T4808] EXT4-fs (loop4): 1 truncate cleaned up [ 61.688926][ T4808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.728125][ T4808] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.361: Invalid block bitmap block 3 in block_group 0 [ 61.749679][ T4808] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.361: Invalid block bitmap block 3 in block_group 0 [ 61.783594][ T4806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.814698][ T4808] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.361: Invalid block bitmap block 3 in block_group 0 [ 61.865303][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.888214][ T4004] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.921369][ T4004] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.936130][ T4004] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.945039][ T4020] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.953406][ T4829] loop0: detected capacity change from 0 to 1024 [ 62.005953][ T4829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.049339][ T4829] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.367: lblock 3 mapped to illegal pblock 3 (length 3) [ 62.085126][ T4829] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 62.097472][ T4829] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.097472][ T4829] [ 62.141342][ T4837] loop2: detected capacity change from 0 to 2048 [ 62.149739][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.199060][ T4837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.567172][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.645039][ T4851] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.373' sets config #0 [ 62.939229][ T4871] loop0: detected capacity change from 0 to 2048 [ 62.995358][ T4871] loop0: p1 < > p4 [ 63.000104][ T4871] loop0: p4 size 8388608 extends beyond EOD, truncated [ 63.024996][ T2995] loop0: p1 < > p4 [ 63.039886][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated [ 63.099081][ T2995] loop0: p1 < > p4 [ 63.113181][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated [ 63.145437][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 63.166405][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 63.576234][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 63.587299][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 63.628306][ T4898] loop0: detected capacity change from 0 to 512 [ 63.647085][ T4898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.698331][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 63.707669][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 63.777114][ T4902] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.834237][ T4898] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.393: corrupted xattr block 95: invalid header [ 63.887562][ T4898] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 63.900867][ T4898] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.393: bg 0: block 7: invalid block bitmap [ 63.982970][ T4898] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 63.992218][ T4898] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.393: invalid indirect mapped block 69888 (level 2) [ 64.017884][ T4898] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.393: corrupted xattr block 95: invalid header [ 64.051934][ T4898] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 64.071507][ T4898] EXT4-fs (loop0): 1 orphan inode deleted [ 64.081883][ T4898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.141042][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 64.199001][ T4898] SELinux: failed to load policy [ 64.224482][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.236628][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 64.280831][ T4923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.310762][ T4925] loop3: detected capacity change from 0 to 164 [ 64.350280][ T4927] netlink: 'syz.0.404': attribute type 12 has an invalid length. [ 64.358283][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 64.369459][ T4927] netlink: 'syz.0.404': attribute type 12 has an invalid length. [ 64.377386][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 64.470776][ T4935] loop3: detected capacity change from 0 to 1024 [ 64.492033][ T4935] EXT4-fs: Ignoring removed bh option [ 64.504125][ T4935] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 64.525366][ T4935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.870858][ T4961] loop4: detected capacity change from 0 to 512 [ 64.879825][ T4961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.891195][ T4961] EXT4-fs (loop4): 1 truncate cleaned up [ 64.897486][ T4961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.975234][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.041229][ T4970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4970 comm=syz.2.414 [ 65.053762][ T4970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4970 comm=syz.2.414 [ 65.454776][ T4990] SELinux: Context @ is not valid (left unmapped). [ 65.488821][ T4990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.513961][ T4997] loop4: detected capacity change from 0 to 4096 [ 65.523643][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.525321][ T4997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.574472][ T4997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.638711][ T5008] pim6reg1: entered promiscuous mode [ 65.644187][ T5008] pim6reg1: entered allmulticast mode [ 65.671487][ T5010] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 65.780549][ T5010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.845125][ T5018] macvlan2: entered promiscuous mode [ 65.850574][ T5018] macvlan2: entered allmulticast mode [ 65.907819][ T5018] bond0: entered promiscuous mode [ 65.914816][ T5018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.946177][ T5018] bond0: left promiscuous mode [ 66.040807][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.368897][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 66.368913][ T29] audit: type=1326 audit(66.348:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.427217][ T29] audit: type=1326 audit(66.378:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.449938][ T29] audit: type=1326 audit(66.378:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.472623][ T29] audit: type=1326 audit(66.378:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.495263][ T29] audit: type=1326 audit(66.378:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.517535][ T29] audit: type=1326 audit(66.378:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.539748][ T29] audit: type=1326 audit(66.378:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.561960][ T29] audit: type=1326 audit(66.378:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.584171][ T29] audit: type=1326 audit(66.378:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.606494][ T29] audit: type=1326 audit(66.388:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8e343fec29 code=0x7ffc0000 [ 66.855397][ T5054] net_ratelimit: 2 callbacks suppressed [ 66.855441][ T5054] openvswitch: netlink: Message has 6 unknown bytes. [ 66.930148][ T5056] loop4: detected capacity change from 0 to 512 [ 66.959858][ T5056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.989096][ T5056] EXT4-fs (loop4): 1 truncate cleaned up [ 66.998771][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.048214][ T5062] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 67.052781][ T5003] syz.3.428 (5003) used greatest stack depth: 7512 bytes left [ 67.057070][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.074106][ T5064] loop0: detected capacity change from 0 to 4096 [ 67.081032][ T5064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.098869][ T5064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.373061][ T5079] bridge: RTM_NEWNEIGH with invalid ether address [ 67.402242][ T5082] loop2: detected capacity change from 0 to 512 [ 67.412626][ T5082] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.422820][ T5082] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.458: bad orphan inode 13 [ 67.424026][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.446332][ T5082] ext4_test_bit(bit=12, block=18) = 1 [ 67.451758][ T5082] is_bad_inode(inode)=0 [ 67.456146][ T5082] NEXT_ORPHAN(inode)=2130706432 [ 67.461023][ T5082] max_ino=32 [ 67.464415][ T5082] i_nlink=1 [ 67.475264][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.492215][ T5082] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 67.549535][ T5082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.458: bg 0: block 248: padding at end of block bitmap is not set [ 67.589932][ T5082] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.458: Failed to acquire dquot type 1 [ 67.615168][ T5095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5095 comm=syz.0.464 [ 67.635195][ T5082] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.708733][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.826878][ T5119] sctp: [Deprecated]: syz.2.474 (pid 5119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.826878][ T5119] Use struct sctp_sack_info instead [ 67.888136][ T5116] loop3: detected capacity change from 0 to 4096 [ 67.920740][ T5116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.929962][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 67.966529][ T5116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.028166][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.072934][ T5132] loop4: detected capacity change from 0 to 128 [ 68.155842][ T5132] bio_check_eod: 74 callbacks suppressed [ 68.155888][ T5132] syz.4.479: attempt to access beyond end of device [ 68.155888][ T5132] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 68.305104][ T5152] loop4: detected capacity change from 0 to 1024 [ 68.312266][ T5152] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 68.322178][ T5152] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 68.333297][ T5152] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 68.345346][ T5152] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #32: comm syz.4.487: iget: special inode unallocated [ 68.358150][ T5152] EXT4-fs (loop4): no journal found [ 68.363364][ T5152] EXT4-fs (loop4): can't get journal size [ 68.371161][ T5152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.392500][ T5152] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.4.487: path /95/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 68.437715][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.605538][ T5168] loop0: detected capacity change from 0 to 128 [ 68.636889][ T5168] syz.0.495: attempt to access beyond end of device [ 68.636889][ T5168] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 68.820290][ T5190] 9pnet: p9_errstr2errno: server reported unknown error [ 68.847036][ T2958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=2958 comm=kworker/1:2 [ 68.860208][ T5192] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 68.921553][ T5196] loop2: detected capacity change from 0 to 1024 [ 68.933171][ T5196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.956459][ T5196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.989201][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.079151][ T5210] netlink: 256 bytes leftover after parsing attributes in process `syz.0.513'. [ 69.109039][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.149218][ T5218] loop1: detected capacity change from 0 to 512 [ 69.158312][ T5220] lo: entered allmulticast mode [ 69.163620][ T5219] lo: left allmulticast mode [ 69.185272][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 69.231396][ T5218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.272192][ T3306] EXT4-fs error (device loop1): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 69.288164][ T5234] loop3: detected capacity change from 0 to 128 [ 69.322995][ T5234] +}[@: attempt to access beyond end of device [ 69.322995][ T5234] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 69.344207][ T3306] EXT4-fs error (device loop1): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 69.366163][ T5240] loop2: detected capacity change from 0 to 512 [ 69.394131][ T5234] +}[@: attempt to access beyond end of device [ 69.394131][ T5234] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 69.421387][ T5240] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.423192][ T5234] +}[@: attempt to access beyond end of device [ 69.423192][ T5234] loop3: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 69.429947][ T5240] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.442374][ T5234] buffer_io_error: 46 callbacks suppressed [ 69.442425][ T5234] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 69.450791][ T5240] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.526: corrupted inode contents [ 69.466868][ T5234] +}[@: attempt to access beyond end of device [ 69.466868][ T5234] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 69.480980][ T5240] EXT4-fs (loop2): Remounting filesystem read-only [ 69.487814][ T5234] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 69.494010][ T5234] +}[@: attempt to access beyond end of device [ 69.494010][ T5234] loop3: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 69.496319][ T5240] EXT4-fs (loop2): 1 truncate cleaned up [ 69.516103][ T4056] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.523395][ T5234] +}[@: attempt to access beyond end of device [ 69.523395][ T5234] loop3: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 69.532127][ T4056] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 69.545019][ T5234] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 69.558501][ T4056] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 69.572041][ T5234] +}[@: attempt to access beyond end of device [ 69.572041][ T5234] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 69.587097][ T5234] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 69.596353][ T5240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.609001][ T5251] loop0: detected capacity change from 0 to 128 [ 69.616644][ T5234] +}[@: attempt to access beyond end of device [ 69.616644][ T5234] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 69.630316][ T5234] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 69.630849][ T5251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.638923][ T5234] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 69.665622][ T5234] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 69.676628][ T4027] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.680247][ T5234] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 69.695907][ T5234] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 69.704499][ T5234] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 69.720028][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.734603][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.758374][ T4027] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.783371][ T5256] atomic_op ffff8881232a0928 conn xmit_atomic 0000000000000000 [ 69.835317][ T4027] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.906464][ T4027] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.917585][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.938457][ T1039] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.955043][ T5274] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.535'. [ 70.053754][ T5278] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 70.060953][ T5278] batman_adv: batadv0: Removing interface: veth1_vlan [ 70.124276][ T4027] bridge_slave_1: left allmulticast mode [ 70.129975][ T4027] bridge_slave_1: left promiscuous mode [ 70.135825][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.150194][ T4027] bridge_slave_0: left allmulticast mode [ 70.156059][ T4027] bridge_slave_0: left promiscuous mode [ 70.161848][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.236373][ T5285] loop0: detected capacity change from 0 to 8192 [ 70.349846][ T4027] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.363595][ T4027] bond_slave_0: left promiscuous mode [ 70.371955][ T4027] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.381492][ T4027] bond_slave_1: left promiscuous mode [ 70.389143][ T4027] $Hÿ (unregistering): Released all slaves [ 70.398313][ T4027] bond0 (unregistering): Released all slaves [ 70.458332][ T4027] hsr_slave_0: left promiscuous mode [ 70.473712][ T4027] hsr_slave_1: left promiscuous mode [ 70.479413][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.486839][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.488448][ T5289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.507181][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.514621][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.519681][ T5289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.531724][ T5301] netlink: 100 bytes leftover after parsing attributes in process `syz.0.544'. [ 70.541303][ T4027] veth1_macvtap: left promiscuous mode [ 70.549099][ T4027] veth0_macvtap: left promiscuous mode [ 70.554916][ T4027] veth1_vlan: left promiscuous mode [ 70.567103][ T4027] veth0_vlan: left promiscuous mode [ 70.574367][ T5307] loop0: detected capacity change from 0 to 128 [ 70.686599][ T4027] team0 (unregistering): Port device team_slave_1 removed [ 70.696566][ T4027] team0 (unregistering): Port device team_slave_0 removed [ 70.733130][ T5310] tipc: Started in network mode [ 70.738095][ T5310] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 70.747339][ T5310] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 70.755653][ T5310] tipc: Enabled bearer , priority 10 [ 70.762563][ T5259] chnl_net:caif_netlink_parms(): no params data found [ 70.822484][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.829800][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.838820][ T5259] bridge_slave_0: entered allmulticast mode [ 70.845450][ T5259] bridge_slave_0: entered promiscuous mode [ 70.852598][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.859815][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.867317][ T5259] bridge_slave_1: entered allmulticast mode [ 70.874093][ T5259] bridge_slave_1: entered promiscuous mode [ 70.894697][ T5259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.906213][ T5259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.943917][ T5259] team0: Port device team_slave_0 added [ 70.950654][ T5259] team0: Port device team_slave_1 added [ 71.004635][ T5259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.011649][ T5259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.037845][ T5259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.053616][ T5259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.060758][ T5259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.086780][ T5259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.088946][ T5344] loop0: detected capacity change from 0 to 128 [ 71.123388][ T5344] FAT-fs (loop0): Directory bread(block 32) failed [ 71.143955][ T5344] FAT-fs (loop0): Directory bread(block 33) failed [ 71.150671][ T5344] FAT-fs (loop0): Directory bread(block 34) failed [ 71.193082][ T5259] hsr_slave_0: entered promiscuous mode [ 71.209872][ T5344] FAT-fs (loop0): Directory bread(block 35) failed [ 71.224169][ T5259] hsr_slave_1: entered promiscuous mode [ 71.246967][ T5344] FAT-fs (loop0): Directory bread(block 36) failed [ 71.253556][ T5344] FAT-fs (loop0): Directory bread(block 37) failed [ 71.263531][ T5344] FAT-fs (loop0): Directory bread(block 38) failed [ 71.271183][ T5344] FAT-fs (loop0): Directory bread(block 39) failed [ 71.311743][ T5344] FAT-fs (loop0): Directory bread(block 40) failed [ 71.322776][ T5344] FAT-fs (loop0): Directory bread(block 41) failed [ 71.377590][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 71.377605][ T29] audit: type=1326 audit(71.358:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.433194][ T5370] loop3: detected capacity change from 0 to 128 [ 71.435746][ T5259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.449990][ T29] audit: type=1326 audit(71.388:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.472825][ T29] audit: type=1326 audit(71.388:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.495592][ T29] audit: type=1326 audit(71.388:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.518307][ T29] audit: type=1326 audit(71.388:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.540952][ T29] audit: type=1326 audit(71.388:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.579148][ T5259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.586801][ T5370] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.616014][ T5259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.643774][ T29] audit: type=1400 audit(71.618:2240): avc: denied { create } for pid=5369 comm="syz.3.562" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.677301][ T5259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.698103][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.741614][ T5259] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.742125][ T29] audit: type=1326 audit(71.718:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.748813][ T5259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.771350][ T29] audit: type=1326 audit(71.718:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.778687][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.801067][ T29] audit: type=1326 audit(71.718:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9fdeec29 code=0x7ffc0000 [ 71.808097][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.852123][ T5398] loop3: detected capacity change from 0 to 512 [ 71.864344][ T5398] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 71.874109][ T3401] tipc: Node number set to 1 [ 71.885765][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.887947][ T5398] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.899593][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.900022][ T5398] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.564: Block bitmap for bg 0 marked uninitialized [ 71.920193][ T5398] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.929224][ T5398] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.564: Block bitmap for bg 0 marked uninitialized [ 71.943184][ T5398] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.952278][ T5398] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.564: Block bitmap for bg 0 marked uninitialized [ 71.966452][ T5398] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.973828][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.983635][ T5398] EXT4-fs (loop3): 1 orphan inode deleted [ 71.990300][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.008624][ T5259] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.034871][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.042071][ T4032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.071577][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.094095][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.101231][ T4014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.112606][ T5413] netlink: 3 bytes leftover after parsing attributes in process `syz.0.569'. [ 72.128013][ T5413] batadv1: entered promiscuous mode [ 72.133360][ T5413] batadv1: entered allmulticast mode [ 72.177733][ T5417] syzkaller0: entered promiscuous mode [ 72.183284][ T5417] syzkaller0: entered allmulticast mode [ 72.296684][ T5259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.310972][ T1039] IPVS: starting estimator thread 0... [ 72.404519][ T5436] IPVS: using max 2352 ests per chain, 117600 per kthread [ 72.549071][ T5467] netlink: 96 bytes leftover after parsing attributes in process `syz.2.578'. [ 72.570059][ T5259] veth0_vlan: entered promiscuous mode [ 72.589861][ T5470] macvlan1: entered promiscuous mode [ 72.599988][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 72.607304][ T5470] ipvlan0: entered promiscuous mode [ 72.616997][ T5470] ipvlan0: left promiscuous mode [ 72.622261][ T5470] macvlan1: left promiscuous mode [ 72.636897][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 72.653353][ T5259] veth1_vlan: entered promiscuous mode [ 72.696130][ T5259] veth0_macvtap: entered promiscuous mode [ 72.715061][ T5259] veth1_macvtap: entered promiscuous mode [ 72.756074][ T5259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.786134][ T5259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.911799][ T5487] netlink: 240 bytes leftover after parsing attributes in process `syz.0.584'. [ 73.065431][ T4055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.081359][ T5489] loop0: detected capacity change from 0 to 128 [ 73.094101][ T4055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.135415][ T5489] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.151589][ T4055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.174060][ T4020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.227140][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.413418][ T5499] tipc: Started in network mode [ 73.418577][ T5499] tipc: Node identity ac14140f, cluster identity 4711 [ 73.426556][ T5499] tipc: New replicast peer: 255.255.255.255 [ 73.432600][ T5499] tipc: Enabled bearer , priority 10 [ 73.557302][ T5505] loop5: detected capacity change from 0 to 128 [ 73.608962][ T5507] vlan2: entered allmulticast mode [ 73.632660][ T5507] dummy0: entered allmulticast mode [ 73.879431][ T5521] loop4: detected capacity change from 0 to 2048 [ 74.175863][ T5521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.189917][ T5541] loop0: detected capacity change from 0 to 512 [ 74.210137][ T5542] loop5: detected capacity change from 0 to 512 [ 74.220998][ T5521] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.264031][ T5521] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 74.270163][ T5541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.276427][ T5521] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.276427][ T5521] [ 74.298655][ T5521] EXT4-fs (loop4): Total free blocks count 0 [ 74.304723][ T5521] EXT4-fs (loop4): Free/Dirty block details [ 74.310624][ T5521] EXT4-fs (loop4): free_blocks=2415919104 [ 74.316373][ T5521] EXT4-fs (loop4): dirty_blocks=32 [ 74.321548][ T5521] EXT4-fs (loop4): Block reservation details [ 74.327652][ T5521] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 74.371211][ T5542] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #12: comm syz.5.603: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 74.411393][ T5542] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.603: couldn't read orphan inode 12 (err -117) [ 74.429861][ T5542] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.466532][ T5542] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #2: comm syz.5.603: Directory hole found for htree leaf block 0 [ 74.543814][ T36] tipc: Node number set to 2886997007 [ 74.615179][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.634129][ T5259] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 74.797059][ T5571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.607'. [ 75.295425][ T5579] bridge_slave_1: left allmulticast mode [ 75.301138][ T5579] bridge_slave_1: left promiscuous mode [ 75.306853][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.323092][ T5579] bridge_slave_0: left allmulticast mode [ 75.328867][ T5579] bridge_slave_0: left promiscuous mode [ 75.334582][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.366001][ T5541] syz.0.602 (5541) used greatest stack depth: 6168 bytes left [ 75.381765][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.440223][ T5588] loop5: detected capacity change from 0 to 512 [ 75.449176][ T5588] EXT4-fs: Ignoring removed oldalloc option [ 75.468747][ T5588] EXT4-fs (loop5): 1 truncate cleaned up [ 75.484423][ T5588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.509647][ T5596] loop2: detected capacity change from 0 to 1024 [ 75.526988][ T5596] EXT4-fs: Ignoring removed nobh option [ 75.532642][ T5596] EXT4-fs: inline encryption not supported [ 75.545440][ T5596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.565124][ T5598] vlan2: entered allmulticast mode [ 75.570273][ T5598] dummy0: entered allmulticast mode [ 75.578962][ T5596] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.621: Allocating blocks 497-513 which overlap fs metadata [ 75.598483][ T5596] EXT4-fs (loop2): pa ffff888106a21770: logic 16, phys. 129, len 24 [ 75.606601][ T5596] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 75.632130][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.656480][ T5605] loop2: detected capacity change from 0 to 1024 [ 75.665612][ T5605] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.624: Failed to acquire dquot type 0 [ 75.678011][ T5605] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 75.692848][ T5605] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.624: corrupted inode contents [ 75.705321][ T5605] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.624: mark_inode_dirty error [ 75.716990][ T5605] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.624: corrupted inode contents [ 75.729776][ T5605] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.624: mark_inode_dirty error [ 75.741313][ T5605] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.624: corrupted inode contents [ 75.743312][ T5609] tipc: Started in network mode [ 75.754532][ T5605] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 75.758197][ T5609] tipc: Node identity ac14140f, cluster identity 4711 [ 75.774100][ T5605] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.624: corrupted inode contents [ 75.786299][ T5605] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.624: mark_inode_dirty error [ 75.797563][ T5609] tipc: New replicast peer: 255.255.255.255 [ 75.798736][ T5605] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 75.803701][ T5609] tipc: Enabled bearer , priority 10 [ 75.823507][ T5611] netlink: 240 bytes leftover after parsing attributes in process `syz.3.623'. [ 75.833063][ T5605] EXT4-fs (loop2): 1 truncate cleaned up [ 75.849750][ T5605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.880787][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.944531][ T5618] loop3: detected capacity change from 0 to 512 [ 75.975474][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.993030][ T5618] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #12: comm syz.3.637: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 76.060308][ T5632] bridge_slave_1: left allmulticast mode [ 76.066099][ T5632] bridge_slave_1: left promiscuous mode [ 76.071957][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.087481][ T5618] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.637: couldn't read orphan inode 12 (err -117) [ 76.105268][ T5632] bridge_slave_0: left allmulticast mode [ 76.110974][ T5632] bridge_slave_0: left promiscuous mode [ 76.116730][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.125352][ T5618] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.142054][ T5618] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.637: Directory hole found for htree leaf block 0 [ 76.168160][ T3313] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 76.252029][ T5635] syzkaller0: entered promiscuous mode [ 76.257763][ T5635] syzkaller0: entered allmulticast mode [ 76.290849][ T5643] loop4: detected capacity change from 0 to 1024 [ 76.303438][ T5643] EXT4-fs: Ignoring removed nobh option [ 76.309161][ T5643] EXT4-fs: inline encryption not supported [ 76.335437][ T5643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.430286][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.442793][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.502410][ T5643] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.635: Allocating blocks 497-513 which overlap fs metadata [ 76.544146][ T5643] EXT4-fs (loop4): pa ffff88810048d150: logic 16, phys. 129, len 24 [ 76.552272][ T5643] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 76.614046][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.653420][ T5658] netlink: 240 bytes leftover after parsing attributes in process `syz.2.639'. [ 76.870381][ T5670] vlan0: entered allmulticast mode [ 76.885575][ T5670] dummy0: entered allmulticast mode [ 76.900159][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 76.900175][ T29] audit: type=1326 audit(76.878:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 76.929515][ T3387] tipc: Node number set to 2886997007 [ 76.937024][ T29] audit: type=1326 audit(76.918:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 76.959789][ T29] audit: type=1326 audit(76.918:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 76.982525][ T29] audit: type=1326 audit(76.918:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.005312][ T29] audit: type=1326 audit(76.918:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.028117][ T29] audit: type=1326 audit(76.918:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.050993][ T29] audit: type=1326 audit(76.918:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.073714][ T29] audit: type=1326 audit(76.918:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.096490][ T29] audit: type=1326 audit(76.918:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.160729][ T5679] loop0: detected capacity change from 0 to 512 [ 77.192396][ T29] audit: type=1326 audit(77.088:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe9c280ec29 code=0x7ffc0000 [ 77.193856][ T5679] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.457855][ T5679] EXT4-fs (loop0): 1 truncate cleaned up [ 77.464958][ T5679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.943467][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.145902][ T5707] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.657'. [ 78.155167][ T5707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.657'. [ 78.681106][ T5714] loop2: detected capacity change from 0 to 512 [ 78.703760][ T5714] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.761489][ T5710] syzkaller0: entered promiscuous mode [ 78.767344][ T5710] syzkaller0: entered allmulticast mode [ 78.848677][ T5714] EXT4-fs (loop2): 1 truncate cleaned up [ 78.861613][ T5714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.927126][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 78.958476][ T5721] loop4: detected capacity change from 0 to 512 [ 78.972688][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 78.999928][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.020714][ T5721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.185775][ T5731] loop2: detected capacity change from 0 to 2048 [ 79.238266][ T5731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 79.271690][ T5731] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.286802][ T5731] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 79.299189][ T5731] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.299189][ T5731] [ 79.308881][ T5731] EXT4-fs (loop2): Total free blocks count 0 [ 79.314983][ T5731] EXT4-fs (loop2): Free/Dirty block details [ 79.320927][ T5731] EXT4-fs (loop2): free_blocks=2415919104 [ 79.326786][ T5731] EXT4-fs (loop2): dirty_blocks=32 [ 79.331919][ T5731] EXT4-fs (loop2): Block reservation details [ 79.337970][ T5731] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 79.421385][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 79.437876][ T5748] bond_slave_1: mtu less than device minimum [ 79.467021][ T5750] $Hÿ: renamed from bond0 (while UP) [ 79.497230][ T5750] $Hÿ: entered promiscuous mode [ 79.502546][ T5750] bond_slave_0: entered promiscuous mode [ 79.508532][ T5750] bond_slave_1: entered promiscuous mode [ 79.578845][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 79.601263][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 79.721432][ T5765] loop2: detected capacity change from 0 to 1024 [ 79.786126][ T5765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.819913][ T5765] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.692: lblock 3 mapped to illegal pblock 3 (length 3) [ 79.847378][ T5775] netlink: 'syz.3.685': attribute type 21 has an invalid length. [ 79.862397][ T5765] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 79.874853][ T5765] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.874853][ T5765] [ 79.903856][ T5776] netlink: 240 bytes leftover after parsing attributes in process `syz.5.681'. [ 79.913305][ T5775] netlink: 156 bytes leftover after parsing attributes in process `syz.3.685'. [ 79.922385][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 80.008916][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.068560][ T5783] loop5: detected capacity change from 0 to 1024 [ 80.104197][ T5783] EXT4-fs: Ignoring removed bh option [ 80.109663][ T5783] EXT4-fs: inline encryption not supported [ 80.130304][ T5783] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.151502][ T5783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 80.165383][ T5783] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.690: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.193881][ T5783] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.690: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.208950][ T5783] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.690: Failed to acquire dquot type 0 [ 80.220543][ T5783] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 80.233701][ T5783] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.690: mark_inode_dirty error [ 80.245814][ T5783] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 80.256268][ T5783] EXT4-fs (loop5): 1 orphan inode deleted [ 80.262405][ T5783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.283950][ T5459] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:68: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.345331][ T5459] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:68: Failed to release dquot type 0 [ 80.390807][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.403849][ T5259] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 80.421707][ T5795] loop0: detected capacity change from 0 to 512 [ 80.435609][ T5795] EXT4-fs: Ignoring removed nobh option [ 80.452653][ T5259] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 80.468720][ T5795] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 80.477756][ T5259] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 80.543912][ T5795] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.696: invalid indirect mapped block 256 (level 1) [ 80.566856][ T5795] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.696: invalid indirect mapped block 2683928664 (level 1) [ 80.630839][ T5795] EXT4-fs (loop0): 1 truncate cleaned up [ 80.650700][ T5795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.710743][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.711102][ T5795] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.696: Invalid block bitmap block 3 in block_group 0 [ 80.742719][ T5795] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.696: Invalid block bitmap block 3 in block_group 0 [ 80.757364][ T5795] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.696: Invalid block bitmap block 3 in block_group 0 [ 80.773040][ T5809] loop3: detected capacity change from 0 to 1024 [ 80.773898][ T5807] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 80.819366][ T5807] team0: Port device dummy0 added [ 80.828679][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.841406][ T5809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.859047][ T5807] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 80.874297][ T5807] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 80.903309][ T5807] team0: Failed to send options change via netlink (err -105) [ 80.914370][ T5807] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 80.916344][ T5809] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.700: lblock 3 mapped to illegal pblock 3 (length 3) [ 80.927321][ T5807] team0: Port device dummy0 removed [ 80.938535][ T5809] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 80.954552][ T5809] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.954552][ T5809] [ 80.967104][ T5807] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 80.995014][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.097750][ T5836] bond_slave_1: mtu less than device minimum [ 81.171324][ T5845] loop2: detected capacity change from 0 to 1024 [ 81.192119][ T5845] EXT4-fs: Ignoring removed orlov option [ 81.227759][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.270995][ T5857] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.714'. [ 81.280173][ T5857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 81.389898][ T5863] netlink: 'syz.4.721': attribute type 12 has an invalid length. [ 81.397803][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 81.417043][ T4029] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.425494][ T4029] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.434156][ T5863] netlink: 'syz.4.721': attribute type 12 has an invalid length. [ 81.441905][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 81.454607][ T4029] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.463325][ T4029] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.570895][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.591274][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 81.601820][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 81.904027][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 81.904040][ T29] audit: type=1326 audit(81.888:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a34ae5be7 code=0x7ffc0000 [ 81.932868][ T29] audit: type=1326 audit(81.888:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a34a8ae09 code=0x7ffc0000 [ 81.955562][ T29] audit: type=1326 audit(81.888:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a34aeec29 code=0x7ffc0000 [ 81.964732][ T5895] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.984508][ T29] audit: type=1326 audit(81.968:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a34ae5be7 code=0x7ffc0000 [ 82.008052][ T29] audit: type=1326 audit(81.968:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a34a8ae09 code=0x7ffc0000 [ 82.030737][ T29] audit: type=1326 audit(81.968:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a34aeec29 code=0x7ffc0000 [ 82.164108][ T29] audit: type=1326 audit(82.048:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a34ae5be7 code=0x7ffc0000 [ 82.187015][ T29] audit: type=1326 audit(82.048:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a34a8ae09 code=0x7ffc0000 [ 82.209909][ T29] audit: type=1326 audit(82.048:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a34aeec29 code=0x7ffc0000 [ 82.232404][ T29] audit: type=1326 audit(82.068:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.5.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a34ae5be7 code=0x7ffc0000 [ 82.381031][ T5926] loop5: detected capacity change from 0 to 1024 [ 82.391111][ T5926] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.742: Failed to acquire dquot type 0 [ 82.402803][ T5926] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 82.417725][ T5926] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.742: corrupted inode contents [ 82.429842][ T5926] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.742: mark_inode_dirty error [ 82.441566][ T5926] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.742: corrupted inode contents [ 82.454354][ T5926] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.742: mark_inode_dirty error [ 82.465709][ T5926] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.742: corrupted inode contents [ 82.477938][ T5926] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 82.486684][ T5926] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.742: corrupted inode contents [ 82.498780][ T5926] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.742: mark_inode_dirty error [ 82.510002][ T5926] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 82.519802][ T5926] EXT4-fs (loop5): 1 truncate cleaned up [ 82.526144][ T5926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.555268][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.581550][ T5934] loop5: detected capacity change from 0 to 1024 [ 82.592096][ T5934] EXT4-fs: Ignoring removed orlov option [ 82.601140][ T5934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.837492][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.970189][ T5944] loop3: detected capacity change from 0 to 512 [ 82.977650][ T5944] EXT4-fs: Ignoring removed nobh option [ 82.995595][ T5944] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 83.010913][ T5944] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.746: invalid indirect mapped block 256 (level 1) [ 83.025153][ T5944] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.746: invalid indirect mapped block 2683928664 (level 1) [ 83.043981][ T5944] EXT4-fs (loop3): 1 truncate cleaned up [ 83.050367][ T5944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.068735][ T5944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.746: Invalid block bitmap block 3 in block_group 0 [ 83.082527][ T5944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.746: Invalid block bitmap block 3 in block_group 0 [ 83.097149][ T5944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.746: Invalid block bitmap block 3 in block_group 0 [ 83.125771][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.186212][ T5954] netlink: 'syz.4.749': attribute type 21 has an invalid length. [ 83.204723][ T5954] netlink: 156 bytes leftover after parsing attributes in process `syz.4.749'. [ 83.228656][ T5956] loop0: detected capacity change from 0 to 512 [ 83.255420][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.256550][ T5960] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 83.282176][ T5958] loop4: detected capacity change from 0 to 2048 [ 83.313060][ T5960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.323229][ T5958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.416672][ T5960] macvlan2: entered promiscuous mode [ 83.422840][ T5960] macvlan2: entered allmulticast mode [ 83.466806][ T5960] bond1: entered promiscuous mode [ 83.478019][ T5960] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.501159][ T5960] bond1: left promiscuous mode [ 83.570026][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.789561][ T5996] loop3: detected capacity change from 0 to 1024 [ 83.804341][ T5996] EXT4-fs: Ignoring removed nobh option [ 83.809953][ T5996] EXT4-fs: inline encryption not supported [ 83.847912][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.900448][ T5996] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.767: Allocating blocks 385-513 which overlap fs metadata [ 83.920212][ T5996] EXT4-fs (loop3): pa ffff88810048d2a0: logic 16, phys. 129, len 24 [ 83.928430][ T5996] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 83.952754][ T5996] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 83.965094][ T5996] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.965094][ T5996] [ 83.974925][ T5996] EXT4-fs (loop3): Total free blocks count 0 [ 83.980959][ T5996] EXT4-fs (loop3): Free/Dirty block details [ 83.986981][ T5996] EXT4-fs (loop3): free_blocks=128 [ 83.992114][ T5996] EXT4-fs (loop3): dirty_blocks=0 [ 83.997183][ T5996] EXT4-fs (loop3): Block reservation details [ 84.003199][ T5996] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 84.089410][ T5955] syz.0.752 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 84.100444][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.0.752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.100476][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.100544][ T5955] Call Trace: [ 84.100553][ T5955] [ 84.100562][ T5955] __dump_stack+0x1d/0x30 [ 84.100589][ T5955] dump_stack_lvl+0xe8/0x140 [ 84.100610][ T5955] dump_stack+0x15/0x1b [ 84.100626][ T5955] dump_header+0x81/0x220 [ 84.100661][ T5955] oom_kill_process+0x342/0x400 [ 84.100719][ T5955] out_of_memory+0x979/0xb80 [ 84.100759][ T5955] try_charge_memcg+0x5e6/0x9e0 [ 84.100790][ T5955] charge_memcg+0x51/0xc0 [ 84.100808][ T5955] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 84.100841][ T5955] __read_swap_cache_async+0x1df/0x350 [ 84.100888][ T5955] swap_cluster_readahead+0x277/0x3e0 [ 84.100935][ T5955] swapin_readahead+0xde/0x6f0 [ 84.101083][ T5955] ? __filemap_get_folio+0x4f7/0x6b0 [ 84.101112][ T5955] ? swap_cache_get_folio+0x77/0x200 [ 84.101189][ T5955] do_swap_page+0x301/0x2430 [ 84.101220][ T5955] ? css_rstat_updated+0xb7/0x240 [ 84.101260][ T5955] ? __pfx_default_wake_function+0x10/0x10 [ 84.101379][ T5955] handle_mm_fault+0x9a5/0x2c20 [ 84.101423][ T5955] do_user_addr_fault+0x636/0x1090 [ 84.101468][ T5955] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 84.101537][ T5955] exc_page_fault+0x62/0xa0 [ 84.101643][ T5955] asm_exc_page_fault+0x26/0x30 [ 84.101667][ T5955] RIP: 0033:0x7fe9c26cd9ef [ 84.101686][ T5955] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 22 46 37 00 89 f0 4c 8d 05 19 26 37 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 84.101707][ T5955] RSP: 002b:00007ffe72708038 EFLAGS: 00010202 [ 84.101726][ T5955] RAX: 00000000844aa12f RBX: 00007fe9c3585720 RCX: 0000000000000000 [ 84.101890][ T5955] RDX: 000000000000012f RSI: ffffffff844aa12f RDI: 0000000000000003 [ 84.101904][ T5955] RBP: ffffffff844aa12f R08: 00007fe9c2a40000 R09: 00007fe9c2a42000 [ 84.101915][ T5955] R10: 00000000844aa133 R11: 0000000000000003 R12: 0000000000000003 [ 84.101938][ T5955] R13: 0000000000000000 R14: ffffffff844aa845 R15: 0000000000000000 [ 84.101952][ T5955] ? __x64_sys_sendmsg+0x25/0x160 [ 84.101986][ T5955] ? ____sys_sendmsg+0x13f/0x4e0 [ 84.102037][ T5955] ? ____sys_sendmsg+0x13f/0x4e0 [ 84.102068][ T5955] [ 84.102098][ T5955] memory: usage 307200kB, limit 307200kB, failcnt 152 [ 84.333442][ T5955] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 84.341375][ T5955] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 84.348691][ T5955] Memory cgroup stats for /syz0: [ 84.348970][ T5955] cache 8192 [ 84.357177][ T5955] rss 0 [ 84.359954][ T5955] shmem 0 [ 84.362889][ T5955] mapped_file 0 [ 84.366651][ T5955] dirty 0 [ 84.369600][ T5955] writeback 0 [ 84.372889][ T5955] workingset_refault_anon 113 [ 84.377596][ T5955] workingset_refault_file 760 [ 84.382279][ T5955] swap 438272 [ 84.385654][ T5955] swapcached 24576 [ 84.389441][ T5955] pgpgin 39402 [ 84.392811][ T5955] pgpgout 39394 [ 84.396296][ T5955] pgfault 41718 [ 84.399758][ T5955] pgmajfault 71 [ 84.403212][ T5955] inactive_anon 24576 [ 84.407208][ T5955] active_anon 0 [ 84.410757][ T5955] inactive_file 8192 [ 84.414667][ T5955] active_file 0 [ 84.418135][ T5955] unevictable 0 [ 84.421593][ T5955] hierarchical_memory_limit 314572800 [ 84.427031][ T5955] hierarchical_memsw_limit 9223372036854771712 [ 84.433199][ T5955] total_cache 8192 [ 84.436969][ T5955] total_rss 0 [ 84.440266][ T5955] total_shmem 0 [ 84.443768][ T5955] total_mapped_file 0 [ 84.447770][ T5955] total_dirty 0 [ 84.451225][ T5955] total_writeback 0 [ 84.455107][ T5955] total_workingset_refault_anon 113 [ 84.460333][ T5955] total_workingset_refault_file 760 [ 84.465616][ T5955] total_swap 438272 [ 84.469432][ T5955] total_swapcached 24576 [ 84.473734][ T5955] total_pgpgin 39402 [ 84.477639][ T5955] total_pgpgout 39394 [ 84.481681][ T5955] total_pgfault 41718 [ 84.485683][ T5955] total_pgmajfault 71 [ 84.489792][ T5955] total_inactive_anon 24576 [ 84.494326][ T5955] total_active_anon 0 [ 84.498315][ T5955] total_inactive_file 8192 [ 84.502751][ T5955] total_active_file 0 [ 84.506869][ T5955] total_unevictable 0 [ 84.510918][ T5955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.752,pid=5955,uid=0 [ 84.525905][ T5955] Memory cgroup out of memory: Killed process 5955 (syz.0.752) total-vm:95940kB, anon-rss:1072kB, file-rss:22480kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 84.865107][ T6031] loop5: detected capacity change from 0 to 512 [ 84.877885][ T6031] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.780: bad orphan inode 11862016 [ 84.907779][ T6031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.929607][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.009351][ T6038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.780: corrupted inode contents [ 85.021662][ T6038] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #19: comm syz.5.780: mark_inode_dirty error [ 85.026591][ T6041] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.033287][ T6038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.780: corrupted inode contents [ 85.052853][ T6038] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.780: mark_inode_dirty error [ 85.065226][ T6038] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.780: mark inode dirty (error -117) [ 85.065380][ T6040] loop3: detected capacity change from 0 to 1024 [ 85.078992][ T6038] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 85.093628][ T6040] EXT4-fs: Ignoring removed orlov option [ 85.112122][ T6043] pim6reg1: entered promiscuous mode [ 85.117525][ T6043] pim6reg1: entered allmulticast mode [ 85.136118][ T5259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 85.139107][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.306145][ T6057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6057 comm=syz.5.791 [ 85.398081][ T6064] pim6reg1: entered promiscuous mode [ 85.403534][ T6064] pim6reg1: entered allmulticast mode [ 85.457032][ T6067] loop2: detected capacity change from 0 to 512 [ 85.489236][ T6067] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.509995][ T6067] EXT4-fs (loop2): 1 truncate cleaned up [ 85.523303][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.593962][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.604607][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.684677][ T6090] loop4: detected capacity change from 0 to 512 [ 85.704077][ T6090] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.717742][ T6090] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.804: bad orphan inode 13 [ 85.742331][ T6090] ext4_test_bit(bit=12, block=18) = 1 [ 85.747848][ T6090] is_bad_inode(inode)=0 [ 85.752036][ T6090] NEXT_ORPHAN(inode)=2130706432 [ 85.756963][ T6090] max_ino=32 [ 85.760261][ T6090] i_nlink=1 [ 85.800844][ T6096] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.834333][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.879060][ T6098] loop2: detected capacity change from 0 to 1024 [ 85.893542][ T6098] EXT4-fs: Ignoring removed bh option [ 85.903469][ T6090] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 85.914638][ T6098] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 85.944558][ T6090] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.804: bg 0: block 248: padding at end of block bitmap is not set [ 85.969299][ T6090] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.804: Failed to acquire dquot type 1 [ 85.981989][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.019863][ T6090] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.118953][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.385135][ T6129] pim6reg1: entered promiscuous mode [ 86.390550][ T6129] pim6reg1: entered allmulticast mode [ 86.483270][ T6133] loop3: detected capacity change from 0 to 128 [ 86.608508][ T6133] bio_check_eod: 33 callbacks suppressed [ 86.608529][ T6133] syz.3.820: attempt to access beyond end of device [ 86.608529][ T6133] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 86.682853][ T6141] __nla_validate_parse: 3 callbacks suppressed [ 86.682973][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 86.792229][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.890010][ T6150] loop0: detected capacity change from 0 to 1024 [ 86.904558][ T6150] EXT4-fs: Ignoring removed nobh option [ 86.910187][ T6150] EXT4-fs: inline encryption not supported [ 86.940248][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.004842][ T6150] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.829: Allocating blocks 385-513 which overlap fs metadata [ 87.040662][ T6150] EXT4-fs (loop0): pa ffff888106a21850: logic 16, phys. 129, len 24 [ 87.048755][ T6150] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 87.084567][ T6150] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 87.096842][ T6150] EXT4-fs (loop0): This should not happen!! Data will be lost [ 87.096842][ T6150] [ 87.106588][ T6150] EXT4-fs (loop0): Total free blocks count 0 [ 87.112598][ T6150] EXT4-fs (loop0): Free/Dirty block details [ 87.118595][ T6150] EXT4-fs (loop0): free_blocks=128 [ 87.123812][ T6150] EXT4-fs (loop0): dirty_blocks=0 [ 87.128860][ T6150] EXT4-fs (loop0): Block reservation details [ 87.135124][ T6150] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 87.148778][ T6170] loop5: detected capacity change from 0 to 128 [ 87.208931][ T6170] syz.5.836: attempt to access beyond end of device [ 87.208931][ T6170] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 87.226418][ T6172] loop0: detected capacity change from 0 to 1024 [ 87.238140][ T6172] EXT4-fs: Ignoring removed bh option [ 87.250063][ T6172] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 87.278220][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.292612][ T6178] loop2: detected capacity change from 0 to 128 [ 87.302478][ T6178] syz.2.841: attempt to access beyond end of device [ 87.302478][ T6178] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 87.355623][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 87.368646][ T6186] syz_tun: entered allmulticast mode [ 87.384629][ T6185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.397692][ T6186] dvmrp1: entered allmulticast mode [ 87.415669][ T6183] syz_tun: left allmulticast mode [ 87.474099][ T6185] macvlan2: entered promiscuous mode [ 87.479548][ T6185] macvlan2: entered allmulticast mode [ 87.486906][ T6185] bond2: (slave macvlan2): Opening slave failed [ 87.585888][ T6187] ================================================================== [ 87.594127][ T6187] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 87.602414][ T6187] [ 87.604755][ T6187] write to 0xffff88811a45b6ac of 4 bytes by task 6172 on cpu 1: [ 87.612400][ T6187] xas_set_mark+0x12b/0x140 [ 87.616937][ T6187] __folio_start_writeback+0x1dd/0x440 [ 87.622435][ T6187] ext4_bio_write_folio+0x5ad/0x9f0 [ 87.627663][ T6187] mpage_process_page_bufs+0x4a1/0x620 [ 87.633155][ T6187] mpage_prepare_extent_to_map+0x786/0xc00 [ 87.638997][ T6187] ext4_do_writepages+0xa05/0x2750 [ 87.644149][ T6187] ext4_writepages+0x176/0x300 [ 87.648931][ T6187] do_writepages+0x1c3/0x310 [ 87.653537][ T6187] file_write_and_wait_range+0x156/0x2c0 [ 87.659195][ T6187] generic_buffers_fsync_noflush+0x45/0x120 [ 87.665112][ T6187] ext4_sync_file+0x1ab/0x690 [ 87.669803][ T6187] vfs_fsync_range+0x10a/0x130 [ 87.674582][ T6187] ext4_buffered_write_iter+0x34f/0x3c0 [ 87.680155][ T6187] ext4_file_write_iter+0xdbf/0xf00 [ 87.685384][ T6187] iter_file_splice_write+0x666/0xa60 [ 87.690780][ T6187] direct_splice_actor+0x156/0x2a0 [ 87.695909][ T6187] splice_direct_to_actor+0x312/0x680 [ 87.701300][ T6187] do_splice_direct+0xda/0x150 [ 87.706084][ T6187] do_sendfile+0x380/0x650 [ 87.710537][ T6187] __x64_sys_sendfile64+0x105/0x150 [ 87.715766][ T6187] x64_sys_call+0x2bb0/0x2ff0 [ 87.720575][ T6187] do_syscall_64+0xd2/0x200 [ 87.725109][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.731040][ T6187] [ 87.733369][ T6187] read to 0xffff88811a45b6ac of 4 bytes by task 6187 on cpu 0: [ 87.740918][ T6187] filemap_write_and_wait_range+0xfc/0x340 [ 87.746769][ T6187] filemap_invalidate_pages+0xa4/0x1a0 [ 87.752240][ T6187] kiocb_invalidate_pages+0x6e/0x80 [ 87.757452][ T6187] __iomap_dio_rw+0x5d4/0x1250 [ 87.762244][ T6187] iomap_dio_rw+0x40/0x90 [ 87.766589][ T6187] ext4_file_write_iter+0xad9/0xf00 [ 87.771813][ T6187] iter_file_splice_write+0x666/0xa60 [ 87.777202][ T6187] direct_splice_actor+0x156/0x2a0 [ 87.782331][ T6187] splice_direct_to_actor+0x312/0x680 [ 87.787714][ T6187] do_splice_direct+0xda/0x150 [ 87.792497][ T6187] do_sendfile+0x380/0x650 [ 87.796939][ T6187] __x64_sys_sendfile64+0x105/0x150 [ 87.802180][ T6187] x64_sys_call+0x2bb0/0x2ff0 [ 87.806874][ T6187] do_syscall_64+0xd2/0x200 [ 87.811402][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.817312][ T6187] [ 87.819641][ T6187] value changed: 0x0a000021 -> 0x04000021 [ 87.825365][ T6187] [ 87.827696][ T6187] Reported by Kernel Concurrency Sanitizer on: [ 87.833854][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.0.838 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.843498][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.853568][ T6187] ================================================================== [ 88.118915][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.