last executing test programs: 2.557128667s ago: executing program 4 (id=2076): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.37887791s ago: executing program 0 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, r6, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.104197133s ago: executing program 4 (id=2079): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.856310277s ago: executing program 2 (id=2082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) close(0xffffffffffffffff) time(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40040600) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.855376037s ago: executing program 0 (id=2092): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 1.795971487s ago: executing program 0 (id=2083): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.795320017s ago: executing program 4 (id=2084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x1000000) 1.55684562s ago: executing program 2 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='N', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x24040040) symlinkat(&(0x7f0000000580)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 1.470928782s ago: executing program 2 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002000000000000800000000850000000f0000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.447225832s ago: executing program 2 (id=2094): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 1.302486313s ago: executing program 3 (id=2097): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) 1.274883804s ago: executing program 1 (id=2098): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x2, 0x6, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x2008c014) 1.190985965s ago: executing program 1 (id=2099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) close(0xffffffffffffffff) time(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40040600) syz_read_part_table(0x618, &(0x7f0000002200)="$eJzs3D+IFGcUAPC3dzc7dwqehUWwiWctBMXSK6LsbQwGZE0IHBb5iwhXXeBgQxY3eEVyheIWYplGApviXKvoFVY5FFIHsTAIW9gETBNiipsws3O3GzgOEjaE4O9XfN/bnTfvzQfTvgn+1yYiKaMsLbY3PtozP5sdxu14r1tbOJtlWfZuRCUuRhJzyYFeRExF9G6NVI2jEbF/pM7tb/ZtfP3rW0n3yYVktH470jiY51YjL1ma2e1R0r99WMZufX5z9urqcv1a/qPe6m+9H3HnRa1x79xapzeZnPkk//9KxMMyf6pYZya27/9wKv5yZQ9fDsPKaP/tl+Py43qrf6v77PjW4frk95dOvTyycf3BiYiVvPL5KF72oeo/P/Oo9fnNrFT0X5m7sdhpnT5299DNk837jxrPJ38vLw9aToynLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/5L1fFmtxrXm/OXH9Vb/q59+fOfOi1rj3rm1Tu/t6pmnlUHewzJ/qtw/i2Z8HklELMVSfBrLu5d/bSc6sBMtVkb7z2/OXl1drg/6/7Ev4tnxrcP17sylUy8XNq4/OFFkVWI63ybGevRd+rf6K3M3Fjut08fuHrp5snn/UeP55CBvKY2Pi+NGRDr+xwAAAAAAAAAAAAAAAAAAAOAVV1s4e+T8m42DeXxxOiJ++aKYss/Sme+imLwfOFruT9PBKP/t6cG3ALpPLvxW/eCHtZ/Lofh2pNGOiP3fJhHx+k6fK8W6/fWASIaV+S/9GQAA///p7o1q") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.190761705s ago: executing program 2 (id=2100): unshare(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x1, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)='sy\x8akI,\xb3\f6L\xcb\xe7\xbd\x11\xa8\x052\x94.\xcf\xc62s\xf6ll\x84]\xe1\x81=\xf3\x91_m)\x81>\xab>\xaf6\x82n\x80b\xc5\t38%\xab\xdd\"4e9\xbfp\xb9\x920d\xc8S\xd0\x80\x0f\x1f\a\xac\x0f\x87|:\xee\x04\x1ba\xa5w\x18\xa1\x1c\xb15\xca\xb6P\xa7\re`Z\x8a\x8bWsI\xf4s8 \xaa\x99\xea\xcb\xb4\x83\a\t\xc6\xcf\xc5\xed\x1d=a%\xe8\x9e9\x12u\x9c\x13~\x97\xe3\x9c\x03L\xe0i\x13~}d\xd0\x82|\xe1B6d\xcaMj\x03\xb2l\x97\xce\\b\xc702\xb5\x1b\xc9V\x95Gd0\xeb\xa0\xcai\x1b\xcf\xba\xe2\xa0\xc1\xa7\x0e\xc7D\xc9\x8d\xdfk\x7fTwX\xaaaq\xfe)WG\xb5\xbb\xd6.\xd1F#[B\xb58\xed\xdc6\x13\xc6\x02\x91\xca\xac\x9e\xd8j\xa2\xffN\x11\x14\xb8\x9a\xaa4\'\xa5|\xa1\xd7\",\xf6or\",\x83y.\xc8\xd6\x8d]\xae\xa2\xe6\x90\xcb}\x8f \xaa\xce\xa9\xebz\xda~\xeb\xb0\x15\xd1\x9b\x90\xdc\xe4\x88\xc1\x17\x81\x9b\x1b\x82\xf1\r\xd4\x85Be;', 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.190623655s ago: executing program 3 (id=2101): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 1.121033146s ago: executing program 3 (id=2102): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) tkill(0x0, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x0, 0x4, 0x1088f905, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107002, 0x1df) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 1.082157156s ago: executing program 2 (id=2103): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e9, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) 1.052378696s ago: executing program 3 (id=2104): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 999.017887ms ago: executing program 1 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 963.084228ms ago: executing program 0 (id=2106): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$inet6(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0003000098120100200012800b000100697036746e6c000010000280040013000500090004000000080004"], 0x48}}, 0x4000) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) io_setup(0x4082, &(0x7f0000000380)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) io_destroy(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) mount(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 860.801579ms ago: executing program 1 (id=2107): r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x900, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={&(0x7f0000000000)=""/16, 0x10}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140)=0x5, 0x100) 860.402959ms ago: executing program 4 (id=2108): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/icmp\x00') ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@usrquota}, {@nouser_xattr}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fa, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XZvsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCNiMiKG8va9so42JC3pXpyHWct64j+cP2flRx+w/vEV+X7HD0A53TyS78iXsty9/V829miOf6LN+Ge0zb7rQRS9/+s8/mvu74fr58jTFeOwbMxyov1bDq4s+OnDY592qr91/Jc9svqbY8F+uHU9YveK+D/Igs3HP1n8SZvtn61y6nB3dbz6/S/HOi0rOv7ajYg9bY9/7o1Ks9Qa1yf3z81XZycbP9vW8fU3b33Zqf6i48+2/7YO8bds/3Tl67LP5GKXdXx14sa5TstG7xt/+vNQ0jjeHMpL3pleXLw0FTGUHM9XaSk/sHZbmus03yOLf+8z7fv/st//68vfZ6T5J7MLF984e7vTsgfZ/i0Xk+/UumxDJ1n8M/ff/qv6f1b2SZd1/PHm5ac6LVsr/pH1BAYAAAAAAAAllNavwSbpxN10mk5MNObLPhbb0uqFhcVn5y5cPj8Tsbf+/5CDafNK91gjn2T5qfz/YZv5Ayvyz0XEzoj4rDJSz0+cvlCdKTp4AAAAAAAAAAAAAAAAAAAA2CS25/P/m/ep/r3SmP8PlEQvbzAHbG76P5RXvf+vusUTUAb2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCWtPPpmz8mEbH00kj9kRnKl5kRBFvbYNENAApTKboBQGHuXvo32IfS6Wr8/1f+5YC9bw5QgKRdYX1wUFu7899s+0oAAAAAAAAAAAAAoAf27Oo8/9/cYNjaTPuD8lrH/H9fHQAPOV/9D+XlGB+43yz+4U4LzP8HAAAAAAAAAAAAgL4ZrT+SdCKfCzwaaToxEfH/iNgRg8ncfHV2MiIeiYgfKoP/y/JTRTcaAAAAAAAAAAAAAAAAAAAAtpiFK1fPTlers5daE3+vKtnaieZdUPtQ18vxH18VSf8/lpGIKHyj9Cwx0FKSRCxlW35TNOzSQmyOZtQTBf9hAgAAAAAAAAAAAAAAAACAEmqZe9ze7i/63CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L979//vXaLoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9O/AQAA//+fuUAt") 738.017391ms ago: executing program 4 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/85, 0x55) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002"], 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) 604.200963ms ago: executing program 4 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") 603.609243ms ago: executing program 0 (id=2120): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 568.421173ms ago: executing program 0 (id=2111): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) 274.963887ms ago: executing program 1 (id=2112): pipe(&(0x7f0000000040)) socket$inet6(0xa, 0x400000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x142) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 162.039098ms ago: executing program 1 (id=2113): unshare(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x1, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)='sy\x8akI,\xb3\f6L\xcb\xe7\xbd\x11\xa8\x052\x94.\xcf\xc62s\xf6ll\x84]\xe1\x81=\xf3\x91_m)\x81>\xab>\xaf6\x82n\x80b\xc5\t38%\xab\xdd\"4e9\xbfp\xb9\x920d\xc8S\xd0\x80\x0f\x1f\a\xac\x0f\x87|:\xee\x04\x1ba\xa5w\x18\xa1\x1c\xb15\xca\xb6P\xa7\re`Z\x8a\x8bWsI\xf4s8 \xaa\x99\xea\xcb\xb4\x83\a\t\xc6\xcf\xc5\xed\x1d=a%\xe8\x9e9\x12u\x9c\x13~\x97\xe3\x9c\x03L\xe0i\x13~}d\xd0\x82|\xe1B6d\xcaMj\x03\xb2l\x97\xce\\b\xc702\xb5\x1b\xc9V\x95Gd0\xeb\xa0\xcai\x1b\xcf\xba\xe2\xa0\xc1\xa7\x0e\xc7D\xc9\x8d\xdfk\x7fTwX\xaaaq\xfe)WG\xb5\xbb\xd6.\xd1F#[B\xb58\xed\xdc6\x13\xc6\x02\x91\xca\xac\x9e\xd8j\xa2\xffN\x11\x14\xb8\x9a\xaa4\'\xa5|\xa1\xd7\",\xf6or\",\x83y.\xc8\xd6\x8d]\xae\xa2\xe6\x90\xcb}\x8f \xaa\xce\xa9\xebz\xda~\xeb\xb0\x15\xd1\x9b\x90\xdc\xe4\x88\xc1\x17\x81\x9b\x1b\x82\xf1\r\xd4\x85Be;', 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 117.703029ms ago: executing program 3 (id=2114): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x100a4, 0x34, 0xfffffbff, 0x2, 0x8, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xb6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x4, 0x0, 0x0, 0x4, 0x6c0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x22, 0x800, 0xc040, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) 0s ago: executing program 3 (id=2115): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x20000080000000}, 0x18) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) kernel console output (not intermixed with test programs): 110.271108][ T7202] bond0 (unregistering): Released all slaves [ 110.464302][ T7214] loop4: detected capacity change from 0 to 128 [ 110.474238][ T7214] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.488678][ T7214] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.503466][ T29] audit: type=1400 audit(1749080118.108:1956): avc: denied { setattr } for pid=7213 comm="syz.4.1033" path="/230/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.541011][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.629289][ T7217] lo speed is unknown, defaulting to 1000 [ 110.629313][ T7219] loop1: detected capacity change from 0 to 256 [ 110.687968][ T29] audit: type=1326 audit(1749080118.288:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 110.724789][ T29] audit: type=1326 audit(1749080118.318:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 110.749673][ T29] audit: type=1326 audit(1749080118.318:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 110.775698][ T29] audit: type=1326 audit(1749080118.318:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 110.801192][ T29] audit: type=1326 audit(1749080118.318:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 111.205844][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 111.564265][ T7246] xt_hashlimit: size too large, truncated to 1048576 [ 111.732507][ T7257] dummy0: entered promiscuous mode [ 111.745803][ T7257] loop4: detected capacity change from 0 to 512 [ 111.777740][ T7257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.821377][ T7257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.861928][ T7257] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.897288][ T7265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'. [ 111.924992][ T7265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7265 comm=syz.1.1052 [ 111.928100][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 112.066913][ T7257] dummy0 (unregistering): left promiscuous mode [ 112.113834][ T7272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.123538][ T7272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.154046][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.746884][ T7277] net_ratelimit: 8 callbacks suppressed [ 112.746902][ T7277] Set syz1 is full, maxelem 65536 reached [ 112.780217][ T7294] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 112.879474][ T7298] serio: Serial port ptm0 [ 113.236721][ T7337] loop1: detected capacity change from 0 to 512 [ 113.243899][ T7337] EXT4-fs: Ignoring removed nobh option [ 113.251604][ T7337] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.264572][ T7337] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 113.275508][ T7337] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1079: Corrupt directory, running e2fsck is recommended [ 113.305641][ T7337] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 113.333049][ T7337] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1079: corrupted in-inode xattr: invalid ea_ino [ 113.355538][ T7337] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1079: couldn't read orphan inode 15 (err -117) [ 113.369270][ T7337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.423267][ T7337] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.435770][ T7337] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 113.446276][ T7337] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1079: Corrupt directory, running e2fsck is recommended [ 113.464905][ T7337] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.477076][ T7337] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 113.488677][ T7337] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1079: Corrupt directory, running e2fsck is recommended [ 113.507263][ T7355] loop8: detected capacity change from 0 to 7 [ 113.526328][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.535737][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 113.546303][ T7357] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.558432][ T7357] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 113.569337][ T7357] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1079: Corrupt directory, running e2fsck is recommended [ 113.583987][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.594270][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 113.599888][ T7337] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.615399][ T7355] loop8: unable to read partition table [ 113.632226][ T7355] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 113.633793][ T7337] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1079: path /208/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 113.667582][ T7337] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.1079: path /208/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 113.728482][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 113.792234][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.840825][ T7361] lo speed is unknown, defaulting to 1000 [ 113.878663][ T7377] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 113.908629][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.951887][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 113.966048][ T7377] bond1 (unregistering): Released all slaves [ 113.993009][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 113.993024][ T29] audit: type=1326 audit(1749080121.588:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.201678][ T29] audit: type=1326 audit(1749080121.698:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.227548][ T29] audit: type=1326 audit(1749080121.698:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.253233][ T29] audit: type=1326 audit(1749080121.698:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.279155][ T29] audit: type=1326 audit(1749080121.698:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.279389][ T7382] lo speed is unknown, defaulting to 1000 [ 114.304292][ T29] audit: type=1326 audit(1749080121.698:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.304337][ T29] audit: type=1326 audit(1749080121.698:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.304603][ T29] audit: type=1326 audit(1749080121.698:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.304644][ T29] audit: type=1326 audit(1749080121.698:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.304681][ T29] audit: type=1326 audit(1749080121.708:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 114.461330][ T7391] lo speed is unknown, defaulting to 1000 [ 114.663334][ T7408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1098'. [ 114.847491][ T7416] loop1: detected capacity change from 0 to 512 [ 114.877937][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.910936][ T7416] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.959077][ T7423] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1102'. [ 115.130141][ T7433] netlink: 'syz.0.1106': attribute type 13 has an invalid length. [ 115.198775][ T4193] lo speed is unknown, defaulting to 1000 [ 115.205153][ T4193] syz0: Port: 1 Link DOWN [ 115.343624][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.448566][ T7438] loop3: detected capacity change from 0 to 512 [ 115.473555][ T7441] loop4: detected capacity change from 0 to 512 [ 115.481267][ T7438] EXT4-fs: Ignoring removed orlov option [ 115.489033][ T7438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.499581][ T7438] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.507997][ T7438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1109: bg 0: block 248: padding at end of block bitmap is not set [ 115.510571][ T7441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.524547][ T7438] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1109: Failed to acquire dquot type 1 [ 115.552402][ T7438] EXT4-fs (loop3): 1 truncate cleaned up [ 115.559233][ T7438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.573410][ T7441] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.599736][ T7438] EXT4-fs: Ignoring removed orlov option [ 115.606582][ T7438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.625466][ T7438] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 115.647072][ T7438] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.1109: Abort forced by user [ 115.669353][ T7438] EXT4-fs (loop3): Remounting filesystem read-only [ 115.677675][ T7438] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.694688][ T7438] ext4 filesystem being remounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.786383][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.799404][ T7457] loop1: detected capacity change from 0 to 512 [ 115.834016][ T7457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.908554][ T7457] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.047781][ T7449] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1110: corrupted inode contents [ 116.083871][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.095709][ T7449] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.1110: mark_inode_dirty error [ 116.110625][ T7449] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1110: corrupted inode contents [ 116.134479][ T7449] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.1110: mark_inode_dirty error [ 116.157894][ T7449] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.1110: mark inode dirty (error -117) [ 116.186402][ T7449] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 116.285496][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.535799][ T7489] lo speed is unknown, defaulting to 1000 [ 116.667176][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 116.865774][ T7498] loop2: detected capacity change from 0 to 1024 [ 116.887419][ T7498] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 116.897710][ T7498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 116.932148][ T7498] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 116.957833][ T7498] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.1125: unexpected bad inode w/o EXT4_IGET_BAD [ 117.006314][ T7496] xt_hashlimit: size too large, truncated to 1048576 [ 117.123257][ T7498] EXT4-fs (loop2): Remounting filesystem read-only [ 117.131251][ T7498] EXT4-fs (loop2): no journal found [ 117.138018][ T7498] EXT4-fs (loop2): can't get journal size [ 117.213036][ T7498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.262446][ T7503] loop1: detected capacity change from 0 to 512 [ 117.270208][ T7503] EXT4-fs: Ignoring removed orlov option [ 117.286652][ T7503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.331085][ T7503] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.359506][ T7503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1126: bg 0: block 248: padding at end of block bitmap is not set [ 117.386796][ T7503] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1126: Failed to acquire dquot type 1 [ 117.415304][ T7503] EXT4-fs (loop1): 1 truncate cleaned up [ 117.444342][ T7506] loop3: detected capacity change from 0 to 2048 [ 117.444803][ T7503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.474657][ T7503] EXT4-fs: Ignoring removed orlov option [ 117.481167][ T7503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.491171][ T7503] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 117.504762][ T7506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.521461][ T7503] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1126: Abort forced by user [ 117.532552][ T7503] EXT4-fs (loop1): Remounting filesystem read-only [ 117.540282][ T7503] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.551108][ T7503] ext4 filesystem being remounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.579888][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.696218][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.718232][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.973426][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 118.457349][ T7615] loop1: detected capacity change from 0 to 512 [ 118.477694][ T7615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.490664][ T7615] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.642987][ T7628] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 118.695820][ T7628] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 118.728386][ T7628] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 118.755749][ T7628] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 118.769543][ T7628] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 118.799463][ T7628] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 118.831451][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.903530][ T7667] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1158'. [ 119.212658][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 119.222654][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 119.232203][ T7684] netlink: 'syz.0.1166': attribute type 11 has an invalid length. [ 119.247792][ T7684] loop0: detected capacity change from 0 to 512 [ 119.257789][ T7684] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 119.609224][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 119.609240][ T29] audit: type=1326 audit(1749080127.208:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.649229][ T29] audit: type=1326 audit(1749080127.248:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.672943][ T29] audit: type=1326 audit(1749080127.248:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.698641][ T29] audit: type=1326 audit(1749080127.248:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.723450][ T29] audit: type=1326 audit(1749080127.248:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.748447][ T29] audit: type=1326 audit(1749080127.248:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.773081][ T29] audit: type=1326 audit(1749080127.248:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.798131][ T29] audit: type=1326 audit(1749080127.248:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.823683][ T29] audit: type=1326 audit(1749080127.248:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 119.848381][ T29] audit: type=1326 audit(1749080127.248:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.3.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 120.056405][ T7708] loop1: detected capacity change from 0 to 512 [ 120.074879][ T7710] loop8: detected capacity change from 0 to 7 [ 120.078079][ T7708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.096614][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.107258][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 120.116744][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.126395][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 120.135323][ T7710] loop8: unable to read partition table [ 120.144278][ T7710] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 120.158558][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.208752][ T7708] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.238190][ T7723] loop3: detected capacity change from 0 to 128 [ 120.600337][ T7729] loop0: detected capacity change from 0 to 512 [ 120.614159][ T7729] EXT4-fs: Ignoring removed orlov option [ 120.621185][ T7729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.642248][ T7729] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.652790][ T7729] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1180: bg 0: block 248: padding at end of block bitmap is not set [ 120.670392][ T7729] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1180: Failed to acquire dquot type 1 [ 120.670537][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.682912][ T7729] EXT4-fs (loop0): 1 truncate cleaned up [ 120.712849][ T7729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.744729][ T7729] EXT4-fs: Ignoring removed orlov option [ 120.751422][ T7729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.761061][ T7729] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 120.775482][ T7729] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.1180: Abort forced by user [ 120.792138][ T7729] EXT4-fs (loop0): Remounting filesystem read-only [ 120.799862][ T7729] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 120.809536][ T7729] ext4 filesystem being remounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.834830][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.885258][ T7743] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1184'. [ 120.895707][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1184'. [ 120.915799][ T7742] lo speed is unknown, defaulting to 1000 [ 121.531324][ T7753] lo speed is unknown, defaulting to 1000 [ 121.607628][ T7758] loop4: detected capacity change from 0 to 512 [ 121.672066][ T7760] loop1: detected capacity change from 0 to 1024 [ 121.681802][ T7758] EXT4-fs (loop4): 1 orphan inode deleted [ 121.702512][ T7760] EXT4-fs: Ignoring removed bh option [ 121.710166][ T7758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.710541][ T5410] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 121.733901][ T7760] EXT4-fs: inline encryption not supported [ 121.743535][ T7760] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.751642][ T7758] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.777386][ T7760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 121.798801][ T7760] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1191: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.816046][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 121.825449][ T7760] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.1191: lblock 0 mapped to illegal pblock 48 (length 1) [ 121.866764][ T7760] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1191: Failed to acquire dquot type 0 [ 121.881845][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.891625][ T7760] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 121.901689][ T7760] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1191: mark_inode_dirty error [ 121.914313][ T7760] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 121.919379][ T7777] loop0: detected capacity change from 0 to 512 [ 121.925486][ T7760] EXT4-fs (loop1): 1 orphan inode deleted [ 121.938553][ T7760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.955530][ T5410] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.983938][ T5410] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0 [ 121.984832][ T7777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.995997][ T7760] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm syz.1.1191: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.020287][ T7777] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.099646][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.131978][ T3323] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 122.175648][ T3323] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 122.242129][ T3323] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 122.281845][ T7799] loop3: detected capacity change from 0 to 512 [ 122.311340][ T7799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.326561][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.340355][ T7799] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.473498][ T7807] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.1206: corrupted inode contents [ 122.487411][ T7807] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.1206: mark_inode_dirty error [ 122.521604][ T7807] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.1206: corrupted inode contents [ 122.549927][ T7807] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.1206: mark_inode_dirty error [ 122.574260][ T7807] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.1206: mark inode dirty (error -117) [ 122.589410][ T7807] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 122.621077][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.827095][ T7794] lo speed is unknown, defaulting to 1000 [ 122.860663][ T7804] lo speed is unknown, defaulting to 1000 [ 123.224345][ T7838] loop0: detected capacity change from 0 to 512 [ 123.255668][ T7822] lo speed is unknown, defaulting to 1000 [ 123.276168][ T7838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.312678][ T7838] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.450223][ T7845] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.1218: corrupted inode contents [ 123.466801][ T7845] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.1218: mark_inode_dirty error [ 123.485886][ T7845] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.1218: corrupted inode contents [ 123.515610][ T7845] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.1218: mark_inode_dirty error [ 123.550458][ T7845] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.1218: mark inode dirty (error -117) [ 123.575686][ T7845] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 123.579825][ T7851] syzkaller0: entered promiscuous mode [ 123.591649][ T7851] syzkaller0: entered allmulticast mode [ 123.649909][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.810623][ T7865] netlink: 'syz.4.1226': attribute type 13 has an invalid length. [ 123.958899][ T7875] loop3: detected capacity change from 0 to 512 [ 123.966458][ T7872] random: crng reseeded on system resumption [ 123.995918][ T7870] lo speed is unknown, defaulting to 1000 [ 123.996727][ T7875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.016981][ T7875] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.203069][ T7887] 9pnet: p9_errstr2errno: server reported unknown error [ 124.221872][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.240432][ T7891] loop1: detected capacity change from 0 to 512 [ 124.259984][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.269030][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.281428][ T7891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.295481][ T7889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.306911][ T7891] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.313191][ T3459] lo speed is unknown, defaulting to 1000 [ 124.330712][ T3459] syz0: Port: 1 Link ACTIVE [ 124.372715][ T7901] loop3: detected capacity change from 0 to 512 [ 124.382997][ T7901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.416411][ T7901] EXT4-fs (loop3): 1 truncate cleaned up [ 124.444901][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.532954][ T7918] loop4: detected capacity change from 0 to 512 [ 124.576612][ T7918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.577308][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.600780][ T7910] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.1235: corrupted inode contents [ 124.615259][ T7918] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.628295][ T7910] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.1235: mark_inode_dirty error [ 124.643589][ T7910] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.1235: corrupted inode contents [ 124.656866][ T7910] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.1235: mark_inode_dirty error [ 124.673780][ T7922] bridge: RTM_NEWNEIGH with invalid ether address [ 124.676856][ T7910] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.1235: mark inode dirty (error -117) [ 124.706148][ T7910] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 124.767099][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.880407][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.894536][ T7932] loop3: detected capacity change from 0 to 128 [ 124.934970][ T7932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.960388][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 124.960406][ T29] audit: type=1326 audit(1749080132.558:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 124.991579][ T29] audit: type=1326 audit(1749080132.558:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.004663][ T7932] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.018121][ T29] audit: type=1326 audit(1749080132.558:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.050988][ T29] audit: type=1326 audit(1749080132.558:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.075483][ T29] audit: type=1326 audit(1749080132.558:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.099224][ T29] audit: type=1326 audit(1749080132.578:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.122870][ T29] audit: type=1326 audit(1749080132.578:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.146692][ T29] audit: type=1326 audit(1749080132.578:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.170878][ T29] audit: type=1326 audit(1749080132.578:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.196794][ T29] audit: type=1326 audit(1749080132.598:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 125.253885][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.514565][ T7956] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 125.779757][ T7968] loop2: detected capacity change from 0 to 2048 [ 125.807400][ T7968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.827584][ T7968] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1261: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.845653][ T7968] EXT4-fs (loop2): Remounting filesystem read-only [ 125.870039][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.997356][ T7982] syzkaller0: entered promiscuous mode [ 126.003774][ T7982] syzkaller0: entered allmulticast mode [ 126.063169][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 126.089400][ T7984] tipc: Started in network mode [ 126.094884][ T7984] tipc: Node identity fa802f6773f4, cluster identity 4711 [ 126.102837][ T7984] tipc: Enabled bearer , priority 0 [ 126.119077][ T7983] tipc: Resetting bearer [ 126.138091][ T7983] tipc: Disabling bearer [ 126.271285][ T8000] netlink: 'syz.1.1275': attribute type 13 has an invalid length. [ 127.370747][ T8008] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 127.373883][ T8011] loop2: detected capacity change from 0 to 512 [ 127.397898][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.407637][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 127.426711][ T8011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.432416][ T8017] loop3: detected capacity change from 0 to 512 [ 127.440171][ T8008] vlan0: entered promiscuous mode [ 127.440191][ T8008] bond0: entered promiscuous mode [ 127.441699][ T8011] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.470198][ T8008] dummy0: entered promiscuous mode [ 127.478936][ T8008] bond0: (slave dummy0): making interface the new active one [ 127.488101][ T8008] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.502520][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.525384][ T8017] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.612068][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.701656][ T8027] loop3: detected capacity change from 0 to 1024 [ 127.727641][ T8027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.753098][ T8027] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.767220][ T8010] Set syz1 is full, maxelem 65536 reached [ 127.776467][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.807981][ T8031] loop2: detected capacity change from 0 to 128 [ 127.857913][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.900834][ T8035] loop4: detected capacity change from 0 to 1024 [ 127.909464][ T8035] EXT4-fs: Ignoring removed bh option [ 127.915848][ T8035] EXT4-fs: inline encryption not supported [ 127.923055][ T8035] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.946881][ T8035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 127.958694][ T8035] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1285: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.981880][ T8035] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.1285: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.999386][ T8035] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1285: Failed to acquire dquot type 0 [ 128.020289][ T8035] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 128.040860][ T8035] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1285: mark_inode_dirty error [ 128.058252][ T8035] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 128.070522][ T8035] EXT4-fs (loop4): 1 orphan inode deleted [ 128.078184][ T8035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.101629][ T5404] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.138517][ T8052] loop2: detected capacity change from 0 to 512 [ 128.147353][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 128.154891][ T8048] syzkaller0: entered promiscuous mode [ 128.157374][ T5404] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0 [ 128.163944][ T8048] syzkaller0: entered allmulticast mode [ 128.184323][ T8035] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm syz.4.1285: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.209307][ T8050] 8021q: adding VLAN 0 to HW filter on device team1 [ 128.220325][ T8052] EXT4-fs (loop2): 1 orphan inode deleted [ 128.228152][ T5410] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 1 [ 128.259062][ T8052] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.272570][ T8056] loop0: detected capacity change from 0 to 2048 [ 128.281027][ T8056] EXT4-fs: test_dummy_encryption option not supported [ 128.304887][ T3319] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.321367][ T3319] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 128.333415][ T3319] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 128.395117][ T8062] loop4: detected capacity change from 0 to 2048 [ 128.432195][ T8062] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1293: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 128.468453][ T8062] EXT4-fs (loop4): Remounting filesystem read-only [ 128.571650][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 128.655149][ T8060] Set syz1 is full, maxelem 65536 reached [ 128.664012][ T8074] loop4: detected capacity change from 0 to 1024 [ 128.674584][ T8074] EXT4-fs (loop4): inodes count not valid: 32 vs 1312 [ 128.803458][ T8079] bridge: RTM_NEWNEIGH with invalid ether address [ 128.850993][ T8085] bridge: RTM_NEWNEIGH with invalid ether address [ 128.924327][ T8080] lo speed is unknown, defaulting to 1000 [ 129.081288][ T8077] Set syz1 is full, maxelem 65536 reached [ 129.121190][ T8098] pim6reg1: entered promiscuous mode [ 129.127325][ T8098] pim6reg1: entered allmulticast mode [ 129.162956][ T8101] bridge_slave_0: entered promiscuous mode [ 129.555198][ T8124] loop0: detected capacity change from 0 to 512 [ 129.624154][ T8124] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.636617][ T8118] $H: left promiscuous mode [ 129.835370][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1320'. [ 130.172520][ T8146] loop4: detected capacity change from 0 to 128 [ 130.431134][ T8161] bridge_slave_0: entered promiscuous mode [ 130.626721][ T8186] loop0: detected capacity change from 0 to 2048 [ 130.931579][ T8183] lo speed is unknown, defaulting to 1000 [ 131.286291][ T8200] loop3: detected capacity change from 0 to 512 [ 131.325673][ T8200] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.366211][ T8208] loop2: detected capacity change from 0 to 512 [ 131.414690][ T8208] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.499873][ T8212] lo speed is unknown, defaulting to 1000 [ 131.640472][ T8217] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 131.664651][ T8217] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 131.690486][ T8217] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 131.702395][ T8217] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 131.715234][ T8217] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 131.727689][ T8217] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 131.756546][ T8212] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 131.847524][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 131.847584][ T29] audit: type=1326 audit(1749080139.448:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7fd5858e7 code=0x7ffc0000 [ 131.849504][ T8225] loop1: detected capacity change from 0 to 1024 [ 131.856592][ T29] audit: type=1326 audit(1749080139.448:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7fd52ab19 code=0x7ffc0000 [ 131.908098][ T29] audit: type=1326 audit(1749080139.448:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7fd5858e7 code=0x7ffc0000 [ 131.932880][ T29] audit: type=1326 audit(1749080139.448:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7fd52ab19 code=0x7ffc0000 [ 131.957238][ T29] audit: type=1326 audit(1749080139.448:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7fd5858e7 code=0x7ffc0000 [ 131.982733][ T29] audit: type=1326 audit(1749080139.448:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7fd52ab19 code=0x7ffc0000 [ 132.008523][ T29] audit: type=1326 audit(1749080139.448:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7fd5858e7 code=0x7ffc0000 [ 132.033316][ T29] audit: type=1326 audit(1749080139.448:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7fd52ab19 code=0x7ffc0000 [ 132.058624][ T29] audit: type=1326 audit(1749080139.448:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7fd5858e7 code=0x7ffc0000 [ 132.083394][ T29] audit: type=1326 audit(1749080139.448:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.0.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7fd52ab19 code=0x7ffc0000 [ 132.119039][ T8237] loop4: detected capacity change from 0 to 1024 [ 132.129199][ T8237] EXT4-fs: Ignoring removed orlov option [ 132.261991][ T8225] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1350: Allocating blocks 497-513 which overlap fs metadata [ 132.278640][ T8225] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1350: Allocating blocks 497-513 which overlap fs metadata [ 132.330978][ T8223] EXT4-fs (loop1): pa ffff888106edbbd0: logic 48, phys. 177, len 21 [ 132.339261][ T8223] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 132.494024][ T8254] loop1: detected capacity change from 0 to 128 [ 132.592493][ T8256] loop4: detected capacity change from 0 to 8192 [ 132.601301][ T8256] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.821663][ T8270] loop0: detected capacity change from 0 to 128 [ 132.976971][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 133.208621][ T8238] lo speed is unknown, defaulting to 1000 [ 133.222821][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'. [ 133.359533][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 133.397495][ T8296] loop0: detected capacity change from 0 to 8192 [ 133.412686][ T8296] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.957873][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1386'. [ 134.919236][ T8341] lo speed is unknown, defaulting to 1000 [ 134.946070][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 134.995078][ T8349] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.032615][ T8345] veth3: entered promiscuous mode [ 135.055527][ T8345] bridge1: port 1(veth3) entered blocking state [ 135.062235][ T8345] bridge1: port 1(veth3) entered disabled state [ 135.114969][ T8345] veth3: entered allmulticast mode [ 135.645941][ T8395] syz_tun (unregistering): left promiscuous mode [ 135.805985][ T8405] loop3: detected capacity change from 0 to 8192 [ 135.818796][ T8405] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.838053][ T8409] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.785440][ T8426] loop1: detected capacity change from 0 to 128 [ 136.806240][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 136.853457][ T8438] loop3: detected capacity change from 0 to 1024 [ 136.866370][ T8438] EXT4-fs mount: 17 callbacks suppressed [ 136.866386][ T8438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.887788][ T8433] tipc: New replicast peer: 10.1.1.2 [ 136.893174][ T8433] tipc: Enabled bearer , priority 10 [ 136.943432][ T8438] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1432: Allocating blocks 497-513 which overlap fs metadata [ 136.962788][ T8438] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1432: Allocating blocks 497-513 which overlap fs metadata [ 136.990406][ T8438] EXT4-fs (loop3): pa ffff888106eab700: logic 48, phys. 177, len 21 [ 136.998628][ T8438] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 137.030007][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.128152][ T8465] veth3: left allmulticast mode [ 137.133374][ T8465] bridge1: port 1(veth3) entered disabled state [ 137.152991][ T8465] netlink: 'syz.2.1437': attribute type 10 has an invalid length. [ 137.222677][ T8474] loop3: detected capacity change from 0 to 1024 [ 137.230396][ T8474] EXT4-fs: Ignoring removed orlov option [ 137.238437][ T8474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.419321][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.582402][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 137.582421][ T29] audit: type=1326 audit(1749080145.178:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621625][ T29] audit: type=1326 audit(1749080145.178:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621661][ T29] audit: type=1326 audit(1749080145.178:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621765][ T29] audit: type=1326 audit(1749080145.178:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621800][ T29] audit: type=1326 audit(1749080145.178:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621896][ T29] audit: type=1326 audit(1749080145.178:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621930][ T29] audit: type=1326 audit(1749080145.178:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.621963][ T29] audit: type=1326 audit(1749080145.178:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.622059][ T29] audit: type=1326 audit(1749080145.178:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.622185][ T29] audit: type=1326 audit(1749080145.178:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016abee929 code=0x7ffc0000 [ 137.851608][ T8508] syzkaller0: entered promiscuous mode [ 137.851746][ T8508] syzkaller0: entered allmulticast mode [ 137.957051][ T8514] loop4: detected capacity change from 0 to 512 [ 137.972332][ T8514] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.1458: iget: bogus i_mode (0) [ 137.986591][ T8514] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1458: couldn't read orphan inode 17 (err -117) [ 137.999541][ T8514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.035035][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1460'. [ 138.068806][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.127479][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 138.452374][ T8534] loop4: detected capacity change from 0 to 1024 [ 138.491053][ T8534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.528783][ T8534] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1465: Allocating blocks 497-513 which overlap fs metadata [ 138.543763][ T8534] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1465: Allocating blocks 497-513 which overlap fs metadata [ 138.570076][ T8534] EXT4-fs (loop4): pa ffff888106eab700: logic 48, phys. 177, len 21 [ 138.578314][ T8534] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 138.627878][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.741083][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 138.779628][ T8558] veth5: entered promiscuous mode [ 138.785216][ T8558] bridge0: port 1(veth5) entered blocking state [ 138.791822][ T8558] bridge0: port 1(veth5) entered disabled state [ 138.799599][ T8558] veth5: entered allmulticast mode [ 138.863050][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 138.919650][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 139.211671][ T4211] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.225063][ T4211] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.323909][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'. [ 139.826645][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 140.122829][ T8665] loop2: detected capacity change from 0 to 2048 [ 140.129694][ T8663] syzkaller0: entered promiscuous mode [ 140.135270][ T8663] syzkaller0: entered allmulticast mode [ 140.168049][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.356595][ T8676] loop1: detected capacity change from 0 to 1024 [ 140.363766][ T8676] EXT4-fs: Ignoring removed orlov option [ 140.387408][ T8676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.078372][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.145463][ T8696] netlink: 'syz.2.1531': attribute type 39 has an invalid length. [ 141.214246][ T8698] 9pnet: p9_errstr2errno: server reported unknown error [ 141.305363][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.478875][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 142.004804][ T8721] loop1: detected capacity change from 0 to 8192 [ 142.012736][ T8721] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.346633][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 142.537546][ T8745] loop1: detected capacity change from 0 to 1024 [ 142.590851][ T8745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.690702][ T8742] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 142.769130][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.158228][ T8763] futex_wake_op: syz.3.1555 tries to shift op by -1; fix this program [ 143.308512][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 143.326941][ T8772] 8021q: adding VLAN 0 to HW filter on device team1 [ 143.378976][ T8776] loop4: detected capacity change from 0 to 512 [ 143.395211][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 143.405251][ T8776] EXT4-fs: Ignoring removed nobh option [ 143.418114][ T8776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.429296][ T8776] EXT4-fs (loop4): 1 truncate cleaned up [ 143.446330][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 143.454751][ T8776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.473844][ T8776] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.1560: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 143.504999][ T8776] EXT4-fs (loop4): Remounting filesystem read-only [ 143.530311][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.550297][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 143.560314][ T8789] team0: left allmulticast mode [ 143.566155][ T8789] bridge0: port 1(team0) entered disabled state [ 143.573177][ T8791] loop4: detected capacity change from 0 to 1024 [ 143.594081][ T8791] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 143.604191][ T8791] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 143.614515][ T8791] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.629323][ T8791] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.1568: unexpected bad inode w/o EXT4_IGET_BAD [ 143.647773][ T8791] EXT4-fs (loop4): Remounting filesystem read-only [ 143.654616][ T8791] EXT4-fs (loop4): no journal found [ 143.659907][ T8791] EXT4-fs (loop4): can't get journal size [ 143.672488][ T8791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.685321][ T8797] loop2: detected capacity change from 0 to 736 [ 143.820975][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 143.835472][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 143.835490][ T29] audit: type=1326 audit(1749080151.438:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 143.866906][ T29] audit: type=1326 audit(1749080151.468:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 143.892675][ T8812] lo speed is unknown, defaulting to 1000 [ 143.896927][ T29] audit: type=1326 audit(1749080151.498:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 143.922131][ T29] audit: type=1326 audit(1749080151.498:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 143.946473][ T29] audit: type=1326 audit(1749080151.498:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 143.969926][ T29] audit: type=1326 audit(1749080151.498:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 143.994153][ T29] audit: type=1326 audit(1749080151.498:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 144.018236][ T29] audit: type=1326 audit(1749080151.498:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 144.042337][ T29] audit: type=1326 audit(1749080151.498:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 144.067221][ T29] audit: type=1326 audit(1749080151.498:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25962e929 code=0x7ffc0000 [ 144.401029][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.447357][ T8827] netlink: 'syz.4.1582': attribute type 39 has an invalid length. [ 144.495064][ T8833] xt_hashlimit: max too large, truncated to 1048576 [ 144.536714][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 144.554082][ T8839] loop2: detected capacity change from 0 to 256 [ 144.561207][ T8839] FAT-fs (loop2): bogus number of FAT sectors [ 144.567382][ T8839] FAT-fs (loop2): Can't find a valid FAT filesystem [ 144.676909][ T8845] netlink: 'syz.0.1591': attribute type 12 has an invalid length. [ 144.773403][ T8853] loop4: detected capacity change from 0 to 1024 [ 144.783228][ T8855] netlink: 'syz.0.1596': attribute type 39 has an invalid length. [ 144.832543][ T8853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.903427][ T8853] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1595: Allocating blocks 497-513 which overlap fs metadata [ 144.944994][ T8853] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1595: Allocating blocks 497-513 which overlap fs metadata [ 144.991500][ T8852] EXT4-fs (loop4): pa ffff888106edbcb0: logic 48, phys. 177, len 21 [ 144.999797][ T8852] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 145.036700][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.133616][ T8871] loop4: detected capacity change from 0 to 1024 [ 145.155007][ T8871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.171118][ T8870] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 145.237948][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.273259][ T8877] xt_hashlimit: max too large, truncated to 1048576 [ 145.474764][ T8896] capability: warning: `syz.2.1604' uses 32-bit capabilities (legacy support in use) [ 145.675381][ T8914] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 145.700979][ T8914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.709537][ T8914] bond0: (slave bond1): making interface the new active one [ 145.758644][ T8914] bond0: (slave bond1): Enslaving as an active interface with an up link [ 145.775500][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 145.794033][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.880936][ T8929] netlink: 'syz.0.1622': attribute type 3 has an invalid length. [ 145.888747][ T8929] netlink: 'syz.0.1622': attribute type 3 has an invalid length. [ 145.898086][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1622'. [ 145.929962][ T8932] netlink: 'syz.0.1623': attribute type 4 has an invalid length. [ 145.939730][ T4212] lo speed is unknown, defaulting to 1000 [ 145.945558][ T4212] syz0: Port: 1 Link DOWN [ 145.951604][ T8932] netlink: 'syz.0.1623': attribute type 4 has an invalid length. [ 145.971272][ T4212] lo speed is unknown, defaulting to 1000 [ 145.977079][ T4212] syz0: Port: 1 Link ACTIVE [ 146.028509][ T8927] loop2: detected capacity change from 0 to 8192 [ 146.043552][ T8927] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.315455][ T8960] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 146.568874][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 146.577893][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 146.700775][ T8997] gtp0: left promiscuous mode [ 146.708473][ T2970] lo speed is unknown, defaulting to 1000 [ 146.714781][ T2970] syz0: Port: 1 Link DOWN [ 146.741037][ T9004] loop2: detected capacity change from 0 to 1024 [ 146.826233][ T9004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.860141][ T9001] wireguard0: entered promiscuous mode [ 146.866822][ T9001] wireguard0: entered allmulticast mode [ 146.879559][ T9004] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.895477][ T9004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1663: bg 0: block 393: padding at end of block bitmap is not set [ 146.966859][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.068461][ T9024] veth0: entered promiscuous mode [ 147.082355][ T9024] veth0 (unregistering): left promiscuous mode [ 147.116239][ T9029] veth0: entered promiscuous mode [ 147.126451][ T9029] veth0 (unregistering): left promiscuous mode [ 147.282255][ T9044] loop2: detected capacity change from 0 to 8192 [ 147.295938][ T9044] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.414967][ T9054] loop1: detected capacity change from 0 to 128 [ 147.430148][ T9054] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.462834][ T9054] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.305861][ T9081] loop4: detected capacity change from 0 to 512 [ 148.355889][ T9081] EXT4-fs: Ignoring removed nobh option [ 148.405538][ T9081] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 148.427208][ T9081] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1681: attempt to clear invalid blocks 2 len 1 [ 148.461542][ T9081] EXT4-fs (loop4): Remounting filesystem read-only [ 148.474426][ T9093] pim6reg1: entered promiscuous mode [ 148.481118][ T9093] pim6reg1: entered allmulticast mode [ 148.492514][ T9081] EXT4-fs (loop4): 1 truncate cleaned up [ 148.499687][ T9081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.529185][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.576390][ T9097] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 148.585724][ T9097] team0: Device macvtap0 is already an upper device of the team interface [ 148.874505][ T9108] __nla_validate_parse: 3 callbacks suppressed [ 148.874531][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 149.047225][ T9111] pim6reg1: entered promiscuous mode [ 149.052592][ T9111] pim6reg1: entered allmulticast mode [ 149.291964][ T9127] tipc: New replicast peer: 255.255.255.255 [ 149.298328][ T9127] tipc: Enabled bearer , priority 10 [ 149.475700][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 149.475756][ T29] audit: type=1326 audit(1749080157.170:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.517033][ T9139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9139 comm=syz.4.1705 [ 149.534624][ T29] audit: type=1326 audit(1749080157.211:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.558273][ T29] audit: type=1326 audit(1749080157.211:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.581749][ T29] audit: type=1326 audit(1749080157.211:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.605295][ T29] audit: type=1326 audit(1749080157.211:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.628682][ T29] audit: type=1326 audit(1749080157.211:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.652174][ T29] audit: type=1326 audit(1749080157.211:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.675837][ T29] audit: type=1326 audit(1749080157.211:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.699254][ T29] audit: type=1326 audit(1749080157.211:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.722720][ T29] audit: type=1326 audit(1749080157.211:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 149.932708][ T9141] loop4: detected capacity change from 0 to 8192 [ 149.960316][ T9141] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.117917][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.145512][ T9159] rdma_op ffff88811c3f1580 conn xmit_rdma 0000000000000000 [ 150.159406][ T9164] loop1: detected capacity change from 0 to 512 [ 150.181801][ T9164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.199229][ T9164] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.214374][ T9164] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1714: corrupted inode contents [ 150.227858][ T9164] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1714: mark_inode_dirty error [ 150.239682][ T9164] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1714: corrupted inode contents [ 150.328656][ T9173] loop4: detected capacity change from 0 to 512 [ 150.354251][ T9173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.370046][ T9164] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1714: mark_inode_dirty error [ 150.381459][ T9] tipc: Node number set to 2306092903 [ 150.393566][ T9173] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.422998][ T9164] EXT4-fs error (device loop1): ext4_lookup:1784: inode #18: comm syz.1.1714: 'file0' linked to parent dir [ 150.475084][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.506547][ T9164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.519784][ T9180] loop4: detected capacity change from 0 to 512 [ 150.527598][ T9164] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 150.548709][ T9180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.576006][ T9180] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1722: invalid block [ 150.592180][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.605095][ T9180] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1722: invalid indirect mapped block 4294967295 (level 1) [ 150.682467][ T9180] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1722: invalid indirect mapped block 4294967295 (level 1) [ 150.734428][ T9180] EXT4-fs (loop4): 2 truncates cleaned up [ 150.758498][ T9180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.808787][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.847848][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 150.883125][ T9200] 8021q: adding VLAN 0 to HW filter on device team2 [ 150.994352][ T9214] ip6gre2: entered allmulticast mode [ 151.088744][ T9217] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 151.158535][ T9234] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 151.187634][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.208004][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 151.219316][ T9234] bond0 (unregistering): Released all slaves [ 151.272417][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.283423][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.394574][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'. [ 151.821229][ T9267] siw: device registration error -23 [ 151.940535][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1755'. [ 151.956071][ T9274] loop1: detected capacity change from 0 to 128 [ 151.962638][ T9275] loop2: detected capacity change from 0 to 512 [ 151.980618][ T9274] netlink: 'syz.1.1756': attribute type 6 has an invalid length. [ 151.980919][ T9275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.002040][ T9275] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.054188][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.293863][ T9295] 8021q: adding VLAN 0 to HW filter on device  [ 152.310346][ T9295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.412642][ T9299] loop2: detected capacity change from 0 to 512 [ 152.426616][ T9299] EXT4-fs: Ignoring removed nobh option [ 152.433494][ T9299] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 152.463991][ T9299] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1764: attempt to clear invalid blocks 2 len 1 [ 152.478124][ T9299] EXT4-fs (loop2): Remounting filesystem read-only [ 152.488115][ T9299] EXT4-fs (loop2): 1 truncate cleaned up [ 152.499844][ T9299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.527917][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.701038][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1771'. [ 152.714283][ T9312] loop1: detected capacity change from 0 to 512 [ 152.729886][ T9312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.742618][ T9312] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.781092][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 152.791037][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 152.791963][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.834252][ T9325] tipc: Started in network mode [ 152.839214][ T9325] tipc: Node identity ac14140f, cluster identity 4711 [ 152.846340][ T9325] tipc: New replicast peer: 255.255.255.255 [ 152.852613][ T9325] tipc: Enabled bearer , priority 10 [ 152.909670][ T9323] lo speed is unknown, defaulting to 1000 [ 153.602052][ T9376] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 153.750094][ T9436] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 153.757128][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 153.943044][ T4212] tipc: Node number set to 2886997007 [ 154.086243][ T4212] IPVS: starting estimator thread 0... [ 154.197897][ T9502] IPVS: using max 1680 ests per chain, 84000 per kthread [ 154.723935][ T9552] siw: device registration error -23 [ 154.738476][ T9554] loop4: detected capacity change from 0 to 512 [ 154.768560][ T9554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.808189][ T9554] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.822622][ T9554] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1811: corrupted inode contents [ 154.834790][ T9554] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1811: mark_inode_dirty error [ 154.847516][ T9554] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1811: corrupted inode contents [ 154.859984][ T9554] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1811: mark_inode_dirty error [ 154.943710][ T9554] EXT4-fs error (device loop4): ext4_lookup:1784: inode #18: comm syz.4.1811: 'file0' linked to parent dir [ 155.068254][ T9554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.094332][ T9554] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 155.168693][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.209008][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 155.209027][ T29] audit: type=1326 audit(1749080162.011:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.276035][ T29] audit: type=1326 audit(1749080162.011:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.299551][ T29] audit: type=1326 audit(1749080162.051:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.323225][ T29] audit: type=1326 audit(1749080162.051:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.346660][ T29] audit: type=1326 audit(1749080162.051:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.370137][ T29] audit: type=1326 audit(1749080162.051:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.393687][ T29] audit: type=1326 audit(1749080162.061:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.417182][ T29] audit: type=1326 audit(1749080162.061:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.440819][ T29] audit: type=1326 audit(1749080162.071:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.575730][ T9571] syzkaller0: entered promiscuous mode [ 155.583100][ T9571] syzkaller0: entered allmulticast mode [ 155.683882][ T29] audit: type=1326 audit(1749080162.071:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9573 comm="syz.4.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 155.746343][ T9576] loop4: detected capacity change from 0 to 2048 [ 155.785523][ T9576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 155.813845][ T9584] loop1: detected capacity change from 0 to 512 [ 155.842481][ T9579] lo speed is unknown, defaulting to 1000 [ 155.987614][ T9588] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.038366][ T9592] cgroup: fork rejected by pids controller in /syz1 [ 156.045282][ T9588] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 124 with max blocks 790 with error 28 [ 156.057926][ T9588] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.057926][ T9588] [ 156.067619][ T9588] EXT4-fs (loop4): Total free blocks count 0 [ 156.073651][ T9588] EXT4-fs (loop4): Free/Dirty block details [ 156.079554][ T9588] EXT4-fs (loop4): free_blocks=2415919104 [ 156.085325][ T9588] EXT4-fs (loop4): dirty_blocks=928 [ 156.090664][ T9588] EXT4-fs (loop4): Block reservation details [ 156.096695][ T9588] EXT4-fs (loop4): i_reserved_data_blocks=58 [ 156.241931][ T5410] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 156.326899][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'. [ 156.652903][ T4602] $H (unregistering): Released all slaves [ 156.662459][ T4602] bond1 (unregistering): Released all slaves [ 156.671870][ T4602] bond2 (unregistering): Released all slaves [ 156.684077][ T4602] bond0 (unregistering): (slave dummy0): Releasing active interface [ 156.697696][ T4602] bond0 (unregistering): Released all slaves [ 156.754363][ T9605] lo speed is unknown, defaulting to 1000 [ 156.770564][ T4602] tipc: Left network mode [ 156.837181][ T4602] hsr_slave_0: left promiscuous mode [ 156.843616][ T4602] hsr_slave_1: left promiscuous mode [ 157.008216][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 157.099371][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.106635][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.121162][ T9605] bridge_slave_0: entered allmulticast mode [ 157.127770][ T9605] bridge_slave_0: entered promiscuous mode [ 157.135104][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.142250][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.149632][ T9605] bridge_slave_1: entered allmulticast mode [ 157.156336][ T9605] bridge_slave_1: entered promiscuous mode [ 157.180573][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.202414][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.228757][ T9660] loop4: detected capacity change from 0 to 1024 [ 157.253668][ T9660] EXT4-fs: Ignoring removed oldalloc option [ 157.259736][ T9660] EXT4-fs: Ignoring removed orlov option [ 157.265467][ T9660] EXT4-fs: Ignoring removed oldalloc option [ 157.271522][ T9660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.291792][ T9605] team0: Port device team_slave_0 added [ 157.299950][ T4602] IPVS: stop unused estimator thread 0... [ 157.318904][ T9605] team0: Port device team_slave_1 added [ 157.341416][ T9660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.374572][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.381684][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.407851][ T9605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.531711][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.539171][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.565476][ T9605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.577009][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.678626][ T9605] hsr_slave_0: entered promiscuous mode [ 157.685693][ T9605] hsr_slave_1: entered promiscuous mode [ 157.696650][ T9605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.712215][ T9605] Cannot create hsr debugfs directory [ 157.764787][ T9677] loop4: detected capacity change from 0 to 512 [ 157.785505][ T9677] loop4: detected capacity change from 0 to 2048 [ 157.800082][ T9677] EXT4-fs: Ignoring removed bh option [ 157.852471][ T9677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.202600][ T9605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.233375][ T9605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.254142][ T9605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.274383][ T9605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.352002][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.375395][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.399331][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.406475][ T5404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.448789][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.455990][ T5404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.560642][ T9605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.571149][ T9605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.754957][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.835045][ T9605] veth0_vlan: entered promiscuous mode [ 158.845573][ T4602] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 158.872885][ T9605] veth1_vlan: entered promiscuous mode [ 158.891617][ T9605] veth0_macvtap: entered promiscuous mode [ 158.897690][ T4602] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 158.910022][ T4602] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.910022][ T4602] [ 158.919892][ T4602] EXT4-fs (loop4): Total free blocks count 0 [ 158.925918][ T4602] EXT4-fs (loop4): Free/Dirty block details [ 158.931910][ T4602] EXT4-fs (loop4): free_blocks=2415919104 [ 158.937663][ T4602] EXT4-fs (loop4): dirty_blocks=7168 [ 158.943104][ T4602] EXT4-fs (loop4): Block reservation details [ 158.949174][ T4602] EXT4-fs (loop4): i_reserved_data_blocks=448 [ 158.957716][ T9605] veth1_macvtap: entered promiscuous mode [ 158.969798][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.981627][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.990103][ T9605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.998928][ T9605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.007852][ T9605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.016703][ T9605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.030619][ T5410] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 159.435364][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 159.464190][ T9727] lo speed is unknown, defaulting to 1000 [ 159.476766][ T9733] hub 1-0:1.0: USB hub found [ 159.481926][ T9733] hub 1-0:1.0: 8 ports detected [ 159.562853][ T9739] loop4: detected capacity change from 0 to 128 [ 159.606790][ T9739] netlink: 'syz.4.1863': attribute type 6 has an invalid length. [ 159.674208][ T9750] loop4: detected capacity change from 0 to 128 [ 159.682936][ T9750] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.720271][ T5400] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.743767][ T9752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.756681][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1872'. [ 159.777684][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 159.814516][ T9756] lo speed is unknown, defaulting to 1000 [ 159.888845][ T9761] netlink: 'syz.3.1874': attribute type 10 has an invalid length. [ 159.913387][ T9761] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 160.082081][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 160.178830][ T9776] bond0: (slave bridge_slave_1): Releasing backup interface [ 160.191764][ T9778] loop2: detected capacity change from 0 to 128 [ 160.205294][ T9778] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.233397][ T9776] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 160.256105][ T5410] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.276943][ T9786] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 160.299031][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 160.310291][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 160.310309][ T29] audit: type=1326 audit(1749080167.121:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 160.340264][ T29] audit: type=1326 audit(1749080167.121:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 160.363948][ T29] audit: type=1326 audit(1749080167.121:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 160.387632][ T29] audit: type=1326 audit(1749080167.121:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7fd58e963 code=0x7ffc0000 [ 160.411069][ T29] audit: type=1326 audit(1749080167.121:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe7fd58d3df code=0x7ffc0000 [ 160.434509][ T29] audit: type=1326 audit(1749080167.121:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe7fd58e9b7 code=0x7ffc0000 [ 160.457819][ T29] audit: type=1326 audit(1749080167.121:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7fd58d290 code=0x7ffc0000 [ 160.481351][ T29] audit: type=1326 audit(1749080167.131:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe7fd58d58a code=0x7ffc0000 [ 160.504605][ T29] audit: type=1326 audit(1749080167.131:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 160.528148][ T29] audit: type=1326 audit(1749080167.131:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9792 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 160.556415][ T9786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.564590][ T9786] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 160.578613][ T9796] bond3 (unregistering): (slave batadv0): Releasing backup interface [ 160.587635][ T9796] bond3 (unregistering): Released all slaves [ 160.721211][ T9809] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1900'. [ 160.827710][ T9818] lo speed is unknown, defaulting to 1000 [ 160.996609][ T9843] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 161.009805][ T9843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.025945][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 161.039159][ T9843] bond3 (unregistering): Released all slaves [ 161.084806][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.093642][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.471604][ T9860] loop4: detected capacity change from 0 to 4096 [ 161.494404][ T9860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.535292][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.632552][ T9] Process accounting resumed [ 161.772310][ T9888] lo speed is unknown, defaulting to 1000 [ 161.950126][ T9895] loop1: detected capacity change from 0 to 1024 [ 161.977851][ T9870] Process accounting resumed [ 162.066298][ T9897] loop2: detected capacity change from 0 to 512 [ 162.092283][ T9897] EXT4-fs: Ignoring removed i_version option [ 162.103509][ T9897] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.112564][ T9897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.124614][ T9897] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 162.190708][ T9897] loop2: detected capacity change from 0 to 1024 [ 162.217632][ T9897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.250736][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.296015][ T9908] syzkaller0: entered promiscuous mode [ 162.302612][ T9908] syzkaller0: entered allmulticast mode [ 162.762053][ T9929] loop2: detected capacity change from 0 to 8192 [ 162.768691][ T9929] vfat: Unknown parameter 'H!1`w )ea뀋-sà_uŪ][_Hqm5W)-3?b5e]C"XG \ZHPX017777777777777777777770xffffffffffffffff184467440737095516150xffffffffffffffff' [ 162.997429][ T9930] Process accounting resumed [ 163.152468][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 163.161519][ T9949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1937'. [ 163.405708][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 163.432808][ T5410] smc: removing ib device syz! [ 163.551330][ T9971] loop4: detected capacity change from 0 to 2048 [ 163.570057][ T9971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.604386][ T9971] SELinux: Context @ is not valid (left unmapped). [ 163.646344][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.875855][ T9996] lo speed is unknown, defaulting to 1000 [ 164.552685][T10012] netlink: 'syz.0.1958': attribute type 10 has an invalid length. [ 164.590430][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 164.656882][T10017] netlink: 'syz.0.1960': attribute type 4 has an invalid length. [ 164.875346][T10026] loop1: detected capacity change from 0 to 512 [ 164.908305][T10026] EXT4-fs: Ignoring removed i_version option [ 164.918413][T10026] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.978927][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 165.001433][T10026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.044092][T10042] loop2: detected capacity change from 0 to 1024 [ 165.054548][T10026] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 165.075071][T10042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.088840][T10042] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.113694][T10042] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 8: comm syz.2.1972: lblock 8 mapped to illegal pblock 8 (length 1) [ 165.129496][T10042] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 165.144596][T10042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.144596][T10042] [ 165.212107][T10026] loop1: detected capacity change from 0 to 1024 [ 165.276999][T10042] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 165.355010][T10042] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 165.367624][T10042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.367624][T10042] [ 165.377560][T10042] EXT4-fs (loop2): Total free blocks count 0 [ 165.383713][T10042] EXT4-fs (loop2): Free/Dirty block details [ 165.389689][T10042] EXT4-fs (loop2): free_blocks=4293918720 [ 165.395549][T10042] EXT4-fs (loop2): dirty_blocks=480 [ 165.400878][T10042] EXT4-fs (loop2): Block reservation details [ 165.469250][T10026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.553951][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 165.553970][ T29] audit: type=1326 audit(1749080172.361:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.639805][ T5400] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 7) [ 165.641288][ T9605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.672307][ T29] audit: type=1326 audit(1749080172.361:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.696108][ T29] audit: type=1326 audit(1749080172.361:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.719804][ T29] audit: type=1326 audit(1749080172.361:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.743499][ T29] audit: type=1326 audit(1749080172.361:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.767105][ T29] audit: type=1326 audit(1749080172.361:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.790684][ T29] audit: type=1326 audit(1749080172.361:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.814626][ T29] audit: type=1326 audit(1749080172.361:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.838217][ T29] audit: type=1326 audit(1749080172.361:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.861869][ T29] audit: type=1326 audit(1749080172.361:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fd58e929 code=0x7ffc0000 [ 165.939965][T10061] loop2: detected capacity change from 0 to 512 [ 165.964169][T10063] loop1: detected capacity change from 0 to 1024 [ 165.972743][T10061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.006771][T10063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.023217][T10061] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.035380][T10063] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.147529][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.403485][T10092] syzkaller0: entered allmulticast mode [ 166.409551][T10092] syzkaller0: entered promiscuous mode [ 166.420053][T10092] syzkaller0 (unregistering): left allmulticast mode [ 166.426967][T10092] syzkaller0 (unregistering): left promiscuous mode [ 166.447147][T10094] loop4: detected capacity change from 0 to 1024 [ 166.462992][T10094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.494860][T10094] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1988: Allocating blocks 497-513 which overlap fs metadata [ 166.510155][T10094] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1988: Allocating blocks 497-513 which overlap fs metadata [ 166.586741][T10093] EXT4-fs (loop4): pa ffff888106eab7e0: logic 48, phys. 177, len 21 [ 166.594908][T10093] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 166.630340][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.668590][T10104] netlink: 'syz.0.1992': attribute type 4 has an invalid length. [ 166.676842][T10104] netlink: 'syz.0.1992': attribute type 4 has an invalid length. [ 166.687678][ T4212] lo speed is unknown, defaulting to 1000 [ 166.693605][ T4212] syz0: Port: 1 Link ACTIVE [ 166.815170][ T9605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.866285][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'. [ 166.916726][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 167.083423][T10127] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 167.166232][T10133] loop4: detected capacity change from 0 to 1024 [ 167.193630][T10133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.212184][T10133] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.243050][T10133] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm syz.4.2000: lblock 8 mapped to illegal pblock 8 (length 1) [ 167.268283][T10133] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 167.281335][T10133] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.281335][T10133] [ 167.335600][T10133] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 167.403393][T10133] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 167.415965][T10133] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.415965][T10133] [ 167.425652][T10133] EXT4-fs (loop4): Total free blocks count 0 [ 167.431699][T10133] EXT4-fs (loop4): Free/Dirty block details [ 167.437639][T10133] EXT4-fs (loop4): free_blocks=4293918720 [ 167.443566][T10133] EXT4-fs (loop4): dirty_blocks=480 [ 167.448774][T10133] EXT4-fs (loop4): Block reservation details [ 167.831669][T10146] loop2: detected capacity change from 0 to 512 [ 167.874988][T10147] TCP: out of memory -- consider tuning tcp_mem [ 167.889614][ T5400] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 7) [ 167.889682][T10146] loop2: detected capacity change from 0 to 2048 [ 167.889928][T10146] EXT4-fs: Ignoring removed bh option [ 167.964152][T10146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.094497][T10155] loop4: detected capacity change from 0 to 512 [ 168.112611][T10155] EXT4-fs: Ignoring removed i_version option [ 168.121552][T10155] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.155430][T10155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.170428][T10155] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 168.223762][ T5431] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.268696][ T5431] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.281006][ T5431] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.281006][ T5431] [ 168.290698][ T5431] EXT4-fs (loop2): Total free blocks count 0 [ 168.296992][ T5431] EXT4-fs (loop2): Free/Dirty block details [ 168.303044][ T5431] EXT4-fs (loop2): free_blocks=2415919104 [ 168.308784][ T5431] EXT4-fs (loop2): dirty_blocks=1696 [ 168.314326][ T5431] EXT4-fs (loop2): Block reservation details [ 168.320350][ T5431] EXT4-fs (loop2): i_reserved_data_blocks=106 [ 168.504325][T10155] loop4: detected capacity change from 0 to 1024 [ 168.537399][ T5431] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 168.608681][T10155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.716019][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.727293][T10178] loop1: detected capacity change from 0 to 1024 [ 168.758276][T10178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.848574][T10183] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 168.857304][T10183] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 168.892144][T10183] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2018'. [ 168.893189][ T9605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.037401][T10197] netlink: 'syz.2.2019': attribute type 1 has an invalid length. [ 169.068819][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 169.094865][T10197] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.103879][T10197] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 169.130350][T10197] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 169.170868][T10197] bond2 (unregistering): Released all slaves [ 169.186472][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 169.204499][T10211] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2027'. [ 169.276596][T10206] lo speed is unknown, defaulting to 1000 [ 169.353563][T10217] $H: renamed from  (while UP) [ 169.360658][T10217] $H: entered promiscuous mode [ 169.412432][T10225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2034'. [ 169.451106][T10199] lo speed is unknown, defaulting to 1000 [ 169.711643][T10247] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 169.763425][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'. [ 169.820359][T10247] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.843392][T10247] bond0: (slave batadv1): Enslaving as a backup interface with an up link [ 169.930107][T10253] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 169.952727][T10253] bond0 (unregistering): Released all slaves [ 169.984426][T10256] loop1: detected capacity change from 0 to 1024 [ 169.991339][T10256] ext4: Unknown parameter 'nouser_xattr' [ 170.042284][T10262] loop1: detected capacity change from 0 to 1024 [ 170.046061][T10264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.064051][T10264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.109560][T10262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.149958][T10262] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.200737][T10262] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.2045: lblock 8 mapped to illegal pblock 8 (length 1) [ 170.242301][T10262] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 170.254728][T10262] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.254728][T10262] [ 170.285668][T10262] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 170.301239][T10262] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 170.313802][T10262] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.313802][T10262] [ 170.323483][T10262] EXT4-fs (loop1): Total free blocks count 0 [ 170.329478][T10262] EXT4-fs (loop1): Free/Dirty block details [ 170.335406][T10262] EXT4-fs (loop1): free_blocks=4293918720 [ 170.341184][T10262] EXT4-fs (loop1): dirty_blocks=480 [ 170.346406][T10262] EXT4-fs (loop1): Block reservation details [ 170.359173][T10260] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 170.370456][T10260] batman_adv: batadv0: Adding interface: ip6gretap1 [ 170.377864][T10260] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.404654][T10260] batman_adv: batadv0: Interface activated: ip6gretap1 [ 170.433984][T10274] netlink: 'syz.3.2051': attribute type 4 has an invalid length. [ 170.440418][ T4602] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 7) [ 170.458000][T10274] netlink: 'syz.3.2051': attribute type 4 has an invalid length. [ 170.482539][T10276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2052'. [ 170.491688][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'. [ 170.500658][T10276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2052'. [ 170.526115][T10276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2052'. [ 170.594648][T10284] loop2: detected capacity change from 0 to 128 [ 170.604412][T10280] bridge_slave_0: left allmulticast mode [ 170.610190][T10280] bridge_slave_0: left promiscuous mode [ 170.616069][T10280] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.647818][T10280] bridge_slave_1: left allmulticast mode [ 170.649944][T10284] syz.2.2054: attempt to access beyond end of device [ 170.649944][T10284] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 170.653529][T10280] bridge_slave_1: left promiscuous mode [ 170.653723][T10280] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.683874][T10280] bond0: (slave bond_slave_0): Releasing backup interface [ 170.694490][T10280] bond0: (slave bond_slave_1): Releasing backup interface [ 170.707673][ T4602] kworker/u8:17: attempt to access beyond end of device [ 170.707673][ T4602] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 170.707699][T10280] team0: Port device team_slave_0 removed [ 170.732121][T10280] team0: Port device team_slave_1 removed [ 170.739119][T10280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.747307][T10280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.757203][T10280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.765067][T10280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.843539][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 170.843557][ T29] audit: type=1326 audit(1749080177.651:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 170.875577][ T29] audit: type=1326 audit(1749080177.651:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 170.899072][ T29] audit: type=1326 audit(1749080177.651:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 170.923004][ T29] audit: type=1326 audit(1749080177.651:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 170.947032][ T29] audit: type=1326 audit(1749080177.651:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 170.970612][ T29] audit: type=1326 audit(1749080177.651:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 170.994804][ T29] audit: type=1326 audit(1749080177.651:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 171.018442][ T29] audit: type=1326 audit(1749080177.651:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 171.042039][ T29] audit: type=1326 audit(1749080177.651:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 171.065719][ T29] audit: type=1326 audit(1749080177.651:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31cbbe929 code=0x7ffc0000 [ 171.230466][T10309] hub 9-0:1.0: USB hub found [ 171.236995][T10309] hub 9-0:1.0: 8 ports detected [ 171.549127][T10330] syzkaller0: entered allmulticast mode [ 171.558284][T10330] syzkaller0: entered promiscuous mode [ 171.565922][T10330] syzkaller0 (unregistering): left allmulticast mode [ 171.572772][T10330] syzkaller0 (unregistering): left promiscuous mode [ 172.079079][T10343] netlink: 'syz.3.2077': attribute type 10 has an invalid length. [ 172.124791][T10343] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.133153][T10343] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.142164][T10343] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.218941][T10343] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 172.229296][T10343] team0: Failed to send options change via netlink (err -105) [ 172.236899][T10343] team0: Port device geneve1 added [ 172.281835][ T4211] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 172.322972][T10340] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.483242][T10340] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.544169][T10340] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.565497][T10355] lo speed is unknown, defaulting to 1000 [ 172.608096][T10340] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.626444][T10359] loop2: detected capacity change from 0 to 2048 [ 172.633641][T10340] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.647318][T10340] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.659114][T10340] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.696305][T10363] lo speed is unknown, defaulting to 1000 [ 172.707481][T10359] loop2: p1 < > p4 [ 172.714070][T10359] loop2: p4 size 8388608 extends beyond EOD, truncated [ 172.840615][T10372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 172.853044][T10372] batman_adv: batadv0: Adding interface: ip6gretap1 [ 172.859697][T10372] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.887313][T10372] batman_adv: batadv0: Interface activated: ip6gretap1 [ 173.099994][T10394] lo speed is unknown, defaulting to 1000 [ 173.218526][T10401] netlink: 'syz.2.2100': attribute type 2 has an invalid length. [ 173.228492][T10402] lo speed is unknown, defaulting to 1000 [ 173.248591][T10401] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 173.293421][T10402] loop1: detected capacity change from 0 to 2048 [ 173.305695][T10407] loop2: detected capacity change from 0 to 1024 [ 173.315261][T10407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.333043][T10402] loop1: p1 < > p4 [ 173.338261][T10402] loop1: p4 size 8388608 extends beyond EOD, truncated [ 173.350113][T10410] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.406447][T10413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 173.431607][T10413] batman_adv: batadv0: Adding interface: ip6gretap1 [ 173.438362][T10413] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.466644][T10413] batman_adv: batadv0: Interface activated: ip6gretap1 [ 173.475875][T10410] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.504148][T10419] ip6tnl1: entered allmulticast mode [ 173.524105][T10410] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.600203][T10426] loop4: detected capacity change from 0 to 1024 [ 173.607223][T10426] ext4: Unknown parameter 'nouser_xattr' [ 173.616551][T10410] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.657794][T10428] loop4: detected capacity change from 0 to 1024 [ 173.674061][T10428] EXT4-fs: Ignoring removed orlov option [ 173.679851][T10428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.693772][T10428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.785020][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.932233][T10440] loop4: detected capacity change from 0 to 128 [ 173.948088][T10440] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.974251][T10440] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.097495][T10410] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.124334][T10410] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.167602][T10410] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.210810][T10410] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.278301][T10447] netlink: 'syz.1.2113': attribute type 2 has an invalid length. [ 174.287133][T10447] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 174.296656][T10447] __nla_validate_parse: 3 callbacks suppressed [ 174.296710][T10447] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2113'. [ 174.405618][ T5400] ================================================================== [ 174.413761][ T5400] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 174.423258][ T5400] [ 174.425597][ T5400] write to 0xffff88814d24f588 of 1 bytes by task 10414 on cpu 0: [ 174.433321][ T5400] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 174.439244][ T5400] generic_perform_write+0x2c2/0x490 [ 174.444562][ T5400] ext4_buffered_write_iter+0x1ee/0x3c0 [ 174.450131][ T5400] ext4_file_write_iter+0xdbf/0xf00 [ 174.455363][ T5400] iter_file_splice_write+0x5f2/0x970 [ 174.460781][ T5400] direct_splice_actor+0x156/0x2a0 [ 174.465936][ T5400] splice_direct_to_actor+0x312/0x680 [ 174.471339][ T5400] do_splice_direct+0xda/0x150 [ 174.476142][ T5400] do_sendfile+0x380/0x650 [ 174.480589][ T5400] __x64_sys_sendfile64+0x105/0x150 [ 174.485824][ T5400] x64_sys_call+0xb39/0x2fb0 [ 174.490452][ T5400] do_syscall_64+0xd2/0x200 [ 174.494988][ T5400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.500906][ T5400] [ 174.503238][ T5400] read to 0xffff88814d24f400 of 1024 bytes by task 5400 on cpu 1: [ 174.511057][ T5400] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 174.517068][ T5400] generic_perform_write+0x2c2/0x490 [ 174.522376][ T5400] shmem_file_write_iter+0xc5/0xf0 [ 174.527512][ T5400] lo_rw_aio+0x5fa/0x7c0 [ 174.531810][ T5400] loop_process_work+0x52d/0xa60 [ 174.536777][ T5400] loop_workfn+0x31/0x40 [ 174.541051][ T5400] process_scheduled_works+0x4cb/0x9d0 [ 174.546546][ T5400] worker_thread+0x582/0x770 [ 174.551154][ T5400] kthread+0x486/0x510 [ 174.555242][ T5400] ret_from_fork+0xda/0x150 [ 174.559758][ T5400] ret_from_fork_asm+0x1a/0x30 [ 174.564546][ T5400] [ 174.566874][ T5400] Reported by Kernel Concurrency Sanitizer on: [ 174.573046][ T5400] CPU: 1 UID: 0 PID: 5400 Comm: kworker/u8:27 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 174.585410][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.595484][ T5400] Workqueue: loop2 loop_workfn [ 174.600282][ T5400] ================================================================== [ 174.734773][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.758763][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.481540][ T4211] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 60 sec