last executing test programs: 1m1.423784223s ago: executing program 0 (id=233): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x7fff, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000400)=""/4086, 0xff6) 1m0.530047911s ago: executing program 0 (id=259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x642, &(0x7f0000000b40)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 59.250878136s ago: executing program 0 (id=291): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 59.092582519s ago: executing program 0 (id=297): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1fe) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) 58.607990688s ago: executing program 0 (id=307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 57.623907718s ago: executing program 0 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 57.606740398s ago: executing program 32 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 49.236529363s ago: executing program 5 (id=543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 49.136521094s ago: executing program 5 (id=537): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 48.998368887s ago: executing program 5 (id=545): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 48.83031342s ago: executing program 5 (id=547): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 48.704377103s ago: executing program 5 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 48.677394254s ago: executing program 5 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 34.352300575s ago: executing program 33 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 2.304671884s ago: executing program 1 (id=1804): add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)="75a101010100188d9233a34871d6000000000003c1d6fe173ee8ed471cb5", 0x1e, 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x7, 0x80000}) 1.642335717s ago: executing program 3 (id=1816): r0 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = io_uring_setup(0x2291, &(0x7f00000001c0)={0x0, 0xc63b, 0x80, 0x0, 0x10000000, 0x0, r1}) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.461888251s ago: executing program 1 (id=1818): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000140)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) 1.409500392s ago: executing program 1 (id=1820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.383828103s ago: executing program 4 (id=1822): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000140)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)='0', 0x1}], 0x1}, 0x8840) close(0x3) 1.333968613s ago: executing program 4 (id=1825): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mlockall(0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.313063024s ago: executing program 3 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f00000006c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') 1.299883154s ago: executing program 1 (id=1829): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 1.084364438s ago: executing program 3 (id=1832): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040)=@sg0, 0x0, &(0x7f0000000180)='./file0\x00') 1.043570379s ago: executing program 3 (id=1833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r2) 992.56246ms ago: executing program 3 (id=1834): socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 947.430211ms ago: executing program 4 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 890.109842ms ago: executing program 4 (id=1838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 818.983064ms ago: executing program 4 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 531.740329ms ago: executing program 2 (id=1845): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xe0) 520.895269ms ago: executing program 6 (id=1846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 419.653191ms ago: executing program 2 (id=1848): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 391.986942ms ago: executing program 6 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 366.263402ms ago: executing program 2 (id=1852): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000300), 0x0, 0xfe37, 0x0) 345.138143ms ago: executing program 1 (id=1853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 339.913593ms ago: executing program 6 (id=1854): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 294.494844ms ago: executing program 2 (id=1855): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 252.474975ms ago: executing program 4 (id=1865): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 251.768495ms ago: executing program 2 (id=1866): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r2, 0x409, 0xb) 145.703246ms ago: executing program 6 (id=1856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 111.885237ms ago: executing program 3 (id=1857): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 46.738748ms ago: executing program 2 (id=1858): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) 35.429429ms ago: executing program 6 (id=1859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 6 (id=1860): r0 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = io_uring_setup(0x2291, &(0x7f00000001c0)={0x0, 0xc63b, 0x80, 0x0, 0x10000000, 0x0, r1}) io_uring_enter(r2, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) kernel console output (not intermixed with test programs): 379891][ T3588] loop4: detected capacity change from 0 to 512 [ 41.405112][ T3588] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.418263][ T3588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.431838][ T3588] EXT4-fs (loop4): 1 truncate cleaned up [ 41.438021][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.456181][ T3591] 9pnet_fd: Insufficient options for proto=fd [ 41.478597][ T3594] netlink: 204 bytes leftover after parsing attributes in process `syz.0.42'. [ 41.524518][ T3598] loop0: detected capacity change from 0 to 512 [ 41.555387][ T3598] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.571596][ T3598] EXT4-fs (loop0): mount failed [ 41.586792][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.618626][ T3596] syz.1.43 (3596) used greatest stack depth: 10176 bytes left [ 41.647287][ T3606] Zero length message leads to an empty skb [ 41.688328][ T3610] loop1: detected capacity change from 0 to 128 [ 41.737499][ T3610] FAT-fs (loop1): error, clusters badly computed (0 != 1) [ 41.744851][ T3610] FAT-fs (loop1): Filesystem has been set read-only [ 41.756555][ T3617] sch_fq: defrate 0 ignored. [ 41.763131][ T3610] FAT-fs (loop1): error, clusters badly computed (1 != 2) [ 41.779378][ T3610] FAT-fs (loop1): error, clusters badly computed (2 != 3) [ 41.795169][ T3610] FAT-fs (loop1): error, clusters badly computed (3 != 4) [ 41.802921][ T3610] FAT-fs (loop1): error, clusters badly computed (4 != 5) [ 41.810325][ T3610] FAT-fs (loop1): error, clusters badly computed (5 != 6) [ 41.817650][ T3610] FAT-fs (loop1): error, clusters badly computed (6 != 7) [ 41.825258][ T3610] FAT-fs (loop1): error, clusters badly computed (7 != 8) [ 41.832503][ T3610] FAT-fs (loop1): error, clusters badly computed (8 != 9) [ 41.839967][ T3610] FAT-fs (loop1): error, clusters badly computed (9 != 10) [ 42.080851][ T3642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.096735][ T3640] tipc: Started in network mode [ 42.101681][ T3640] tipc: Node identity f62225191771, cluster identity 4711 [ 42.109080][ T3640] tipc: Enabled bearer , priority 0 [ 42.117379][ T3645] tipc: Disabling bearer [ 42.162989][ T3647] vhci_hcd: invalid port number 96 [ 42.168215][ T3647] vhci_hcd: default hub control req: 0500 vfffc i0060 l0 [ 42.405421][ T3675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.414771][ T3675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.448304][ T3678] process 'syz.0.77' launched './file0' with NULL argv: empty string added [ 42.636228][ T3695] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 42.837357][ T3712] openvswitch: netlink: Message has 6 unknown bytes. [ 43.082351][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 43.111609][ T3744] vxlan0: entered promiscuous mode [ 43.119255][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.130293][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.141696][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.161717][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.172067][ T3750] 9pnet: p9_errstr2errno: server reported unknown error [ 43.183842][ T3752] loop0: detected capacity change from 0 to 512 [ 43.205547][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.224803][ T3752] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.251506][ T3752] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.109: corrupted inode contents [ 43.266259][ T3752] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.109: mark_inode_dirty error [ 43.279826][ T3759] netlink: 10 bytes leftover after parsing attributes in process `syz.3.111'. [ 43.290356][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 43.312099][ T3752] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.109: corrupted inode contents [ 43.331558][ T3752] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.109: mark_inode_dirty error [ 43.343961][ T3766] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 43.361869][ T3762] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.109: corrupted inode contents [ 43.393274][ T3762] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.109: mark_inode_dirty error [ 43.432941][ T3762] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.109: corrupted inode contents [ 43.448338][ T3752] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.109: corrupted inode contents [ 43.463967][ T3752] EXT4-fs error (device loop0): add_dirent_to_buf:2153: inode #2: comm syz.0.109: mark_inode_dirty error [ 43.502059][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.597183][ T3790] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 43.670859][ T3798] capability: warning: `syz.4.129' uses 32-bit capabilities (legacy support in use) [ 44.307954][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 44.307972][ T29] audit: type=1400 audit(1757981673.261:508): avc: denied { wake_alarm } for pid=3827 comm="syz.0.144" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.474476][ T3838] netlink: 'syz.1.147': attribute type 5 has an invalid length. [ 44.548577][ T29] audit: type=1326 audit(1757981673.501:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.572171][ T29] audit: type=1326 audit(1757981673.501:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.603706][ T29] audit: type=1326 audit(1757981673.551:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.627180][ T29] audit: type=1326 audit(1757981673.551:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.650674][ T29] audit: type=1326 audit(1757981673.561:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.674272][ T29] audit: type=1326 audit(1757981673.561:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.698043][ T29] audit: type=1326 audit(1757981673.561:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.724761][ T29] audit: type=1326 audit(1757981673.681:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.759371][ T29] audit: type=1326 audit(1757981673.721:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 44.783741][ T3849] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 44.804411][ T3850] loop1: detected capacity change from 0 to 1024 [ 44.815673][ T3850] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.859605][ T3850] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #11: comm syz.1.152: iget: bogus i_mode (1) [ 44.914488][ T3859] __nla_validate_parse: 3 callbacks suppressed [ 44.914504][ T3859] netlink: 7 bytes leftover after parsing attributes in process `syz.3.156'. [ 44.931373][ T3850] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.152: couldn't read orphan inode 11 (err -117) [ 44.945521][ T3850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.952076][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 44.967070][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 44.987093][ T3850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.023177][ T3859] netlink: 7 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.035643][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.044594][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.118039][ T3859] netlink: 7 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.133721][ T3871] pim6reg: entered allmulticast mode [ 45.142532][ T3871] pim6reg: left allmulticast mode [ 45.150895][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.159981][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.156'. [ 45.396100][ T3895] Illegal XDP return value 4294967274 on prog (id 134) dev N/A, expect packet loss! [ 45.658123][ T3920] loop4: detected capacity change from 0 to 512 [ 45.699473][ T3920] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.183: EA inode hash validation failed [ 45.718483][ T3920] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.737822][ T3920] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.183: corrupted inode contents [ 45.751693][ T3920] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.183: mark_inode_dirty error [ 45.767000][ T3920] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.183: corrupted inode contents [ 45.795936][ T3920] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.183: mark_inode_dirty error [ 45.825104][ T3920] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.183: mark inode dirty (error -117) [ 45.861066][ T3847] syz.1.152 (3847) used greatest stack depth: 6136 bytes left [ 45.887753][ T3920] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 45.899142][ T3920] EXT4-fs (loop4): 1 orphan inode deleted [ 45.910868][ T3934] netlink: 96 bytes leftover after parsing attributes in process `syz.3.190'. [ 45.922330][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.000778][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.223298][ T3967] loop4: detected capacity change from 0 to 512 [ 46.240668][ T3967] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.248720][ T3967] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.314564][ T3967] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.202: corrupted inode contents [ 46.326942][ T3967] EXT4-fs (loop4): Remounting filesystem read-only [ 46.334058][ T3967] EXT4-fs (loop4): 1 truncate cleaned up [ 46.339968][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.350579][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.371297][ T3977] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 46.377555][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.388526][ T3967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.403430][ T3977] 0ªî{X¹¦: entered allmulticast mode [ 46.414365][ T3977] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 46.452821][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.686695][ T4010] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 46.698690][ T4010] team0: Port device dummy0 added [ 46.712079][ T4010] netlink: 'syz.4.222': attribute type 10 has an invalid length. [ 46.724152][ T4010] team0: Port device dummy0 removed [ 46.733339][ T4010] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.869179][ T4028] vlan2: entered allmulticast mode [ 46.874438][ T4028] vlan1: entered allmulticast mode [ 46.879652][ T4028] veth0_vlan: entered allmulticast mode [ 47.230340][ T4061] 9pnet: p9_errstr2errno: server reported unknown error [ 47.343869][ C1] hrtimer: interrupt took 31824 ns [ 47.609290][ T4085] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 47.623602][ T4085] team0: Port device dummy0 added [ 47.638966][ T4085] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 47.654088][ T4085] team0: Port device dummy0 removed [ 47.662993][ T4089] loop2: detected capacity change from 0 to 512 [ 47.663383][ T4085] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.689978][ T4089] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.257: EA inode hash validation failed [ 47.703384][ T4089] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.257: corrupted inode contents [ 47.716412][ T4089] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.257: mark_inode_dirty error [ 47.730644][ T4089] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.257: corrupted inode contents [ 47.743854][ T4089] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.257: mark_inode_dirty error [ 47.756678][ T4092] loop1: detected capacity change from 0 to 1024 [ 47.765403][ T4092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.770099][ T4089] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.257: mark inode dirty (error -117) [ 47.787844][ T4089] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 47.803157][ T4089] EXT4-fs (loop2): 1 orphan inode deleted [ 47.812718][ T4089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.826066][ T4092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 47.847558][ T4092] System zones: 0-1, 3-36 [ 47.853859][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.874644][ T4096] loop0: detected capacity change from 0 to 1024 [ 47.915685][ T4092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.986214][ T4096] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.047112][ T4096] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.259: iget: bogus i_mode (1) [ 48.047264][ T4096] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.259: couldn't read orphan inode 11 (err -117) [ 48.047717][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.050406][ T4109] netlink: 'syz.4.265': attribute type 10 has an invalid length. [ 48.119930][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.159333][ T4113] netlink: 'syz.4.268': attribute type 3 has an invalid length. [ 48.198667][ T4096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.543648][ T4121] loop1: detected capacity change from 0 to 32768 [ 48.593952][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.604871][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.648710][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.693217][ T4140] team_slave_0: entered promiscuous mode [ 48.699848][ T4140] team_slave_0: left promiscuous mode [ 48.714849][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.740173][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.760872][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.047985][ T4162] syzkaller1: entered promiscuous mode [ 49.056635][ T4162] syzkaller1: entered allmulticast mode [ 49.077126][ T4164] SELinux: Context  is not valid (left unmapped). [ 49.093127][ T4166] loop0: detected capacity change from 0 to 128 [ 49.166529][ T4171] loop1: detected capacity change from 0 to 1024 [ 49.221612][ T4171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.261272][ T4185] loop0: detected capacity change from 0 to 512 [ 49.268360][ T4171] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.307753][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.355395][ T4185] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.386472][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 49.386489][ T29] audit: type=1400 audit(1757981678.341:648): avc: denied { read write open } for pid=4184 comm="syz.0.297" path="/54/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.417641][ T29] audit: type=1400 audit(1757981678.371:649): avc: denied { mounton } for pid=4184 comm="syz.0.297" path="/54/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.479114][ T4185] loop0: detected capacity change from 512 to 64 [ 49.484901][ T4195] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Out of memory [ 49.525536][ T4195] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.297: mark_inode_dirty error [ 49.581101][ T4195] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Out of memory [ 49.581484][ T4201] pimreg: entered allmulticast mode [ 49.592299][ T4195] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.297: mark_inode_dirty error [ 49.618266][ T4201] pimreg: left allmulticast mode [ 49.627795][ T31] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 49.646532][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 49.659513][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.659513][ T31] [ 49.669607][ T4195] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Out of memory [ 49.680449][ T4195] EXT4-fs error (device loop0): ext4_alloc_file_blocks:4557: inode #15: comm syz.0.297: mark_inode_dirty error [ 49.728087][ T3313] bio_check_eod: 102 callbacks suppressed [ 49.728108][ T3313] syz-executor: attempt to access beyond end of device [ 49.728108][ T3313] loop0: rw=12288, sector=70, nr_sectors = 2 limit=64 [ 49.761036][ T3313] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #2: block 35: comm syz-executor: unable to read itable block [ 49.847336][ T3313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 49.857085][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.873368][ T3313] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 50.018023][ T29] audit: type=1326 audit(1757981678.961:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.041435][ T29] audit: type=1326 audit(1757981678.971:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.064781][ T29] audit: type=1326 audit(1757981678.971:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.088072][ T29] audit: type=1326 audit(1757981678.971:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.171286][ T29] audit: type=1326 audit(1757981678.971:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.194682][ T29] audit: type=1326 audit(1757981679.101:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.217939][ T29] audit: type=1326 audit(1757981679.101:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.241383][ T29] audit: type=1326 audit(1757981679.101:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 50.570238][ T4219] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 50.578098][ T31] kworker/u8:1: attempt to access beyond end of device [ 50.578098][ T31] loop0: rw=12288, sector=70, nr_sectors = 2 limit=64 [ 50.591840][ T31] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #2: block 35: comm kworker/u8:1: unable to read itable block [ 50.608605][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.627309][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.641623][ T4219] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 50.692070][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.753102][ T4225] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 50.764313][ T4224] loop1: detected capacity change from 0 to 2048 [ 50.771701][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.810581][ T3299] loop1: p4 < > [ 50.831107][ T4224] loop1: p4 < > [ 50.842545][ T4232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.844173][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.903976][ T4234] serio: Serial port ptm0 [ 50.920297][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 51.087326][ T12] bridge_slave_1: left allmulticast mode [ 51.093115][ T12] bridge_slave_1: left promiscuous mode [ 51.098773][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.139629][ T12] bridge_slave_0: left allmulticast mode [ 51.145321][ T12] bridge_slave_0: left promiscuous mode [ 51.151067][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.421521][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.439498][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.459785][ T12] bond0 (unregistering): Released all slaves [ 51.535699][ T12] hsr_slave_0: left promiscuous mode [ 51.553932][ T12] hsr_slave_1: left promiscuous mode [ 51.564368][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.571905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.598370][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.605825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.654139][ T12] veth1_macvtap: left promiscuous mode [ 51.664275][ T12] veth0_macvtap: left promiscuous mode [ 51.672383][ T12] veth1_vlan: left promiscuous mode [ 51.718266][ T12] veth0_vlan: left promiscuous mode [ 51.847255][ T12] team0 (unregistering): Port device team_slave_1 removed [ 51.870347][ T12] team0 (unregistering): Port device team_slave_0 removed [ 51.983814][ T4315] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 51.991530][ T4315] netlink: 'syz.4.336': attribute type 4 has an invalid length. [ 51.999212][ T4315] __nla_validate_parse: 11 callbacks suppressed [ 51.999230][ T4315] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.336'. [ 52.067364][ T4229] chnl_net:caif_netlink_parms(): no params data found [ 52.133443][ T4323] wireguard0: entered promiscuous mode [ 52.139033][ T4323] wireguard0: entered allmulticast mode [ 52.340963][ T4349] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 52.341140][ T4346] IPVS: stopping master sync thread 4349 ... [ 52.392179][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.399425][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.424091][ T4354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 52.454266][ T4229] bridge_slave_0: entered allmulticast mode [ 52.473369][ T4229] bridge_slave_0: entered promiscuous mode [ 52.515402][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.522591][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.547945][ T4229] bridge_slave_1: entered allmulticast mode [ 52.555194][ T4229] bridge_slave_1: entered promiscuous mode [ 52.586820][ T3472] IPVS: starting estimator thread 0... [ 52.594085][ T4374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 52.605375][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.632238][ T4374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 52.641490][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.652107][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 52.679000][ T4376] IPVS: using max 2112 ests per chain, 105600 per kthread [ 52.697411][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 52.712530][ T4229] team0: Port device team_slave_0 added [ 52.718330][ T4374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 52.719854][ T4229] team0: Port device team_slave_1 added [ 52.766229][ T4393] loop3: detected capacity change from 0 to 512 [ 52.774798][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.780030][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 52.781779][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.816726][ T4229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.861720][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.868876][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.894955][ T4229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.962659][ T4393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.005011][ T4393] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.008551][ T4229] hsr_slave_0: entered promiscuous mode [ 53.045141][ T4229] hsr_slave_1: entered promiscuous mode [ 53.061230][ T4229] debugfs: 'hsr0' already exists in 'hsr' [ 53.067050][ T4229] Cannot create hsr debugfs directory [ 53.212420][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.293733][ T4229] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.311794][ T4229] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.328046][ T4229] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.348277][ T4229] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.487997][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.518376][ T4229] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.548504][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.555857][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.568547][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.575747][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.589524][ T4462] loop2: detected capacity change from 0 to 164 [ 53.759843][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.971631][ T4509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 54.012108][ T4509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 54.013866][ T4229] veth0_vlan: entered promiscuous mode [ 54.051128][ T4229] veth1_vlan: entered promiscuous mode [ 54.076475][ T4229] veth0_macvtap: entered promiscuous mode [ 54.097262][ T4229] veth1_macvtap: entered promiscuous mode [ 54.123011][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.135582][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.146715][ T309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.156790][ T309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.172792][ T309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.191766][ T309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.400323][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 54.400339][ T29] audit: type=1326 audit(1757982454.374:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 54.432615][ T29] audit: type=1326 audit(1757982454.374:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 54.530518][ T4560] bridge0: port 3(gretap0) entered blocking state [ 54.537050][ T4560] bridge0: port 3(gretap0) entered disabled state [ 54.543923][ T4560] gretap0: entered allmulticast mode [ 54.550029][ T4560] gretap0: entered promiscuous mode [ 54.555484][ T4560] bridge0: port 3(gretap0) entered blocking state [ 54.562038][ T4560] bridge0: port 3(gretap0) entered forwarding state [ 54.636469][ T4566] loop4: detected capacity change from 0 to 512 [ 54.653642][ T4566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.669848][ T4566] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.411: invalid indirect mapped block 4294967295 (level 0) [ 54.684943][ T4566] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.411: invalid indirect mapped block 4294967295 (level 1) [ 54.701474][ T4566] EXT4-fs (loop4): 1 orphan inode deleted [ 54.707255][ T4566] EXT4-fs (loop4): 1 truncate cleaned up [ 54.713305][ T4566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.744991][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.950908][ T29] audit: type=1400 audit(1757982454.951:763): avc: denied { sqpoll } for pid=4590 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.072922][ T29] audit: type=1400 audit(1757982455.088:764): avc: denied { execute } for pid=4598 comm="syz.4.424" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.331759][ T4622] vhci_hcd: invalid port number 96 [ 55.336939][ T4622] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 55.427795][ T29] audit: type=1400 audit(1757982455.455:765): avc: denied { read write } for pid=4626 comm="syz.1.435" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.452472][ T29] audit: type=1400 audit(1757982455.455:766): avc: denied { open } for pid=4626 comm="syz.1.435" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.477030][ T29] audit: type=1400 audit(1757982455.455:767): avc: denied { ioctl } for pid=4626 comm="syz.1.435" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.606771][ T4632] wg2: entered promiscuous mode [ 55.611700][ T4632] wg2: entered allmulticast mode [ 55.705715][ T29] audit: type=1400 audit(1757982455.749:768): avc: denied { create } for pid=4640 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.814383][ T29] audit: type=1400 audit(1757982455.749:769): avc: denied { setopt } for pid=4640 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.833758][ T29] audit: type=1400 audit(1757982455.823:770): avc: denied { bind } for pid=4640 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.060477][ T4672] loop1: detected capacity change from 0 to 512 [ 56.125023][ T4672] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.457: corrupted in-inode xattr: overlapping e_value [ 56.159251][ T4672] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.457: couldn't read orphan inode 15 (err -117) [ 56.181310][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.255991][ T4689] loop9: detected capacity change from 0 to 7 [ 56.267350][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.289643][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.297574][ T3299] loop9: unable to read partition table [ 56.312772][ T4689] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.323373][ T4689] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.331275][ T4689] loop9: unable to read partition table [ 56.348289][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.385230][ T4689] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 56.385230][ T4689] ) failed (rc=-5) [ 56.399434][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.417893][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.437050][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.442835][ T4696] loop2: detected capacity change from 0 to 1024 [ 56.472871][ T4696] EXT4-fs: Ignoring removed nobh option [ 56.482431][ T4696] EXT4-fs: Ignoring removed bh option [ 56.489856][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.507727][ T4696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.546094][ T4700] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.570684][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.588482][ T4696] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.683196][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.856541][ T4721] loop3: detected capacity change from 0 to 1024 [ 56.868059][ T4723] loop4: detected capacity change from 0 to 512 [ 56.883499][ T4721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.896437][ T4723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.907029][ T4721] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.919750][ T4723] EXT4-fs (loop4): 1 truncate cleaned up [ 56.926313][ T4723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.951416][ T4721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 56.969726][ T4721] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.477: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.045734][ T4700] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.057210][ T4721] EXT4-fs (loop3): Remounting filesystem read-only [ 57.075856][ T4721] EXT4-fs (loop3): 1 orphan inode deleted [ 57.086051][ T4721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.098945][ T12] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 57.124630][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.128044][ T4700] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.180434][ T4700] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.199141][ T4744] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 57.246210][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267022][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.290374][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.309119][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.409972][ T4753] __nla_validate_parse: 1 callbacks suppressed [ 57.409990][ T4753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.490'. [ 57.569387][ T4766] loop5: detected capacity change from 0 to 512 [ 57.577790][ T4766] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.588550][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.604706][ T4770] bridge0: port 3(gretap0) entered blocking state [ 57.608253][ T4766] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.496: invalid indirect mapped block 4294967295 (level 0) [ 57.611357][ T4770] bridge0: port 3(gretap0) entered disabled state [ 57.634623][ T4770] gretap0: entered allmulticast mode [ 57.646400][ T4770] gretap0: entered promiscuous mode [ 57.651889][ T4770] bridge0: port 3(gretap0) entered blocking state [ 57.653771][ T4766] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.496: invalid indirect mapped block 4294967295 (level 1) [ 57.658396][ T4770] bridge0: port 3(gretap0) entered forwarding state [ 57.694927][ T4771] macvlan1: entered promiscuous mode [ 57.701418][ T4771] ipvlan0: entered promiscuous mode [ 57.707578][ T4771] ipvlan0: left promiscuous mode [ 57.714120][ T4766] EXT4-fs (loop5): 1 orphan inode deleted [ 57.719905][ T4766] EXT4-fs (loop5): 1 truncate cleaned up [ 57.732136][ T4766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.751121][ T4771] macvlan1: left promiscuous mode [ 57.785236][ T4229] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.926853][ T4801] netlink: 280 bytes leftover after parsing attributes in process `syz.2.511'. [ 58.274282][ T4824] netlink: 'syz.1.520': attribute type 3 has an invalid length. [ 58.782314][ T4835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.524'. [ 59.099239][ T4858] loop5: detected capacity change from 0 to 512 [ 59.116879][ T4858] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.140002][ T4858] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.178848][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 59.193124][ T4229] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 59.270519][ T4882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 59.290008][ T3399] IPVS: starting estimator thread 0... [ 59.335110][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 59.335129][ T29] audit: type=1400 audit(1757982459.561:826): avc: denied { read } for pid=4887 comm="syz.2.544" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.364632][ T29] audit: type=1400 audit(1757982459.561:827): avc: denied { open } for pid=4887 comm="syz.2.544" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.395778][ T29] audit: type=1400 audit(1757982459.624:828): avc: denied { ioctl } for pid=4887 comm="syz.2.544" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.424297][ T4884] IPVS: using max 1968 ests per chain, 98400 per kthread [ 59.433308][ T29] audit: type=1400 audit(1757982459.655:829): avc: denied { module_load } for pid=4893 comm="syz.4.546" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 59.628288][ T4903] loop4: detected capacity change from 0 to 512 [ 59.663420][ T4903] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.710623][ T4903] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 59.720989][ T4903] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.771356][ T3309] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 59.838246][ T4909] sctp: [Deprecated]: syz.4.552 (pid 4909) Use of int in max_burst socket option. [ 59.838246][ T4909] Use struct sctp_assoc_value instead [ 60.159793][ T29] audit: type=1400 audit(1757982460.422:830): avc: denied { setopt } for pid=4920 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.223652][ T29] audit: type=1400 audit(1757982460.485:831): avc: denied { read append } for pid=4924 comm="syz.1.558" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.247183][ T29] audit: type=1400 audit(1757982460.485:832): avc: denied { open } for pid=4924 comm="syz.1.558" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.277256][ T29] audit: type=1400 audit(1757982460.548:833): avc: denied { ioctl } for pid=4924 comm="syz.1.558" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.301827][ T29] audit: type=1400 audit(1757982460.548:834): avc: denied { write } for pid=4924 comm="syz.1.558" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.425583][ T4975] netlink: 56 bytes leftover after parsing attributes in process `syz.4.570'. [ 61.434909][ T4975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 61.527514][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 61.601651][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 61.709408][ T4994] loop4: detected capacity change from 0 to 256 [ 62.133678][ T5012] loop2: detected capacity change from 0 to 164 [ 62.191829][ T5014] veth1_to_bond: entered allmulticast mode [ 62.229954][ T5014] veth1_to_bond: left allmulticast mode [ 62.287624][ T5019] ip6gre1: entered allmulticast mode [ 62.444425][ T5033] SELinux: ebitmap: truncated map [ 62.450306][ T5033] SELinux: failed to load policy [ 62.479554][ T5037] loop1: detected capacity change from 0 to 512 [ 62.495707][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.508525][ T5037] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.561364][ T5037] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.598: corrupted inode contents [ 62.574440][ T5037] EXT4-fs (loop1): Remounting filesystem read-only [ 62.581682][ T5037] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 62.608237][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.678439][ T5050] loop1: detected capacity change from 0 to 512 [ 62.685330][ T5053] netlink: 'syz.2.603': attribute type 10 has an invalid length. [ 62.693239][ T5053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 62.718246][ T5050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.723692][ T5053] dummy0: entered promiscuous mode [ 62.732048][ T5050] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.752519][ T5053] bridge0: port 3(dummy0) entered blocking state [ 62.759212][ T5053] bridge0: port 3(dummy0) entered disabled state [ 62.765962][ T5053] dummy0: entered allmulticast mode [ 62.772493][ T5053] bridge0: port 3(dummy0) entered blocking state [ 62.778996][ T5053] bridge0: port 3(dummy0) entered forwarding state [ 62.872538][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.033001][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 63.049610][ T5088] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 63.062264][ T5087] IPVS: stopping master sync thread 5088 ... [ 63.410130][ T5122] IPVS: Error connecting to the multicast addr [ 63.852237][ T5160] netlink: 'syz.4.643': attribute type 12 has an invalid length. [ 63.931481][ T5161] netlink: 'syz.4.643': attribute type 12 has an invalid length. [ 64.272951][ T5185] $Hÿ: renamed from bond0 [ 64.279975][ T5185] $Hÿ: entered promiscuous mode [ 64.285137][ T5185] bond_slave_0: entered promiscuous mode [ 64.291017][ T5185] bond_slave_1: entered promiscuous mode [ 64.388044][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 64.388060][ T29] audit: type=1400 audit(1757982464.863:931): avc: denied { associate } for pid=5201 comm="syz.3.655" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 64.482028][ T29] audit: type=1400 audit(1757982464.926:932): avc: denied { remount } for pid=5197 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 64.483173][ T5208] tipc: Started in network mode [ 64.506660][ T5208] tipc: Node identity ac14140f, cluster identity 4711 [ 64.547517][ T5208] tipc: New replicast peer: 255.255.255.83 [ 64.553502][ T5208] tipc: Enabled bearer , priority 10 [ 64.554153][ T29] audit: type=1326 audit(1757982465.020:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 64.582687][ T29] audit: type=1326 audit(1757982465.020:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 64.606052][ T29] audit: type=1326 audit(1757982465.020:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 64.629344][ T29] audit: type=1326 audit(1757982465.020:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 64.806645][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 64.844455][ T29] audit: type=1326 audit(1757982465.314:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 64.867779][ T29] audit: type=1326 audit(1757982465.314:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 64.891074][ T29] audit: type=1326 audit(1757982465.314:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 64.914380][ T29] audit: type=1326 audit(1757982465.314:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 64.935857][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 64.946574][ T5240] netlink: 'syz.2.667': attribute type 7 has an invalid length. [ 64.954420][ T5240] netlink: 'syz.2.667': attribute type 8 has an invalid length. [ 64.962160][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 65.615816][ T3386] tipc: Node number set to 2886997007 [ 65.737801][ T5289] serio: Serial port ptm0 [ 66.425125][ T5304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 67.298082][ T5336] wireguard0: entered promiscuous mode [ 67.303733][ T5336] wireguard0: entered allmulticast mode [ 67.343697][ T5343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.705'. [ 67.393076][ T5343] hsr_slave_0: left promiscuous mode [ 67.415238][ T5343] hsr_slave_1: left promiscuous mode [ 67.445160][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.708'. [ 67.800128][ T5367] loop2: detected capacity change from 0 to 512 [ 68.299882][ T5367] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.716: iget: bad extended attribute block 1 [ 68.436392][ T5367] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.716: couldn't read orphan inode 15 (err -117) [ 68.471742][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.567945][ T5375] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 68.594643][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.706806][ T5396] tipc: New replicast peer: 255.255.255.255 [ 68.712900][ T5396] tipc: Enabled bearer , priority 10 [ 68.847261][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.879131][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.009322][ T5404] loop2: detected capacity change from 0 to 256 [ 69.054184][ T5404] FAT-fs (loop2): Directory bread(block 64) failed [ 69.094390][ T5406] loop1: detected capacity change from 0 to 512 [ 69.177379][ T5404] FAT-fs (loop2): Directory bread(block 65) failed [ 69.184083][ T5404] FAT-fs (loop2): Directory bread(block 66) failed [ 69.203552][ T5404] FAT-fs (loop2): Directory bread(block 67) failed [ 69.232907][ T5404] FAT-fs (loop2): Directory bread(block 68) failed [ 69.251620][ T5404] FAT-fs (loop2): Directory bread(block 69) failed [ 69.272699][ T5404] FAT-fs (loop2): Directory bread(block 70) failed [ 69.302067][ T5406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.319380][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 69.328431][ T5404] FAT-fs (loop2): Directory bread(block 71) failed [ 69.349118][ T5406] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.362546][ T5404] FAT-fs (loop2): Directory bread(block 72) failed [ 69.382118][ T5404] FAT-fs (loop2): Directory bread(block 73) failed [ 69.391754][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 69.410813][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 69.410830][ T29] audit: type=1326 audit(1757982470.133:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.4.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4950a3eba9 code=0x7ffc0000 [ 69.512486][ T29] audit: type=1400 audit(1757982470.144:971): avc: denied { watch watch_reads } for pid=5403 comm="syz.2.731" path="/151/file1" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 69.535652][ T29] audit: type=1326 audit(1757982470.186:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.4.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4950a3eba9 code=0x7ffc0000 [ 69.558898][ T29] audit: type=1326 audit(1757982470.186:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.4.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4950a3eba9 code=0x7ffc0000 [ 69.582170][ T29] audit: type=1326 audit(1757982470.186:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.4.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4950a3eba9 code=0x7ffc0000 [ 69.645656][ T5421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 69.680061][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.692016][ T29] audit: type=1326 audit(1757982470.417:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 69.716275][ T29] audit: type=1326 audit(1757982470.417:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 69.739889][ T29] audit: type=1326 audit(1757982470.417:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f582a88d510 code=0x7ffc0000 [ 69.764057][ T29] audit: type=1326 audit(1757982470.417:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f582a88d510 code=0x7ffc0000 [ 69.788055][ T29] audit: type=1326 audit(1757982470.417:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 69.837427][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 69.926330][ T5439] loop1: detected capacity change from 0 to 512 [ 69.948732][ T5439] EXT4-fs: Ignoring removed orlov option [ 69.954445][ T5439] EXT4-fs: Ignoring removed i_version option [ 69.978530][ T5439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.993196][ T5443] netlink: 'syz.4.748': attribute type 13 has an invalid length. [ 70.012696][ T5443] bridge0: port 3(gretap0) entered disabled state [ 70.024761][ T5439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.044105][ T5439] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.113531][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.120769][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.134231][ T5439] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.746: corrupted inode contents [ 70.150826][ T5439] EXT4-fs (loop1): Remounting filesystem read-only [ 70.184119][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.229033][ T5443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.240937][ T5443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.317901][ T313] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.328241][ T313] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.338661][ T313] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.352305][ T313] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.453965][ T5460] futex_wake_op: syz.4.754 tries to shift op by 144; fix this program [ 70.598890][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 72.404535][ T5543] loop2: detected capacity change from 0 to 2048 [ 72.437571][ T5543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.484505][ T5551] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.790: reserved inode found cleared - inode=1 [ 72.496845][ T5550] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 72.504732][ T5550] bond_slave_0: left promiscuous mode [ 72.512058][ T5550] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 72.522983][ T5543] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 72.539740][ T5550] bond_slave_1: left promiscuous mode [ 72.558350][ T5550] team0: Port device team_slave_0 removed [ 72.588234][ T5550] team0: Port device team_slave_1 removed [ 72.595197][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.603342][ T5557] loop1: detected capacity change from 0 to 512 [ 72.611103][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.620210][ T5557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.632803][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.642960][ T5557] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.794: invalid indirect mapped block 4294967295 (level 0) [ 72.678184][ T5557] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.794: invalid indirect mapped block 4294967295 (level 1) [ 72.696079][ T5560] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 72.706300][ T5557] EXT4-fs (loop1): 1 orphan inode deleted [ 72.712233][ T5557] EXT4-fs (loop1): 1 truncate cleaned up [ 72.713004][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.729726][ T5563] loop2: detected capacity change from 0 to 512 [ 72.731485][ T5557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.737069][ T5563] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.772529][ T5563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.787672][ T5563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.796187][ T5563] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.808004][ T5560] bond0: (slave veth9): Enslaving as an active interface with a down link [ 72.831490][ T5563] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.795: Allocating blocks 41-42 which overlap fs metadata [ 72.851462][ T5560] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 72.858975][ T5560] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 72.863677][ T5563] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.795: Failed to acquire dquot type 1 [ 72.898093][ T5568] sch_fq: defrate 4294967295 ignored. [ 72.905309][ T5563] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 72.920809][ T5563] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.795: corrupted inode contents [ 72.935411][ T5563] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.795: mark_inode_dirty error [ 72.946987][ T5563] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.795: corrupted inode contents [ 72.966009][ T5563] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.795: mark_inode_dirty error [ 72.994284][ T5563] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.795: corrupted inode contents [ 73.008350][ T5563] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 73.017817][ T5563] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.795: corrupted inode contents [ 73.030900][ T5563] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.795: mark_inode_dirty error [ 73.045386][ T5563] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 73.056784][ T5563] EXT4-fs (loop2): 1 truncate cleaned up [ 73.071798][ T5563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.101253][ T5563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.390808][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.467254][ T5609] bridge0: port 4(macsec1) entered blocking state [ 73.473795][ T5609] bridge0: port 4(macsec1) entered disabled state [ 73.480470][ T5609] macsec1: entered allmulticast mode [ 73.485847][ T5609] bridge0: entered allmulticast mode [ 73.494996][ T5609] macsec1: left allmulticast mode [ 73.500089][ T5609] bridge0: left allmulticast mode [ 73.594814][ T5617] netlink: 56 bytes leftover after parsing attributes in process `syz.4.821'. [ 73.597462][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'. [ 73.666124][ T5623] loop1: detected capacity change from 0 to 128 [ 73.712227][ T5625] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 73.742319][ T5625] SELinux: failed to load policy [ 73.755657][ T5623] syz.1.823: attempt to access beyond end of device [ 73.755657][ T5623] loop1: rw=2049, sector=161, nr_sectors = 5 limit=128 [ 73.840841][ T5635] netlink: 'syz.2.828': attribute type 21 has an invalid length. [ 73.876761][ T31] kworker/u8:1: attempt to access beyond end of device [ 73.876761][ T31] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 74.391488][ T31] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.446992][ T5660] chnl_net:caif_netlink_parms(): no params data found [ 74.473454][ T31] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.510185][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 74.510200][ T29] audit: type=1400 audit(1757982475.488:1047): avc: denied { create } for pid=5692 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.536752][ T29] audit: type=1400 audit(1757982475.498:1048): avc: denied { write } for pid=5692 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.558921][ T5693] lo speed is unknown, defaulting to 1000 [ 74.561085][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.571899][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.579925][ T5660] bridge_slave_0: entered allmulticast mode [ 74.586673][ T5660] bridge_slave_0: entered promiscuous mode [ 74.594759][ T31] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.608054][ T5693] lo speed is unknown, defaulting to 1000 [ 74.608416][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.621181][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.630365][ T5660] bridge_slave_1: entered allmulticast mode [ 74.638087][ T5660] bridge_slave_1: entered promiscuous mode [ 74.646943][ T5693] lo speed is unknown, defaulting to 1000 [ 74.657545][ T5693] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.667898][ T5693] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 74.684691][ T31] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.703774][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.714729][ T5693] lo speed is unknown, defaulting to 1000 [ 74.722087][ T5693] lo speed is unknown, defaulting to 1000 [ 74.729800][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.740939][ T5693] lo speed is unknown, defaulting to 1000 [ 74.747208][ T5693] lo speed is unknown, defaulting to 1000 [ 74.767681][ T5693] lo speed is unknown, defaulting to 1000 [ 74.774745][ T5660] team0: Port device team_slave_0 added [ 74.783027][ T5693] lo speed is unknown, defaulting to 1000 [ 74.784515][ T5660] team0: Port device team_slave_1 added [ 74.825703][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.832721][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.859548][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.875497][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.883213][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.909285][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.923990][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 74.963641][ T5660] hsr_slave_0: entered promiscuous mode [ 74.970900][ T5660] hsr_slave_1: entered promiscuous mode [ 74.977183][ T5660] debugfs: 'hsr0' already exists in 'hsr' [ 74.983043][ T5660] Cannot create hsr debugfs directory [ 75.011682][ T31] bridge_slave_1: left allmulticast mode [ 75.017545][ T31] bridge_slave_1: left promiscuous mode [ 75.023279][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.042684][ T31] bridge_slave_0: left allmulticast mode [ 75.048511][ T31] bridge_slave_0: left promiscuous mode [ 75.054409][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.098769][ T5721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'. [ 75.221847][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.238804][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.267602][ T5724] loop1: detected capacity change from 0 to 8192 [ 75.275396][ T31] bond0 (unregistering): Released all slaves [ 75.293534][ T5724] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.310311][ T29] audit: type=1326 audit(1757982476.328:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 75.334603][ T29] audit: type=1326 audit(1757982476.328:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 75.370795][ T29] audit: type=1326 audit(1757982476.401:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 75.394365][ T29] audit: type=1326 audit(1757982476.401:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 75.417689][ T29] audit: type=1326 audit(1757982476.401:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 75.441277][ T29] audit: type=1400 audit(1757982476.401:1054): avc: denied { mounton } for pid=5728 comm="syz.2.860" path="/184/file0" dev="tmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.512243][ T29] audit: type=1326 audit(1757982476.548:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.2.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 75.536264][ T29] audit: type=1326 audit(1757982476.548:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.2.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31928beba9 code=0x7ffc0000 [ 75.622427][ T31] hsr_slave_0: left promiscuous mode [ 75.649802][ T31] hsr_slave_1: left promiscuous mode [ 75.655787][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.663287][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.676855][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.684512][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.695640][ T31] veth1_macvtap: left promiscuous mode [ 75.701281][ T31] veth0_macvtap: left promiscuous mode [ 75.708028][ T31] veth1_vlan: left promiscuous mode [ 75.713353][ T31] veth0_vlan: left promiscuous mode [ 75.806768][ T31] team0 (unregistering): Port device team_slave_1 removed [ 75.818863][ T31] team0 (unregistering): Port device team_slave_0 removed [ 75.871204][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 75.932607][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 75.941704][ T5756] netlink: 'syz.3.873': attribute type 11 has an invalid length. [ 75.989262][ T5660] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.010289][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 76.010290][ T5660] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.020124][ T5756] netlink: 'syz.3.873': attribute type 11 has an invalid length. [ 76.053733][ T5660] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.072462][ T5660] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 76.097959][ T5762] netlink: 96 bytes leftover after parsing attributes in process `syz.3.878'. [ 76.143320][ T31] IPVS: stop unused estimator thread 0... [ 76.199979][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.227485][ T5660] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.242598][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.262244][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.269407][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.278551][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.285691][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.319444][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.338122][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 76.347249][ T5766] lo speed is unknown, defaulting to 1000 [ 76.348458][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 76.390450][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.421133][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.449605][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.476334][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 76.539994][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.547242][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.554639][ T5766] bridge_slave_0: entered allmulticast mode [ 76.561771][ T5766] bridge_slave_0: entered promiscuous mode [ 76.568481][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.575794][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.583085][ T5766] bridge_slave_1: entered allmulticast mode [ 76.590391][ T5766] bridge_slave_1: entered promiscuous mode [ 76.597099][ T31] dummy0: left allmulticast mode [ 76.602375][ T31] bridge0: port 3(dummy0) entered disabled state [ 76.609412][ T31] bridge_slave_1: left allmulticast mode [ 76.615119][ T31] bridge_slave_1: left promiscuous mode [ 76.620915][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.628778][ T31] bridge_slave_0: left allmulticast mode [ 76.634449][ T31] bridge_slave_0: left promiscuous mode [ 76.640179][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.714590][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.724512][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.734104][ T31] bond0 (unregistering): Released all slaves [ 76.756730][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.769050][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.794991][ T31] tipc: Disabling bearer [ 76.800035][ T31] tipc: Disabling bearer [ 76.805342][ T31] tipc: Left network mode [ 76.807649][ T5766] team0: Port device team_slave_0 added [ 76.819140][ T5766] team0: Port device team_slave_1 added [ 76.841662][ T31] hsr_slave_0: left promiscuous mode [ 76.848117][ T31] hsr_slave_1: left promiscuous mode [ 76.853736][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.861163][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.871756][ T31] veth1_macvtap: left promiscuous mode [ 76.877704][ T31] veth0_macvtap: left promiscuous mode [ 76.883517][ T31] veth1_vlan: left promiscuous mode [ 76.888812][ T31] veth0_vlan: left promiscuous mode [ 76.957761][ T31] team0 (unregistering): Port device team_slave_1 removed [ 76.969182][ T31] team0 (unregistering): Port device team_slave_0 removed [ 77.004836][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.012133][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.038196][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.055594][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.062603][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.088844][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.137310][ T5766] hsr_slave_0: entered promiscuous mode [ 77.144827][ T5766] hsr_slave_1: entered promiscuous mode [ 77.173165][ T5660] veth0_vlan: entered promiscuous mode [ 77.182074][ T5660] veth1_vlan: entered promiscuous mode [ 77.214027][ T5660] veth0_macvtap: entered promiscuous mode [ 77.240133][ T5660] veth1_macvtap: entered promiscuous mode [ 77.274647][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.290186][ T5840] ref_ctr increment failed for inode: 0x415 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a99e780 [ 77.294522][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.324730][ T5839] uprobe: syz.3.890:5839 failed to unregister, leaking uprobe [ 77.339801][ T309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.353311][ T309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.363269][ T309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.376952][ T309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.422582][ T5852] syz.6.835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.544031][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.555011][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.567096][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.578276][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.647177][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.664977][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.677464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.684584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.697858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.705000][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.727744][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.738262][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.817969][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.932594][ T5766] veth0_vlan: entered promiscuous mode [ 77.942053][ T5766] veth1_vlan: entered promiscuous mode [ 77.964815][ T5766] veth0_macvtap: entered promiscuous mode [ 77.974405][ T5766] veth1_macvtap: entered promiscuous mode [ 77.990054][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.004120][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.016623][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.028433][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.056310][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.067032][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.107878][ T5878] loop2: detected capacity change from 0 to 2048 [ 78.124723][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.166552][ T5766] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.185341][ T5766] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.202828][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.460062][ T5903] loop2: detected capacity change from 0 to 512 [ 78.496690][ T5903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.528428][ T5903] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.594124][ T5910] batadv1: entered promiscuous mode [ 78.609152][ T5903] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.906: lblock 23 mapped to illegal pblock 18 (length 1) [ 78.633732][ T5903] EXT4-fs (loop2): Remounting filesystem read-only [ 79.251703][ T5940] loop1: detected capacity change from 0 to 2048 [ 79.289021][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.302222][ T5940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.433113][ T3306] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 79.482379][ T3306] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.574825][ T5965] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 79.583399][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.867228][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 79.867243][ T29] audit: type=1400 audit(1757982481.116:1130): avc: denied { connect } for pid=5991 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.990219][ T6003] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 79.998277][ T6003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.946'. [ 80.007570][ T6003] dummy0: entered promiscuous mode [ 80.012344][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 80.100016][ T6018] netlink: zone id is out of range [ 80.105941][ T6018] netlink: zone id is out of range [ 80.111124][ T6018] netlink: zone id is out of range [ 80.116310][ T6018] netlink: zone id is out of range [ 80.122994][ T6018] netlink: zone id is out of range [ 80.128309][ T6018] netlink: zone id is out of range [ 80.136188][ T6018] netlink: zone id is out of range [ 80.142715][ T6018] netlink: zone id is out of range [ 80.147935][ T6018] netlink: zone id is out of range [ 80.153203][ T6018] netlink: zone id is out of range [ 80.402014][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'. [ 80.427590][ T6059] netlink: 96 bytes leftover after parsing attributes in process `syz.1.973'. [ 80.439837][ T6057] lo speed is unknown, defaulting to 1000 [ 80.469187][ T29] audit: type=1400 audit(1757982481.745:1131): avc: denied { write } for pid=6056 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.609383][ T6080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.981'. [ 80.621294][ T6075] loop6: detected capacity change from 0 to 512 [ 80.636406][ T6075] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.658799][ T6075] EXT4-fs (loop6): 1 truncate cleaned up [ 80.667484][ T6085] syzkaller1: entered promiscuous mode [ 80.669636][ T6075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.672982][ T6085] syzkaller1: entered allmulticast mode [ 80.764903][ T5660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.807256][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.988'. [ 80.831169][ T6101] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 81.710046][ T6113] 9pnet_fd: p9_fd_create_tcp (6113): problem connecting socket to 127.0.0.1 [ 81.751865][ T6143] netlink: 'syz.1.1001': attribute type 3 has an invalid length. [ 81.824041][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 82.103246][ T29] audit: type=1400 audit(1757982483.457:1132): avc: denied { watch_reads } for pid=6172 comm="syz.2.1012" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.202638][ T6175] loop2: detected capacity change from 0 to 1024 [ 82.220164][ T6175] EXT4-fs: Ignoring removed bh option [ 82.227239][ T6175] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.248632][ T6181] netlink: 'syz.3.1015': attribute type 13 has an invalid length. [ 82.282345][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.657388][ T29] audit: type=1326 audit(1757982484.045:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.681575][ T29] audit: type=1326 audit(1757982484.045:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.732891][ T29] audit: type=1326 audit(1757982484.097:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.756386][ T29] audit: type=1326 audit(1757982484.097:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.780038][ T29] audit: type=1326 audit(1757982484.097:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.803519][ T29] audit: type=1326 audit(1757982484.097:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.826966][ T29] audit: type=1326 audit(1757982484.097:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.1.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 82.973215][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'. [ 83.037389][ T6222] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 83.044012][ T6222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.051663][ T6222] vhci_hcd vhci_hcd.0: Device attached [ 83.063397][ T6224] vhci_hcd: connection closed [ 83.063688][ T12] vhci_hcd: stop threads [ 83.072851][ T12] vhci_hcd: release socket [ 83.077347][ T12] vhci_hcd: disconnect device [ 83.221574][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.265594][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 83.323874][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 83.337050][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 83.353218][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 83.362551][ T6253] netlink: 'syz.2.1047': attribute type 6 has an invalid length. [ 83.396409][ T6258] syzkaller1: entered promiscuous mode [ 83.402076][ T6258] syzkaller1: entered allmulticast mode [ 83.496554][ T6268] veth1_to_bond: entered allmulticast mode [ 83.503699][ T6268] veth1_to_bond: left allmulticast mode [ 83.531569][ T6266] lo speed is unknown, defaulting to 1000 [ 83.650880][ T6274] program syz.1.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.685477][ T6274] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.819389][ T6279] SELinux: failed to load policy [ 83.936183][ T6293] batadv1: entered promiscuous mode [ 83.956026][ T6296] loop2: detected capacity change from 0 to 128 [ 83.972582][ T6296] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 83.981539][ T6296] FAT-fs (loop2): Filesystem has been set read-only [ 83.988567][ T6296] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 84.317457][ T6339] loop2: detected capacity change from 0 to 512 [ 84.341927][ T6339] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.357185][ T6339] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1085: invalid indirect mapped block 4294967295 (level 0) [ 84.372621][ T6339] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1085: invalid indirect mapped block 4294967295 (level 1) [ 84.387944][ T6339] EXT4-fs (loop2): 1 orphan inode deleted [ 84.393708][ T6339] EXT4-fs (loop2): 1 truncate cleaned up [ 84.411929][ T6339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.459279][ T6339] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 84.545926][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.772805][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 84.772925][ T29] audit: type=1326 audit(1757982486.271:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.846519][ T29] audit: type=1326 audit(1757982486.271:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.870126][ T29] audit: type=1326 audit(1757982486.271:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.894373][ T29] audit: type=1326 audit(1757982486.271:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.917906][ T29] audit: type=1326 audit(1757982486.271:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.941497][ T29] audit: type=1326 audit(1757982486.271:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.965665][ T29] audit: type=1326 audit(1757982486.271:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 84.989962][ T29] audit: type=1326 audit(1757982486.271:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 85.013620][ T29] audit: type=1326 audit(1757982486.281:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 85.037840][ T29] audit: type=1326 audit(1757982486.281:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 85.139458][ T6406] __nla_validate_parse: 4 callbacks suppressed [ 85.139473][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'. [ 85.196787][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 85.213086][ T6412] bridge1: entered allmulticast mode [ 85.633448][ T6410] net_ratelimit: 2 callbacks suppressed [ 85.633463][ T6410] Set syz1 is full, maxelem 65536 reached [ 85.843667][ T6452] loop2: detected capacity change from 0 to 4096 [ 85.852753][ T6452] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 85.865933][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.898275][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.926034][ T6460] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 86.119537][ T6487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1148'. [ 86.307481][ T6503] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 86.375561][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 86.393713][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.416117][ T6509] vlan2: entered allmulticast mode [ 86.422185][ T6509] bond1: entered allmulticast mode [ 87.032774][ T6554] loop2: detected capacity change from 0 to 128 [ 87.048244][ T6554] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.067891][ T6554] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.090719][ T6557] veth0_to_team: entered promiscuous mode [ 87.125513][ T311] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.147603][ T3386] IPVS: starting estimator thread 0... [ 87.223845][ T6576] vlan3: entered allmulticast mode [ 87.231276][ T6576] dummy0: entered allmulticast mode [ 87.246253][ T6565] IPVS: using max 1872 ests per chain, 93600 per kthread [ 87.326248][ T6585] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1191'. [ 87.359015][ T6585] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 87.378191][ T6585] 0ªî{X¹¦: entered allmulticast mode [ 87.414105][ T6603] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1200'. [ 87.424118][ T6585] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 87.527424][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'. [ 88.230220][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 88.427760][ T6665] netlink: 'syz.4.1224': attribute type 3 has an invalid length. [ 88.641720][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.704198][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.827850][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 88.843953][ T6720] IPVS: Error joining to the multicast group [ 89.040562][ T6755] openvswitch: netlink: Message has 6 unknown bytes. [ 89.240771][ T6766] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1242'. [ 89.789762][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 89.789813][ T29] audit: type=1400 audit(1757982491.531:1279): avc: denied { watch } for pid=6805 comm="syz.2.1260" path="/63/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 89.858340][ T6809] loop1: detected capacity change from 0 to 512 [ 89.864752][ T29] audit: type=1400 audit(1757982491.573:1280): avc: denied { associate } for pid=6805 comm="syz.2.1260" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 89.892554][ T29] audit: type=1400 audit(1757982491.583:1281): avc: denied { unmount } for pid=5766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 89.916713][ T6809] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.933390][ T6810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6810 comm=syz.2.1262 [ 89.975689][ T6809] EXT4-fs (loop1): 1 truncate cleaned up [ 89.981963][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.019798][ T29] audit: type=1400 audit(1757982491.762:1282): avc: denied { getattr } for pid=6817 comm="syz.4.1265" name="[io_uring]" dev="anon_inodefs" ino=18531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.112972][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.147036][ T29] audit: type=1326 audit(1757982491.909:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 90.170709][ T29] audit: type=1326 audit(1757982491.909:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 90.194165][ T29] audit: type=1326 audit(1757982491.909:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 90.217607][ T29] audit: type=1326 audit(1757982491.909:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 90.241098][ T29] audit: type=1326 audit(1757982491.909:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 90.264521][ T29] audit: type=1326 audit(1757982491.909:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.3.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 90.326007][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1270'. [ 90.975558][ T6897] loop6: detected capacity change from 0 to 512 [ 91.000523][ T6897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.032656][ T6897] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.098090][ T5660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.285957][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 91.301052][ T6945] team0 (unregistering): Port device team_slave_0 removed [ 91.310387][ T6945] team0 (unregistering): Port device team_slave_1 removed [ 91.630291][ T6982] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 91.636870][ T6982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.644518][ T6982] vhci_hcd vhci_hcd.0: Device attached [ 91.653504][ T6983] vhci_hcd: connection closed [ 91.653615][ T6722] vhci_hcd: stop threads [ 91.662815][ T6722] vhci_hcd: release socket [ 91.667307][ T6722] vhci_hcd: disconnect device [ 92.083359][ T7000] lo speed is unknown, defaulting to 1000 [ 92.215954][ T7015] geneve2: entered promiscuous mode [ 92.221274][ T7015] geneve2: entered allmulticast mode [ 92.384374][ T7029] loop6: detected capacity change from 0 to 512 [ 92.399582][ T7029] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.416701][ T7029] EXT4-fs (loop6): mount failed [ 92.674382][ T7058] wireguard0: entered promiscuous mode [ 92.680067][ T7058] wireguard0: entered allmulticast mode [ 92.739976][ T7067] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1366'. [ 92.768711][ T7069] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1367'. [ 92.968897][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.976236][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.006877][ T7092] bridge0: entered allmulticast mode [ 93.032947][ T7092] bridge_slave_1: left allmulticast mode [ 93.039485][ T7092] bridge_slave_1: left promiscuous mode [ 93.045175][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.061181][ T7092] bridge_slave_0: left allmulticast mode [ 93.067063][ T7092] bridge_slave_0: left promiscuous mode [ 93.072871][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.114095][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1379'. [ 93.123134][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1379'. [ 93.139684][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1379'. [ 93.148786][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1379'. [ 95.010634][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 95.010651][ T29] audit: type=1326 audit(1757982497.022:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.076341][ T29] audit: type=1326 audit(1757982497.053:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.100667][ T29] audit: type=1326 audit(1757982497.053:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.124983][ T29] audit: type=1326 audit(1757982497.053:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.148474][ T29] audit: type=1326 audit(1757982497.053:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.172790][ T29] audit: type=1326 audit(1757982497.053:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.196266][ T29] audit: type=1326 audit(1757982497.053:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.220582][ T29] audit: type=1326 audit(1757982497.053:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.244130][ T29] audit: type=1326 audit(1757982497.053:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.268538][ T29] audit: type=1326 audit(1757982497.053:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.3.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f582a88eba9 code=0x7ffc0000 [ 95.419813][ T7198] SELinux: ebitmap: truncated map [ 95.427167][ T7198] SELinux: failed to load policy [ 95.852900][ T7238] ÿÿÿÿÿÿ: renamed from vlan1 [ 95.881564][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 96.384012][ T7266] loop2: detected capacity change from 0 to 128 [ 96.499450][ T7278] loop2: detected capacity change from 0 to 1024 [ 96.556133][ T7278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.604257][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.647522][ T7293] loop2: detected capacity change from 0 to 1024 [ 96.656459][ T7293] EXT4-fs: Ignoring removed bh option [ 96.662089][ T7293] EXT4-fs: inline encryption not supported [ 96.675510][ T7293] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.705287][ T7293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 96.718205][ T7293] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1465: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.750817][ T7293] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1465: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.768621][ T7293] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1465: Failed to acquire dquot type 0 [ 96.790996][ T7293] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 96.807733][ T7293] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1465: mark_inode_dirty error [ 96.840491][ T7293] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 96.861380][ T7293] EXT4-fs (loop2): 1 orphan inode deleted [ 96.867862][ T7293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.882178][ T6677] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.912836][ T6677] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:17: Failed to release dquot type 0 [ 96.934052][ T7293] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.1465: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.962736][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.972516][ T5766] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.987324][ T5766] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 96.997679][ T5766] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 97.340564][ T7336] syzkaller1: entered promiscuous mode [ 97.346196][ T7336] syzkaller1: entered allmulticast mode [ 97.570060][ T7341] tipc: Started in network mode [ 97.575056][ T7341] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 97.584158][ T7341] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 97.592397][ T7341] tipc: Enabled bearer , priority 10 [ 98.006004][ T7390] tipc: New replicast peer: 255.255.255.255 [ 98.012112][ T7390] tipc: Enabled bearer , priority 10 [ 98.020429][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 98.029579][ T7390] tipc: Disabling bearer [ 98.088365][ T7396] loop2: detected capacity change from 0 to 512 [ 98.097172][ T7396] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.118973][ T7396] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 98.155745][ T7396] EXT4-fs (loop2): mount failed [ 98.163521][ T7404] netlink: 'syz.4.1512': attribute type 39 has an invalid length. [ 98.178953][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 98.400608][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1525'. [ 98.593296][ T7448] lo speed is unknown, defaulting to 1000 [ 98.821245][ T7460] SELinux: failed to load policy [ 98.823372][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'. [ 98.920918][ T7470] vlan2: entered allmulticast mode [ 98.926425][ T7470] dummy0: entered allmulticast mode [ 99.093999][ T3472] tipc: Node number set to 1 [ 100.012503][ T7538] lo speed is unknown, defaulting to 1000 [ 100.086756][ T7538] unsupported nla_type 52263 [ 100.112029][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.121760][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.144062][ T7552] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.480993][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 100.481051][ T29] audit: type=1326 audit(1757982502.754:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.516857][ T29] audit: type=1326 audit(1757982502.754:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.541114][ T29] audit: type=1326 audit(1757982502.754:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.565545][ T29] audit: type=1326 audit(1757982502.754:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.589833][ T29] audit: type=1326 audit(1757982502.754:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.613772][ T29] audit: type=1326 audit(1757982502.754:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.638082][ T29] audit: type=1326 audit(1757982502.754:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.661824][ T29] audit: type=1326 audit(1757982502.754:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.686148][ T29] audit: type=1326 audit(1757982502.754:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.709686][ T29] audit: type=1326 audit(1757982502.754:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe820eba9 code=0x7ffc0000 [ 100.757957][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1590'. [ 100.767657][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1590'. [ 100.780410][ T7580] wireguard0: entered promiscuous mode [ 100.786001][ T7580] wireguard0: entered allmulticast mode [ 100.861058][ T7584] loop6: detected capacity change from 0 to 8192 [ 100.876464][ T7586] loop2: detected capacity change from 0 to 512 [ 100.895645][ T7586] EXT4-fs (loop2): too many log groups per flexible block group [ 100.904110][ T7586] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 100.912455][ T7586] EXT4-fs (loop2): mount failed [ 101.025547][ T7604] loop2: detected capacity change from 0 to 512 [ 101.040874][ T7606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7606 comm=syz.1.1602 [ 101.071110][ T7612] 9pnet: p9_errstr2errno: server reported unknown error [ 101.083939][ T7604] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1599: bad orphan inode 11862016 [ 101.102360][ T7604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.122042][ T7604] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.169188][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.422350][ T7658] hub 9-0:1.0: USB hub found [ 101.439228][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 101.445362][ T7658] hub 9-0:1.0: 8 ports detected [ 101.842426][ T7702] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 102.039532][ T7661] Set syz1 is full, maxelem 65536 reached [ 102.126441][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1651'. [ 102.243591][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1668'. [ 102.252761][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1668'. [ 102.264779][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 102.289078][ T7742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7742 comm=syz.3.1661 [ 102.311141][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1661'. [ 102.439810][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 102.786767][ T7817] gretap0: left allmulticast mode [ 102.792683][ T7817] gretap0: left promiscuous mode [ 102.797805][ T7817] bridge0: port 3(gretap0) entered disabled state [ 102.811484][ T7817] bond0: (slave dummy0): Releasing backup interface [ 102.819710][ T7817] bridge_slave_0: left allmulticast mode [ 102.825428][ T7817] bridge_slave_0: left promiscuous mode [ 102.831157][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.839063][ T7817] bridge_slave_1: left allmulticast mode [ 102.844742][ T7817] bridge_slave_1: left promiscuous mode [ 102.851364][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.862531][ T7817] bond0: (slave bond_slave_0): Releasing backup interface [ 102.875889][ T7817] bond0: (slave bond_slave_1): Releasing backup interface [ 102.892996][ T7817] team0: Port device team_slave_0 removed [ 102.906002][ T7817] team0: Port device team_slave_1 removed [ 102.919971][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.935357][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.362065][ T7866] openvswitch: netlink: Message has 6 unknown bytes. [ 103.612090][ T7885] wireguard0: entered promiscuous mode [ 103.617626][ T7885] wireguard0: entered allmulticast mode [ 104.157804][ T7911] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.429963][ T7934] loop1: detected capacity change from 0 to 256 [ 104.434718][ T7936] serio: Serial port ptm0 [ 104.572248][ T7953] hub 9-0:1.0: USB hub found [ 104.583051][ T7953] hub 9-0:1.0: 8 ports detected [ 104.834953][ T7974] SELinux: ebitmap: truncated map [ 104.868785][ T7974] SELinux: failed to load policy [ 105.078895][ T8000] loop2: detected capacity change from 0 to 512 [ 105.107788][ T8000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.128117][ T8000] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.163323][ T8012] loop6: detected capacity change from 0 to 512 [ 105.207987][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.221235][ T8016] loop6: detected capacity change from 0 to 512 [ 105.244908][ T8016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.266717][ T8016] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.281680][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 105.281694][ T29] audit: type=1400 audit(1757982507.794:1818): avc: denied { ioctl } for pid=8015 comm="syz.6.1772" path="socket:[21658]" dev="sockfs" ino=21658 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.326813][ T5660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.579596][ T29] audit: type=1326 audit(1757982508.109:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.603174][ T29] audit: type=1326 audit(1757982508.109:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.629036][ T29] audit: type=1326 audit(1757982508.109:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.652673][ T29] audit: type=1326 audit(1757982508.109:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.676920][ T29] audit: type=1326 audit(1757982508.119:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.703722][ T29] audit: type=1326 audit(1757982508.245:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.728067][ T29] audit: type=1326 audit(1757982508.245:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.752300][ T29] audit: type=1326 audit(1757982508.245:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.796324][ T29] audit: type=1326 audit(1757982508.245:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdd39eba9 code=0x7ffc0000 [ 105.863944][ T8057] loop1: detected capacity change from 0 to 1024 [ 105.886440][ T8057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.901889][ T8057] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1788: Allocating blocks 385-513 which overlap fs metadata [ 105.919526][ T8057] EXT4-fs (loop1): pa ffff888107222690: logic 16, phys. 129, len 24 [ 105.927624][ T8057] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 105.957939][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.976602][ T8068] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1793'. [ 105.987251][ T8068] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1793'. [ 106.526751][ T8117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.584300][ T8117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.640203][ T8117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.674816][ T8122] loop6: detected capacity change from 0 to 2048 [ 106.685078][ T8117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.717448][ T8122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.744974][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.786651][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.816222][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.865751][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.920966][ T5660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.939795][ T8138] syzkaller1: entered promiscuous mode [ 106.945586][ T8138] syzkaller1: entered allmulticast mode [ 106.974604][ T8144] loop6: detected capacity change from 0 to 1024 [ 107.024079][ T8150] loop2: detected capacity change from 0 to 128 [ 107.031419][ T8144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.049733][ T8150] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.050470][ T8144] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1831: Allocating blocks 385-513 which overlap fs metadata [ 107.077901][ T8150] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.087995][ T8144] EXT4-fs (loop6): pa ffff888107288310: logic 16, phys. 129, len 24 [ 107.118605][ T8144] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 107.179016][ T5660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.222258][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.674560][ T8193] loop6: detected capacity change from 0 to 128 [ 107.693505][ T8193] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.694217][ T8191] loop2: detected capacity change from 0 to 8192 [ 107.710594][ T8193] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.802247][ T5660] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.846945][ T8199] loop6: detected capacity change from 0 to 164 [ 107.863642][ T8199] syz.6.1846: attempt to access beyond end of device [ 107.863642][ T8199] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 107.880545][ T8199] syz.6.1846: attempt to access beyond end of device [ 107.880545][ T8199] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 107.913661][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1848'. [ 108.009301][ T8213] netem: change failed [ 108.297921][ T8229] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1859'. [ 108.434805][ T8226] ================================================================== [ 108.442949][ T8226] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 108.451584][ T8226] [ 108.453967][ T8226] write to 0xffff888104639be8 of 8 bytes by task 8224 on cpu 1: [ 108.461614][ T8226] shmem_file_splice_read+0x470/0x600 [ 108.467017][ T8226] splice_direct_to_actor+0x26f/0x680 [ 108.472414][ T8226] do_splice_direct+0xda/0x150 [ 108.477213][ T8226] do_sendfile+0x380/0x650 [ 108.481763][ T8226] __x64_sys_sendfile64+0x105/0x150 [ 108.487005][ T8226] x64_sys_call+0x2bb0/0x2ff0 [ 108.491715][ T8226] do_syscall_64+0xd2/0x200 [ 108.496278][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.502215][ T8226] [ 108.504557][ T8226] write to 0xffff888104639be8 of 8 bytes by task 8226 on cpu 0: [ 108.512218][ T8226] shmem_file_splice_read+0x470/0x600 [ 108.517716][ T8226] splice_direct_to_actor+0x26f/0x680 [ 108.523119][ T8226] do_splice_direct+0xda/0x150 [ 108.527921][ T8226] do_sendfile+0x380/0x650 [ 108.532592][ T8226] __x64_sys_sendfile64+0x105/0x150 [ 108.537823][ T8226] x64_sys_call+0x2bb0/0x2ff0 [ 108.542588][ T8226] do_syscall_64+0xd2/0x200 [ 108.547236][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.553168][ T8226] [ 108.555500][ T8226] value changed: 0x000000000002c66a -> 0x000000000002c68c [ 108.562623][ T8226] [ 108.564969][ T8226] Reported by Kernel Concurrency Sanitizer on: [ 108.571161][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.3.1857 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.581025][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.591105][ T8226] ==================================================================