last executing test programs: 19.723404492s ago: executing program 0 (id=642): open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0xe, 0xf8, 0xb77e, 0x1d, @private1, @private0, 0x40, 0x10, 0x0, 0x89}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 19.414500143s ago: executing program 0 (id=648): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000740)='./file0\x00', 0x0) 19.263980804s ago: executing program 0 (id=650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f0000000040), 0x3, 0x51e, &(0x7f0000000680)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=") 18.730461525s ago: executing program 0 (id=667): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@gid}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@fat=@showexec}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x55c, &(0x7f0000000b00)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file1\x00') 18.276978037s ago: executing program 0 (id=670): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) 18.007593038s ago: executing program 0 (id=663): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) r0 = io_uring_setup(0x3698, &(0x7f0000000340)={0x0, 0x6faf, 0x1, 0x0, 0x2e1}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200), 0xc) read(r1, &(0x7f0000000540)=""/67, 0x43) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) 18.007184548s ago: executing program 32 (id=663): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) r0 = io_uring_setup(0x3698, &(0x7f0000000340)={0x0, 0x6faf, 0x1, 0x0, 0x2e1}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200), 0xc) read(r1, &(0x7f0000000540)=""/67, 0x43) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) 2.176146203s ago: executing program 3 (id=969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000056c0)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.158267002s ago: executing program 3 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x2) 1.600395434s ago: executing program 5 (id=980): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0xf}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 1.530813124s ago: executing program 5 (id=981): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080000e5b7040000000000008500000033000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000100)={r3}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r5, 0x401}, 0x8) 1.479383355s ago: executing program 5 (id=983): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x2, 0x0) setresgid(0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) syslog(0x2, &(0x7f0000000000)=""/94, 0x5e) 1.118732686s ago: executing program 3 (id=984): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x20, 0x3, 0x4, 0x3, 0x0, 0xf, 0x0}) 1.117946726s ago: executing program 2 (id=994): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x3}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.096774556s ago: executing program 3 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc1}}) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)="a6", 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 1.011813246s ago: executing program 2 (id=986): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_usbip_server_init(0x1) r1 = dup2(r0, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) write(r1, &(0x7f0000000280), 0x0) getrlimit(0x2, 0x0) 788.571517ms ago: executing program 1 (id=987): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@nobarrier}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x6a5}}, {@jqfmt_vfsv1}, {@block_validity}, {@mblk_io_submit}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") chdir(&(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xa0) 768.965867ms ago: executing program 1 (id=988): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 693.560307ms ago: executing program 1 (id=989): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0xe}], 0x1) 616.598268ms ago: executing program 1 (id=990): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f0000001a80)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000080)) 616.071648ms ago: executing program 4 (id=991): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 581.219368ms ago: executing program 1 (id=992): unshare(0x2a020400) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 580.590178ms ago: executing program 4 (id=1003): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 460.169808ms ago: executing program 5 (id=993): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cd9ae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 434.774938ms ago: executing program 2 (id=995): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1d, 0x6, 0x4f}) 433.701668ms ago: executing program 1 (id=1006): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x2, 0x0) setresgid(0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) syslog(0x2, &(0x7f0000000000)=""/94, 0x5e) 398.949378ms ago: executing program 4 (id=996): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) 64.239309ms ago: executing program 5 (id=1005): syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32], 0x1, 0x159, &(0x7f0000000500)="$eJzs27HK01AUB/ATv6hVl87iEHBxKuoTKFJBDChKB4uDQnVppWCX6NRH8YV8FEE6dbuiKbXWVigYY7/+fksP/Sdw7pCc3EBe3Xg3Hk1nb6dPF9HJssjvRRHLLLpxIc6iNg8A4DxZphRfU0rp8jyufIqUUtsdAQBNM/8B4PSY/wBwev40/7ttNgYANOb5i+Hj+2XZf1YUnYgv82pQDerfOn/4qOzfLn7YeBxYVNXgbJ3fqfPi1/xiXF3ld3fml+LWzTr/nj14Um7l12LU/PIBAADgJPSKtZ37+16++uu3vK423g9s7d/zuJ7/kyUAAAeaffg4fj2ZvHmvUBxBMcwi/oM2jq/4/DLioLPavjMBTft50bfdCQAAAAAAAAAAAAAAsM/f+sAoj4h9x7S9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANj2LQAA//+EAU2W") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.50294ms ago: executing program 2 (id=1007): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000069002e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x44) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 0s ago: executing program 4 (id=1008): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x6, 0x2, 0x8, 0x403, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 37.430086][ T29] audit: type=1326 audit(1732110300.424:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 37.453437][ T29] audit: type=1326 audit(1732110300.424:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 37.476886][ T29] audit: type=1326 audit(1732110300.424:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 37.563905][ T3325] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 37.669040][ T3955] pim6reg1: entered promiscuous mode [ 37.674585][ T3955] pim6reg1: entered allmulticast mode [ 37.697305][ T3960] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 37.720023][ T3960] loop0: detected capacity change from 0 to 512 [ 37.749991][ T3960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.801574][ T3960] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.831199][ T3967] tipc: Started in network mode [ 37.836247][ T3967] tipc: Node identity 4, cluster identity 4711 [ 37.842527][ T3967] tipc: Node number set to 4 [ 37.930404][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.114974][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.134949][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.200933][ T3983] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.222'. [ 38.210176][ T3983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'. [ 38.499306][ T3990] ªªªªªª: renamed from syzkaller0 [ 38.698339][ T3993] loop2: detected capacity change from 0 to 512 [ 38.724041][ T3993] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.733719][ T3993] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.740428][ T3993] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.758251][ T3993] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 38.765463][ T3993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.216: bg 0: block 40: padding at end of block bitmap is not set [ 38.783991][ T3993] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 38.794158][ T3993] EXT4-fs (loop2): 1 truncate cleaned up [ 38.800283][ T3993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.819221][ T3993] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.216: corrupted xattr block 31: invalid header [ 38.833738][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 38.843043][ T3993] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.216: corrupted xattr block 31: invalid header [ 38.857497][ T3993] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 38.868352][ T3993] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.216: bad symlink. [ 38.908765][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.945478][ T3999] loop1: detected capacity change from 0 to 2048 [ 38.984383][ T4002] bridge_slave_0: left allmulticast mode [ 38.990097][ T4002] bridge_slave_0: left promiscuous mode [ 38.995959][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.019153][ T4004] loop0: detected capacity change from 0 to 512 [ 39.025973][ T3999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.044625][ T4004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.063604][ T4002] bridge_slave_1: left allmulticast mode [ 39.069397][ T4002] bridge_slave_1: left promiscuous mode [ 39.075123][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.099849][ T4004] EXT4-fs (loop0): 1 truncate cleaned up [ 39.108432][ T4004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.133707][ T4002] bond0: (slave bond_slave_0): Releasing backup interface [ 39.153404][ T4002] bond0: (slave bond_slave_1): Releasing backup interface [ 39.164463][ T4002] team0: Port device team_slave_0 removed [ 39.203165][ T4002] team0: Port device team_slave_1 removed [ 39.212913][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.230061][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.238334][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.253719][ T4009] serio: Serial port ptm0 [ 39.260491][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.328822][ T4015] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.342468][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 39.353740][ T4021] syz.2.224[4021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.354010][ T4021] syz.2.224[4021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.380695][ T4021] syz.2.224[4021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.531058][ T3390] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 39.550123][ T3390] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 39.560669][ T4031] loop1: detected capacity change from 0 to 128 [ 39.575680][ T3390] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 39.584861][ T3390] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.621409][ T4035] tipc: Started in network mode [ 39.626438][ T4035] tipc: Node identity ca32267778d8, cluster identity 4711 [ 39.633674][ T4035] tipc: Enabled bearer , priority 7 [ 39.641154][ T4035] ªªªªªª: renamed from syzkaller0 [ 39.647886][ T4035] tipc: Disabling bearer [ 39.655798][ T4039] loop1: detected capacity change from 0 to 512 [ 39.671066][ T4039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.671458][ T8] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 39.688898][ T8] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 39.696702][ T8] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 39.705781][ T4039] EXT4-fs (loop1): 1 truncate cleaned up [ 39.705834][ T4041] loop3: detected capacity change from 0 to 128 [ 39.713417][ T4039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.718694][ T8] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.788164][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.837324][ T4049] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 39.860797][ T4049] loop1: detected capacity change from 0 to 512 [ 39.874647][ T4049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.887411][ T4049] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.928794][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.946866][ T4056] vlan2: entered promiscuous mode [ 39.952036][ T4056] vlan2: entered allmulticast mode [ 39.957291][ T4056] hsr_slave_1: entered allmulticast mode [ 40.057789][ T4052] netlink: 'syz.3.237': attribute type 15 has an invalid length. [ 40.072876][ T4063] loop0: detected capacity change from 0 to 2048 [ 40.099309][ T4063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.238962][ T4073] loop3: detected capacity change from 0 to 512 [ 40.265438][ T4073] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 40.298002][ T4073] System zones: 0-2, 18-18, 34-34 [ 40.311906][ T4073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.246: bg 0: block 248: padding at end of block bitmap is not set [ 40.333894][ T4077] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 40.366431][ T4077] syz_tun: entered promiscuous mode [ 40.387393][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.407865][ T4073] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.246: Failed to acquire dquot type 1 [ 40.433428][ T4077] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.466620][ T4073] EXT4-fs (loop3): 1 truncate cleaned up [ 40.481133][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.507416][ T4073] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.555606][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.833673][ T4085] serio: Serial port ptm0 [ 41.121662][ T4099] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 41.140585][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 41.166097][ T4099] loop4: detected capacity change from 0 to 512 [ 41.204859][ T4099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.252971][ T4099] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.319268][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.421890][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 41.617370][ T4121] IPv6: NLM_F_REPLACE set, but no existing node found! [ 41.650441][ T4122] loop4: detected capacity change from 0 to 512 [ 41.670210][ T4126] loop2: detected capacity change from 0 to 1024 [ 41.689046][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.704100][ T4122] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.712740][ T4122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.744813][ T4122] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.810025][ T4122] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 41.850151][ T4122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.263: bg 0: block 40: padding at end of block bitmap is not set [ 41.881420][ T4122] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 41.912441][ T4122] EXT4-fs (loop4): 1 truncate cleaned up [ 41.934054][ T4122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.953027][ T4122] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.263: corrupted xattr block 31: invalid header [ 41.987399][ T4122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 42.015848][ T4122] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.263: corrupted xattr block 31: invalid header [ 42.062406][ T4122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 42.087157][ T4122] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.263: bad symlink. [ 42.148812][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.284142][ T4140] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 42.299947][ T4140] syz_tun: entered promiscuous mode [ 42.314011][ T4140] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 42.409983][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 42.409998][ T29] audit: type=1326 audit(1732110305.534:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.484487][ T29] audit: type=1326 audit(1732110305.564:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.507970][ T29] audit: type=1326 audit(1732110305.574:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.531381][ T29] audit: type=1326 audit(1732110305.574:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.554719][ T29] audit: type=1326 audit(1732110305.574:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.576384][ T4147] loop0: detected capacity change from 0 to 512 [ 42.579184][ T29] audit: type=1326 audit(1732110305.574:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.608475][ T29] audit: type=1326 audit(1732110305.574:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.631821][ T29] audit: type=1326 audit(1732110305.574:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.645144][ T4147] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 42.655238][ T29] audit: type=1326 audit(1732110305.574:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.681089][ T4147] System zones: [ 42.686571][ T29] audit: type=1326 audit(1732110305.574:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 42.690136][ T4147] 0-2, 18-18, 34-34 [ 42.786348][ T4151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.277'. [ 42.806619][ T4153] loop3: detected capacity change from 0 to 512 [ 42.813844][ T4147] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.274: bg 0: block 248: padding at end of block bitmap is not set [ 42.839331][ T4153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.850430][ T4147] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.274: Failed to acquire dquot type 1 [ 42.865725][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.877367][ T4153] EXT4-fs (loop3): 1 truncate cleaned up [ 42.884261][ T4153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.899174][ T4147] EXT4-fs (loop0): 1 truncate cleaned up [ 42.912726][ T4147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.920549][ T4156] loop4: detected capacity change from 0 to 1024 [ 42.925446][ T4147] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.932577][ T4156] EXT4-fs: Ignoring removed oldalloc option [ 42.977807][ T4156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.027350][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.043246][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.067075][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.284645][ T4178] loop4: detected capacity change from 0 to 1024 [ 43.300811][ T4181] loop0: detected capacity change from 0 to 512 [ 43.309456][ T4178] EXT4-fs: Ignoring removed nobh option [ 43.315094][ T4178] EXT4-fs: Ignoring removed orlov option [ 43.323015][ T4184] loop3: detected capacity change from 0 to 1024 [ 43.332263][ T4184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.346040][ T4181] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.354052][ T4181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 43.363243][ T4181] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.369787][ T4178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0002] [ 43.378728][ T4181] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 43.388158][ T4178] System zones: 0-1, 3-12 [ 43.390079][ T4181] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 43.398927][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.425066][ T4181] EXT4-fs (loop0): 1 truncate cleaned up [ 43.449565][ T4181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.552887][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.599140][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.758208][ T4196] loop2: detected capacity change from 0 to 512 [ 43.787465][ T4196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.824974][ T4196] EXT4-fs (loop2): 1 truncate cleaned up [ 43.839748][ T4196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.945056][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.971894][ T4205] loop2: detected capacity change from 0 to 512 [ 43.974597][ T4206] loop1: detected capacity change from 0 to 512 [ 43.994706][ T4205] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 43.999562][ T4206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.003303][ T4205] System zones: 0-2, 18-18, 34-34 [ 44.030839][ T4206] EXT4-fs (loop1): 1 truncate cleaned up [ 44.066307][ T4205] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.293: bg 0: block 248: padding at end of block bitmap is not set [ 44.079771][ T4206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.102906][ T4205] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.293: Failed to acquire dquot type 1 [ 44.145254][ T4205] EXT4-fs (loop2): 1 truncate cleaned up [ 44.167554][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.220289][ T4205] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.239997][ T4212] loop0: detected capacity change from 0 to 8192 [ 44.278996][ T4212] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.310826][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.330351][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.394568][ T4217] @ÿ: renamed from vlan0 (while UP) [ 44.424004][ T4212] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 44.433064][ T4212] FAT-fs (loop0): Filesystem has been set read-only [ 44.464161][ T4212] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 44.487275][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.518897][ T4212] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 44.532373][ T4222] loop1: detected capacity change from 0 to 2048 [ 44.553595][ T4214] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 44.566872][ T4222] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.596157][ T4226] vlan2: entered promiscuous mode [ 44.601470][ T4226] vlan2: entered allmulticast mode [ 44.606724][ T4226] hsr_slave_1: entered allmulticast mode [ 44.617356][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.649722][ T4230] netlink: 'syz.4.301': attribute type 3 has an invalid length. [ 44.680878][ T4226] loop3: detected capacity change from 0 to 2048 [ 44.717092][ T3319] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 44.735209][ T4222] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.298: bg 0: block 234: padding at end of block bitmap is not set [ 44.752438][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.778685][ T4226] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.789294][ T4222] EXT4-fs (loop1): Remounting filesystem read-only [ 44.792256][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 44.816028][ T4226] hsr_slave_1 (unregistering): left allmulticast mode [ 44.826857][ T4226] hsr_slave_1 (unregistering): left promiscuous mode [ 44.874264][ T4238] loop4: detected capacity change from 0 to 512 [ 44.883925][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.906335][ T4238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.924500][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 44.928376][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.931014][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 44.945838][ T4238] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.946000][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 45.020950][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.042175][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.309'. [ 45.106347][ T4251] random: crng reseeded on system resumption [ 45.131739][ T4243] infiniband syz1: set active [ 45.136504][ T4243] infiniband syz1: added vcan0 [ 45.141488][ T3389] vcan0 speed is unknown, defaulting to 1000 [ 45.223118][ T4243] RDS/IB: syz1: added [ 45.227254][ T4243] smc: adding ib device syz1 with port count 1 [ 45.240073][ T4243] smc: ib device syz1 port 1 has pnetid [ 45.246226][ T3389] vcan0 speed is unknown, defaulting to 1000 [ 45.252811][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 45.325109][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 45.397428][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 45.489578][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 45.540712][ T4270] loop3: detected capacity change from 0 to 1024 [ 45.560368][ T4270] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.587167][ T4270] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 45.613637][ T4243] vcan0 speed is unknown, defaulting to 1000 [ 46.240430][ T4304] loop0: detected capacity change from 0 to 128 [ 46.435322][ T4321] loop4: detected capacity change from 0 to 1024 [ 46.484964][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.520434][ T4321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 46.559478][ T4321] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 46.571910][ T4321] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.571910][ T4321] [ 46.581598][ T4321] EXT4-fs (loop4): Total free blocks count 0 [ 46.587747][ T4321] EXT4-fs (loop4): Free/Dirty block details [ 46.593751][ T4321] EXT4-fs (loop4): free_blocks=68451041280 [ 46.599575][ T4321] EXT4-fs (loop4): dirty_blocks=16 [ 46.604733][ T4321] EXT4-fs (loop4): Block reservation details [ 46.610814][ T4321] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 46.703816][ T4335] loop2: detected capacity change from 0 to 2048 [ 46.728851][ T4338] serio: Serial port ptm0 [ 46.742430][ T4336] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 36 with error 28 [ 46.760087][ T4335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.855458][ T4349] loop4: detected capacity change from 0 to 256 [ 46.910761][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.080355][ T4363] vcan0 speed is unknown, defaulting to 1000 [ 47.135673][ T4369] loop1: detected capacity change from 0 to 1024 [ 47.150713][ T4369] EXT4-fs: Ignoring removed oldalloc option [ 47.164848][ T4369] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.192577][ T4369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.218970][ T4369] netlink: 'syz.1.346': attribute type 4 has an invalid length. [ 47.280239][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.341748][ T4367] syzkaller0: entered promiscuous mode [ 47.348101][ T4367] syzkaller0: entered allmulticast mode [ 47.358495][ T4377] loop1: detected capacity change from 0 to 512 [ 47.368082][ T4365] vcan0 speed is unknown, defaulting to 1000 [ 47.402018][ T4377] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.463006][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.530333][ T4377] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.597323][ T4386] random: crng reseeded on system resumption [ 47.614936][ T4377] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.348: corrupted xattr block 32: bad e_name length [ 47.672572][ T4377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 47.681774][ T4377] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.348: corrupted xattr block 32: bad e_name length [ 47.714594][ T4392] loop2: detected capacity change from 0 to 128 [ 47.741128][ T4377] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.348: corrupted xattr block 32: bad e_name length [ 47.783894][ T4377] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 47.794809][ T4392] syz.2.352: attempt to access beyond end of device [ 47.794809][ T4392] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.808201][ T4392] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 47.826042][ T4377] EXT4-fs error (device loop1): ext4_get_inode_usage:901: inode #15: comm syz.1.348: corrupted xattr block 32: bad e_name length [ 47.827082][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 47.827099][ T29] audit: type=1400 audit(1732110310.954:1186): avc: denied { setattr } for pid=4376 comm="syz.1.348" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.916371][ T29] audit: type=1400 audit(1732110311.044:1187): avc: denied { read } for pid=4401 comm="syz.0.354" path="socket:[7489]" dev="sockfs" ino=7489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.002877][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.037236][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 48.040003][ T29] audit: type=1326 audit(1732110311.164:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.069158][ T29] audit: type=1326 audit(1732110311.164:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.092681][ T29] audit: type=1326 audit(1732110311.164:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.115804][ T29] audit: type=1326 audit(1732110311.164:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.138721][ T29] audit: type=1326 audit(1732110311.164:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.153316][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 48.161762][ T29] audit: type=1326 audit(1732110311.164:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.193515][ T29] audit: type=1326 audit(1732110311.164:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.247986][ T29] audit: type=1326 audit(1732110311.184:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 48.308070][ T4434] vlan4: entered promiscuous mode [ 48.313255][ T4434] ip6gretap0: entered promiscuous mode [ 48.322558][ T4434] ip6gretap0: left promiscuous mode [ 48.335605][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 48.421699][ T4446] loop4: detected capacity change from 0 to 2048 [ 48.454613][ T4446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.467823][ T4446] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.529416][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.587156][ T4466] loop4: detected capacity change from 0 to 1024 [ 48.618706][ T4466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.636784][ T4466] dccp_invalid_packet: P.Data Offset(0) too small [ 48.760301][ T4476] pim6reg1: entered promiscuous mode [ 48.765692][ T4476] pim6reg1: entered allmulticast mode [ 48.785221][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.850834][ T4478] loop3: detected capacity change from 0 to 2048 [ 48.878344][ T4480] loop4: detected capacity change from 0 to 1024 [ 48.898755][ T4480] EXT4-fs: inline encryption not supported [ 48.912573][ T4478] loop3: p2 < > [ 48.917771][ T4480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.941559][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.004514][ T4487] loop2: detected capacity change from 0 to 512 [ 49.056807][ T4487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.077896][ T4487] EXT4-fs (loop2): 1 truncate cleaned up [ 49.087569][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.106922][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.144707][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.307569][ T4497] pim6reg1: entered promiscuous mode [ 49.313012][ T4497] pim6reg1: entered allmulticast mode [ 49.322082][ T4501] pim6reg1: entered promiscuous mode [ 49.327425][ T4501] pim6reg1: entered allmulticast mode [ 49.556462][ T4514] loop0: detected capacity change from 0 to 128 [ 49.610590][ T4519] loop3: detected capacity change from 0 to 512 [ 49.630641][ T4520] veth0_to_team: entered promiscuous mode [ 49.636463][ T4520] veth0_to_team: entered allmulticast mode [ 49.637933][ T4514] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.686267][ T4519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.753009][ T4519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 49.781420][ T4519] System zones: 1-12 [ 49.784811][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 49.808872][ T4519] EXT4-fs (loop3): 1 truncate cleaned up [ 49.815444][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 49.824400][ T4530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 49.898861][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 49.955221][ T4549] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.991184][ T4551] vlan4: entered allmulticast mode [ 50.060593][ T4556] netlink: 'syz.4.406': attribute type 10 has an invalid length. [ 50.077363][ T4556] team0: Port device geneve0 added [ 50.177246][ T4561] xt_hashlimit: max too large, truncated to 1048576 [ 50.193153][ T4561] Cannot find set identified by id 0 to match [ 50.283790][ T4573] ip6gre1: entered allmulticast mode [ 50.466837][ T4580] loop4: detected capacity change from 0 to 512 [ 50.541494][ T4580] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.897303][ T4606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 50.906344][ T4606] netlink: 'syz.1.425': attribute type 7 has an invalid length. [ 50.943186][ T4607] vcan0 speed is unknown, defaulting to 1000 [ 51.035434][ T4613] loop4: detected capacity change from 0 to 512 [ 51.119597][ T4613] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.343856][ T4628] vlan0: entered allmulticast mode [ 51.389326][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 51.598005][ T4644] loop4: detected capacity change from 0 to 128 [ 51.642745][ T4644] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.787081][ T4606] syz.1.425 (4606) used greatest stack depth: 6376 bytes left [ 51.809436][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 51.908901][ T4661] loop4: detected capacity change from 0 to 512 [ 51.930205][ T4661] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 51.968627][ T4661] EXT4-fs (loop4): invalid journal inode [ 51.984996][ T4661] EXT4-fs (loop4): can't get journal size [ 52.010045][ T4666] loop2: detected capacity change from 0 to 1024 [ 52.019388][ T4661] EXT4-fs (loop4): 1 truncate cleaned up [ 52.057048][ T4666] EXT4-fs: inline encryption not supported [ 52.072445][ T4666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.156569][ T4673] vlan2: entered promiscuous mode [ 52.161687][ T4673] ip6gretap0: entered promiscuous mode [ 52.219467][ T4673] ip6gretap0: left promiscuous mode [ 52.260679][ T4675] loop2: detected capacity change from 0 to 2048 [ 52.313075][ T4675] loop2: p2 < > [ 52.506293][ T4684] loop3: detected capacity change from 0 to 128 [ 52.539692][ T4684] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.569269][ T4684] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 52.841563][ T4710] vlan0: entered promiscuous mode [ 52.936289][ T4718] loop2: detected capacity change from 0 to 512 [ 52.948988][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 52.949004][ T29] audit: type=1400 audit(1732110316.074:1348): avc: denied { sqpoll } for pid=4717 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.979594][ T4719] loop1: detected capacity change from 0 to 512 [ 52.987234][ T4718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.013071][ T4719] EXT4-fs: inline encryption not supported [ 53.013525][ T4722] loop3: detected capacity change from 0 to 256 [ 53.031407][ T29] audit: type=1326 audit(1732110316.134:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.054870][ T29] audit: type=1326 audit(1732110316.134:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.078271][ T29] audit: type=1326 audit(1732110316.134:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.101679][ T29] audit: type=1326 audit(1732110316.134:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.114186][ T4718] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.125100][ T29] audit: type=1326 audit(1732110316.134:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.158909][ T29] audit: type=1326 audit(1732110316.134:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.165160][ T4718] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.472: corrupted xattr block 32: bad e_name length [ 53.182328][ T29] audit: type=1326 audit(1732110316.134:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.196833][ T4718] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 53.218944][ T29] audit: type=1326 audit(1732110316.134:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.227887][ T4718] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.472: corrupted xattr block 32: bad e_name length [ 53.251125][ T29] audit: type=1326 audit(1732110316.134:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82e79e819 code=0x7ffc0000 [ 53.288699][ T4719] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 53.302739][ T4718] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.472: corrupted xattr block 32: bad e_name length [ 53.303554][ T4719] EXT4-fs (loop1): mount failed [ 53.337266][ T4719] random: crng reseeded on system resumption [ 53.405529][ T4718] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 53.446209][ T4718] EXT4-fs error (device loop2): ext4_get_inode_usage:901: inode #15: comm syz.2.472: corrupted xattr block 32: bad e_name length [ 53.604733][ T4745] smc: net device bond0 applied user defined pnetid SYZ0 [ 53.612292][ T4745] smc: net device bond0 erased user defined pnetid SYZ0 [ 53.660468][ T4750] loop4: detected capacity change from 0 to 1764 [ 53.680903][ T4752] loop3: detected capacity change from 0 to 512 [ 53.695085][ T4748] syzkaller0: entered promiscuous mode [ 53.700602][ T4748] syzkaller0: entered allmulticast mode [ 53.735293][ T4752] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.867075][ T4766] loop3: detected capacity change from 0 to 512 [ 53.895039][ T4766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.919445][ T4770] loop2: detected capacity change from 0 to 256 [ 53.938920][ T4772] loop4: detected capacity change from 0 to 128 [ 53.953367][ T4766] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.975425][ T4772] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.994751][ T4777] serio: Serial port ptm0 [ 54.003150][ T4766] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.491: corrupted xattr block 32: bad e_name length [ 54.032643][ T4766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 54.041991][ T4766] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.491: corrupted xattr block 32: bad e_name length [ 54.103180][ T4766] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.491: corrupted xattr block 32: bad e_name length [ 54.176843][ T4766] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 54.216792][ T4766] EXT4-fs error (device loop3): ext4_get_inode_usage:901: inode #15: comm syz.3.491: corrupted xattr block 32: bad e_name length [ 54.231381][ T4782] __nla_validate_parse: 6 callbacks suppressed [ 54.231394][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 54.280615][ T4782] bridge_slave_1: left allmulticast mode [ 54.286407][ T4782] bridge_slave_1: left promiscuous mode [ 54.292219][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.303037][ T4782] bridge_slave_0: left allmulticast mode [ 54.308723][ T4782] bridge_slave_0: left promiscuous mode [ 54.314459][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.403327][ T4785] netem: change failed [ 54.549517][ T4802] loop3: detected capacity change from 0 to 128 [ 54.594350][ T4806] loop4: detected capacity change from 0 to 128 [ 54.654770][ T4806] syz.4.506: attempt to access beyond end of device [ 54.654770][ T4806] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.668237][ T4806] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 54.725595][ T4809] pim6reg1: entered promiscuous mode [ 54.730996][ T4809] pim6reg1: entered allmulticast mode [ 54.855036][ T4813] loop1: detected capacity change from 0 to 256 [ 54.953820][ T4817] loop4: detected capacity change from 0 to 512 [ 54.977933][ T4817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.015875][ T4817] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.042229][ T4817] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.511: corrupted xattr block 32: bad e_name length [ 55.078624][ T4817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.094886][ T4825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.132773][ T4817] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.511: corrupted xattr block 32: bad e_name length [ 55.176983][ T4817] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.511: corrupted xattr block 32: bad e_name length [ 55.217884][ T4817] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.252803][ T4817] EXT4-fs error (device loop4): ext4_get_inode_usage:901: inode #15: comm syz.4.511: corrupted xattr block 32: bad e_name length [ 55.548704][ T4838] loop2: detected capacity change from 0 to 1024 [ 55.574376][ T4838] EXT4-fs: Ignoring removed oldalloc option [ 55.596225][ T4838] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 55.646699][ T4838] netlink: 'syz.2.519': attribute type 4 has an invalid length. [ 55.933377][ T4844] loop3: detected capacity change from 0 to 128 [ 56.041043][ T4844] syz.3.520: attempt to access beyond end of device [ 56.041043][ T4844] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.054470][ T4844] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 56.170475][ T4852] loop4: detected capacity change from 0 to 1024 [ 56.193159][ T4854] netem: change failed [ 56.202284][ T4852] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.079336][ T4882] loop2: detected capacity change from 0 to 1764 [ 57.122612][ T4884] loop2: detected capacity change from 0 to 512 [ 57.164772][ T4884] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.184424][ T4890] loop1: detected capacity change from 0 to 128 [ 57.290977][ T4890] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.337888][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 57.356270][ T4890] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 57.413620][ T4903] loop2: detected capacity change from 0 to 128 [ 57.442645][ T4903] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.565324][ T4912] tipc: New replicast peer: 255.255.255.255 [ 57.571480][ T4912] tipc: Enabled bearer , priority 10 [ 57.693908][ T4923] loop1: detected capacity change from 0 to 1024 [ 57.727753][ T4925] loop4: detected capacity change from 0 to 512 [ 57.741024][ T4925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.742280][ T4929] pim6reg1: entered promiscuous mode [ 57.756212][ T4929] pim6reg1: entered allmulticast mode [ 57.763199][ T4931] loop0: detected capacity change from 0 to 128 [ 57.771293][ T4925] EXT4-fs (loop4): 1 truncate cleaned up [ 57.786355][ T4931] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.801600][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 57.813015][ T4931] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 57.841099][ T4936] loop4: detected capacity change from 0 to 4096 [ 57.905339][ T4940] loop0: detected capacity change from 0 to 512 [ 57.912582][ T4940] EXT4-fs: inline encryption not supported [ 57.934924][ T4940] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 58.021441][ T4940] EXT4-fs (loop0): mount failed [ 58.046440][ T4940] random: crng reseeded on system resumption [ 58.053454][ T4948] loop4: detected capacity change from 0 to 512 [ 58.073580][ T4949] loop3: detected capacity change from 0 to 2048 [ 58.113614][ T4948] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.179541][ T4948] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.560: corrupted inode contents [ 58.195632][ T4956] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 58.205900][ T4956] vlan4: entered promiscuous mode [ 58.211044][ T4956] ip6gretap0: entered promiscuous mode [ 58.216656][ T4956] vlan4: entered allmulticast mode [ 58.221851][ T4956] ip6gretap0: entered allmulticast mode [ 58.229170][ T4948] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.560: mark_inode_dirty error [ 58.250888][ T4948] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.560: corrupted inode contents [ 58.263712][ T4948] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.560: mark_inode_dirty error [ 58.276310][ T4956] ip6gretap0: left allmulticast mode [ 58.281762][ T4956] ip6gretap0: left promiscuous mode [ 58.287102][ T4948] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.560: mark inode dirty (error -117) [ 58.316985][ T4948] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 58.392138][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 58.392156][ T29] audit: type=1400 audit(1732110321.524:1589): avc: denied { connect } for pid=4959 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.434530][ T4958] team0: Device ipvlan2 failed to register rx_handler [ 58.473793][ T29] audit: type=1400 audit(1732110321.524:1590): avc: denied { write } for pid=4959 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.511271][ T4970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.687218][ T29] audit: type=1326 audit(1732110321.814:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 58.747593][ T29] audit: type=1326 audit(1732110321.844:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f188d81d1b0 code=0x7ffc0000 [ 58.771052][ T29] audit: type=1326 audit(1732110321.844:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f188d81d1b0 code=0x7ffc0000 [ 58.794481][ T29] audit: type=1326 audit(1732110321.844:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 58.817837][ T29] audit: type=1326 audit(1732110321.844:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 58.841169][ T29] audit: type=1326 audit(1732110321.844:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 58.864676][ T29] audit: type=1326 audit(1732110321.844:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 58.875848][ T4979] loop0: detected capacity change from 0 to 512 [ 58.888013][ T29] audit: type=1326 audit(1732110321.844:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4975 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d81e819 code=0x7ffc0000 [ 58.905115][ T4979] EXT4-fs: Ignoring removed bh option [ 58.946994][ T4979] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 58.967967][ T4979] EXT4-fs (loop0): 1 truncate cleaned up [ 59.062080][ T4979] loop0: detected capacity change from 512 to 64 [ 59.076551][ T4979] syz.0.570: attempt to access beyond end of device [ 59.076551][ T4979] loop0: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 59.089894][ T4979] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 59.101107][ T4979] Buffer I/O error on device loop0, logical block 36 [ 59.107835][ T4979] Buffer I/O error on device loop0, logical block 37 [ 59.114512][ T4979] Buffer I/O error on device loop0, logical block 38 [ 59.121211][ T4979] Buffer I/O error on device loop0, logical block 39 [ 59.127940][ T4979] Buffer I/O error on device loop0, logical block 40 [ 59.134727][ T4979] Buffer I/O error on device loop0, logical block 41 [ 59.141432][ T4979] Buffer I/O error on device loop0, logical block 42 [ 59.148167][ T4979] Buffer I/O error on device loop0, logical block 43 [ 59.154950][ T4979] Buffer I/O error on device loop0, logical block 44 [ 59.161644][ T4979] Buffer I/O error on device loop0, logical block 45 [ 59.171978][ T4989] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 61:freeing already freed block (bit 60); block bitmap corrupt. [ 59.187949][ T4989] syz.0.570: attempt to access beyond end of device [ 59.187949][ T4989] loop0: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 59.193266][ T4991] loop2: detected capacity change from 0 to 1024 [ 59.201218][ T4989] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 59.208306][ T4991] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.249234][ T4978] EXT4-fs (loop0): pa ffff8881056c65b0: logic 0, phys. 49, len 207 [ 59.257433][ T4978] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 207, pa_free 205 [ 59.305323][ T4997] ref_ctr increment failed for inode: 0x2a9 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810324da40 [ 59.317536][ T4996] uprobe: syz.4.579:4996 failed to unregister, leaking uprobe [ 59.341180][ T5001] loop3: detected capacity change from 0 to 512 [ 59.360834][ T5001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.394550][ T5001] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.403516][ T5007] pim6reg1: entered promiscuous mode [ 59.408870][ T5007] pim6reg1: entered allmulticast mode [ 59.416897][ T5001] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.580: bg 0: block 248: padding at end of block bitmap is not set [ 59.431560][ T5001] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.580: Failed to acquire dquot type 1 [ 59.453537][ T5001] EXT4-fs (loop3): 1 truncate cleaned up [ 59.475650][ T5004] vcan0 speed is unknown, defaulting to 1000 [ 59.521268][ T5020] loop3: detected capacity change from 0 to 128 [ 59.573829][ T5020] syz.3.585: attempt to access beyond end of device [ 59.573829][ T5020] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 59.633626][ T5027] loop2: detected capacity change from 0 to 128 [ 59.671026][ T5027] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.727222][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 59.790123][ T5040] loop3: detected capacity change from 0 to 512 [ 59.826265][ T5040] EXT4-fs: Ignoring removed bh option [ 59.835093][ T5044] loop1: detected capacity change from 0 to 128 [ 59.855331][ T5040] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.876691][ T5042] loop0: detected capacity change from 0 to 4096 [ 59.895722][ T5040] EXT4-fs (loop3): 1 truncate cleaned up [ 59.951992][ T5040] loop3: detected capacity change from 512 to 64 [ 59.985048][ T5049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.592'. [ 59.995124][ T5040] syz.3.588: attempt to access beyond end of device [ 59.995124][ T5040] loop3: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 60.008418][ T5040] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 60.062560][ T5054] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 61:freeing already freed block (bit 60); block bitmap corrupt. [ 60.112069][ T5058] netlink: 'syz.4.596': attribute type 10 has an invalid length. [ 60.134123][ T5054] syz.3.588: attempt to access beyond end of device [ 60.134123][ T5054] loop3: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 60.147437][ T5054] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 60.160374][ T5058] geneve1: entered promiscuous mode [ 60.165491][ T5039] EXT4-fs (loop3): pa ffff8881056c6620: logic 0, phys. 49, len 207 [ 60.173589][ T5039] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 207, pa_free 205 [ 60.187951][ T5058] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 60.248568][ T5059] tipc: Enabled bearer , priority 7 [ 60.299911][ T5061] ªªªªªª: renamed from syzkaller0 [ 60.318063][ T5067] syz.0.599[5067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.318187][ T5067] syz.0.599[5067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.330790][ T5061] tipc: Disabling bearer [ 60.341114][ T5067] syz.0.599[5067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.385235][ T5068] pim6reg1: entered promiscuous mode [ 60.401982][ T5068] pim6reg1: entered allmulticast mode [ 60.566247][ T5072] bond0: (slave syz_tun): Releasing backup interface [ 60.606955][ T5072] bond0: (slave bond_slave_0): Releasing backup interface [ 60.624946][ T5072] bond0: (slave bond_slave_1): Releasing backup interface [ 60.648712][ T5072] team0: Port device team_slave_0 removed [ 60.675511][ T5072] team0: Port device team_slave_1 removed [ 60.690636][ T5072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.698110][ T5072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.719844][ T5072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.727436][ T5072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.770469][ T5072] team0: Port device geneve0 removed [ 60.782888][ T5072] bond0: (slave geneve1): Releasing backup interface [ 60.795659][ T5072] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.804904][ T5072] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.813950][ T5072] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.822935][ T5072] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.312691][ T5093] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 61.345781][ T5093] bridge_slave_0: left promiscuous mode [ 61.351660][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.434693][ T5098] loop4: detected capacity change from 0 to 4096 [ 61.690308][ T5098] ext4: Unknown parameter 'ÿÿs—ø‰:Y‚‚–ÍçÔ' [ 61.875726][ T5120] vlan0: entered promiscuous mode [ 61.880846][ T5120] vlan0: entered allmulticast mode [ 61.938375][ T5126] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 61.949421][ T5126] team0: Port device geneve0 added [ 61.988083][ T5124] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 62.028203][ T5135] loop3: detected capacity change from 0 to 1024 [ 62.035294][ T5135] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 62.041760][ T5133] loop0: detected capacity change from 0 to 4096 [ 62.052539][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 62.067546][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 62.364486][ T5143] loop4: detected capacity change from 0 to 1024 [ 62.385973][ T5143] EXT4-fs: Ignoring removed nobh option [ 62.391779][ T5143] EXT4-fs: Ignoring removed orlov option [ 62.424601][ T5143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0002] [ 62.447088][ T5143] System zones: 0-1, 3-12 [ 62.689217][ T5153] loop4: detected capacity change from 0 to 1024 [ 62.717870][ T5153] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.869984][ T5166] loop1: detected capacity change from 0 to 512 [ 62.890043][ T5166] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.637: corrupted xattr block 255: invalid header [ 62.906469][ T5166] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 62.915790][ T5166] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz.1.637: corrupted xattr block 255: invalid header [ 62.929894][ T5166] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 63.007511][ T5172] vlan0: entered promiscuous mode [ 63.012710][ T5172] ip6gretap0: entered promiscuous mode [ 63.018397][ T5172] vlan0: entered allmulticast mode [ 63.023562][ T5172] ip6gretap0: entered allmulticast mode [ 63.045513][ T5174] syz.0.639[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.045669][ T5174] syz.0.639[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.067574][ T5172] ip6gretap0: left allmulticast mode [ 63.084361][ T5172] ip6gretap0: left promiscuous mode [ 63.100592][ T5174] syz.0.639[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.155805][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 63.239968][ T5179] syz.1.641[5179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.240087][ T5179] syz.1.641[5179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.263541][ T5179] syz.1.641[5179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.302075][ T5179] pim6reg1: entered promiscuous mode [ 63.318772][ T5179] pim6reg1: entered allmulticast mode [ 63.404555][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 63.404569][ T29] audit: type=1326 audit(1732110326.534:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa20757e7 code=0x7ffc0000 [ 63.461163][ T29] audit: type=1326 audit(1732110326.564:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa201a1a9 code=0x7ffc0000 [ 63.484515][ T29] audit: type=1326 audit(1732110326.564:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa20757e7 code=0x7ffc0000 [ 63.507913][ T29] audit: type=1326 audit(1732110326.564:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa201a1a9 code=0x7ffc0000 [ 63.531200][ T29] audit: type=1326 audit(1732110326.564:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 63.554583][ T29] audit: type=1326 audit(1732110326.574:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa20757e7 code=0x7ffc0000 [ 63.578413][ T29] audit: type=1326 audit(1732110326.574:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa201a1a9 code=0x7ffc0000 [ 63.601948][ T29] audit: type=1326 audit(1732110326.574:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 63.625370][ T29] audit: type=1326 audit(1732110326.584:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4aa20757e7 code=0x7ffc0000 [ 63.648690][ T29] audit: type=1326 audit(1732110326.584:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4aa201a1a9 code=0x7ffc0000 [ 63.686969][ T5187] loop2: detected capacity change from 0 to 512 [ 63.698616][ T5187] EXT4-fs: Ignoring removed bh option [ 63.711148][ T5187] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 63.754528][ T5187] EXT4-fs (loop2): 1 truncate cleaned up [ 63.822143][ T5187] loop2: detected capacity change from 512 to 64 [ 63.886978][ T5187] syz.2.645: attempt to access beyond end of device [ 63.886978][ T5187] loop2: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 63.900330][ T5187] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 63.922158][ T5194] pim6reg1: entered promiscuous mode [ 63.922989][ T5187] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 63.927549][ T5194] pim6reg1: entered allmulticast mode [ 63.940593][ T5187] inode 15: block 61:freeing already freed block (bit 60); block bitmap corrupt. [ 63.974717][ T5187] syz.2.645: attempt to access beyond end of device [ 63.974717][ T5187] loop2: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 63.988210][ T5187] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 64.001974][ T5201] ref_ctr increment failed for inode: 0x23e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810324ef40 [ 64.004772][ T5186] EXT4-fs (loop2): pa ffff8881060f1230: logic 0, phys. 49, len 207 [ 64.021133][ T5186] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 207, pa_free 205 [ 64.036665][ T5200] uprobe: syz.3.651:5200 failed to unregister, leaking uprobe [ 64.036717][ T5199] loop0: detected capacity change from 0 to 512 [ 64.103310][ T5199] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 64.111270][ T5199] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 64.119347][ T5199] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.125320][ T5199] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.131824][ T5199] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.146532][ T5199] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 64.157101][ T5199] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.650: bad orphan inode 16 [ 64.173604][ T5199] ext4_test_bit(bit=15, block=18) = 1 [ 64.179166][ T5199] is_bad_inode(inode)=0 [ 64.183384][ T5199] NEXT_ORPHAN(inode)=0 [ 64.187456][ T5199] max_ino=32 [ 64.190675][ T5199] i_nlink=2 [ 64.249729][ T5213] pim6reg1: entered promiscuous mode [ 64.255174][ T5213] pim6reg1: entered allmulticast mode [ 64.449891][ T5216] loop0: detected capacity change from 0 to 256 [ 64.531807][ T5216] loop0: detected capacity change from 256 to 0 [ 64.541186][ T5218] syz.0.667: attempt to access beyond end of device [ 64.541186][ T5218] loop0: rw=0, sector=12, nr_sectors = 4 limit=0 [ 64.584375][ T5218] FAT-fs (loop0): Directory bread(block 3) failed [ 64.607879][ T5218] syz.0.667: attempt to access beyond end of device [ 64.607879][ T5218] loop0: rw=0, sector=12, nr_sectors = 4 limit=0 [ 64.673629][ T5218] FAT-fs (loop0): Directory bread(block 3) failed [ 64.712730][ T3319] syz-executor: attempt to access beyond end of device [ 64.712730][ T3319] loop0: rw=0, sector=12, nr_sectors = 4 limit=0 [ 64.771664][ T3319] FAT-fs (loop0): Directory bread(block 3) failed [ 64.810093][ T50] kworker/u8:3: attempt to access beyond end of device [ 64.810093][ T50] loop0: rw=0, sector=48, nr_sectors = 4 limit=0 [ 64.833176][ T50] FAT-fs (loop0): unable to read inode block for updating (i_pos 770) [ 64.861340][ T3319] syz-executor: attempt to access beyond end of device [ 64.861340][ T3319] loop0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 64.904282][ T3319] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 65.016200][ T5225] loop2: detected capacity change from 0 to 1024 [ 65.062220][ T5225] EXT4-fs: Ignoring removed nobh option [ 65.067827][ T5225] EXT4-fs: Ignoring removed orlov option [ 65.118578][ T5207] loop1: detected capacity change from 0 to 65536 [ 65.214082][ T5225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842c018, mo2=0002] [ 65.223444][ T5225] System zones: 0-1, 3-12 [ 65.269591][ T5232] ref_ctr increment failed for inode: 0x305 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881039e6a00 [ 65.327554][ T5231] uprobe: syz.4.661:5231 failed to unregister, leaking uprobe [ 65.401635][ T5207] loop1: detected capacity change from 0 to 1024 [ 65.421461][ T5244] loop4: detected capacity change from 0 to 1024 [ 65.427913][ T5207] EXT4-fs: Ignoring removed nobh option [ 65.433654][ T5207] EXT4-fs: Ignoring removed orlov option [ 65.509821][ T5233] vcan0 speed is unknown, defaulting to 1000 [ 65.693062][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 65.720422][ T5267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.785783][ T5267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.818218][ T5264] netlink: 'syz.1.673': attribute type 3 has an invalid length. [ 65.880284][ T5267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.915005][ T5267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.930466][ T5273] loop4: detected capacity change from 0 to 256 [ 65.936990][ T5282] 9pnet_fd: Insufficient options for proto=fd [ 65.937293][ T5273] vfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿ18446744073709551615' [ 65.958957][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.966096][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.973548][ T5233] bridge_slave_0: entered allmulticast mode [ 65.977087][ T5273] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6 [ 65.980165][ T5233] bridge_slave_0: entered promiscuous mode [ 65.995380][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.002516][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.009965][ T5233] bridge_slave_1: entered allmulticast mode [ 66.018686][ T5233] bridge_slave_1: entered promiscuous mode [ 66.044098][ T5284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.070978][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.084615][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.103241][ T5284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.147849][ T5233] team0: Port device team_slave_0 added [ 66.174477][ T5284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.196151][ T5233] team0: Port device team_slave_1 added [ 66.226068][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.233165][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.259154][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.311032][ T5284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.342753][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.349772][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.375890][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.419276][ T5288] tipc: New replicast peer: 255.255.255.5 [ 66.425182][ T5288] tipc: Enabled bearer , priority 10 [ 66.447703][ T5284] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.462319][ T5233] hsr_slave_0: entered promiscuous mode [ 66.478282][ T5233] hsr_slave_1: entered promiscuous mode [ 66.485972][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.495564][ T5233] Cannot create hsr debugfs directory [ 66.503762][ T5284] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.519613][ T5284] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.540139][ T5284] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.606290][ T5300] loop4: detected capacity change from 0 to 128 [ 66.708189][ T5233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.743544][ T5233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.752660][ T5306] IPv4: Oversized IP packet from 127.202.26.0 [ 66.766177][ T5233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.775315][ T5233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.833934][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.693'. [ 66.843084][ T5311] all: renamed from ip6_vti0 (while UP) [ 66.860606][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.885856][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.903583][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.910699][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.935555][ T5233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.946007][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.960125][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.967265][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.996138][ T5313] ALSA: seq fatal error: cannot create timer (-22) [ 67.088842][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.253397][ T5233] veth0_vlan: entered promiscuous mode [ 67.274412][ T5233] veth1_vlan: entered promiscuous mode [ 67.308698][ T5341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.333908][ T5233] veth0_macvtap: entered promiscuous mode [ 67.344001][ T5233] veth1_macvtap: entered promiscuous mode [ 67.361540][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.372142][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.382044][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.392851][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.414658][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.426103][ T5341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.445613][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.456295][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.466237][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.476726][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.489680][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.500076][ T5233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.508860][ T5233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.517611][ T5233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526495][ T5233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.556192][ T5341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.610783][ T5350] loop5: detected capacity change from 0 to 512 [ 67.624538][ T5341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.649870][ T5350] EXT4-fs: Ignoring removed bh option [ 67.671095][ T5350] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 67.700142][ T5341] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.722787][ T5341] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.731664][ T5350] EXT4-fs (loop5): 1 truncate cleaned up [ 67.734261][ T5341] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.749566][ T5341] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.762614][ T5350] EXT4-fs mount: 80 callbacks suppressed [ 67.762764][ T5350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.818099][ T5368] syz.4.708[5368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.818263][ T5368] syz.4.708[5368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.830817][ T5368] syz.4.708[5368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.848568][ T5350] loop5: detected capacity change from 512 to 64 [ 67.888923][ T5371] syz.5.664: attempt to access beyond end of device [ 67.888923][ T5371] loop5: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 67.902278][ T5371] EXT4-fs warning (device loop5): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 67.913601][ T5371] buffer_io_error: 62 callbacks suppressed [ 67.913615][ T5371] Buffer I/O error on device loop5, logical block 36 [ 67.926175][ T5371] Buffer I/O error on device loop5, logical block 37 [ 67.932863][ T5371] Buffer I/O error on device loop5, logical block 38 [ 67.939558][ T5371] Buffer I/O error on device loop5, logical block 39 [ 67.946426][ T5371] Buffer I/O error on device loop5, logical block 40 [ 67.953181][ T5371] Buffer I/O error on device loop5, logical block 41 [ 67.959880][ T5371] Buffer I/O error on device loop5, logical block 42 [ 67.966560][ T5371] Buffer I/O error on device loop5, logical block 43 [ 67.973505][ T5371] Buffer I/O error on device loop5, logical block 44 [ 67.977040][ T5368] vcan0 speed is unknown, defaulting to 1000 [ 67.980254][ T5371] Buffer I/O error on device loop5, logical block 45 [ 67.997389][ T5378] loop2: detected capacity change from 0 to 256 [ 68.010385][ T5350] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 61:freeing already freed block (bit 60); block bitmap corrupt. [ 68.031513][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 68.040603][ T5380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.048116][ T5380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.056047][ T5380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.063506][ T5380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.072285][ T5350] syz.5.664: attempt to access beyond end of device [ 68.072285][ T5350] loop5: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 68.085655][ T5350] EXT4-fs warning (device loop5): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 68.110731][ T5349] EXT4-fs (loop5): pa ffff8881056c6540: logic 0, phys. 49, len 207 [ 68.118975][ T5349] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 207, pa_free 205 [ 68.180991][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.193671][ T5384] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 68.193671][ T5384] program syz.2.714 not setting count and/or reply_len properly [ 68.207853][ T5386] loop5: detected capacity change from 0 to 512 [ 68.234317][ T5386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.248187][ T5386] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.265237][ T5390] SELinux: syz.2.716 (5390) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.323027][ T5391] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 68.384223][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.416367][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 68.416385][ T29] audit: type=1326 audit(1732110331.534:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 68.529517][ T5401] loop4: detected capacity change from 0 to 512 [ 68.593276][ T5401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.609379][ T5401] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.671392][ T5401] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.722: corrupted inode contents [ 68.719990][ T5401] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.722: mark_inode_dirty error [ 68.749138][ T5415] loop1: detected capacity change from 0 to 512 [ 68.767218][ T5401] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.722: corrupted inode contents [ 68.787799][ T5415] EXT4-fs: Ignoring removed bh option [ 68.805520][ T5415] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 68.811211][ T5401] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.722: mark_inode_dirty error [ 68.838809][ T5415] EXT4-fs (loop1): 1 truncate cleaned up [ 68.851958][ T5415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.864444][ T5401] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.722: mark inode dirty (error -117) [ 68.913890][ T5401] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 68.932527][ T5415] loop1: detected capacity change from 512 to 64 [ 68.946479][ T5415] syz.1.726: attempt to access beyond end of device [ 68.946479][ T5415] loop1: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 68.959815][ T5415] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 68.987801][ T5415] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 61:freeing already freed block (bit 60); block bitmap corrupt. [ 68.991437][ T5420] loop5: detected capacity change from 0 to 128 [ 69.002406][ T5415] syz.1.726: attempt to access beyond end of device [ 69.002406][ T5415] loop1: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 69.022021][ T5415] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 69.034779][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.039450][ T5414] EXT4-fs (loop1): pa ffff8881056c65b0: logic 0, phys. 49, len 207 [ 69.051785][ T5414] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 207, pa_free 205 [ 69.063712][ T5420] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.085127][ T5420] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.124591][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.217131][ T5425] EXT4-fs (loop5): shut down requested (0) [ 69.271627][ T5233] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.364686][ T29] audit: type=1400 audit(1732110332.494:1992): avc: denied { write } for pid=5432 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.443268][ T29] audit: type=1326 audit(1732110332.564:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.466858][ T29] audit: type=1326 audit(1732110332.564:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.490430][ T29] audit: type=1326 audit(1732110332.574:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.513943][ T29] audit: type=1326 audit(1732110332.574:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.537455][ T29] audit: type=1326 audit(1732110332.574:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.560976][ T29] audit: type=1326 audit(1732110332.574:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.584395][ T29] audit: type=1326 audit(1732110332.574:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.608014][ T29] audit: type=1326 audit(1732110332.574:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f076e819 code=0x7ffc0000 [ 69.759068][ T5441] loop2: detected capacity change from 0 to 256 [ 69.922701][ T5448] vhci_hcd: invalid port number 255 [ 69.927950][ T5448] vhci_hcd: default hub control req: 0400 v0000 i00ff l0 [ 70.226257][ T5454] loop5: detected capacity change from 0 to 512 [ 70.234773][ T5454] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.742: corrupted in-inode xattr: invalid ea_ino [ 70.249911][ T5454] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.742: couldn't read orphan inode 15 (err -117) [ 70.262842][ T5454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.306108][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.356471][ T5459] loop5: detected capacity change from 0 to 1024 [ 70.364242][ T5459] EXT4-fs: Ignoring removed oldalloc option [ 70.370625][ T5459] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 70.393318][ T5459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.424754][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.694664][ T5474] loop1: detected capacity change from 0 to 512 [ 70.710787][ T5474] EXT4-fs: inline encryption not supported [ 70.753132][ T5474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.783618][ T5474] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.852890][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.939200][ T5491] loop1: detected capacity change from 0 to 1024 [ 71.004194][ T5491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 71.064025][ T5504] pim6reg1: entered promiscuous mode [ 71.069466][ T5504] pim6reg1: entered allmulticast mode [ 71.082973][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 71.306761][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 71.358310][ T5516] hsr_slave_1 (unregistering): left allmulticast mode [ 71.391339][ T5516] hsr_slave_1 (unregistering): left promiscuous mode [ 71.439399][ T5520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.763'. [ 71.578519][ T5530] syzkaller0: entered allmulticast mode [ 71.586754][ T5530] syzkaller0 (unregistering): left allmulticast mode [ 71.666255][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 71.675135][ T5535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.769'. [ 71.698471][ T5535] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.707474][ T5535] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.716329][ T5535] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.725156][ T5535] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.738773][ T5535] vxlan0: entered promiscuous mode [ 71.801186][ T5543] bond_slave_1: mtu less than device minimum [ 71.834506][ T5545] loop2: detected capacity change from 0 to 1024 [ 71.844487][ T5545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.879830][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.035973][ T5557] loop1: detected capacity change from 0 to 128 [ 72.058134][ T5557] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.072062][ T5557] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.122074][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.437583][ T5573] loop1: detected capacity change from 0 to 256 [ 72.465003][ T5573] FAT-fs (loop1): Directory bread(block 64) failed [ 72.482770][ T5573] FAT-fs (loop1): Directory bread(block 65) failed [ 72.497774][ T5573] FAT-fs (loop1): Directory bread(block 66) failed [ 72.505050][ T5573] FAT-fs (loop1): Directory bread(block 67) failed [ 72.513430][ T5575] loop5: detected capacity change from 0 to 128 [ 72.523425][ T5573] FAT-fs (loop1): Directory bread(block 68) failed [ 72.530132][ T5573] FAT-fs (loop1): Directory bread(block 69) failed [ 72.553816][ T5573] FAT-fs (loop1): Directory bread(block 70) failed [ 72.572665][ T5573] FAT-fs (loop1): Directory bread(block 71) failed [ 72.579313][ T5573] FAT-fs (loop1): Directory bread(block 72) failed [ 72.595245][ T5573] FAT-fs (loop1): Directory bread(block 73) failed [ 72.659617][ T5585] loop5: detected capacity change from 0 to 512 [ 72.748138][ T5585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.781430][ T5585] EXT4-fs (loop5): shut down requested (0) [ 72.843762][ T5591] team0 (unregistering): Port device team_slave_0 removed [ 72.869365][ T28] kworker/u8:1: attempt to access beyond end of device [ 72.869365][ T28] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 72.884994][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.896609][ T28] kworker/u8:1: attempt to access beyond end of device [ 72.896609][ T28] loop1: rw=1, sector=1864, nr_sectors = 2048 limit=256 [ 72.913646][ T5591] team0 (unregistering): Port device team_slave_1 removed [ 72.914973][ T28] kworker/u8:1: attempt to access beyond end of device [ 72.914973][ T28] loop1: rw=1, sector=3912, nr_sectors = 2048 limit=256 [ 72.938275][ T28] kworker/u8:1: attempt to access beyond end of device [ 72.938275][ T28] loop1: rw=1, sector=5960, nr_sectors = 1512 limit=256 [ 72.964161][ T5596] pim6reg1: entered promiscuous mode [ 72.969510][ T5596] pim6reg1: entered allmulticast mode [ 73.044385][ T5604] syz.3.799[5604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.044528][ T5604] syz.3.799[5604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.062940][ T5604] syz.3.799[5604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.082934][ T5607] loop5: detected capacity change from 0 to 1024 [ 73.162133][ T5607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.190665][ T5614] loop1: detected capacity change from 0 to 512 [ 73.199428][ T5616] ref_ctr increment failed for inode: 0x3cf offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881039e4000 [ 73.224539][ T5610] uprobe: syz.2.798:5610 failed to unregister, leaking uprobe [ 73.242507][ T5614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.267378][ T5614] EXT4-fs (loop1): 1 truncate cleaned up [ 73.278022][ T5614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.336343][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.351056][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.412887][ T5629] loop2: detected capacity change from 0 to 128 [ 73.432426][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 73.432444][ T29] audit: type=1400 audit(1732110336.554:2146): avc: denied { mounton } for pid=5630 comm="syz.1.809" path="/151/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.447416][ T5632] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 73.468809][ T5632] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 73.479129][ T5629] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.505573][ T5629] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.548292][ T29] audit: type=1400 audit(1732110336.624:2147): avc: denied { mount } for pid=5630 comm="syz.1.809" name="/" dev="9p" ino=11556495956974046440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.572036][ T29] audit: type=1400 audit(1732110336.634:2148): avc: denied { mount } for pid=5628 comm="syz.2.808" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.653227][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.672516][ T29] audit: type=1400 audit(1732110336.734:2149): avc: denied { create } for pid=5635 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.691989][ T29] audit: type=1400 audit(1732110336.734:2150): avc: denied { read } for pid=5635 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.711219][ T29] audit: type=1400 audit(1732110336.754:2151): avc: denied { write } for pid=5628 comm="syz.2.808" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.733297][ T29] audit: type=1400 audit(1732110336.754:2152): avc: denied { add_name } for pid=5628 comm="syz.2.808" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.775179][ T29] audit: type=1400 audit(1732110336.754:2153): avc: denied { create } for pid=5628 comm="syz.2.808" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.816709][ T29] audit: type=1400 audit(1732110336.754:2154): avc: denied { write open } for pid=5628 comm="syz.2.808" path="/183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.883179][ T29] audit: type=1400 audit(1732110336.954:2155): avc: denied { create } for pid=5622 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.991479][ T5639] netlink: 180 bytes leftover after parsing attributes in process `syz.2.811'. [ 74.000727][ T5639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.811'. [ 74.079709][ T5652] hsr_slave_0: left promiscuous mode [ 74.085867][ T5652] hsr_slave_1: left promiscuous mode [ 74.216914][ T5669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.221439][ T5671] loop2: detected capacity change from 0 to 512 [ 74.236274][ T5671] EXT4-fs: Ignoring removed orlov option [ 74.250249][ T5671] EXT4-fs: Ignoring removed oldalloc option [ 74.258992][ T5671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.820: Parent and EA inode have the same ino 15 [ 74.281223][ T5671] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.820: Parent and EA inode have the same ino 15 [ 74.294839][ T5671] EXT4-fs (loop2): 1 orphan inode deleted [ 74.300978][ T5671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.315454][ T5671] syz.2.820 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.344274][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.428783][ T5696] syzkaller0: entered promiscuous mode [ 74.434367][ T5696] syzkaller0: entered allmulticast mode [ 74.582493][ T5706] syzkaller0: entered promiscuous mode [ 74.588033][ T5706] syzkaller0: entered allmulticast mode [ 74.625558][ T5716] pim6reg1: entered promiscuous mode [ 74.630927][ T5716] pim6reg1: entered allmulticast mode [ 74.813181][ T5745] Â: renamed from pim6reg1 [ 74.896670][ T5754] loop2: detected capacity change from 0 to 2048 [ 75.100728][ T5754] loop2: p1 < > p3 p4 < > [ 75.175415][ T5754] loop2: p3 start 4284289 is beyond EOD, truncated [ 75.267282][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 75.276159][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 75.300902][ T5820] erspan1: entered promiscuous mode [ 75.306222][ T5820] erspan1: entered allmulticast mode [ 75.360567][ T5822] pim6reg1: entered promiscuous mode [ 75.366097][ T5822] pim6reg1: entered allmulticast mode [ 75.409253][ T5826] loop3: detected capacity change from 0 to 1024 [ 75.441315][ T5826] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.462165][ T5826] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 75.470964][ T5826] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.488427][ T5826] EXT4-fs error (device loop3): __ext4_get_inode_loc:4435: comm syz.3.839: Invalid inode table block 0 in block_group 0 [ 75.526491][ T5826] EXT4-fs (loop3): Remounting filesystem read-only [ 75.543956][ T5826] EXT4-fs (loop3): 1 truncate cleaned up [ 75.545342][ T5828] tipc: Enabling of bearer rejected, failed to enable media [ 75.571361][ T5826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.584131][ T5826] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 75.591205][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.805067][ T5845] loop1: detected capacity change from 0 to 128 [ 75.823259][ T5845] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.835853][ T5845] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.893556][ T5852] syz.3.848[5852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.893670][ T5852] syz.3.848[5852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.906307][ T5852] syz.3.848[5852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.013111][ T5856] loop3: detected capacity change from 0 to 2048 [ 76.054279][ T5856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.072634][ T5856] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 76.085003][ T5856] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.085003][ T5856] [ 76.094711][ T5856] EXT4-fs (loop3): Total free blocks count 0 [ 76.100698][ T5856] EXT4-fs (loop3): Free/Dirty block details [ 76.106672][ T5856] EXT4-fs (loop3): free_blocks=0 [ 76.111657][ T5856] EXT4-fs (loop3): dirty_blocks=0 [ 76.116733][ T5856] EXT4-fs (loop3): Block reservation details [ 76.122768][ T5856] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 76.245329][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.316094][ T5864] macvlan0: entered allmulticast mode [ 76.324586][ T5864] macvlan0 (unregistering): left allmulticast mode [ 76.352008][ T5866] Falling back ldisc for ttyS3. [ 76.401357][ T5868] loop3: detected capacity change from 0 to 2048 [ 76.413781][ T5868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.470082][ T5878] vcan0 speed is unknown, defaulting to 1000 [ 76.555591][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.574873][ T5883] pim6reg1: entered promiscuous mode [ 76.580291][ T5883] pim6reg1: entered allmulticast mode [ 76.654778][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.713429][ T5901] IPv4: Oversized IP packet from 127.202.26.0 [ 76.840323][ T5923] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 76.841276][ T5921] xt_hashlimit: size too large, truncated to 1048576 [ 77.118446][ T5934] loop5: detected capacity change from 0 to 1024 [ 77.199891][ T5934] EXT4-fs: Ignoring removed orlov option [ 77.205649][ T5934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.384830][ T5934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.411484][ T5934] vlan2: entered promiscuous mode [ 77.416714][ T5934] vlan2: entered allmulticast mode [ 77.461399][ T5934] xfrm0: entered allmulticast mode [ 77.466805][ T5934] xfrm0: entered promiscuous mode [ 77.495436][ T5934] team0: Port device vlan2 added [ 77.514382][ T5945] pim6reg1: entered promiscuous mode [ 77.519757][ T5945] pim6reg1: entered allmulticast mode [ 77.547059][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.590468][ T5947] loop3: detected capacity change from 0 to 8192 [ 77.600068][ T5947] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.689185][ T5953] 9pnet_fd: Insufficient options for proto=fd [ 77.736301][ T5959] loop1: detected capacity change from 0 to 256 [ 77.755414][ T5957] loop4: detected capacity change from 0 to 512 [ 77.776423][ T5957] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.893: iget: bogus i_mode (0) [ 77.789381][ T5964] loop2: detected capacity change from 0 to 512 [ 77.801895][ T5957] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.893: couldn't read orphan inode 17 (err -117) [ 77.822186][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.863592][ T5957] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.893: bg 0: block 7: invalid block bitmap [ 77.864822][ T5961] syzkaller0: entered promiscuous mode [ 77.881503][ T5961] syzkaller0: entered allmulticast mode [ 77.931169][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.969186][ T5969] loop5: detected capacity change from 0 to 764 [ 77.999053][ T5973] pim6reg1: entered promiscuous mode [ 78.004623][ T5973] pim6reg1: entered allmulticast mode [ 78.154063][ T5989] hub 1-0:1.0: USB hub found [ 78.158750][ T5989] hub 1-0:1.0: 8 ports detected [ 78.170374][ T5987] loop5: detected capacity change from 0 to 2048 [ 78.184573][ T5987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.198445][ T5987] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.903: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.215483][ T5987] EXT4-fs (loop5): Remounting filesystem read-only [ 78.280366][ T5995] serio: Serial port pts0 [ 78.527295][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 78.527312][ T29] audit: type=1400 audit(1732110341.654:2484): avc: denied { create } for pid=6002 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.530505][ T6003] delete_channel: no stack [ 78.560140][ T29] audit: type=1400 audit(1732110341.694:2485): avc: denied { create } for pid=6002 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.579910][ T29] audit: type=1400 audit(1732110341.694:2486): avc: denied { setopt } for pid=6002 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.599343][ T29] audit: type=1400 audit(1732110341.694:2487): avc: denied { bind } for pid=6002 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.618731][ T29] audit: type=1400 audit(1732110341.694:2488): avc: denied { read } for pid=6002 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.670836][ T29] audit: type=1326 audit(1732110341.784:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 78.688218][ T6013] loop2: detected capacity change from 0 to 736 [ 78.694285][ T29] audit: type=1326 audit(1732110341.784:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 78.724073][ T29] audit: type=1326 audit(1732110341.784:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 78.747477][ T29] audit: type=1326 audit(1732110341.794:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4aa207e819 code=0x7ffc0000 [ 78.770828][ T29] audit: type=1400 audit(1732110341.794:2493): avc: denied { mount } for pid=6008 comm="syz.2.912" name="/" dev="ramfs" ino=12081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 78.815886][ T6011] loop4: detected capacity change from 0 to 512 [ 78.822734][ T6011] EXT4-fs: Ignoring removed nobh option [ 78.828376][ T6011] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.847129][ T6011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.866934][ T6018] vlan0: entered promiscuous mode [ 78.885672][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.927887][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.995063][ T6030] loop4: detected capacity change from 0 to 2048 [ 79.024398][ T6037] pim6reg1: entered promiscuous mode [ 79.029789][ T6037] pim6reg1: entered allmulticast mode [ 79.036082][ T6030] loop4: p1 < > p4 [ 79.044294][ T6030] loop4: p4 size 8388608 extends beyond EOD, truncated [ 79.171635][ T6049] loop5: detected capacity change from 0 to 512 [ 79.183209][ T6053] loop1: detected capacity change from 0 to 1024 [ 79.190636][ T6053] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.199212][ T6049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.216946][ T6049] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.218467][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.256779][ T6049] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #18: comm syz.5.929: corrupted inode contents [ 79.268869][ T6049] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #18: comm syz.5.929: mark_inode_dirty error [ 79.280732][ T6049] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #18: comm syz.5.929: corrupted inode contents [ 79.281535][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.294517][ T6049] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #18: comm syz.5.929: mark_inode_dirty error [ 79.321119][ T6049] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #18: comm syz.5.929: mark inode dirty (error -117) [ 79.334686][ T6049] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 79.345211][ T6064] bond0: (slave syz_tun): Releasing backup interface [ 79.364985][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.381193][ T6066] pim6reg1: entered promiscuous mode [ 79.386680][ T6066] pim6reg1: entered allmulticast mode [ 79.396971][ T6068] 9pnet_fd: p9_fd_create_tcp (6068): problem connecting socket to 127.0.0.1 [ 79.431598][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 79.501560][ T6074] netlink: 'syz.4.939': attribute type 4 has an invalid length. [ 79.520788][ T6074] netlink: 'syz.4.939': attribute type 4 has an invalid length. [ 79.555756][ T6080] loop1: detected capacity change from 0 to 128 [ 79.573230][ T6078] loop5: detected capacity change from 0 to 2048 [ 79.588772][ T6080] syz.1.942: attempt to access beyond end of device [ 79.588772][ T6080] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 79.604059][ T6078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.613623][ T6080] syz.1.942: attempt to access beyond end of device [ 79.613623][ T6080] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 79.618944][ T6078] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.633299][ T6079] syz.1.942: attempt to access beyond end of device [ 79.633299][ T6079] loop1: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 79.644340][ T6078] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 79.658614][ T6079] syz.1.942: attempt to access beyond end of device [ 79.658614][ T6079] loop1: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 79.670081][ T6078] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.670081][ T6078] [ 79.670142][ T6078] EXT4-fs (loop5): Total free blocks count 0 [ 79.687845][ T6079] syz.1.942: attempt to access beyond end of device [ 79.687845][ T6079] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 79.693747][ T6078] EXT4-fs (loop5): Free/Dirty block details [ 79.699842][ T6079] Buffer I/O error on dev loop1, logical block 177, async page read [ 79.712966][ T6078] EXT4-fs (loop5): free_blocks=2415919104 [ 79.718928][ T6079] syz.1.942: attempt to access beyond end of device [ 79.718928][ T6079] loop1: rw=0, sector=178, nr_sectors = 1 limit=128 [ 79.726909][ T6078] EXT4-fs (loop5): dirty_blocks=16 [ 79.732770][ T6079] Buffer I/O error on dev loop1, logical block 178, async page read [ 79.745646][ T6078] EXT4-fs (loop5): Block reservation details [ 79.745661][ T6078] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 79.782283][ T6079] syz.1.942: attempt to access beyond end of device [ 79.782283][ T6079] loop1: rw=0, sector=179, nr_sectors = 1 limit=128 [ 79.795616][ T6079] Buffer I/O error on dev loop1, logical block 179, async page read [ 79.804096][ T6079] syz.1.942: attempt to access beyond end of device [ 79.804096][ T6079] loop1: rw=0, sector=180, nr_sectors = 1 limit=128 [ 79.805566][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.817203][ T6079] Buffer I/O error on dev loop1, logical block 180, async page read [ 79.835165][ T6079] syz.1.942: attempt to access beyond end of device [ 79.835165][ T6079] loop1: rw=0, sector=181, nr_sectors = 1 limit=128 [ 79.848366][ T6079] Buffer I/O error on dev loop1, logical block 181, async page read [ 79.856792][ T6079] syz.1.942: attempt to access beyond end of device [ 79.856792][ T6079] loop1: rw=0, sector=182, nr_sectors = 1 limit=128 [ 79.869985][ T6079] Buffer I/O error on dev loop1, logical block 182, async page read [ 79.878662][ T6079] Buffer I/O error on dev loop1, logical block 183, async page read [ 79.887387][ T6079] Buffer I/O error on dev loop1, logical block 184, async page read [ 79.895855][ T6079] Buffer I/O error on dev loop1, logical block 177, async page read [ 79.904056][ T6079] Buffer I/O error on dev loop1, logical block 178, async page read [ 79.956280][ T6091] loop4: detected capacity change from 0 to 512 [ 79.966717][ T6096] loop5: detected capacity change from 0 to 512 [ 79.974517][ T6091] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.947: corrupted in-inode xattr: invalid ea_ino [ 79.979296][ T6101] loop1: detected capacity change from 0 to 512 [ 79.989812][ T6091] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.947: couldn't read orphan inode 15 (err -117) [ 79.994908][ T6101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.007727][ T6091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.017546][ T6101] EXT4-fs (loop1): 1 truncate cleaned up [ 80.034546][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.056333][ T6096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.084252][ T6096] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.121236][ T6113] loop3: detected capacity change from 0 to 512 [ 80.129833][ T6113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.140796][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.141296][ T5233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.168824][ T6113] EXT4-fs (loop3): 1 truncate cleaned up [ 80.175173][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.185370][ T6116] loop4: detected capacity change from 0 to 512 [ 80.202272][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.202474][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.220755][ T6118] loop5: detected capacity change from 0 to 128 [ 80.229013][ T6118] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.241671][ T6122] syz.1.956[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.241844][ T6122] syz.1.956[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.243044][ T6118] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.253565][ T6122] syz.1.956[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.267885][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.316389][ T6126] loop3: detected capacity change from 0 to 128 [ 80.321160][ T6116] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.381252][ T6128] loop3: detected capacity change from 0 to 256 [ 80.397867][ T6130] loop1: detected capacity change from 0 to 1024 [ 80.410473][ T6130] EXT4-fs: Ignoring removed nobh option [ 80.419511][ T6130] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.435537][ T6130] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.959: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 80.454716][ T6130] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.959: couldn't read orphan inode 11 (err -117) [ 80.533711][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 80.648261][ T6143] syz.1.964[6143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.648329][ T6143] syz.1.964[6143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.659815][ T6143] syz.1.964[6143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.673273][ T6143] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 80.691186][ T6143] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.691905][ T6144] pim6reg: entered allmulticast mode [ 80.698844][ T6143] vhci_hcd vhci_hcd.0: Device attached [ 80.707438][ T6144] pim6reg: left allmulticast mode [ 80.716389][ T6145] vhci_hcd: connection closed [ 80.722953][ T5776] vhci_hcd: stop threads [ 80.732159][ T5776] vhci_hcd: release socket [ 80.736629][ T5776] vhci_hcd: disconnect device [ 81.264980][ T6170] loop1: detected capacity change from 0 to 512 [ 81.296203][ T6170] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.464782][ T6179] loop4: detected capacity change from 0 to 128 [ 81.563358][ T6185] netlink: 'syz.1.979': attribute type 4 has an invalid length. [ 81.694821][ T6189] loop4: detected capacity change from 0 to 164 [ 81.702998][ T6189] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 82.068372][ T6197] loop3: detected capacity change from 0 to 512 [ 82.093847][ T6197] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.150989][ T6201] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 82.157597][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.165218][ T6201] vhci_hcd vhci_hcd.0: Device attached [ 82.171482][ T6204] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.985: corrupted inode contents [ 82.174454][ T6202] vhci_hcd: connection closed [ 82.183949][ T6204] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.985: mark_inode_dirty error [ 82.184378][ T50] vhci_hcd: stop threads [ 82.188956][ T6204] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.985: corrupted inode contents [ 82.199975][ T50] vhci_hcd: release socket [ 82.199988][ T50] vhci_hcd: disconnect device [ 82.204945][ T6204] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.985: mark_inode_dirty error [ 82.237311][ T6204] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.985: mark inode dirty (error -117) [ 82.250183][ T6204] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 82.339017][ T6206] loop1: detected capacity change from 0 to 1024 [ 82.345962][ T6206] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.501533][ T6215] loop1: detected capacity change from 0 to 128 [ 82.531997][ T6217] IPv4: Oversized IP packet from 127.202.26.0 [ 82.586811][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 82.606713][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 82.622692][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 82.714553][ T6225] loop5: detected capacity change from 0 to 128 [ 82.870339][ T6234] loop5: detected capacity change from 0 to 512 [ 82.905638][ T6234] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.948415][ T6234] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #18: comm syz.5.998: corrupted inode contents [ 82.960637][ T6234] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #18: comm syz.5.998: mark_inode_dirty error [ 82.973728][ T6234] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #18: comm syz.5.998: corrupted inode contents [ 82.986440][ T6234] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #18: comm syz.5.998: mark_inode_dirty error [ 82.991388][ T6238] loop4: detected capacity change from 0 to 512 [ 83.006751][ T6238] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 83.013302][ T6234] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #18: comm syz.5.998: mark inode dirty (error -117) [ 83.035114][ T6234] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 83.037729][ T6238] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.050851][ T6246] loop3: detected capacity change from 0 to 1024 [ 83.065390][ T6246] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.071255][ T6238] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.999: bad orphan inode 15 [ 83.082668][ T6238] ext4_test_bit(bit=14, block=18) = 1 [ 83.088070][ T6238] is_bad_inode(inode)=0 [ 83.092337][ T6238] NEXT_ORPHAN(inode)=1023 [ 83.096701][ T6238] max_ino=32 [ 83.099909][ T6238] i_nlink=0 [ 83.104412][ T6238] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.999: corrupted xattr block 19: e_value size too large [ 83.121959][ T6238] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 83.138344][ T6252] loop5: detected capacity change from 0 to 128 [ 83.156166][ T3325] ================================================================== [ 83.164330][ T3325] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 83.171643][ T3325] [ 83.173974][ T3325] read-write to 0xffff888237d2bb28 of 8 bytes by task 6246 on cpu 1: [ 83.182050][ T3325] __find_get_block+0x434/0x8a0 [ 83.186919][ T3325] bdev_getblk+0x30/0x3b0 [ 83.191261][ T3325] __ext4_get_inode_loc+0x2f7/0x910 [ 83.196478][ T3325] ext4_reserve_inode_write+0xb0/0x200 [ 83.201960][ T3325] __ext4_mark_inode_dirty+0x8e/0x440 [ 83.207341][ T3325] ext4_dirty_inode+0x91/0xb0 [ 83.212038][ T3325] __mark_inode_dirty+0x166/0x7e0 [ 83.217080][ T3325] ext4_mb_new_blocks+0x103e/0x2020 [ 83.222287][ T3325] ext4_ext_map_blocks+0x1008/0x35c0 [ 83.227594][ T3325] ext4_map_blocks+0x5aa/0xd20 [ 83.232366][ T3325] ext4_xattr_inode_lookup_create+0x888/0xf70 [ 83.238442][ T3325] ext4_xattr_ibody_set+0x131/0x3b0 [ 83.243648][ T3325] ext4_xattr_set_handle+0x7ea/0xbf0 [ 83.248941][ T3325] ext4_xattr_set+0x197/0x250 [ 83.253626][ T3325] ext4_xattr_trusted_set+0x3c/0x50 [ 83.258841][ T3325] __vfs_setxattr+0x2e5/0x310 [ 83.263532][ T3325] __vfs_setxattr_noperm+0xed/0x420 [ 83.268747][ T3325] __vfs_setxattr_locked+0x1af/0x1d0 [ 83.274056][ T3325] vfs_setxattr+0x140/0x290 [ 83.278570][ T3325] filename_setxattr+0x198/0x2a0 [ 83.283523][ T3325] path_setxattrat+0x284/0x310 [ 83.288327][ T3325] __x64_sys_setxattr+0x6e/0x90 [ 83.293196][ T3325] x64_sys_call+0x2247/0x2dc0 [ 83.297903][ T3325] do_syscall_64+0xc9/0x1c0 [ 83.302422][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.308325][ T3325] [ 83.310653][ T3325] read to 0xffff888237d2bb28 of 8 bytes by task 3325 on cpu 0: [ 83.318459][ T3325] has_bh_in_lru+0x35/0x1f0 [ 83.322971][ T3325] __lru_add_drain_all+0x23f/0x3f0 [ 83.328096][ T3325] lru_add_drain_all+0x10/0x20 [ 83.332869][ T3325] invalidate_bdev+0x47/0x70 [ 83.337480][ T3325] ext4_put_super+0x571/0x840 [ 83.342174][ T3325] generic_shutdown_super+0xe5/0x220 [ 83.347467][ T3325] kill_block_super+0x2a/0x70 [ 83.352242][ T3325] ext4_kill_sb+0x44/0x80 [ 83.356584][ T3325] deactivate_locked_super+0x7d/0x1c0 [ 83.361963][ T3325] deactivate_super+0x9f/0xb0 [ 83.366647][ T3325] cleanup_mnt+0x268/0x2e0 [ 83.371082][ T3325] __cleanup_mnt+0x19/0x20 [ 83.375527][ T3325] task_work_run+0x13a/0x1a0 [ 83.380142][ T3325] syscall_exit_to_user_mode+0xa8/0x120 [ 83.385697][ T3325] do_syscall_64+0xd6/0x1c0 [ 83.390210][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.396116][ T3325] [ 83.398439][ T3325] value changed: 0x0000000000000000 -> 0xffff888104c0c208 [ 83.405545][ T3325] [ 83.407874][ T3325] Reported by Kernel Concurrency Sanitizer on: [ 83.414035][ T3325] CPU: 0 UID: 0 PID: 3325 Comm: syz-executor Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 83.424545][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.434616][ T3325] ================================================================== [ 83.480630][ T6257] loop4: detected capacity change from 0 to 512 [ 83.499604][ T6257] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1008: corrupted in-inode xattr: invalid ea_ino [ 83.514017][ T6257] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1008: couldn't read orphan inode 15 (err -117)