last executing test programs: 11.917211617s ago: executing program 4 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 11.640218353s ago: executing program 4 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 11.447253886s ago: executing program 4 (id=1620): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 11.364238268s ago: executing program 4 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11.355945178s ago: executing program 4 (id=1625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) 11.018750015s ago: executing program 4 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) 11.001925816s ago: executing program 32 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) 2.592274059s ago: executing program 1 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000540), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.53828603s ago: executing program 1 (id=1827): getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x8010743f, 0xf0ff1f00000000) 2.331106354s ago: executing program 0 (id=1833): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x300) 2.312502815s ago: executing program 0 (id=1834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.164177778s ago: executing program 0 (id=1835): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 2.154909208s ago: executing program 1 (id=1837): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/138) 1.853002284s ago: executing program 0 (id=1840): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x272, 0x0) 1.659134987s ago: executing program 0 (id=1843): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.658905397s ago: executing program 3 (id=1844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 1.495814021s ago: executing program 3 (id=1848): prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00040008000000000000ff8507"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='reclaim_retry_zone\x00', r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000020000000a00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xff, 0x2cb, &(0x7f0000000cc0)="$eJzs3c9rE1sUwPHTpm3SljZ58HjwHjw94EY3QxsXLjVIC2JAqU1RF8LUTjRkTMpMqEREsxG3/hGuKu7cCerSTTfiQvfuiiC66UIcyUymJm1a0+ZHY/v9QHtPcu7hnrbTclJIsn71yZ181jWyZkkGYyqDIhXZEElUo5qB2jroxyNSryKnxr99/P/KtesXU+n0zJzqbGr+dFJVJ4+/Cre+mHwZlbXEjfUvyU9r/6z9u/5j/nbO1ZyrhWJJTV0sFkvmom3pUs7NG6qXbct0Lc0VXMtpyGft4vJyWc3C0sTYsmO5rpqFsuatspaKWnLKat4ycwU1DEMnxuRoG2phT2Z1bs5M7Zj2Ih3tCF032uxOx0lVmiczqz3oCQAA9Jnd5/9ggN95/k8vBOsO8//d+8Nn3pTGF4L5//lTkdbmf5HG+f9DW/P/QE+/oX2u0nDrN/M/DgXHSZljtd/fRsz/AAAAAAAAAAAAAAAAAAAAAAD8CTY8L+55Xjxcw4+oiMREJLx90H2iO/b58z97QO2iw+qeuBcTsR+vZEYlWIN8Kis5scWSKYnLd/96qAni2QvpmSn1JeS1/XAlU62srhGJhvWhRLP6Y39NB/XaWD8stWfwBecnJS5/Nz8/2bR+RE6eqOvfkLi8uylFsWXJv66ffa1+rtY/mFY9fym9pX7U3wcAAAAAwGFg6KZtj9/9vL8hJtvzQf0e/j+w5fH1kPzXyktUAgAAAACAtrnle3nTti1nH0FURNoo30PgDXT9iM4FEemLNrYE50SkD9roVRATkeAe3U/5583ylqq8FvYMiUi7X1esh5fWQf9lAgAAANBpv4b+PRS9f9TFjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHpafT2wcP+2VJjYpbzuuIi83Xx7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODI+RkAAP//KGghCg==") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1.156226927s ago: executing program 3 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, r3}) 764.695605ms ago: executing program 3 (id=1855): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 752.508295ms ago: executing program 2 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61f, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10) 690.196616ms ago: executing program 5 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 646.898817ms ago: executing program 0 (id=1858): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 628.642058ms ago: executing program 3 (id=1859): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2, 0x0, 0x11000000}, 0x38) 488.06156ms ago: executing program 2 (id=1860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$inet(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b", 0x6}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 469.221161ms ago: executing program 5 (id=1861): rt_sigqueueinfo(0x0, 0x21, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x12) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 459.647221ms ago: executing program 1 (id=1862): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) 371.567513ms ago: executing program 1 (id=1863): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 329.343603ms ago: executing program 5 (id=1864): add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x21) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1]) 329.121453ms ago: executing program 5 (id=1865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 328.759754ms ago: executing program 2 (id=1866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) creat(0x0, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x802, @empty, 0xc}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xffffffff}, r3, 0xb}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 244.145095ms ago: executing program 2 (id=1867): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chmod(&(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 243.495705ms ago: executing program 5 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 243.352545ms ago: executing program 3 (id=1869): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendfile(r1, r0, 0x0, 0x7fffeffd) 237.373605ms ago: executing program 1 (id=1870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) socket$packet(0x11, 0x3, 0x300) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)='8h', 0x2}], 0x1}}], 0x1, 0xc0) 208.574886ms ago: executing program 2 (id=1871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0xffffffffffffff09) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) 164.98µs ago: executing program 2 (id=1872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 0s ago: executing program 5 (id=1873): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0x400, 0x80) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000780)={0x2, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): 4] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 58.950389][ T4903] loop2: detected capacity change from 0 to 128 [ 58.963922][ T4903] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.978744][ T4903] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.001921][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.052092][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.062440][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 59.062458][ T29] audit: type=1400 audit(1758974140.893:855): avc: denied { bind } for pid=4913 comm="syz.3.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.088040][ T29] audit: type=1400 audit(1758974140.893:856): avc: denied { node_bind } for pid=4913 comm="syz.3.548" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 59.098958][ T4912] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.127958][ T4912] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.288022][ T29] audit: type=1400 audit(1758974141.113:857): avc: denied { watch watch_reads } for pid=4942 comm="syz.3.561" path="/99" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.408157][ T29] audit: type=1400 audit(1758974141.243:858): avc: denied { read } for pid=4946 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.497587][ T29] audit: type=1400 audit(1758974141.323:859): avc: denied { create } for pid=4960 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.536573][ T29] audit: type=1326 audit(1758974141.363:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30645aeec9 code=0x7ffc0000 [ 59.559890][ T29] audit: type=1326 audit(1758974141.363:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f30645aeec9 code=0x7ffc0000 [ 59.583365][ T29] audit: type=1326 audit(1758974141.363:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30645aeec9 code=0x7ffc0000 [ 59.651761][ T29] audit: type=1400 audit(1758974141.483:863): avc: denied { cpu } for pid=4958 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 59.675567][ T4969] loop3: detected capacity change from 0 to 2048 [ 59.690181][ T4971] loop4: detected capacity change from 0 to 1024 [ 59.712255][ T4971] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 59.730871][ T4969] loop3: unable to read partition table [ 59.738184][ T4969] loop3: partition table beyond EOD, truncated [ 59.744426][ T4969] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 59.753040][ T4971] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.796837][ T29] audit: type=1400 audit(1758974141.633:864): avc: denied { write } for pid=4973 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.820198][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 59.820232][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.820282][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.865226][ T4982] IPv4: Oversized IP packet from 127.202.26.0 [ 59.911559][ T4987] netlink: 'syz.3.580': attribute type 30 has an invalid length. [ 60.157456][ T5009] wg2: entered promiscuous mode [ 60.162394][ T5009] wg2: entered allmulticast mode [ 60.208037][ T5017] tipc: Enabled bearer , priority 0 [ 60.217656][ T5017] tipc: Disabling bearer [ 60.263320][ T5021] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.321930][ T5027] loop3: detected capacity change from 0 to 1024 [ 60.329798][ T5027] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.340807][ T5027] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.353599][ T5027] JBD2: no valid journal superblock found [ 60.359346][ T5027] EXT4-fs (loop3): Could not load journal inode [ 60.450579][ T5039] uprobe: syz.0.605:5039 failed to unregister, leaking uprobe [ 60.458500][ T5039] uprobe: syz.0.605:5039 failed to unregister, leaking uprobe [ 60.806294][ T5077] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.820132][ T5081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.833717][ T5085] netlink: 3 bytes leftover after parsing attributes in process `syz.0.623'. [ 60.841626][ T5083] tipc: Started in network mode [ 60.847531][ T5083] tipc: Node identity 5ec0424d80db, cluster identity 4711 [ 60.852872][ T5081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.854711][ T5083] tipc: Enabled bearer , priority 0 [ 60.869090][ T5085] 0X: renamed from caif0 [ 60.879171][ T5085] 0X: entered allmulticast mode [ 60.884502][ T5085] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 60.912289][ T5083] syzkaller0: entered promiscuous mode [ 60.917928][ T5083] syzkaller0: entered allmulticast mode [ 60.939021][ T5083] tipc: Resetting bearer [ 60.947355][ T3978] tipc: Resetting bearer [ 60.954851][ T5077] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.991068][ T5082] tipc: Resetting bearer [ 61.013915][ T5082] tipc: Disabling bearer [ 61.032354][ T5077] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.092169][ T5095] loop1: detected capacity change from 0 to 164 [ 61.100536][ T5077] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.117356][ T5095] syz.1.627: attempt to access beyond end of device [ 61.117356][ T5095] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 61.132481][ T5095] syz.1.627: attempt to access beyond end of device [ 61.132481][ T5095] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 61.173523][ T3988] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.190358][ T3988] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.217439][ T3988] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.234507][ T3988] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.334648][ T5106] loop4: detected capacity change from 0 to 512 [ 61.491507][ T5106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.506016][ T5106] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.644679][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.673173][ T5130] loop1: detected capacity change from 0 to 512 [ 61.717558][ T5130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.746757][ T5130] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.833688][ T5130] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.645: corrupted inode contents [ 61.850040][ T5149] loop4: detected capacity change from 0 to 128 [ 61.879499][ T5149] syz.4.650: attempt to access beyond end of device [ 61.879499][ T5149] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 61.909272][ T5130] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.645: mark_inode_dirty error [ 61.935793][ T5130] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.645: corrupted inode contents [ 61.951882][ T5152] smc: net device bond0 applied user defined pnetid SYZ0 [ 61.962659][ T5152] smc: net device bond0 erased user defined pnetid SYZ0 [ 61.971883][ T5151] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.645: corrupted inode contents [ 61.994737][ T5151] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.645: mark_inode_dirty error [ 62.018741][ T5151] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.645: corrupted inode contents [ 62.059823][ T5151] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.645: mark_inode_dirty error [ 62.088495][ T5151] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.645: corrupted inode contents [ 62.117896][ T5151] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.645: mark_inode_dirty error [ 62.195672][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.209491][ T5169] IPv4: Oversized IP packet from 127.202.26.0 [ 62.237081][ T5171] loop1: detected capacity change from 0 to 128 [ 62.250753][ T5175] netlink: 96 bytes leftover after parsing attributes in process `syz.0.663'. [ 62.267059][ T5171] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.290292][ T5171] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.348232][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.460805][ T5196] bridge: RTM_NEWNEIGH with invalid ether address [ 62.581857][ T5220] netlink: 'syz.4.684': attribute type 30 has an invalid length. [ 62.596986][ T5212] loop2: detected capacity change from 0 to 2048 [ 62.717319][ T5212] loop2: unable to read partition table [ 62.723083][ T5212] loop2: partition table beyond EOD, truncated [ 62.729316][ T5212] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 62.730411][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 62.750870][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 62.760124][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 62.783914][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 62.808435][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 62.828852][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 62.845759][ T5229] netlink: 84 bytes leftover after parsing attributes in process `syz.2.689'. [ 62.915121][ T5239] netlink: 3 bytes leftover after parsing attributes in process `syz.2.692'. [ 62.928215][ T5239] 0X: renamed from caif0 [ 62.938912][ T5239] 0X: entered allmulticast mode [ 62.944199][ T5239] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 63.313927][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 63.876671][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.887934][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.129440][ T5314] loop4: detected capacity change from 0 to 1024 [ 64.155537][ T5314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.172398][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 64.172414][ T29] audit: type=1326 audit(1758974146.013:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.204086][ T29] audit: type=1326 audit(1758974146.013:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.227500][ T29] audit: type=1326 audit(1758974146.013:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.250969][ T29] audit: type=1326 audit(1758974146.013:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.274317][ T29] audit: type=1326 audit(1758974146.013:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.297605][ T29] audit: type=1326 audit(1758974146.013:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.321028][ T29] audit: type=1326 audit(1758974146.013:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.344349][ T29] audit: type=1326 audit(1758974146.013:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.367770][ T29] audit: type=1326 audit(1758974146.013:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.4.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e0a68eec9 code=0x7ffc0000 [ 64.390960][ T29] audit: type=1400 audit(1758974146.013:951): avc: denied { setattr } for pid=5313 comm="syz.4.722" path="/150/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.417025][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.452501][ T5327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.484106][ T5327] wireguard0: entered promiscuous mode [ 64.489728][ T5327] wireguard0: entered allmulticast mode [ 64.622106][ T5339] loop4: detected capacity change from 0 to 1024 [ 64.649077][ T36] IPVS: starting estimator thread 0... [ 64.672172][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.684381][ T5342] wg2: entered promiscuous mode [ 64.689314][ T5342] wg2: entered allmulticast mode [ 64.737576][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.763530][ T5343] IPVS: using max 2400 ests per chain, 120000 per kthread [ 64.773023][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 64.900976][ T5368] loop1: detected capacity change from 0 to 512 [ 64.914538][ T5368] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.964252][ T5368] EXT4-fs (loop1): 1 truncate cleaned up [ 64.989992][ T5368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.020160][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 65.053049][ T5368] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.741: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 65.106161][ T5368] EXT4-fs error (device loop1) in ext4_delete_entry:2739: Corrupt filesystem [ 65.115618][ T5368] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.741: Deleting old file: nlink 5, error=-117 [ 65.162834][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.724016][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 66.049421][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.753'. [ 66.252502][ T5410] bridge_slave_1: left allmulticast mode [ 66.258284][ T5410] bridge_slave_1: left promiscuous mode [ 66.264047][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.284316][ T5409] netlink: zone id is out of range [ 66.298557][ T5410] bridge_slave_0: left allmulticast mode [ 66.304308][ T5410] bridge_slave_0: left promiscuous mode [ 66.310034][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.315271][ T5409] netlink: zone id is out of range [ 66.327714][ T5409] netlink: zone id is out of range [ 66.332849][ T5409] netlink: zone id is out of range [ 66.344405][ T5402] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.384996][ T5409] netlink: zone id is out of range [ 66.396041][ T5409] netlink: zone id is out of range [ 66.408101][ T5409] netlink: zone id is out of range [ 66.420302][ T5409] netlink: zone id is out of range [ 66.469034][ T5409] netlink: zone id is out of range [ 66.488108][ T5409] netlink: zone id is out of range [ 66.550437][ T5424] loop4: detected capacity change from 0 to 1024 [ 66.582949][ T5422] loop1: detected capacity change from 0 to 8192 [ 66.620239][ T5424] EXT4-fs: Ignoring removed nobh option [ 66.637253][ T5430] pimreg: entered allmulticast mode [ 66.643312][ T5430] pimreg: left allmulticast mode [ 66.670707][ T5424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.697008][ T5424] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 66.721862][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.830263][ T5444] random: crng reseeded on system resumption [ 66.933458][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 66.949235][ T5452] team1: entered promiscuous mode [ 66.954404][ T5452] team1: entered allmulticast mode [ 67.008934][ T5457] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.055253][ T5457] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.106278][ T5457] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.166336][ T5457] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.252202][ T3976] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.271745][ T3976] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.281234][ T3976] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.289810][ T3976] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.650201][ T5493] loop1: detected capacity change from 0 to 512 [ 67.775511][ T5493] EXT4-fs (loop1): too many log groups per flexible block group [ 67.783466][ T5493] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 67.795963][ T5493] EXT4-fs (loop1): mount failed [ 67.852903][ T5507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 67.905225][ T5511] sd 0:0:1:0: device reset [ 67.977062][ T5519] netlink: 14 bytes leftover after parsing attributes in process `syz.3.804'. [ 67.986440][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.803'. [ 68.002369][ T5519] hsr_slave_0: left promiscuous mode [ 68.027706][ T5519] hsr_slave_1: left promiscuous mode [ 68.132969][ T5529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.808'. [ 68.366324][ T5548] netlink: 'syz.1.817': attribute type 12 has an invalid length. [ 68.374455][ T5544] loop4: detected capacity change from 0 to 8192 [ 68.393801][ T5550] netlink: 360 bytes leftover after parsing attributes in process `syz.2.818'. [ 68.415453][ T5544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.570012][ T5564] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 68.577915][ T5564] netlink: 156 bytes leftover after parsing attributes in process `syz.2.823'. [ 68.653170][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 68.670971][ T5566] team1: entered promiscuous mode [ 68.676122][ T5566] team1: entered allmulticast mode [ 68.793516][ T5578] bridge_slave_1: left allmulticast mode [ 68.799206][ T5578] bridge_slave_1: left promiscuous mode [ 68.804972][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.812769][ T5578] bridge_slave_0: left allmulticast mode [ 68.818517][ T5578] bridge_slave_0: left promiscuous mode [ 68.824315][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.906840][ T5582] hub 2-0:1.0: USB hub found [ 68.911541][ T5582] hub 2-0:1.0: 8 ports detected [ 68.989638][ T5588] loop2: detected capacity change from 0 to 512 [ 69.005154][ T5588] EXT4-fs (loop2): too many log groups per flexible block group [ 69.012882][ T5588] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 69.019955][ T5588] EXT4-fs (loop2): mount failed [ 69.288874][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 69.288891][ T29] audit: type=1400 audit(1758974151.123:1059): avc: denied { setopt } for pid=5599 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.400021][ T29] audit: type=1400 audit(1758974151.233:1060): avc: denied { connect } for pid=5602 comm="syz.2.840" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.420581][ T29] audit: type=1400 audit(1758974151.233:1061): avc: denied { write } for pid=5602 comm="syz.2.840" path="socket:[12474]" dev="sockfs" ino=12474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.647116][ T5616] bridge_slave_1: left allmulticast mode [ 69.652871][ T5616] bridge_slave_1: left promiscuous mode [ 69.658533][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.666759][ T29] audit: type=1400 audit(1758974151.483:1062): avc: denied { sqpoll } for pid=5613 comm="syz.1.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.687650][ T5616] bridge_slave_0: left allmulticast mode [ 69.693323][ T5616] bridge_slave_0: left promiscuous mode [ 69.699151][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.749671][ T5621] pimreg: entered allmulticast mode [ 69.755728][ T5620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.846'. [ 69.764694][ T5621] pimreg: left allmulticast mode [ 69.823478][ T29] audit: type=1400 audit(1758974151.653:1063): avc: denied { read } for pid=5626 comm="syz.4.848" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.846140][ T29] audit: type=1400 audit(1758974151.653:1064): avc: denied { open } for pid=5626 comm="syz.4.848" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.878877][ T29] audit: type=1400 audit(1758974151.703:1065): avc: denied { ioctl } for pid=5626 comm="syz.4.848" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.911653][ T5631] loop2: detected capacity change from 0 to 1024 [ 69.919004][ T5631] EXT4-fs: Ignoring removed orlov option [ 69.935410][ T5631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.947805][ T5631] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.994773][ T5631] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.850: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.011796][ T5631] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 70.030177][ T5631] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.850: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.032538][ T29] audit: type=1400 audit(1758974151.873:1066): avc: denied { sys_module } for pid=5637 comm="syz.1.852" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.064508][ T29] audit: type=1400 audit(1758974151.873:1067): avc: denied { module_load } for pid=5637 comm="syz.1.852" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 70.090772][ T5644] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.850: lblock 1 mapped to illegal pblock 1 (length 2) [ 70.106795][ T5640] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.119509][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.156798][ T5640] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.177782][ T29] audit: type=1400 audit(1758974152.013:1068): avc: denied { bind } for pid=5653 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.217667][ T5640] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.318616][ T5640] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.380651][ T3953] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.392710][ T3953] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.406326][ T3953] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.417713][ T3953] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.741468][ T5679] bridge_slave_1: left allmulticast mode [ 70.747208][ T5679] bridge_slave_1: left promiscuous mode [ 70.752945][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.761669][ T5679] bridge_slave_0: left allmulticast mode [ 70.767491][ T5679] bridge_slave_0: left promiscuous mode [ 70.773137][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.898458][ T5694] loop4: detected capacity change from 0 to 512 [ 70.917862][ T5694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.932081][ T5694] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.948492][ T5694] EXT4-fs warning (device loop4): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 70.976545][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.206092][ T5713] loop2: detected capacity change from 0 to 1024 [ 71.213318][ T5713] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.225467][ T5713] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.883: Invalid block bitmap block 0 in block_group 0 [ 71.239038][ T5713] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.883: Failed to acquire dquot type 0 [ 71.250775][ T5713] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.883: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.264510][ T5713] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.883: Invalid inode bitmap blk 0 in block_group 0 [ 71.277244][ T5713] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 71.285911][ T3978] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:47: Failed to release dquot type 0 [ 71.293725][ T5713] EXT4-fs (loop2): 1 orphan inode deleted [ 71.305873][ T5713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.337543][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.507365][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.514860][ T5741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.522565][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.529998][ T5741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.608679][ T5743] __nla_validate_parse: 2 callbacks suppressed [ 71.608698][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 72.071206][ T5774] loop1: detected capacity change from 0 to 1024 [ 72.265105][ T5781] lo speed is unknown, defaulting to 1000 [ 72.275174][ T5781] lo speed is unknown, defaulting to 1000 [ 72.302377][ T5781] lo speed is unknown, defaulting to 1000 [ 72.310774][ T5781] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.321482][ T5781] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 72.342402][ T5781] lo speed is unknown, defaulting to 1000 [ 72.351685][ T5781] lo speed is unknown, defaulting to 1000 [ 72.359912][ T5781] lo speed is unknown, defaulting to 1000 [ 72.366922][ T5781] lo speed is unknown, defaulting to 1000 [ 72.374599][ T5781] lo speed is unknown, defaulting to 1000 [ 72.386879][ T5793] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 72.394711][ T5793] netlink: 156 bytes leftover after parsing attributes in process `syz.3.911'. [ 72.600982][ T5822] pimreg: entered allmulticast mode [ 72.617107][ T5822] pimreg: left allmulticast mode [ 72.673773][ T5833] loop1: detected capacity change from 0 to 512 [ 72.680349][ T5833] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.687188][ T5833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.699011][ T5833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 72.707097][ T5833] System zones: 1-12 [ 72.711710][ T5833] EXT4-fs (loop1): 1 truncate cleaned up [ 72.718125][ T5833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.732873][ T5833] netlink: 204 bytes leftover after parsing attributes in process `syz.1.927'. [ 72.754319][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.774174][ T5839] netlink: 'syz.1.928': attribute type 12 has an invalid length. [ 72.870396][ T5851] loop2: detected capacity change from 0 to 128 [ 72.884697][ T5851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.892629][ T5851] FAT-fs (loop2): Filesystem has been set read-only [ 72.902358][ T5851] syz.2.935: attempt to access beyond end of device [ 72.902358][ T5851] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 72.925911][ T5853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5853 comm=syz.3.936 [ 72.938391][ T5853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5853 comm=syz.3.936 [ 72.951162][ T5851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.959052][ T5851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.967836][ T5851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.988976][ T5851] syz.2.935: attempt to access beyond end of device [ 72.988976][ T5851] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 73.003035][ T5851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.011001][ T5851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 73.023007][ T5854] syz.2.935: attempt to access beyond end of device [ 73.023007][ T5854] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 73.036233][ T5854] Buffer I/O error on dev loop2, logical block 2065, async page read [ 73.049392][ T5854] syz.2.935: attempt to access beyond end of device [ 73.049392][ T5854] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 73.062701][ T5854] Buffer I/O error on dev loop2, logical block 2066, async page read [ 73.071274][ T5854] syz.2.935: attempt to access beyond end of device [ 73.071274][ T5854] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 73.074519][ T5857] lo speed is unknown, defaulting to 1000 [ 73.084459][ T5854] Buffer I/O error on dev loop2, logical block 2067, async page read [ 73.091200][ T5857] lo speed is unknown, defaulting to 1000 [ 73.099106][ T5854] syz.2.935: attempt to access beyond end of device [ 73.099106][ T5854] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 73.117893][ T5854] Buffer I/O error on dev loop2, logical block 2068, async page read [ 73.122077][ T5857] lo speed is unknown, defaulting to 1000 [ 73.128168][ T5854] syz.2.935: attempt to access beyond end of device [ 73.128168][ T5854] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 73.140344][ T5857] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.144980][ T5854] Buffer I/O error on dev loop2, logical block 2069, async page read [ 73.160777][ T5854] syz.2.935: attempt to access beyond end of device [ 73.160777][ T5854] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 73.173960][ T5854] Buffer I/O error on dev loop2, logical block 2070, async page read [ 73.182188][ T5854] syz.2.935: attempt to access beyond end of device [ 73.182188][ T5854] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 73.195356][ T5854] Buffer I/O error on dev loop2, logical block 2071, async page read [ 73.207353][ T5857] lo speed is unknown, defaulting to 1000 [ 73.213643][ T5857] lo speed is unknown, defaulting to 1000 [ 73.214839][ T5854] syz.2.935: attempt to access beyond end of device [ 73.214839][ T5854] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 73.232701][ T5854] Buffer I/O error on dev loop2, logical block 2072, async page read [ 73.239392][ T5857] lo speed is unknown, defaulting to 1000 [ 73.243035][ T5854] Buffer I/O error on dev loop2, logical block 2065, async page read [ 73.254848][ T5854] Buffer I/O error on dev loop2, logical block 2066, async page read [ 73.282655][ T5857] lo speed is unknown, defaulting to 1000 [ 73.290839][ T5857] lo speed is unknown, defaulting to 1000 [ 73.774315][ T5872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.800433][ T5879] netlink: 'syz.0.947': attribute type 13 has an invalid length. [ 73.956481][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.052857][ T5872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.068241][ T3940] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.090756][ T3940] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.125939][ T5872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.149553][ T3940] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.158553][ T3940] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.170061][ T3984] nci: nci_ntf_packet: unsupported ntf opcode 0xf06 [ 74.231765][ T5872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.256316][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 74.286666][ T3955] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301339][ T3955] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.312593][ T3955] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.321812][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.335167][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.354498][ T3955] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372508][ T5924] loop2: detected capacity change from 0 to 512 [ 74.386692][ T5924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.400485][ T5924] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.451575][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.479308][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 74.479324][ T29] audit: type=1400 audit(1758974156.313:1224): avc: denied { write } for pid=5928 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.539747][ T29] audit: type=1400 audit(1758974156.373:1225): avc: denied { mount } for pid=5932 comm="syz.1.968" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 74.603582][ T29] audit: type=1326 audit(1758974156.433:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.627028][ T29] audit: type=1326 audit(1758974156.433:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.636822][ T5931] loop2: detected capacity change from 0 to 512 [ 74.650558][ T29] audit: type=1326 audit(1758974156.433:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.680437][ T29] audit: type=1326 audit(1758974156.473:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.703877][ T29] audit: type=1326 audit(1758974156.473:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.713818][ T5931] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.727412][ T29] audit: type=1326 audit(1758974156.473:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.759800][ T29] audit: type=1326 audit(1758974156.503:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5935 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 74.778359][ T5931] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 74.793417][ T5931] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.966: Failed to acquire dquot type 1 [ 74.805610][ T5931] EXT4-fs (loop2): 1 truncate cleaned up [ 74.811714][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.857865][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.916066][ T5947] net_ratelimit: 3 callbacks suppressed [ 74.916081][ T5947] IPv4: Oversized IP packet from 127.202.26.0 [ 74.979294][ T5955] loop3: detected capacity change from 0 to 164 [ 75.027809][ T5956] pim6reg1: entered promiscuous mode [ 75.033177][ T5956] pim6reg1: entered allmulticast mode [ 75.066175][ T5963] netlink: 96 bytes leftover after parsing attributes in process `syz.0.980'. [ 75.086722][ T5967] loop1: detected capacity change from 0 to 512 [ 75.118214][ T5967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.131341][ T5967] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.136817][ T5971] syzkaller1: entered promiscuous mode [ 75.147244][ T5971] syzkaller1: entered allmulticast mode [ 75.162474][ T5977] lo speed is unknown, defaulting to 1000 [ 75.169744][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.194371][ T5980] vlan2: entered allmulticast mode [ 75.324875][ T5991] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 75.339253][ T5991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.348257][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 75.359768][ T5991] bond1 (unregistering): Released all slaves [ 75.414951][ T6000] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 75.422750][ T6000] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.994'. [ 75.436639][ T6002] loop4: detected capacity change from 0 to 128 [ 75.445711][ T6002] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.458306][ T6002] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.474351][ T6002] lo speed is unknown, defaulting to 1000 [ 75.480922][ T6002] lo speed is unknown, defaulting to 1000 [ 75.487644][ T6002] lo speed is unknown, defaulting to 1000 [ 75.494127][ T6002] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 75.505021][ T6002] lo speed is unknown, defaulting to 1000 [ 75.511387][ T6002] lo speed is unknown, defaulting to 1000 [ 75.517949][ T6002] lo speed is unknown, defaulting to 1000 [ 75.524824][ T6002] lo speed is unknown, defaulting to 1000 [ 75.531160][ T6002] lo speed is unknown, defaulting to 1000 [ 75.585142][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.647324][ T6018] : renamed from vlan1 (while UP) [ 75.689611][ T6014] netlink: 360 bytes leftover after parsing attributes in process `syz.0.999'. [ 76.010039][ T6021] Set syz1 is full, maxelem 65536 reached [ 76.084497][ T6031] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.136712][ T6031] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.185574][ T6031] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.237897][ T6031] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.306264][ T4005] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.325779][ T4005] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.339258][ T4005] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.353629][ T3954] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.551408][ T6056] siw: device registration error -23 [ 77.263048][ T6092] syzkaller1: entered promiscuous mode [ 77.268720][ T6092] syzkaller1: entered allmulticast mode [ 77.382635][ T6104] netlink: 'syz.4.1028': attribute type 13 has an invalid length. [ 77.436739][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 77.720976][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.752525][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.996820][ T1040] lo speed is unknown, defaulting to 1000 [ 78.002613][ T1040] syz0: Port: 1 Link DOWN [ 78.024300][ T3972] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.032714][ T3972] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.113173][ T3972] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.158652][ T3972] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.340142][ T6246] lo speed is unknown, defaulting to 1000 [ 78.347051][ T6246] lo speed is unknown, defaulting to 1000 [ 78.446801][ T6252] syzkaller1: entered promiscuous mode [ 78.452319][ T6252] syzkaller1: entered allmulticast mode [ 78.559680][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.568248][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.774175][ T6271] bond0: (slave bond_slave_0): Releasing backup interface [ 78.782113][ T6271] bond0: (slave bond_slave_1): Releasing backup interface [ 78.790827][ T6271] team0: Port device team_slave_0 removed [ 78.797403][ T6271] team0: Port device team_slave_1 removed [ 78.803266][ T6271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.830742][ T6273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1049'. [ 79.100880][ T6281] loop4: detected capacity change from 0 to 512 [ 79.107652][ T6281] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 79.142098][ T6284] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1054'. [ 79.151280][ T6284] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1054'. [ 79.162939][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 79.182968][ T6287] vlan1: entered allmulticast mode [ 79.188240][ T6287] dummy0: entered allmulticast mode [ 79.280562][ T6289] syzkaller1: entered promiscuous mode [ 79.286195][ T6289] syzkaller1: entered allmulticast mode [ 79.419728][ T6295] block device autoloading is deprecated and will be removed. [ 79.490645][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 79.490661][ T29] audit: type=1326 audit(1758974161.313:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4261975d67 code=0x7ffc0000 [ 79.520318][ T29] audit: type=1326 audit(1758974161.323:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f426191af79 code=0x7ffc0000 [ 79.543817][ T29] audit: type=1326 audit(1758974161.323:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 79.569046][ T29] audit: type=1326 audit(1758974161.383:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4261975d67 code=0x7ffc0000 [ 79.592456][ T29] audit: type=1326 audit(1758974161.383:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f426191af79 code=0x7ffc0000 [ 79.615914][ T29] audit: type=1326 audit(1758974161.383:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 79.639461][ T29] audit: type=1326 audit(1758974161.383:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4261975d67 code=0x7ffc0000 [ 79.662907][ T29] audit: type=1326 audit(1758974161.383:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f426191af79 code=0x7ffc0000 [ 79.686290][ T29] audit: type=1326 audit(1758974161.383:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f426197eec9 code=0x7ffc0000 [ 79.709960][ T29] audit: type=1326 audit(1758974161.413:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4261975d67 code=0x7ffc0000 [ 79.765589][ T6301] lo speed is unknown, defaulting to 1000 [ 79.771781][ T6301] lo speed is unknown, defaulting to 1000 [ 79.842897][ T6311] loop2: detected capacity change from 0 to 512 [ 79.851716][ T6311] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 79.861256][ T6311] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1064: invalid indirect mapped block 2683928664 (level 1) [ 79.876531][ T6311] EXT4-fs (loop2): 1 truncate cleaned up [ 79.890475][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.919168][ T6311] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1064: Invalid block bitmap block 3 in block_group 0 [ 79.970018][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.983676][ T6318] loop0: detected capacity change from 0 to 128 [ 80.088991][ T6324] loop0: detected capacity change from 0 to 512 [ 80.096567][ T6324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.127099][ T6324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 80.142179][ T6332] loop3: detected capacity change from 0 to 1024 [ 80.156571][ T6324] System zones: 0-2, 18-18, 34-34 [ 80.166544][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.180801][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 80.193138][ T6324] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.207169][ T6332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.257841][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.260676][ T6332] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1073: Allocating blocks 449-513 which overlap fs metadata [ 80.297931][ T6330] EXT4-fs (loop3): pa ffff88810722b1c0: logic 48, phys. 177, len 21 [ 80.306221][ T6330] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 80.309218][ T6345] ip6gre1: entered allmulticast mode [ 80.353458][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.444014][ T6367] loop2: detected capacity change from 0 to 512 [ 80.451376][ T6367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.490738][ T6367] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 80.500603][ T6367] System zones: 0-2, 18-18, 34-34 [ 80.520288][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.539199][ T6367] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.583032][ T6379] ip6gre1: entered allmulticast mode [ 80.591559][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.704709][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 80.811608][ T6408] syzkaller0: refused to change device tx_queue_len [ 80.909313][ T6414] loop4: detected capacity change from 0 to 512 [ 80.978759][ T6414] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.990770][ T6426] syz.2.1112 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.023028][ T6424] pim6reg1: entered promiscuous mode [ 81.026049][ T6430] loop3: detected capacity change from 0 to 512 [ 81.028439][ T6424] pim6reg1: entered allmulticast mode [ 81.040638][ T6430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.062106][ T6414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 81.072563][ T6430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 81.080108][ T6414] System zones: 0-2, 18-18, 34-34 [ 81.088422][ T6414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.111232][ T6430] System zones: 1-12 [ 81.112915][ T6414] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.130582][ T6430] EXT4-fs (loop3): 1 truncate cleaned up [ 81.147743][ T6430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.180442][ T6443] bond_slave_1: mtu less than device minimum [ 81.212051][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.222600][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.256111][ T6456] loop3: detected capacity change from 0 to 512 [ 81.267967][ T6454] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 81.275893][ T6454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1121'. [ 81.283213][ T6456] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 81.286013][ T6454] vlan0: entered promiscuous mode [ 81.293718][ T6456] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1120: invalid indirect mapped block 2683928664 (level 1) [ 81.298235][ T6454] vlan0: entered allmulticast mode [ 81.313159][ T6456] EXT4-fs (loop3): 1 truncate cleaned up [ 81.317316][ T6454] veth0_vlan: entered allmulticast mode [ 81.317339][ T6454] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 81.345655][ T6456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.374794][ T6456] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1120: Invalid block bitmap block 3 in block_group 0 [ 81.415980][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.450949][ T6473] hub 9-0:1.0: USB hub found [ 81.463648][ T6473] hub 9-0:1.0: 8 ports detected [ 81.495530][ T6479] loop0: detected capacity change from 0 to 512 [ 81.503820][ T6478] loop3: detected capacity change from 0 to 128 [ 81.511614][ T6479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.548559][ T6479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 81.561765][ T6479] System zones: 1-12 [ 81.566672][ T6479] EXT4-fs (loop0): 1 truncate cleaned up [ 81.572822][ T6479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.623869][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.648191][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 81.657263][ T6496] netlink: 'syz.0.1139': attribute type 30 has an invalid length. [ 81.690859][ T3960] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.715771][ T3960] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.741937][ T6508] loop0: detected capacity change from 0 to 512 [ 81.748285][ T3960] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.759187][ T6508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.774681][ T3960] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.794920][ T6510] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.814222][ T6508] EXT4-fs (loop0): 1 truncate cleaned up [ 81.826329][ T6508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.875495][ T6510] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.886337][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.935219][ T6510] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.975816][ T6510] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.017181][ T3960] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.033345][ T3960] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.044237][ T3960] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.055079][ T3960] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.136100][ T6572] netlink: 'syz.1.1169': attribute type 12 has an invalid length. [ 83.174066][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1171'. [ 83.324878][ T6590] loop1: detected capacity change from 0 to 1024 [ 83.335201][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.362921][ T6590] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 83.431564][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.156920][ T6618] lo speed is unknown, defaulting to 1000 [ 84.163362][ T6618] lo speed is unknown, defaulting to 1000 [ 84.487084][ T6625] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 84.536167][ T6625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.546246][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 84.563679][ T6625] bond1 (unregistering): Released all slaves [ 84.719620][ T6650] 9pnet_fd: Insufficient options for proto=fd [ 84.726807][ T6650] 9pnet_fd: Insufficient options for proto=fd [ 84.736507][ T6654] tipc: Enabled bearer , priority 10 [ 84.791947][ T6664] netlink: 'syz.2.1205': attribute type 7 has an invalid length. [ 84.799771][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 84.824062][ T6666] netlink: 'syz.4.1206': attribute type 12 has an invalid length. [ 84.859241][ T6672] netlink: 'syz.2.1209': attribute type 7 has an invalid length. [ 84.867094][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 84.950398][ T6679] loop3: detected capacity change from 0 to 1024 [ 84.959296][ T6679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.971772][ T6682] loop4: detected capacity change from 0 to 1024 [ 84.997888][ T6682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.998282][ T6679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.020326][ T6682] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.109115][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.119855][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.153305][ T6699] netlink: 'syz.0.1220': attribute type 7 has an invalid length. [ 85.161244][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 85.187066][ T6704] bond_slave_1: mtu less than device minimum [ 85.220868][ T6709] loop4: detected capacity change from 0 to 512 [ 85.228131][ T6709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.252743][ T6714] loop3: detected capacity change from 0 to 256 [ 85.259752][ T6709] EXT4-fs (loop4): 1 truncate cleaned up [ 85.269503][ T6709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.272477][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 85.272490][ T29] audit: type=1400 audit(1758974167.103:1930): avc: denied { read } for pid=6717 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.324690][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.522799][ T6746] syz_tun: entered allmulticast mode [ 85.547787][ T6745] syz_tun: left allmulticast mode [ 85.591747][ T29] audit: type=1326 audit(1758974167.423:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.615254][ T29] audit: type=1326 audit(1758974167.423:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.638942][ T29] audit: type=1326 audit(1758974167.453:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.662393][ T29] audit: type=1326 audit(1758974167.453:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.685967][ T29] audit: type=1326 audit(1758974167.453:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.709302][ T29] audit: type=1326 audit(1758974167.453:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.732866][ T29] audit: type=1326 audit(1758974167.453:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.756297][ T29] audit: type=1326 audit(1758974167.453:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 85.763461][ T3382] tipc: Node number set to 743159183 [ 85.779821][ T29] audit: type=1326 audit(1758974167.453:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 86.253964][ T6786] pim6reg1: entered promiscuous mode [ 86.259331][ T6786] pim6reg1: entered allmulticast mode [ 86.827103][ T6822] loop1: detected capacity change from 0 to 512 [ 86.834071][ T6822] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.840880][ T6822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.852168][ T6822] EXT4-fs (loop1): 1 truncate cleaned up [ 86.858553][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.243710][ T6830] netlink: 'syz.4.1272': attribute type 10 has an invalid length. [ 87.251812][ T6830] team0: Device hsr_slave_0 failed to register rx_handler [ 87.291733][ T6832] netlink: 'syz.4.1273': attribute type 1 has an invalid length. [ 87.305552][ T6832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.319087][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 87.338150][ T6832] bond2 (unregistering): Released all slaves [ 87.434955][ T6837] pim6reg1: entered promiscuous mode [ 87.440305][ T6837] pim6reg1: entered allmulticast mode [ 87.448200][ T6839] netlink: 'syz.4.1279': attribute type 29 has an invalid length. [ 87.460728][ T6839] netlink: 'syz.4.1279': attribute type 29 has an invalid length. [ 87.470874][ T6839] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1279'. [ 87.480002][ T6839] unsupported nla_type 66 [ 87.541881][ T6845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1282'. [ 87.774139][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.797290][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 87.827388][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 88.458249][ T6906] loop1: detected capacity change from 0 to 164 [ 88.466241][ T6906] Unable to read rock-ridge attributes [ 88.474352][ T6906] Unable to read rock-ridge attributes [ 88.526948][ T6910] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 88.561761][ T6910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.587594][ T6912] __nla_validate_parse: 2 callbacks suppressed [ 88.587612][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 88.757962][ T6912] bond1 (unregistering): Released all slaves [ 88.811965][ T6921] loop3: detected capacity change from 0 to 1024 [ 88.824079][ T6921] EXT4-fs: Ignoring removed orlov option [ 88.851010][ T6921] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.884572][ T6927] netlink: 'syz.1.1317': attribute type 4 has an invalid length. [ 88.892441][ T6927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1317'. [ 88.904665][ T6921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.929976][ T6930] loop0: detected capacity change from 0 to 1024 [ 88.937795][ T6927] .`: renamed from bond0 [ 88.968770][ T6930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.986449][ T6935] veth1_macvtap: left promiscuous mode [ 88.992015][ T6935] macsec0: entered promiscuous mode [ 89.007841][ T6930] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.084884][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.124772][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.134180][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.483873][ T6971] wg2: entered promiscuous mode [ 89.488784][ T6971] wg2: entered allmulticast mode [ 89.526106][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.628745][ T6983] hub 9-0:1.0: USB hub found [ 89.633631][ T6983] hub 9-0:1.0: 8 ports detected [ 89.689692][ T6986] tipc: Started in network mode [ 89.694763][ T6986] tipc: Node identity a2e120f73e4c, cluster identity 4711 [ 89.701991][ T6986] tipc: Enabled bearer , priority 0 [ 89.710397][ T6985] tipc: Resetting bearer [ 89.722882][ T6985] tipc: Disabling bearer [ 90.204574][ T7028] loop3: detected capacity change from 0 to 512 [ 90.211584][ T7028] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.228462][ T7028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 90.236583][ T7028] System zones: 1-12 [ 90.240587][ T7028] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.247794][ T7028] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1360: invalid indirect mapped block 12 (level 1) [ 90.261639][ T7028] EXT4-fs (loop3): Remounting filesystem read-only [ 90.268927][ T7028] EXT4-fs (loop3): 1 truncate cleaned up [ 90.289044][ T7028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 90.343791][ T7028] netlink: zone id is out of range [ 90.353482][ T7028] netlink: zone id is out of range [ 90.358674][ T7028] netlink: zone id is out of range [ 90.363824][ T7028] netlink: zone id is out of range [ 90.368956][ T7028] netlink: zone id is out of range [ 90.374154][ T7028] netlink: zone id is out of range [ 90.379478][ T7028] netlink: zone id is out of range [ 90.384656][ T7028] netlink: zone id is out of range [ 90.389960][ T7028] netlink: zone id is out of range [ 90.395125][ T7028] netlink: zone id is out of range [ 90.408409][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 90.408421][ T29] audit: type=1400 audit(1758974172.243:2085): avc: denied { setcurrent } for pid=7036 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.468496][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 90.508525][ T7041] loop3: detected capacity change from 0 to 512 [ 90.564414][ T7041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.593288][ T7042] loop1: detected capacity change from 0 to 764 [ 90.621918][ T7042] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.633968][ T7044] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1366'. [ 90.655458][ T7041] EXT4-fs (loop3): 1 truncate cleaned up [ 90.661599][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.744854][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.792635][ T7053] loop3: detected capacity change from 0 to 164 [ 90.812366][ T7053] Unable to read rock-ridge attributes [ 90.822116][ T7053] Unable to read rock-ridge attributes [ 90.961492][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'. [ 90.970507][ T7066] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1376'. [ 90.981788][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'. [ 90.991950][ T7066] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1376'. [ 91.019141][ T7070] netlink: 'syz.4.1378': attribute type 7 has an invalid length. [ 91.026953][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 91.164054][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 91.362085][ T29] audit: type=1400 audit(1758974173.193:2086): avc: denied { write } for pid=7100 comm="syz.4.1390" path="socket:[18075]" dev="sockfs" ino=18075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.450779][ T29] audit: type=1400 audit(1758974173.283:2087): avc: denied { name_bind } for pid=7107 comm="syz.0.1393" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 91.481550][ T29] audit: type=1400 audit(1758974173.313:2088): avc: denied { name_connect } for pid=7107 comm="syz.0.1393" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 91.536086][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 91.667643][ T7126] team0 (unregistering): Port device team_slave_0 removed [ 91.675608][ T7126] team0 (unregistering): Port device team_slave_1 removed [ 91.730866][ T29] audit: type=1400 audit(1758974173.563:2089): avc: denied { write } for pid=7129 comm="syz.4.1403" name="ptype" dev="proc" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.774659][ T7133] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.812474][ T7136] loop1: detected capacity change from 0 to 4096 [ 91.819276][ T7136] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.825796][ T7136] EXT4-fs: test_dummy_encryption option not supported [ 91.834095][ T7133] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.848570][ T3382] IPVS: starting estimator thread 0... [ 91.894556][ T7133] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.943772][ T7138] IPVS: using max 2304 ests per chain, 115200 per kthread [ 91.952055][ T7133] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.000802][ T3957] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012181][ T3957] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023158][ T3957] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.035581][ T3957] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.772146][ T7168] tipc: Started in network mode [ 92.777131][ T7168] tipc: Node identity 4ed2e13cd0cc, cluster identity 4711 [ 92.784395][ T7168] tipc: Enabled bearer , priority 0 [ 92.794146][ T7168] tipc: Disabling bearer [ 92.852461][ T7172] netlink: 'syz.0.1420': attribute type 29 has an invalid length. [ 92.852781][ T29] audit: type=1400 audit(1758974174.683:2090): avc: denied { read } for pid=7169 comm="syz.1.1419" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.861042][ T7172] netlink: 'syz.0.1420': attribute type 29 has an invalid length. [ 92.883134][ T29] audit: type=1400 audit(1758974174.683:2091): avc: denied { open } for pid=7169 comm="syz.1.1419" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.014475][ T29] audit: type=1326 audit(1758974174.853:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 93.053453][ T29] audit: type=1326 audit(1758974174.883:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 93.077195][ T29] audit: type=1326 audit(1758974174.883:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 93.192688][ T7190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7190 comm=syz.0.1428 [ 93.240693][ T7192] tipc: Enabled bearer , priority 0 [ 93.265758][ T7192] tipc: Disabling bearer [ 93.394699][ T7199] loop0: detected capacity change from 0 to 512 [ 93.401806][ T7199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.418514][ T7199] EXT4-fs (loop0): 1 truncate cleaned up [ 93.426443][ T7199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.469282][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.609157][ T7227] loop0: detected capacity change from 0 to 512 [ 93.616793][ T7227] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.629758][ T7227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 93.637801][ T7227] System zones: 1-12 [ 93.641836][ T7227] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.650657][ T7227] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1445: invalid indirect mapped block 12 (level 1) [ 93.664756][ T7227] EXT4-fs (loop0): Remounting filesystem read-only [ 93.671345][ T7227] EXT4-fs (loop0): 1 truncate cleaned up [ 93.677454][ T7227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 93.743798][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 93.866286][ T7251] loop4: detected capacity change from 0 to 512 [ 93.914160][ T7251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.930491][ T7251] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.949263][ T7266] loop1: detected capacity change from 0 to 512 [ 93.963969][ T7267] loop0: detected capacity change from 0 to 512 [ 93.986675][ T7266] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 94.008073][ T7267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.029916][ T7266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 94.040369][ T7267] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.052664][ T7266] System zones: 1-12 [ 94.061693][ T7266] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.076052][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.085337][ T7266] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1462: invalid indirect mapped block 12 (level 1) [ 94.114564][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.123469][ T7266] EXT4-fs (loop1): Remounting filesystem read-only [ 94.130176][ T7266] EXT4-fs (loop1): 1 truncate cleaned up [ 94.153082][ T7266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 94.162156][ T7276] loop4: detected capacity change from 0 to 8192 [ 94.206822][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 94.310008][ T7298] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.322486][ T7293] tipc: Enabled bearer , priority 0 [ 94.329990][ T7291] tipc: Resetting bearer [ 94.346659][ T7291] tipc: Disabling bearer [ 94.354954][ T7298] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.380947][ T7304] loop3: detected capacity change from 0 to 1024 [ 94.388043][ T7304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.395555][ T7304] EXT4-fs: Ignoring removed nobh option [ 94.404875][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.421262][ T7309] loop4: detected capacity change from 0 to 128 [ 94.432585][ T7309] __nla_validate_parse: 8 callbacks suppressed [ 94.432603][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 94.449732][ T7298] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.479921][ T7310] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1477: Allocating blocks 497-513 which overlap fs metadata [ 94.509252][ T7298] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.602761][ T4003] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.619844][ T3431] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.633584][ T3431] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.646202][ T3989] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.699080][ T7304] EXT4-fs (loop3): pa ffff88810722b2a0: logic 16, phys. 145, len 23 [ 94.707278][ T7304] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 94.788306][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.812947][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1484'. [ 94.912644][ T7329] loop3: detected capacity change from 0 to 128 [ 94.935742][ T7329] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 94.948955][ T7329] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.010053][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.138256][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1494'. [ 95.158882][ T7342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.173811][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 95.200749][ T7342] bond2 (unregistering): Released all slaves [ 95.271808][ T7355] netlink: 'syz.3.1500': attribute type 29 has an invalid length. [ 95.280053][ T7353] tipc: Enabled bearer , priority 0 [ 95.289496][ T7355] netlink: 'syz.3.1500': attribute type 29 has an invalid length. [ 95.298772][ T7346] tipc: Resetting bearer [ 95.306494][ T7355] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1500'. [ 95.322700][ T7346] tipc: Disabling bearer [ 95.360238][ T7363] loop3: detected capacity change from 0 to 512 [ 95.367278][ T7363] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.402063][ T7363] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1503'. [ 95.525052][ T7364] loop3: detected capacity change from 0 to 512 [ 95.534356][ T7364] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1503: bg 0: block 5: invalid block bitmap [ 95.547288][ T7364] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 95.556625][ T7364] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1503: invalid indirect mapped block 3 (level 2) [ 95.570011][ T7364] EXT4-fs (loop3): 1 orphan inode deleted [ 95.575826][ T7364] EXT4-fs (loop3): 1 truncate cleaned up [ 95.582265][ T7364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.647344][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 95.647360][ T29] audit: type=1326 audit(1758974177.483:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 95.783741][ T29] audit: type=1326 audit(1758974177.523:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 95.807291][ T29] audit: type=1326 audit(1758974177.523:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 95.830812][ T29] audit: type=1326 audit(1758974177.523:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 95.832209][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.861193][ T29] audit: type=1326 audit(1758974177.623:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 95.886678][ T29] audit: type=1326 audit(1758974177.623:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127c7eec9 code=0x7ffc0000 [ 95.929942][ T29] audit: type=1400 audit(1758974177.753:2176): avc: denied { read append } for pid=7374 comm="syz.2.1508" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.951343][ T29] audit: type=1400 audit(1758974177.753:2177): avc: denied { open } for pid=7374 comm="syz.2.1508" path="/326/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.007841][ T29] audit: type=1326 audit(1758974177.843:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 96.157332][ T29] audit: type=1326 audit(1758974177.863:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 96.365051][ T7397] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1516'. [ 96.650425][ T7400] net_ratelimit: 110 callbacks suppressed [ 96.650442][ T7400] netlink: zone id is out of range [ 96.687901][ T7400] netlink: zone id is out of range [ 96.703430][ T7400] netlink: zone id is out of range [ 96.708618][ T7400] netlink: zone id is out of range [ 96.729287][ T7400] netlink: zone id is out of range [ 96.747918][ T7400] netlink: zone id is out of range [ 96.763272][ T7400] netlink: zone id is out of range [ 96.781453][ T7400] netlink: zone id is out of range [ 96.794701][ T7400] netlink: zone id is out of range [ 96.804782][ T7400] netlink: zone id is out of range [ 96.810994][ T7382] syz.4.1511 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 96.822067][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.4.1511 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.822156][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.822171][ T7382] Call Trace: [ 96.822179][ T7382] [ 96.822188][ T7382] __dump_stack+0x1d/0x30 [ 96.822214][ T7382] dump_stack_lvl+0xe8/0x140 [ 96.822238][ T7382] dump_stack+0x15/0x1b [ 96.822258][ T7382] dump_header+0x81/0x220 [ 96.822378][ T7382] oom_kill_process+0x342/0x400 [ 96.822443][ T7382] out_of_memory+0x979/0xb80 [ 96.822543][ T7382] try_charge_memcg+0x5e6/0x9e0 [ 96.822612][ T7382] charge_memcg+0x51/0xc0 [ 96.822633][ T7382] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 96.822658][ T7382] __read_swap_cache_async+0x1df/0x350 [ 96.822819][ T7382] swap_cluster_readahead+0x277/0x3e0 [ 96.822936][ T7382] swapin_readahead+0xde/0x6f0 [ 96.822978][ T7382] ? __filemap_get_folio+0x4f7/0x6b0 [ 96.823025][ T7382] ? swap_cache_get_folio+0x77/0x200 [ 96.823140][ T7382] do_swap_page+0x301/0x2430 [ 96.823171][ T7382] ? perf_trace_memcg_rstat_events+0x7c/0x1d0 [ 96.823208][ T7382] ? __pfx_default_wake_function+0x10/0x10 [ 96.823287][ T7382] handle_mm_fault+0x9a5/0x2c20 [ 96.823331][ T7382] do_user_addr_fault+0x636/0x1090 [ 96.823386][ T7382] exc_page_fault+0x62/0xa0 [ 96.823489][ T7382] asm_exc_page_fault+0x26/0x30 [ 96.823520][ T7382] RIP: 0033:0x7f8e0a6c1733 [ 96.823537][ T7382] Code: f5 08 00 48 8d 3d 76 f5 08 00 e8 b8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 96.823557][ T7382] RSP: 002b:00007ffe4a5e3f38 EFLAGS: 00010293 [ 96.823649][ T7382] RAX: 00000000fffffffa RBX: 00007f8e0a8e5fa0 RCX: 0000000000000000 [ 96.823663][ T7382] RDX: 00007ffe4a5e3f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.823678][ T7382] RBP: 00007f8e0a8e7da0 R08: 000000002d75e579 R09: 7fffffffffffffff [ 96.823691][ T7382] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000017a1f [ 96.823705][ T7382] R13: 00007f8e0a8e6090 R14: ffffffffffffffff R15: 00007ffe4a5e4090 [ 96.823767][ T7382] [ 97.026726][ T7382] memory: usage 307200kB, limit 307200kB, failcnt 164 [ 97.033579][ T7382] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 97.041485][ T7382] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 97.048960][ T7382] Memory cgroup stats for /syz4: [ 97.069822][ T7382] cache 0 [ 97.077812][ T7382] rss 0 [ 97.080686][ T7382] shmem 0 [ 97.083691][ T7382] mapped_file 0 [ 97.087178][ T7382] dirty 0 [ 97.090130][ T7382] writeback 4096 [ 97.093718][ T7382] workingset_refault_anon 7 [ 97.098234][ T7382] workingset_refault_file 2 [ 97.102742][ T7382] swap 200704 [ 97.106097][ T7382] swapcached 8192 [ 97.109737][ T7382] pgpgin 69125 [ 97.113131][ T7382] pgpgout 69123 [ 97.116610][ T7382] pgfault 67891 [ 97.120173][ T7382] pgmajfault 9 [ 97.123576][ T7382] inactive_anon 8192 [ 97.127529][ T7382] active_anon 0 [ 97.131045][ T7382] inactive_file 0 [ 97.134826][ T7382] active_file 0 [ 97.138347][ T7382] unevictable 0 [ 97.141876][ T7382] hierarchical_memory_limit 314572800 [ 97.147288][ T7382] hierarchical_memsw_limit 9223372036854771712 [ 97.153522][ T7382] total_cache 0 [ 97.156986][ T7382] total_rss 0 [ 97.160278][ T7382] total_shmem 0 [ 97.163831][ T7382] total_mapped_file 0 [ 97.167824][ T7382] total_dirty 0 [ 97.171318][ T7382] total_writeback 4096 [ 97.175421][ T7382] total_workingset_refault_anon 7 [ 97.180445][ T7382] total_workingset_refault_file 2 [ 97.185504][ T7382] total_swap 200704 [ 97.189328][ T7382] total_swapcached 8192 [ 97.193529][ T7382] total_pgpgin 69125 [ 97.197460][ T7382] total_pgpgout 69123 [ 97.201443][ T7382] total_pgfault 67891 [ 97.205465][ T7382] total_pgmajfault 9 [ 97.209367][ T7382] total_inactive_anon 8192 [ 97.213900][ T7382] total_active_anon 0 [ 97.217891][ T7382] total_inactive_file 0 [ 97.222078][ T7382] total_active_file 0 [ 97.226106][ T7382] total_unevictable 0 [ 97.230116][ T7382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1511,pid=7382,uid=0 [ 97.244762][ T7382] Memory cgroup out of memory: Killed process 7382 (syz.4.1511) total-vm:93956kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 97.266455][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 97.328692][ T7415] tipc: Enabled bearer , priority 0 [ 97.356468][ T7415] tipc: Disabling bearer [ 97.450926][ T7422] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1526'. [ 97.636699][ T7383] syz.4.1511 (7383) used greatest stack depth: 7224 bytes left [ 97.782887][ T7432] lo speed is unknown, defaulting to 1000 [ 97.798988][ T7432] lo speed is unknown, defaulting to 1000 [ 97.986143][ T7439] loop3: detected capacity change from 0 to 128 [ 98.189857][ T7453] loop4: detected capacity change from 0 to 1024 [ 98.207946][ T7453] EXT4-fs: Ignoring removed bh option [ 98.217736][ T7453] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 98.247986][ T7453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.375386][ T7453] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 98.453691][ T7466] netlink: 'syz.2.1545': attribute type 12 has an invalid length. [ 98.490255][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.661726][ T7478] loop0: detected capacity change from 0 to 8192 [ 98.703944][ T7478] loop0: p3 p4 < > [ 98.707962][ T7478] loop0: p3 size 33554432 extends beyond EOD, truncated [ 98.742727][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 98.931405][ T7502] SELinux: ebitmap: truncated map [ 99.059349][ T7502] SELinux: failed to load policy [ 99.233130][ T7520] lo speed is unknown, defaulting to 1000 [ 99.239917][ T7520] lo speed is unknown, defaulting to 1000 [ 99.246035][ T7524] loop1: detected capacity change from 0 to 512 [ 99.282039][ T7524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.309460][ T7524] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.361990][ T7524] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1569: bg 0: block 328: padding at end of block bitmap is not set [ 99.556597][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.600739][ T7546] loop1: detected capacity change from 0 to 512 [ 99.614180][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1576: iget: bad i_size value: 38620345925642 [ 99.634715][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1576: couldn't read orphan inode 15 (err -117) [ 99.716403][ T7552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1576: bg 0: block 5: invalid block bitmap [ 99.782964][ T7552] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 99.795493][ T7552] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.795493][ T7552] [ 99.805272][ T7552] EXT4-fs (loop1): Total free blocks count 0 [ 99.811335][ T7552] EXT4-fs (loop1): Free/Dirty block details [ 99.817463][ T7552] EXT4-fs (loop1): free_blocks=0 [ 99.822491][ T7552] EXT4-fs (loop1): dirty_blocks=2372 [ 99.827871][ T7552] EXT4-fs (loop1): Block reservation details [ 99.833989][ T7552] EXT4-fs (loop1): i_reserved_data_blocks=2372 [ 99.919586][ T7561] lo speed is unknown, defaulting to 1000 [ 99.937656][ T7561] lo speed is unknown, defaulting to 1000 [ 99.985643][ T7563] netlink: 'syz.4.1583': attribute type 4 has an invalid length. [ 99.993457][ T7563] __nla_validate_parse: 2 callbacks suppressed [ 99.993473][ T7563] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1583'. [ 100.085915][ T7563] .`: renamed from bond0 [ 100.111206][ T3989] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 320 with error 28 [ 100.124029][ T3989] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.124029][ T3989] [ 100.373044][ T7576] loop0: detected capacity change from 0 to 1024 [ 100.400959][ T7576] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1590: Failed to acquire dquot type 0 [ 100.475139][ T7576] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 100.553468][ T7576] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1590: corrupted inode contents [ 100.613890][ T7576] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.1590: mark_inode_dirty error [ 100.656365][ T7576] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1590: corrupted inode contents [ 100.703929][ T7576] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1590: mark_inode_dirty error [ 100.737612][ T7576] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1590: corrupted inode contents [ 100.772763][ T7586] loop4: detected capacity change from 0 to 8192 [ 100.783883][ T7590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7590 comm=syz.3.1595 [ 100.796441][ T7576] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 100.823430][ T7576] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1590: corrupted inode contents [ 100.837502][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 100.837518][ T29] audit: type=1400 audit(1758974182.673:2367): avc: denied { mount } for pid=7585 comm="syz.4.1593" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 100.844536][ T7576] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.1590: mark_inode_dirty error [ 100.913406][ T29] audit: type=1400 audit(1758974182.733:2368): avc: denied { mounton } for pid=7585 comm="syz.4.1593" path="/332/file2/bus" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 100.953605][ T7576] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 100.978640][ T7576] EXT4-fs (loop0): 1 truncate cleaned up [ 101.005071][ T3309] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 101.005514][ T29] audit: type=1400 audit(1758974182.823:2369): avc: denied { mount } for pid=7575 comm="syz.0.1590" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.012942][ T3309] FAT-fs (loop4): Filesystem has been set read-only [ 101.034625][ T29] audit: type=1400 audit(1758974182.833:2370): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 101.061275][ T29] audit: type=1400 audit(1758974182.833:2371): avc: denied { create } for pid=7591 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.081391][ T29] audit: type=1400 audit(1758974182.843:2372): avc: denied { write } for pid=7591 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.101971][ T7576] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.228121][ T7600] loop4: detected capacity change from 0 to 1024 [ 101.242801][ T29] audit: type=1400 audit(1758974182.903:2373): avc: denied { read } for pid=7591 comm="+}[@" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.265575][ T29] audit: type=1400 audit(1758974182.903:2374): avc: denied { open } for pid=7591 comm="+}[@" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.288547][ T29] audit: type=1400 audit(1758974182.923:2375): avc: denied { remount } for pid=7575 comm="syz.0.1590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.308383][ T29] audit: type=1400 audit(1758974182.953:2376): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.381029][ T7608] loop0: detected capacity change from 0 to 1024 [ 101.406347][ T7610] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 101.423715][ T7608] EXT4-fs: Ignoring removed orlov option [ 101.429529][ T7608] EXT4-fs: Ignoring removed nobh option [ 101.435200][ T7608] EXT4-fs: Ignoring removed bh option [ 101.480266][ T7608] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1603: Allocating blocks 481-513 which overlap fs metadata [ 101.493237][ T7617] syzkaller0: entered promiscuous mode [ 101.499694][ T7617] syzkaller0: entered allmulticast mode [ 101.560207][ T7608] EXT4-fs (loop0): pa ffff8881072ea700: logic 352, phys. 465, len 3 [ 101.568270][ T7608] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 101.731412][ T7630] wg2: left promiscuous mode [ 101.736149][ T7630] wg2: left allmulticast mode [ 101.779996][ T7630] wg2: entered promiscuous mode [ 101.784965][ T7630] wg2: entered allmulticast mode [ 101.808980][ T7636] : renamed from vlan1 [ 102.128155][ T7662] net_ratelimit: 72 callbacks suppressed [ 102.128175][ T7662] IPv4: Oversized IP packet from 127.202.26.0 [ 102.160977][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1629'. [ 102.170038][ T7664] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1629'. [ 102.290904][ T7674] loop1: detected capacity change from 0 to 1024 [ 102.668218][ T3431] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.681786][ T3431] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.690660][ T3431] .` (unregistering): Released all slaves [ 102.699416][ T3431] bond1 (unregistering): Released all slaves [ 102.718311][ T7684] lo speed is unknown, defaulting to 1000 [ 102.724971][ T7684] lo speed is unknown, defaulting to 1000 [ 102.738164][ T3431] tipc: Left network mode [ 102.762301][ T3431] hsr_slave_0: left promiscuous mode [ 102.768347][ T3431] hsr_slave_1: left promiscuous mode [ 102.773901][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.781358][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.868546][ T7684] chnl_net:caif_netlink_parms(): no params data found [ 102.903044][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.910224][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.917490][ T7684] bridge_slave_0: entered allmulticast mode [ 102.924088][ T7684] bridge_slave_0: entered promiscuous mode [ 102.930819][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.937943][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.945104][ T7684] bridge_slave_1: entered allmulticast mode [ 102.951572][ T7684] bridge_slave_1: entered promiscuous mode [ 102.968804][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.979180][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.998192][ T7684] team0: Port device team_slave_0 added [ 103.004909][ T7684] team0: Port device team_slave_1 added [ 103.020139][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.027162][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.053151][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.064272][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.071247][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.097169][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.124073][ T7684] hsr_slave_0: entered promiscuous mode [ 103.130246][ T7684] hsr_slave_1: entered promiscuous mode [ 103.136108][ T7684] debugfs: 'hsr0' already exists in 'hsr' [ 103.141825][ T7684] Cannot create hsr debugfs directory [ 103.153154][ T3431] IPVS: stop unused estimator thread 0... [ 103.211568][ T7684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.220474][ T7684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.229204][ T7684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.238245][ T7684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.252801][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.259937][ T7684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.267252][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.274411][ T7684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.302082][ T7684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.316615][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.324848][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.336180][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.345871][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.352903][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.363125][ T4003] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.370345][ T4003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.429813][ T7684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.533172][ T7684] veth0_vlan: entered promiscuous mode [ 103.541332][ T7684] veth1_vlan: entered promiscuous mode [ 103.556308][ T7684] veth0_macvtap: entered promiscuous mode [ 103.563504][ T7684] veth1_macvtap: entered promiscuous mode [ 103.575074][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.586207][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.597369][ T3957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.606418][ T3957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.615881][ T3957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.626064][ T3957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.678158][ T7741] loop9: detected capacity change from 0 to 7 [ 103.701762][ T7741] buffer_io_error: 26374 callbacks suppressed [ 103.701780][ T7741] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.715908][ T7741] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.723890][ T7741] loop9: unable to read partition table [ 103.729757][ T7741] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.729757][ T7741] ) failed (rc=-5) [ 103.766177][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.782708][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.801217][ T7747] random: crng reseeded on system resumption [ 103.811770][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.828861][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.848260][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.866552][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.885816][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.903985][ T7744] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.034447][ T7763] syzkaller0: entered promiscuous mode [ 104.039963][ T7763] syzkaller0: entered allmulticast mode [ 104.237108][ T7778] bond_slave_1: mtu less than device minimum [ 104.309690][ T7782] loop5: detected capacity change from 0 to 764 [ 104.325659][ T7782] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 104.418411][ T7790] program syz.5.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.446045][ T7790] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.483977][ T7794] loop5: detected capacity change from 0 to 512 [ 104.512379][ T7794] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.549914][ T7794] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.570198][ T7794] EXT4-fs (loop5): 1 truncate cleaned up [ 104.570658][ T7794] EXT4-fs mount: 10 callbacks suppressed [ 104.570668][ T7794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.983037][ T7817] loop3: detected capacity change from 0 to 1024 [ 104.990998][ T7817] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.002002][ T7817] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.065865][ T7817] JBD2: no valid journal superblock found [ 105.071819][ T7817] EXT4-fs (loop3): Could not load journal inode [ 105.160198][ T7817] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 105.255976][ T7821] loop3: detected capacity change from 0 to 2048 [ 105.318406][ T7821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.348296][ T7684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.368100][ T7821] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.398715][ T7827] loop5: detected capacity change from 0 to 1024 [ 105.416656][ T7827] EXT4-fs: Ignoring removed bh option [ 105.442169][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.454322][ T7827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.484649][ T7684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.524781][ T7833] syzkaller0: entered promiscuous mode [ 105.530305][ T7833] syzkaller0: entered allmulticast mode [ 105.605965][ T7839] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.667214][ T7846] loop5: detected capacity change from 0 to 512 [ 105.694018][ T7846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.714178][ T7846] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.819270][ T7859] serio: Serial port ttyS3 [ 105.986717][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 105.986736][ T29] audit: type=1400 audit(1758974187.823:2533): avc: denied { create } for pid=7870 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.012498][ T29] audit: type=1400 audit(1758974187.823:2534): avc: denied { bind } for pid=7870 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.031894][ T29] audit: type=1400 audit(1758974187.823:2535): avc: denied { listen } for pid=7870 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.051395][ T29] audit: type=1400 audit(1758974187.823:2536): avc: denied { write } for pid=7870 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.071482][ T29] audit: type=1400 audit(1758974187.823:2537): avc: denied { accept } for pid=7870 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.101468][ T29] audit: type=1400 audit(1758974187.933:2538): avc: denied { load_policy } for pid=7872 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 106.101712][ T7869] tipc: New replicast peer: 255.255.255.255 [ 106.122036][ T7873] SELinux: ebitmap: truncated map [ 106.127333][ T7869] tipc: Enabled bearer , priority 10 [ 106.133303][ T7873] SELinux: failed to load policy [ 106.179110][ T29] audit: type=1400 audit(1758974188.013:2539): avc: denied { bind } for pid=7875 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.327914][ T29] audit: type=1400 audit(1758974188.043:2540): avc: denied { setopt } for pid=7875 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.348693][ T29] audit: type=1400 audit(1758974188.063:2541): avc: denied { remount } for pid=7877 comm="syz.1.1704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.403615][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1705'. [ 106.526742][ T29] audit: type=1400 audit(1758974188.343:2542): avc: denied { relabelfrom } for pid=7885 comm="syz.1.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.616228][ T7684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.658582][ T7891] loop3: detected capacity change from 0 to 8192 [ 106.734895][ T7904] loop1: detected capacity change from 0 to 128 [ 106.763297][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 106.772379][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 106.819632][ T7904] FAT-fs (loop1): Directory bread(block 32) failed [ 106.826381][ T7904] FAT-fs (loop1): Directory bread(block 33) failed [ 106.843496][ T7904] FAT-fs (loop1): Directory bread(block 34) failed [ 106.850189][ T7904] FAT-fs (loop1): Directory bread(block 35) failed [ 106.866654][ T7904] FAT-fs (loop1): Directory bread(block 36) failed [ 106.874210][ T7904] FAT-fs (loop1): Directory bread(block 37) failed [ 106.883449][ T7904] FAT-fs (loop1): Directory bread(block 38) failed [ 106.890118][ T7904] FAT-fs (loop1): Directory bread(block 39) failed [ 106.896957][ T7904] FAT-fs (loop1): Directory bread(block 40) failed [ 106.906003][ T7916] lo speed is unknown, defaulting to 1000 [ 106.917088][ T7904] FAT-fs (loop1): Directory bread(block 41) failed [ 106.934865][ T7899] lo speed is unknown, defaulting to 1000 [ 107.111944][ T7936] pim6reg1: entered promiscuous mode [ 107.117647][ T7936] pim6reg1: entered allmulticast mode [ 107.153615][ T6115] tipc: Node number set to 3726328397 [ 107.160712][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 107.187298][ T7942] hub 2-0:1.0: USB hub found [ 107.198675][ T7942] hub 2-0:1.0: 8 ports detected [ 107.220774][ T7946] loop0: detected capacity change from 0 to 512 [ 107.248370][ T7946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.284503][ T7946] EXT4-fs (loop0): 1 truncate cleaned up [ 107.290727][ T7946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.306799][ T7954] lo speed is unknown, defaulting to 1000 [ 107.310493][ T6153] Process accounting resumed [ 107.332320][ T7946] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.1735: Abort forced by user [ 107.369308][ T7946] EXT4-fs (loop0): Remounting filesystem read-only [ 107.375933][ T7946] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 107.474708][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.526160][ T7973] syzkaller0: entered promiscuous mode [ 107.531711][ T7973] syzkaller0: entered allmulticast mode [ 107.545084][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'. [ 107.628136][ T7984] netlink: 'syz.3.1759': attribute type 10 has an invalid length. [ 107.639205][ T7984] team0: Port device dummy0 added [ 107.645879][ T7984] netlink: 'syz.3.1759': attribute type 10 has an invalid length. [ 107.654307][ T7984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.664982][ T7984] team0: Failed to send options change via netlink (err -105) [ 107.672684][ T7984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.681738][ T7984] team0: Port device dummy0 removed [ 107.691426][ T7984] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.759765][ T7989] syzkaller0: entered promiscuous mode [ 107.765303][ T7989] syzkaller0: entered allmulticast mode [ 107.908122][ T7997] netlink: 'syz.5.1755': attribute type 7 has an invalid length. [ 107.915959][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 107.964630][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.971915][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.979485][ T8002] bridge0: entered allmulticast mode [ 108.008688][ T8002] bridge_slave_1: left allmulticast mode [ 108.014435][ T8002] bridge_slave_1: left promiscuous mode [ 108.020176][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.034126][ T8002] bridge_slave_0: left allmulticast mode [ 108.039857][ T8002] bridge_slave_0: left promiscuous mode [ 108.045650][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.467843][ T8022] lo speed is unknown, defaulting to 1000 [ 108.626715][ T8031] loop1: detected capacity change from 0 to 128 [ 108.744803][ T8042] loop0: detected capacity change from 0 to 512 [ 108.755632][ T8042] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1775: corrupted in-inode xattr: invalid ea_ino [ 108.840389][ T8042] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1775: couldn't read orphan inode 15 (err -117) [ 108.877281][ T8042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.909547][ T8045] loop1: detected capacity change from 0 to 1024 [ 108.945060][ T8048] loop9: detected capacity change from 0 to 7 [ 108.951542][ T8048] buffer_io_error: 1053 callbacks suppressed [ 108.951558][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.967300][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.973530][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 108.978931][ T8045] EXT4-fs: Ignoring removed orlov option [ 108.984238][ T8048] loop9: unable to read partition table [ 108.993451][ T8048] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 108.993451][ T8048] ) failed (rc=-5) [ 109.022234][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.024046][ T8045] EXT4-fs: Ignoring removed nobh option [ 109.035718][ T8045] EXT4-fs: Ignoring removed bh option [ 109.070293][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.108910][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.109707][ T8045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.116853][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.137314][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.145850][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.153900][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.163497][ T8050] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.202985][ T8062] loop0: detected capacity change from 0 to 164 [ 109.259588][ T8062] Unable to read rock-ridge attributes [ 109.268046][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.277885][ T8062] Unable to read rock-ridge attributes [ 109.291065][ T8062] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 109.307694][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.374688][ T8066] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1776: Allocating blocks 481-513 which overlap fs metadata [ 109.690030][ T8045] EXT4-fs (loop1): pa ffff88810722b310: logic 352, phys. 465, len 3 [ 109.698145][ T8045] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 109.790188][ T8072] bridge0: port 1(batadv0) entered blocking state [ 109.797827][ T8072] bridge0: port 1(batadv0) entered disabled state [ 109.810146][ T8072] batadv0: entered allmulticast mode [ 109.828120][ T8072] batadv0: entered promiscuous mode [ 109.884232][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.917423][ T8081] hub 2-0:1.0: USB hub found [ 109.922254][ T8081] hub 2-0:1.0: 8 ports detected [ 109.992883][ T8095] netlink: 'syz.2.1797': attribute type 7 has an invalid length. [ 110.000697][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 110.186353][ T8115] loop1: detected capacity change from 0 to 128 [ 110.197995][ T8115] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.210239][ T3957] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 110.219564][ T3957] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 110.230232][ T8115] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.271588][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.519081][ T8137] pim6reg1: entered promiscuous mode [ 110.524550][ T8137] pim6reg1: entered allmulticast mode [ 110.583083][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1816'. [ 110.592069][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1816'. [ 110.603326][ T8142] pim6reg1: entered promiscuous mode [ 110.608795][ T8142] pim6reg1: entered allmulticast mode [ 110.666419][ T8146] lo speed is unknown, defaulting to 1000 [ 110.878223][ T8167] lo speed is unknown, defaulting to 1000 [ 110.906396][ T8165] lo speed is unknown, defaulting to 1000 [ 111.182531][ T29] kauditd_printk_skb: 12262 callbacks suppressed [ 111.182617][ T29] audit: type=1326 audit(1758974193.013:14805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.230413][ T29] audit: type=1326 audit(1758974193.013:14806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.254265][ T29] audit: type=1326 audit(1758974193.043:14807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.277788][ T29] audit: type=1326 audit(1758974193.043:14808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.301511][ T29] audit: type=1326 audit(1758974193.043:14809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.325114][ T29] audit: type=1326 audit(1758974193.053:14810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.348707][ T29] audit: type=1326 audit(1758974193.053:14811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.372349][ T29] audit: type=1326 audit(1758974193.053:14812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f720f7cd710 code=0x7ffc0000 [ 111.395872][ T29] audit: type=1326 audit(1758974193.053:14813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f720f7d06f7 code=0x7ffc0000 [ 111.419446][ T29] audit: type=1326 audit(1758974193.053:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f720f7ceec9 code=0x7ffc0000 [ 111.714374][ T8207] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 111.754550][ T8207] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 111.851905][ T8215] loop3: detected capacity change from 0 to 128 [ 111.864111][ T8215] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.897821][ T8217] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.059146][ T8223] lo speed is unknown, defaulting to 1000 [ 112.070219][ T8215] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.083093][ T8217] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.158942][ T8217] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.259612][ T8227] loop3: detected capacity change from 0 to 512 [ 112.267929][ T8217] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.396148][ T3957] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.426826][ T3957] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.446682][ T8227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.486646][ T3957] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.563202][ T8227] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.576870][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1853'. [ 112.586209][ T3957] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.597972][ T8227] EXT4-fs (loop3): shut down requested (0) [ 112.616812][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.634833][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 112.656915][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 112.665966][ T8241] netlink: 'syz.3.1855': attribute type 30 has an invalid length. [ 112.695634][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 112.704714][ T3949] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.713000][ T3949] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.787225][ T3949] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.806084][ T3949] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.972875][ T8251] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1860'. [ 113.150466][ T8270] loop3: detected capacity change from 0 to 512 [ 113.161436][ T8270] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.175824][ T8270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.189675][ T8270] EXT4-fs (loop3): 1 truncate cleaned up [ 113.194705][ T8272] lo speed is unknown, defaulting to 1000 [ 113.195837][ T8274] macsec0: left promiscuous mode [ 113.203955][ T8270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.206135][ T8274] macsec0: entered allmulticast mode [ 113.336006][ T8277] ================================================================== [ 113.344249][ T8277] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 113.352535][ T8277] [ 113.354857][ T8277] write to 0xffff88810729b254 of 4 bytes by task 8270 on cpu 0: [ 113.362484][ T8277] xas_set_mark+0x12b/0x140 [ 113.366999][ T8277] __folio_start_writeback+0x1dd/0x440 [ 113.372476][ T8277] ext4_bio_write_folio+0x5ad/0x9f0 [ 113.377691][ T8277] mpage_process_page_bufs+0x4a1/0x620 [ 113.383163][ T8277] mpage_prepare_extent_to_map+0x786/0xc00 [ 113.388979][ T8277] ext4_do_writepages+0xa05/0x2750 [ 113.394196][ T8277] ext4_writepages+0x176/0x300 [ 113.398962][ T8277] do_writepages+0x1c3/0x310 [ 113.403555][ T8277] file_write_and_wait_range+0x156/0x2c0 [ 113.409205][ T8277] generic_buffers_fsync_noflush+0x45/0x120 [ 113.415116][ T8277] ext4_sync_file+0x1ab/0x690 [ 113.419799][ T8277] vfs_fsync_range+0x10a/0x130 [ 113.424575][ T8277] ext4_buffered_write_iter+0x34f/0x3c0 [ 113.430143][ T8277] ext4_file_write_iter+0xdbf/0xf00 [ 113.435360][ T8277] iter_file_splice_write+0x666/0xa60 [ 113.440738][ T8277] direct_splice_actor+0x156/0x2a0 [ 113.445854][ T8277] splice_direct_to_actor+0x312/0x680 [ 113.451235][ T8277] do_splice_direct+0xda/0x150 [ 113.456091][ T8277] do_sendfile+0x380/0x650 [ 113.460521][ T8277] __x64_sys_sendfile64+0x105/0x150 [ 113.465731][ T8277] x64_sys_call+0x2bb0/0x2ff0 [ 113.470414][ T8277] do_syscall_64+0xd2/0x200 [ 113.474934][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.480838][ T8277] [ 113.483167][ T8277] read to 0xffff88810729b254 of 4 bytes by task 8277 on cpu 1: [ 113.490710][ T8277] filemap_write_and_wait_range+0xfc/0x340 [ 113.496534][ T8277] filemap_invalidate_pages+0xa4/0x1a0 [ 113.502020][ T8277] kiocb_invalidate_pages+0x6e/0x80 [ 113.507221][ T8277] __iomap_dio_rw+0x5d4/0x1250 [ 113.512000][ T8277] iomap_dio_rw+0x40/0x90 [ 113.516345][ T8277] ext4_file_write_iter+0xad9/0xf00 [ 113.521561][ T8277] iter_file_splice_write+0x666/0xa60 [ 113.526946][ T8277] direct_splice_actor+0x156/0x2a0 [ 113.532069][ T8277] splice_direct_to_actor+0x312/0x680 [ 113.537459][ T8277] do_splice_direct+0xda/0x150 [ 113.542228][ T8277] do_sendfile+0x380/0x650 [ 113.546662][ T8277] __x64_sys_sendfile64+0x105/0x150 [ 113.551874][ T8277] x64_sys_call+0x2bb0/0x2ff0 [ 113.556555][ T8277] do_syscall_64+0xd2/0x200 [ 113.561082][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.567001][ T8277] [ 113.569324][ T8277] value changed: 0x0a000021 -> 0x04000021 [ 113.575053][ T8277] [ 113.577389][ T8277] Reported by Kernel Concurrency Sanitizer on: [ 113.583536][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.3.1869 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.593259][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.603311][ T8277] ================================================================== [ 114.065334][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.