last executing test programs: 51.204296928s ago: executing program 3 (id=60): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 51.11701836s ago: executing program 3 (id=64): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') setxattr$security_evm(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), 0x0, 0x0, 0x1) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 50.540205579s ago: executing program 3 (id=80): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) 50.397342561s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 50.346731512s ago: executing program 3 (id=84): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x3e}, 0x18) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 50.019819857s ago: executing program 3 (id=86): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xa, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='btrfs_find_cluster\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 50.019557347s ago: executing program 32 (id=86): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xa, 0x0) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='btrfs_find_cluster\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 2.229403026s ago: executing program 2 (id=746): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 1.766926123s ago: executing program 4 (id=753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x86042, 0x746fe993f9c821d1) write$UHID_INPUT(r3, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$UHID_INPUT(r4, &(0x7f0000005cc0)={0x8, {"d218b51452f99aeb6fc6d18f670f187ccc5c62398979ae3fd684f7536b8f103d1286ac9b3f26da84636a27ace45245e6bdb499a880ef3bd7b98b8119ab4f5f357ce7eb885e2a2266c23720e9da5da361b51aec2b6f7c76a66d279c88f4263968eb72872142b7093d78d6248ca1f6856826540c2e85c7e439b11a3cd5e1188d7e9bee35a7811e1d43d72337afa82b61097c58973836e88ae3f67f91be74df93205613abd0495d02a24cde64d696ac31d632c586dc8256a562f2ddcaf0c3a3177b6c612d2a5a6e89b025be95beb9564ef3e12bb6e7029ee4054ed085a40fc811dff796eadebf973e473301fa26b5cebe532397c51c9860c9feb3ad52003e22ea942018cfb663722878beb5c9a901af60c369cecb16a289e94480714543e4b8abfe1cc3d8300f779a0008bec275c9c30ab61b3215d1dc1015af8ba3b6652d82a2ba30a47e3fccebeec4ad11cb6cfd010183d1c4e0d86671f422169b603f4db38c4e03b7e88b4f90ed1ce5f82dc620b4bc8d16167352cb95d06024a7b73e9597ff17d2255731612bf22a26faeddbcbfc0f5f54931afc393a8196110ddc0e231dbcc7cdc9877e527c8b32817912c7ae88e1164496a66d614d7aa9dd087fd27ac2a08b193070b366212581637eab6521b60518ec4bf0864e35818cc4a315339796330e6a78b10cd38c319789e479813959f44bde4314dceeda41a70a171a1a693224f36e84397ffb3f8bf1a39e0838478b0eaf881342434cc3a42d68e4dd3c98acc737f69960240dffc1e9c3de9e02189c782d76e18daf47e546914e4059f29895a049121d31a3d2d494de073ad7a6e641144b21c48ebf20f85934a0bc6e46364326d49c87d933d2015d63e9e82bc84f663059ab65f17104fed0c3a1dd4b995630f1ce13c2b2b278a51a33ca4c549b91da7dbccb6ccdd8209c02acb6a713992a2a318b463f1b79275ba043cd32f6b66cc77e71e2b9f4f6fbc922f95a1e0206ede7f0cc88ccb8e9246b8af37f019420c8ff2ac7e0255ff67b4a5bd69c9f548c7daf34a10621f271a46c7859b0fb53bd5ff8a0b06701b0e7f55d6f28171aa2ee60cd7a4a5e89145e3af07d8d866eedb0c69b0856b9f461bcd5a1a27dcf6d8eccdc5f077a10b53e9cb2d573c9ebfda39792e7a0a963ac8062c3f10410ba4983adcb2a7b70c461bf4c46862d799249670fc057e8c4e1d839ca039cd3478c593b16c9d1d53463f07af232487018ea6a6570f6960690a2689e7bbdbc45ddd52e2b0f80fb654c1d839600e99fffd9816352155d60e70c0029938ec28d55a6d681b1811e3494ad604aab99c40f61b0be8114109a2bae0350261882eb1c7eb6df2d71446af9168229ca454487e8e508f188e523baa97506e2fb1e837ef4cbae9b374029b7c716fded3857c0216e7581d08a7a1f888c0e8835211d2cac260289668d0a76da1bc06d79ee800363808ff1a229e2507642e3bfe105f776abb59a5a9506406873672722862aa8c7defb2205fc7bd3b082e177f3c6013b8dd13462386d01313b2dc6f60a2114b954eff5898ef434cabd07bf7559b4d83dad27872e3790ad63d041e44a57491a58350a8f8e77e6959282a2d7805e48a634c7b5d676d8fcc8a6fe1dbecdfd2a038cab7b7ea508bc743143abf928db2daa32dee62f314d19db55eaaafeaafa2932cc6662576c5ce0ae2797c3327fb572ef09cc911d44026c2dc84a53c1ff4a8a295aeb83487f679f0af6c1aa9a53c1e81b3c494257ab86e53d223b54ab7788c894ae9729992796faf0d3d1043484e26aba10785d241a2b29e424a44ab91855c8509a45884c6ad0bc5d43763e598da2276ee57ccd867aea0fa430cf38670e6c8b9aee1be136a81a5b292609679e2f0748e521231239d1bfa55107505fb7837e15b873e0f94a8d1333c0be9134cd765d0cd2fcaeb15e1da0a997222b8a810ad4e3c837779ea415b5a67e5e2a6c4a3b044caad62dd6ac0d5ee574626ee1a95290148742e79d29a062d6a05f38e5bd6730a9ab66509d808f60514021fc6e2769ec3cecf6796513a8c49780ea164293c38bd263fcd002369ef8b51cc4f1689966e3a6ede23c1402352e6cd19dbfe15a52a2b229a517a7c9265596ca1a76bc10e770447e1c25e941302dea37537f9c3bb878b25c2371247e3ffe17ac72f10598e2e52c1654d487bed4d9ad3df4bed0f9bc697ce1d38561060349fe2da1ae7054dcb76d6cb36c64b38e6c72f5c8ea78ad6df168aa1d6d0face543519b53ded17e9b1c3f9fa6429188baa2491f708fdd6d3fb89f33e41f06fcd4f4a03d3799acf53bf04b8dd65f2f4150c0c98be7986d6e40ecdada3ee22c38ffabbbe6e6d191936cc12ef472b429f9b10ad9b824e550589c18914f14141bff610d6308dc8dfedbc8894563ff5545260e84941cfd28bce3801ec5799a1d01934b3971fa512cfb8cea0ca52a98076091ae848e489e66c9e8f8af89dab497128bdb32f712cfba7daf577ca63fd521964dd2e3c9c70ec56fe5eb141a775c02541a8f4a094022fd7e4636e2aa7fc386c891da20ac3f443523844e55d436e2e6f1cbc0400676884880d0434793d6cc57cee16da254f4ee4c49c315c4d2a9b6f6c4103a73a994311c96f0363686164146063742df33246d5713556006d750180366acb4e3866dc4bb49f5c308093a786d6b71cc9051e4b475f23a97635f3009a3e6aa2b6064f95a20007cdbcc86c8f62018d5525bd4e2f04e70c19ab4a74f1884edfbb8565be008839cd3d6b2d104300e5ea91295ce2199105a7538d55b4112b0b463c6b81bb74888aac7b864e6fcf139c21749f1b7d025bd77369136b67c586fb36def93f9f0b67f0f1b790c36cbc251c1b2edb2d3564bb578e5e001280c9072a125ae2423ebc47cecd9d2270110f1c216fdde26caf456649042d20945a750c6bc678a903c7030accf8a67f442b672f7e827fa2c11a4356aa3d372f67138ed7421f436036d6e6aab5c30335a43efcea038f43e24abfd14ce584f68e893a98866c446355a8ca51572f0f63b8d1c2b259fc23b8561217b2c94b4065e3fe9dcc0d9736fbbcbbef39224cacff105cf139d6e5674169e552ce4d3cd6e6e4376a43605ccfd19a4f628c0c1cc0bddda544d92aa0da89d0276cb70e5f1db8b76e5b624370a339db3d306ba46059666846231a141f1042390430250b6f7eab3923f25df1e71c1c204d79ea1b750e3f7bf2b283082686577c84b1dd507d8ac340b5c4bdfdd5123c051baafe34a91416e25642761d699b0a94240211381606df797a19c2ef256613750211c2052f17b4e7734deaeb0576aec18d8dad6f995c839f0cff64e8582c459f13fe15eb319fb501836465984c1f3d700cb7c33da9047454dd1a0f123bac83e4764cdfa93148e311267562f51f79f66e299d0db39f63f4b0fc4fe12176b827b8cd8a9c3ad64f84ef215b6348ebae1110fbfad3fdbe7df93c4af8609617e90e8c03286497bc303a5f55ab8eb3d3d0edd4dc96380d3172d11b42b6c51f956c18b24703a87badbb4e495b05d238fa8d7c3ee97877cad819df9c6b56bd487eb1d64888a9e235032d2b63a5b3545f7f4c41c97e7c8ec1178eb989f0e43ad1e7d20bcd2a854a171dbaf5e06108c593e8663b88f7254c03ec0ca16ca6677d816396068c4f989aabd4818d2de9493d5f0099f53ee2046d9988882b105f48c4d621d46fde6098f5ae6150fd470bc91470f3870762c488a97d798f9fc7825c6b8fba96f17fbeb8ff820b3626f475ec262082199ee093bbb318bd5e79777bab71decb8812fa352ca7dabc45e338dc636f5fa3e66af8d300d146780d7efbf2a032a5583f0e47f7d2a589b0b1b39d6b37d264256bcb593bd4754a1ca2bec389ee21eb083736869f2dfd670c952bb2ee0500b1334dc23ac9f9ccf3bc03af4cd71713697fe63a281e12aac467d72a3c9d952d92bfc02bbb9b56e71f0bea1162dde913b12f50d6913bfa789b91d55c6ececa1eebbc61b22329e1939934d672543bd34c4647123178b952d9bc6d4264e78fb07b8ca1a5df0acc7493fa1a8fcab110474b247b2cba42b8dc2fd2a7b8041dd2e250fb5c7950f4904df9733924a1b31bb9b6f9833f8c131db2cd42819061f61a0879c52ab53b2581dff10598eabfa11e38db5b86a58ea10265c0d2307245ecb5568687457a59a087d29c41273fd4f038414bb78bf9758ee6e8fc02d62d0f025058487ec485bf1b0fbb105e9e351680b76a5a1e10a94041a60b8da692ffc3e548fce34164fea55023ace18cdaf15627f2cf2677795af68fb56634a34340f2c0983a5fff0781073622f210594251037524fe3b358bce4c2ee40feea35f4639670e5c9ce7820d35a32773f7ba1e62f0af1583d9a457c523f936d26d3144832fcd6a1e0c46d3b3512af1311db1c63ceec03e4d08ea4e77ee57b4aeb9a72745f360646496ca60cce628bf379d47515131f5021db438cd68368b79da55172e2f1502bbe15daf5fceb8834869c6a95f22fd085d9789dd6b21418ace1c7bd597260898fa5b97dbf57bd470a56fff496a5b9295358a2ca86bb558ba497d80fd922486e0b95cb24f3e835c4a079066658275f4815ecbe80315b6056dc3ff4d1b94b5398c7ced8aec37bf89e40d69243b050c773f80bacbbed987f8da7ccb77adc2be3a228b522eda6de453c98086acbca0c23cf570daefa82e15c8ff08d87bd11af5fe7ebd07625091572777f35949fb461e09c3553037951eb893d4d124db045f3a15eea416450ce21a0ffdf2f3d62944f3cff6d47d777c3d0deb6f4d9c057588f0797c656befc8aa6a2379be9bcdb58138a8c1498825b61b475e222337c33f2cbdb000bf10f960aa7f9b607d1d7399ed907350d6082794b1914771d6122623fbb41a8cc8d9142b733a3c0e0f6216965551d718d0357002f8bfbe8d4cd54297016e79657786758911bca9e8f832e0ba2233d7929a7046458eca967a0cd4e2e7f5f46c1e99d89102c840eb873dc504d606446657c548491181b6508c49ce4b54ad4af92c8617321129233870bd190c9eeda7be7263d719aac3d3633ab27c9982d9bfc49d5db949a43ded20d8ba19270a063186a5e9171572f9e198cd83710fecfb19f342c03871ac83b408c771c2a1a605a55218adda9dce67d8a9b56437a7196a37b46831347c7efd34441e615df547d69c759e7a90a16b86f69917799d4f1d0bcaafb71de66fa7c340fa85962af1d1a21d6cd59498c54135ce78c232da4ec81d0d6ded6ee24efb5802cc38a2f3d3ec60ea8458c9c1c362a35191e0bcb9093ddc58b24b8d76ffe0cfeee87db4ea1ca3f843538b733bbf42f1584823c35d4a1ee947469373e81fa614375dded3c37e321af30cc9a613a60c3409cbb9a3b99aac0c0eed50a35d243e8d662705fc4917a5a03fd02eb6b2bf9dc671ed71fe3e06aec3648867df2626582e202d7adb28e21bf8de41236935cc5f6a334af4d7f734bbcf4fbdf39373f35d3283d59636a7bc04e96249840d9be74b247c9e8582e96074644fd7ed7acca4fba2bba22a4c00e447eba72d253310ecaa94c6334ce6dd2f003dd50b2295dce142b2ae7e8c60c398953b058df4e7557b8e506715cbaa712f411bb7fc10ebd9a5a76b35cc7bc618f383bbed04426ad66e7c09437209c4a8795cecda66f9b4a99a7ddcd6db408c7a6e8a76851a0bc3a33d1b281e111bb588193961b844029c6c9c69c28cb8b53136e727bf6c982c9bab8cc1475bb923f0f9e779f6357fc592ca4f29466017cb1bca4feffde327cd8623502cfe4be363eb4ee0190419a557a", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1.599802175s ago: executing program 4 (id=756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='qdisc_enqueue\x00'}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x40005) 1.474489687s ago: executing program 1 (id=758): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.474139477s ago: executing program 5 (id=759): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) waitid(0x2, r2, 0x0, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1.415692238s ago: executing program 1 (id=760): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x39, 0x2}, 0x80, 0x0, 0x0, 0x0, 0xd0}, 0x480c4) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.330757039s ago: executing program 0 (id=761): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x110c4, 0x0, 0x0, 0x1c2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x3512, 0x9d5c, 0x4, 0x0, 0x0) 1.33041981s ago: executing program 4 (id=762): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r2}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x1, 0x1, 0x10800000}) 1.26484881s ago: executing program 1 (id=763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x4004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1.236190471s ago: executing program 4 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.212103202s ago: executing program 5 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000005000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.210715671s ago: executing program 2 (id=766): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = io_uring_setup(0x5dad, &(0x7f0000000140)={0x0, 0x49fd, 0x800, 0x2, 0x2c7}) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20004040) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x5) 1.147668712s ago: executing program 0 (id=767): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0xee00) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 1.147127703s ago: executing program 1 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f0000000cc0)={0x2000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x0], 0x1}, 0x58) 1.139701143s ago: executing program 5 (id=769): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80800, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) preadv2(r3, 0x0, 0x0, 0x4, 0xd4c, 0x8) 1.004007145s ago: executing program 2 (id=770): syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 911.305576ms ago: executing program 0 (id=771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x1810714, &(0x7f0000000300)={[{@journal_dev={'journal_dev', 0x3d, 0xcd29}}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x1002}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@oldalloc}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time}, {@inlinecrypt}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL7zSioiCoFU0Nn60tKCycKPRxIUmJrrAZW0LqQzU0JoIabQag0tD4t64NPEvcOXKqCsTt7o3JEQbE9CNY+7MvW1nmCn9mDKV+f2SgXPmnrnnPD333DlzzkwAPWsw+yeJ+H9E/BIR/fVsY4HB+n83Fucn/lqcn0iiWn3j96RW7vri/ERRtHjdnjwzlEaknyR5JY1mL146O16pTF3I8yNz594dmb146enpc+Nnps5MnR87efLE8dHnnh17piNxZvFdP/TBzOGDr7x15bWJU1fe/uHrrL0HjtSPr4yjUwazwP+o1jQfe6zTlXXZP9XlOJNyt1vDWpUiIuuuvtr4749SLHdef7z8cVcbB2yp7J69s/3hhSpwB0ui2y0AuqN4o88+/xaP2zT12BauvVD/AJTFfSN/1I+UI83L9G1h/YMRcWrh7y+yRzStQ1RbrBsAAGzWt9n856lW8780DqwotzffGxqIiLsjYl9E3BMR+yPi3oha2fsi4v511t+8NXTz/DO9uqHA1iib/z2f7201zv+K2V8MlPLcXbX4+5LT05WpY/nfZCj6dmb50VYnL07x0s+ftat/5fwve2T1F3PB/CRXy00LdJPjc+OdmpRe+yjiULlV/MnSTkASEQcj4tD6Tr23SEw/8dXhdoVuHf8qOrDPVP0y4vF6/y9EU/yFZPX9yZFdUZk6NlJcFTf78afLr7erf1Pxd0DW/7sbr/+mEv1/Jiv3a2fXX8flXz9t+5myvMHrf0fyZm1Pd0f+3Pvjc3MXRiN2JK/W8g3Pjy2/tsgX5bP4h462Hv/78tdk8T8QEdlFfCQiHoyIh/K+ezgiHomIo6vE//2Lj77T7th26P/Jlve/pet/oLH/158onf3um3b1r+3+d6KWGsqfqd3/bqF9c3blJTZ6NQMAAMB/T1r7bnySDi+l03R4uP4d/v2xO63MzM49eXrmvfOT9e/QD0RfWqx09a9YDx1NFvIz1vNj+Vpxcfx4vm78eel/tfzwxExlssuxQ6/b02b8Z34rdbt1wJbzey3oXc3jP+1SO4Dbz/s/9C7jH3qX8Q+9q9X4/7Apby8A7kze/6F3Gf/Qu4x/6F3GP/Skzfyuf6sS5VV+vS+xXRKRbotmSLRIlDswurt8YwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQfwMAAP//EgHx+Q==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x16, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002180)={0x0, 0x7}) timerfd_gettime(r2, 0x0) 910.782106ms ago: executing program 4 (id=772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) close_range(r2, r3, 0x0) 849.344707ms ago: executing program 5 (id=773): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r2, 0x0, r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 602.150751ms ago: executing program 0 (id=774): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$inet_sctp(r3, &(0x7f00000007c0)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) 601.793191ms ago: executing program 2 (id=775): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 551.547971ms ago: executing program 5 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x8}, 0x0) 551.100091ms ago: executing program 4 (id=777): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 507.955862ms ago: executing program 2 (id=778): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 166.995798ms ago: executing program 2 (id=782): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {0x9, 0xfff2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 141.562758ms ago: executing program 1 (id=783): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}}, 0x20040054) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 0 (id=784): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 32.505273][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.514188][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523042][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538993][ T3308] veth0_macvtap: entered promiscuous mode [ 32.567984][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 32.568002][ T29] audit: type=1326 audit(1750257497.650:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.597310][ T29] audit: type=1326 audit(1750257497.650:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.620571][ T29] audit: type=1326 audit(1750257497.650:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.647328][ T29] audit: type=1326 audit(1750257497.650:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.675569][ T3308] veth1_macvtap: entered promiscuous mode [ 32.682013][ T3487] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 32.688028][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.700615][ T29] audit: type=1400 audit(1750257497.760:132): avc: denied { create } for pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.732034][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.744973][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.753931][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762775][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.771518][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.788899][ T29] audit: type=1400 audit(1750257497.780:133): avc: denied { write } for pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.808197][ T29] audit: type=1326 audit(1750257497.810:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.831261][ T29] audit: type=1326 audit(1750257497.810:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff90586ab19 code=0x7ffc0000 [ 32.854400][ T29] audit: type=1326 audit(1750257497.810:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.877522][ T29] audit: type=1326 audit(1750257497.810:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 32.911505][ T3494] syzkaller0: entered promiscuous mode [ 32.917238][ T3494] syzkaller0: entered allmulticast mode [ 33.028947][ T3508] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 33.061932][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 33.081205][ T3511] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.090004][ T3511] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.098763][ T3511] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.107938][ T3511] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.123172][ T3511] Zero length message leads to an empty skb [ 33.152729][ T3511] syz.0.14 (3511) used greatest stack depth: 10664 bytes left [ 33.210547][ T3525] netlink: 'syz.2.21': attribute type 3 has an invalid length. [ 33.315383][ T3536] serio: Serial port ptm0 [ 33.460909][ T3547] vlan2: entered allmulticast mode [ 33.485703][ T3549] netlink: 68 bytes leftover after parsing attributes in process `syz.4.31'. [ 33.536254][ T3551] loop4: detected capacity change from 0 to 128 [ 33.624344][ T3551] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.724211][ T3551] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.788410][ C0] hrtimer: interrupt took 27271 ns [ 33.895159][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.987530][ T3565] tipc: Started in network mode [ 33.992613][ T3565] tipc: Node identity 1ad96f22922d, cluster identity 4711 [ 34.000031][ T3565] tipc: Enabled bearer , priority 0 [ 34.053886][ T3565] syzkaller0: MTU too low for tipc bearer [ 34.059853][ T3565] tipc: Disabling bearer [ 34.100637][ T3575] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 34.115553][ T3575] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 34.157288][ T3578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 34.176012][ T3578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3578 comm=syz.3.42 [ 34.181821][ T3579] syzkaller0: entered promiscuous mode [ 34.194108][ T3579] syzkaller0: entered allmulticast mode [ 34.226879][ T3581] netlink: '+}[@': attribute type 4 has an invalid length. [ 34.255607][ T3583] syz.3.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.297180][ T3587] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 34.338033][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 34.348450][ T3583] loop3: detected capacity change from 0 to 512 [ 34.358453][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 34.369791][ T3583] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.377343][ T3583] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.391489][ T3583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04ec11c, mo2=0002] [ 34.400221][ T3583] System zones: 1-12 [ 34.405131][ T3583] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.45: corrupted in-inode xattr: e_value size too large [ 34.419522][ T3583] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.45: couldn't read orphan inode 15 (err -117) [ 34.432630][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.479177][ T3603] ======================================================= [ 34.479177][ T3603] WARNING: The mand mount option has been deprecated and [ 34.479177][ T3603] and is ignored by this kernel. Remove the mand [ 34.479177][ T3603] option from the mount to silence this warning. [ 34.479177][ T3603] ======================================================= [ 34.515936][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.896830][ T3626] bridge: RTM_NEWNEIGH with invalid ether address [ 34.920598][ T3629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 34.949180][ T3633] loop3: detected capacity change from 0 to 512 [ 34.982604][ T3633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.011050][ T3642] loop2: detected capacity change from 0 to 1024 [ 35.022689][ T3633] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.044227][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.070812][ T3642] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 209:freeing already freed block (bit 13); block bitmap corrupt. [ 35.173046][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.272634][ T3651] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.64: corrupted inode contents [ 35.292042][ T3651] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.64: mark_inode_dirty error [ 35.323704][ T3655] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 35.340159][ T3655] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 35.363938][ T3651] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.64: corrupted inode contents [ 35.386545][ T3651] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.64: mark_inode_dirty error [ 35.412306][ T3651] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.64: mark inode dirty (error -117) [ 35.440403][ T3651] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 35.500925][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.542424][ T3670] loop2: detected capacity change from 0 to 8192 [ 35.605964][ T3670] loop2: p1 p3 p4 [ 35.609922][ T3670] loop2: p1 size 8390912 extends beyond EOD, truncated [ 35.617970][ T3670] loop2: p3 size 589824 extends beyond EOD, truncated [ 35.792948][ T3686] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 35.983979][ T1401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.047246][ T1401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.119565][ T1401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.160467][ T1401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.215244][ T3697] chnl_net:caif_netlink_parms(): no params data found [ 36.261606][ T3713] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.296195][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.297553][ T3722] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.92'. [ 36.303382][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.303584][ T3697] bridge_slave_0: entered allmulticast mode [ 36.327134][ T3697] bridge_slave_0: entered promiscuous mode [ 36.335540][ T1401] bridge_slave_1: left allmulticast mode [ 36.341525][ T1401] bridge_slave_1: left promiscuous mode [ 36.347375][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.357336][ T1401] bridge_slave_0: left allmulticast mode [ 36.360195][ T3725] hub 9-0:1.0: USB hub found [ 36.363014][ T1401] bridge_slave_0: left promiscuous mode [ 36.363323][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.368241][ T3725] hub 9-0:1.0: 8 ports detected [ 36.506978][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.522411][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.532399][ T1401] bond0 (unregistering): Released all slaves [ 36.545263][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.552375][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.560025][ T3697] bridge_slave_1: entered allmulticast mode [ 36.566579][ T3697] bridge_slave_1: entered promiscuous mode [ 36.590394][ T3729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.95'. [ 36.603999][ T1401] tipc: Left network mode [ 36.647734][ T1401] hsr_slave_0: left promiscuous mode [ 36.664170][ T1401] hsr_slave_1: left promiscuous mode [ 36.677918][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.685516][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.721812][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.729465][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.753597][ T3751] loop4: detected capacity change from 0 to 512 [ 36.809117][ T1401] veth1_macvtap: left promiscuous mode [ 36.815776][ T1401] veth0_macvtap: left promiscuous mode [ 36.821359][ T1401] veth1_vlan: left promiscuous mode [ 36.826797][ T1401] veth0_vlan: left promiscuous mode [ 36.875101][ T3751] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 36.970507][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 36.980691][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 37.028615][ T3697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.046406][ T3697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.076022][ T3697] team0: Port device team_slave_0 added [ 37.086200][ T3697] team0: Port device team_slave_1 added [ 37.185634][ T3697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.192680][ T3697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.218957][ T3697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.231858][ T3697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.239005][ T3697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.265146][ T3697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.367520][ T3697] hsr_slave_0: entered promiscuous mode [ 37.381721][ T3697] hsr_slave_1: entered promiscuous mode [ 37.414486][ T3697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.437460][ T3697] Cannot create hsr debugfs directory [ 37.585998][ T3697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.607145][ T3697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.618579][ T3697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.638360][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 37.638377][ T29] audit: type=1400 audit(1750257502.720:305): avc: denied { ioctl } for pid=3792 comm="syz.0.107" path="socket:[5503]" dev="sockfs" ino=5503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.692177][ T3812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.705246][ T3697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.738614][ T3812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.816023][ T3812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.839848][ T29] audit: type=1400 audit(1750257502.920:306): avc: denied { search } for pid=3827 comm="syz.4.111" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.862072][ T29] audit: type=1400 audit(1750257502.920:307): avc: denied { search } for pid=3827 comm="syz.4.111" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.913946][ T3697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.928016][ T3812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.946739][ T3697] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.967168][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.974329][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.987742][ T1729] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.995025][ T1729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.011311][ T3830] 9pnet: p9_errstr2errno: server reported unknown error [ 38.015755][ T3833] loop4: detected capacity change from 0 to 164 [ 38.044665][ T3812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.055450][ T29] audit: type=1400 audit(1750257503.120:308): avc: denied { mount } for pid=3832 comm="syz.4.113" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 38.057037][ T3812] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.092847][ T3833] process 'syz.4.113' launched '/dev/fd/3' with NULL argv: empty string added [ 38.120319][ T29] audit: type=1400 audit(1750257503.190:309): avc: denied { execute_no_trans } for pid=3832 comm="syz.4.113" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.120635][ T3833] syz.4.113: attempt to access beyond end of device [ 38.120635][ T3833] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.165524][ T3833] syz.4.113: attempt to access beyond end of device [ 38.165524][ T3833] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.165620][ T3812] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.240954][ T3697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.241116][ T29] audit: type=1400 audit(1750257503.320:310): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 38.280940][ T3812] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.381210][ T29] audit: type=1400 audit(1750257503.420:311): avc: denied { mount } for pid=3851 comm="syz.4.116" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.403292][ T29] audit: type=1400 audit(1750257503.420:312): avc: denied { write } for pid=3851 comm="syz.4.116" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.407974][ T3697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.423845][ T29] audit: type=1400 audit(1750257503.420:313): avc: denied { open } for pid=3851 comm="syz.4.116" path="/23/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.423877][ T29] audit: type=1326 audit(1750257503.450:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 38.561729][ T3871] loop4: detected capacity change from 0 to 1024 [ 38.575175][ T3875] loop2: detected capacity change from 0 to 1024 [ 38.602611][ T3875] EXT4-fs: Ignoring removed orlov option [ 38.616739][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.631202][ T3875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.650824][ T3879] loop1: detected capacity change from 0 to 512 [ 38.716596][ T3879] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 38.783694][ T3697] veth0_vlan: entered promiscuous mode [ 38.790275][ T3879] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.122: invalid indirect mapped block 2683928664 (level 1) [ 38.797628][ T3697] veth1_vlan: entered promiscuous mode [ 38.812838][ T3879] EXT4-fs (loop1): Remounting filesystem read-only [ 38.819797][ T3879] EXT4-fs (loop1): 1 truncate cleaned up [ 38.827414][ T3879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.863183][ T3697] veth0_macvtap: entered promiscuous mode [ 38.911544][ T3871] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.118: Allocating blocks 497-513 which overlap fs metadata [ 38.942058][ T3870] EXT4-fs (loop4): pa ffff888106df0540: logic 128, phys. 273, len 15 [ 38.950265][ T3870] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 38.965086][ T3697] veth1_macvtap: entered promiscuous mode [ 38.978986][ T3697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.990818][ T3697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.002226][ T3697] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.011174][ T3697] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.020108][ T3697] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028928][ T3697] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058244][ T3871] syz.4.118 (3871) used greatest stack depth: 9736 bytes left [ 39.097891][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.503486][ T3944] macvlan2: entered promiscuous mode [ 39.508909][ T3944] macvlan2: entered allmulticast mode [ 39.542148][ T3944] batadv0: entered promiscuous mode [ 39.559907][ T3944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 39.585606][ T3944] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 39.640043][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.700914][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.889705][ T3984] loop5: detected capacity change from 0 to 512 [ 39.917893][ T3984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.956430][ T3984] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.138: invalid indirect mapped block 4294967295 (level 1) [ 39.990950][ T3984] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.138: invalid indirect mapped block 4294967295 (level 1) [ 40.038942][ T3984] EXT4-fs (loop5): 2 truncates cleaned up [ 40.050229][ T3984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.063029][ T3989] loop1: detected capacity change from 0 to 512 [ 40.077614][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.138'. [ 40.083314][ T3989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.121328][ T3989] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.139446][ T3989] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.140: corrupted inode contents [ 40.142194][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.158276][ T3989] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.140: mark_inode_dirty error [ 40.176320][ T3989] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.140: corrupted inode contents [ 40.204422][ T3989] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.140: mark_inode_dirty error [ 40.314148][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.320693][ T4012] loop5: detected capacity change from 0 to 8192 [ 40.438788][ T4029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.503358][ T4023] Cannot find add_set index 0 as target [ 41.245788][ T4066] loop1: detected capacity change from 0 to 256 [ 41.354490][ T4066] FAT-fs (loop1): bogus number of FAT sectors [ 41.360652][ T4066] FAT-fs (loop1): Can't find a valid FAT filesystem [ 41.464691][ T4081] loop2: detected capacity change from 0 to 1024 [ 41.477989][ T4081] EXT4-fs: Ignoring removed orlov option [ 41.483939][ T4081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.508462][ T4081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.671114][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.736341][ T4098] loop2: detected capacity change from 0 to 1024 [ 41.763048][ T4098] EXT4-fs: Ignoring removed nobh option [ 41.768709][ T4098] EXT4-fs: Ignoring removed bh option [ 41.801377][ T4107] netlink: 'syz.4.179': attribute type 10 has an invalid length. [ 41.818721][ T4098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.831517][ T4107] batman_adv: batadv0: Adding interface: team0 [ 41.837868][ T4107] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.863107][ T4107] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 41.876969][ T4098] EXT4-fs (loop2): shut down requested (2) [ 41.888819][ T4115] netlink: 'syz.4.179': attribute type 10 has an invalid length. [ 41.896667][ T4115] netlink: 2 bytes leftover after parsing attributes in process `syz.4.179'. [ 41.905646][ T4115] team0: entered promiscuous mode [ 41.911245][ T4115] team_slave_0: entered promiscuous mode [ 41.917209][ T4115] team_slave_1: entered promiscuous mode [ 41.924077][ T4115] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.931257][ T4115] batman_adv: batadv0: Interface activated: team0 [ 41.937815][ T4115] batman_adv: batadv0: Interface deactivated: team0 [ 41.944557][ T4115] batman_adv: batadv0: Removing interface: team0 [ 41.958391][ T4115] bridge0: port 3(team0) entered blocking state [ 41.964860][ T4115] bridge0: port 3(team0) entered disabled state [ 41.967022][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.971319][ T4115] team0: entered allmulticast mode [ 42.007663][ T4115] team_slave_0: entered allmulticast mode [ 42.013485][ T4115] team_slave_1: entered allmulticast mode [ 42.021997][ T4115] bridge0: port 3(team0) entered blocking state [ 42.028339][ T4115] bridge0: port 3(team0) entered forwarding state [ 42.182795][ T4135] loop4: detected capacity change from 0 to 512 [ 42.204053][ T4135] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.265511][ T4135] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.281823][ T4135] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.291135][ T4135] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.187: corrupted inode contents [ 42.303642][ T4135] EXT4-fs (loop4): Remounting filesystem read-only [ 42.310379][ T4135] EXT4-fs (loop4): 1 truncate cleaned up [ 42.316401][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.327137][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.347431][ T4151] loop5: detected capacity change from 0 to 2048 [ 42.383236][ T4151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.413567][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 42.438108][ T4151] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.189: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 42.438962][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.455165][ T4151] EXT4-fs (loop5): Remounting filesystem read-only [ 42.473654][ T4158] loop1: detected capacity change from 0 to 512 [ 42.503979][ T4151] xt_hashlimit: max too large, truncated to 1048576 [ 42.549305][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.559957][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.647903][ T4163] infiniband syz!: set active [ 42.652663][ T4163] infiniband syz!: added team_slave_0 [ 42.683223][ T4163] RDS/IB: syz!: added [ 42.691440][ T4163] smc: adding ib device syz! with port count 1 [ 42.707544][ T4163] smc: ib device syz! port 1 has pnetid [ 42.776851][ T4175] tipc: Started in network mode [ 42.781886][ T4175] tipc: Node identity 22ca05c133, cluster identity 4711 [ 42.789004][ T4175] tipc: Enabled bearer , priority 0 [ 42.798828][ T4175] syzkaller0: MTU too low for tipc bearer [ 42.804681][ T4175] tipc: Disabling bearer [ 42.860686][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 42.860700][ T29] audit: type=1400 audit(1750257507.940:460): avc: denied { accept } for pid=4178 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.030467][ T29] audit: type=1326 audit(1750257508.110:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.053892][ T29] audit: type=1326 audit(1750257508.110:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.077343][ T29] audit: type=1326 audit(1750257508.110:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.085612][ T4187] loop1: detected capacity change from 0 to 512 [ 43.100547][ T29] audit: type=1326 audit(1750257508.110:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.130214][ T29] audit: type=1326 audit(1750257508.110:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.153488][ T29] audit: type=1326 audit(1750257508.110:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.176837][ T29] audit: type=1326 audit(1750257508.110:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.200148][ T29] audit: type=1326 audit(1750257508.110:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.200699][ T4187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.314694][ T29] audit: type=1326 audit(1750257508.110:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4186 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 43.325955][ T4187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.367343][ T4187] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.473677][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.512856][ T4205] loop2: detected capacity change from 0 to 1024 [ 43.522466][ T4210] netlink: 'syz.1.209': attribute type 39 has an invalid length. [ 43.566418][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.613250][ T4205] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.655862][ T4205] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 43.666087][ T4205] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 43.700034][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.766353][ T4224] loop2: detected capacity change from 0 to 1024 [ 43.785697][ T4226] netlink: 'syz.1.216': attribute type 10 has an invalid length. [ 43.794334][ T4224] ext4: Unknown parameter 'nouser_xattr' [ 43.808388][ T4226] batman_adv: batadv0: Adding interface: team0 [ 43.814685][ T4226] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.839970][ T4226] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 43.885720][ T4231] netlink: 'syz.1.216': attribute type 10 has an invalid length. [ 43.893579][ T4231] netlink: 2 bytes leftover after parsing attributes in process `syz.1.216'. [ 43.915720][ T4231] team0: entered promiscuous mode [ 43.920891][ T4231] team_slave_0: entered promiscuous mode [ 43.926700][ T4231] team_slave_1: entered promiscuous mode [ 43.935454][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.942654][ T4231] batman_adv: batadv0: Interface activated: team0 [ 43.949227][ T4231] batman_adv: batadv0: Interface deactivated: team0 [ 43.956139][ T4231] batman_adv: batadv0: Removing interface: team0 [ 43.972810][ T4231] bridge0: port 3(team0) entered blocking state [ 43.979387][ T4231] bridge0: port 3(team0) entered disabled state [ 44.010375][ T4231] team0: entered allmulticast mode [ 44.020390][ T4231] team_slave_0: entered allmulticast mode [ 44.026297][ T4231] team_slave_1: entered allmulticast mode [ 44.040034][ T4231] bridge0: port 3(team0) entered blocking state [ 44.046407][ T4231] bridge0: port 3(team0) entered forwarding state [ 44.053323][ T4214] sch_fq: defrate 0 ignored. [ 44.101164][ T4239] loop1: detected capacity change from 0 to 256 [ 44.109032][ T4241] loop2: detected capacity change from 0 to 512 [ 44.121175][ T4239] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.156955][ T4241] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 44.188644][ T4241] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 44.236324][ T4244] loop1: detected capacity change from 0 to 128 [ 44.447593][ T4254] wireguard0: entered promiscuous mode [ 44.453166][ T4254] wireguard0: entered allmulticast mode [ 44.788744][ T4264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 44.862381][ T4264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4264 comm=syz.2.228 [ 45.062857][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 45.094337][ T4273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 45.094674][ T4279] loop1: detected capacity change from 0 to 512 [ 45.137421][ T4279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.194239][ T4284] loop2: detected capacity change from 0 to 1024 [ 45.201184][ T4279] EXT4-fs (loop1): 1 truncate cleaned up [ 45.207549][ T4279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.221911][ T4282] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 45.229796][ T4282] netlink: 224 bytes leftover after parsing attributes in process `syz.4.237'. [ 45.243950][ T4284] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.323807][ T4284] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.334934][ T4284] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.348027][ T4287] loop4: detected capacity change from 0 to 512 [ 45.348500][ T4284] JBD2: no valid journal superblock found [ 45.360402][ T4284] EXT4-fs (loop2): Could not load journal inode [ 45.390978][ T4287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.237: bg 0: block 393: padding at end of block bitmap is not set [ 45.444030][ T4287] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 45.463535][ T4287] EXT4-fs (loop4): 2 truncates cleaned up [ 45.485490][ T4287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.627845][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.783530][ T4298] loop2: detected capacity change from 0 to 512 [ 45.806063][ T4300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 45.829690][ T4298] EXT4-fs: Ignoring removed i_version option [ 45.844231][ T4298] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.851075][ T4298] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.240: bg 0: block 131: padding at end of block bitmap is not set [ 45.867683][ T4298] EXT4-fs (loop2): Remounting filesystem read-only [ 45.874344][ T4298] EXT4-fs (loop2): 1 truncate cleaned up [ 45.880502][ T4298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.909349][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.047724][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.296481][ T4321] loop1: detected capacity change from 0 to 512 [ 46.418359][ T4321] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 46.660836][ T4329] loop1: detected capacity change from 0 to 512 [ 46.715637][ T4329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.756493][ T4329] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.783885][ T4335] netlink: 'syz.2.251': attribute type 12 has an invalid length. [ 46.824888][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.249: corrupted inode contents [ 46.859896][ T4339] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.249: mark_inode_dirty error [ 46.881191][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.249: corrupted inode contents [ 46.920156][ T4339] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.249: mark_inode_dirty error [ 46.948527][ T4339] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.249: mark inode dirty (error -117) [ 46.986312][ T4339] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 47.129980][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.254975][ T4360] loop9: detected capacity change from 0 to 7 [ 47.264959][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.274005][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.281970][ T3718] loop9: unable to read partition table [ 47.288156][ T4360] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.296132][ T4360] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.304150][ T4360] loop9: unable to read partition table [ 47.311147][ T4360] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 47.311147][ T4360] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 47.325662][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.333836][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.341768][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.355920][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.365081][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.385694][ T3718] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.488915][ T4371] loop4: detected capacity change from 0 to 2048 [ 47.504776][ T4372] loop1: detected capacity change from 0 to 2048 [ 47.512065][ T4372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.522744][ T4371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.583808][ T4372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.614728][ T4372] EXT4-fs error (device loop1): ext4_read_inline_dir:1502: inode #12: block 5: comm syz.1.261: path /52/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 47.649389][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 47.668672][ T4372] EXT4-fs (loop1): Remounting filesystem read-only [ 47.945774][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.057066][ T4400] loop2: detected capacity change from 0 to 512 [ 48.068682][ T4400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.129914][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.162572][ T4400] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.395377][ T4408] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 48.490314][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.630180][ T4421] netlink: 32 bytes leftover after parsing attributes in process `syz.5.280'. [ 48.722370][ T4427] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.795864][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 48.795953][ T29] audit: type=1400 audit(1750257513.880:595): avc: denied { create } for pid=4428 comm="syz.5.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 48.882320][ T4423] loop2: detected capacity change from 0 to 764 [ 48.900817][ T29] audit: type=1400 audit(1750257513.980:596): avc: denied { mount } for pid=4422 comm="syz.2.281" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.933835][ T4423] rock: directory entry would overflow storage [ 48.940064][ T4423] rock: sig=0x5850, size=36, remaining=7 [ 48.956483][ T29] audit: type=1400 audit(1750257514.040:597): avc: denied { lock } for pid=4437 comm="syz.5.286" path="socket:[7417]" dev="sockfs" ino=7417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 49.127289][ T29] audit: type=1400 audit(1750257514.130:598): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.166173][ T29] audit: type=1400 audit(1750257514.250:599): avc: denied { bind } for pid=4439 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.187055][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 49.319456][ T4444] netlink: 52 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 49.582852][ T29] audit: type=1400 audit(1750257514.660:600): avc: denied { write } for pid=4446 comm="syz.4.290" lport=47966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.606291][ T29] audit: type=1400 audit(1750257514.660:601): avc: denied { setopt } for pid=4446 comm="syz.4.290" lport=47966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.666463][ T4458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.705369][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 49.727583][ T4458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.782239][ T4468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.805509][ T4468] bond1: (slave bond2): Enslaving as an active interface with an up link [ 49.823464][ T4458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.857574][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 49.893597][ T4458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.920666][ T4462] bond1 (unregistering): (slave bond2): Releasing backup interface [ 49.946364][ T4462] bond1 (unregistering): Released all slaves [ 49.979370][ T4458] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.992342][ T4458] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.014630][ T4458] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.040029][ T4458] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.135183][ T4498] vlan2: entered allmulticast mode [ 50.192284][ T4502] loop4: detected capacity change from 0 to 512 [ 50.199420][ T4503] loop0: detected capacity change from 0 to 1024 [ 50.216920][ T4505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.244143][ T4502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.302: bg 0: block 5: invalid block bitmap [ 50.255792][ T4503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.271543][ T4505] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.282112][ T4502] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 50.311860][ T4502] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.302: invalid indirect mapped block 3 (level 2) [ 50.330617][ T4502] EXT4-fs (loop4): 2 truncates cleaned up [ 50.345708][ T4502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.346534][ T4505] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.398126][ T29] audit: type=1400 audit(1750257515.480:602): avc: denied { connect } for pid=4501 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.417610][ T29] audit: type=1400 audit(1750257515.480:603): avc: denied { ioctl } for pid=4501 comm="syz.4.302" path="socket:[8483]" dev="sockfs" ino=8483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.442053][ T29] audit: type=1400 audit(1750257515.480:604): avc: denied { write } for pid=4501 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.483020][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.484416][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.507983][ T4505] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.538870][ T4513] loop4: detected capacity change from 0 to 2048 [ 50.587019][ T4513] EXT4-fs (loop4): failed to initialize system zone (-117) [ 50.601496][ T4513] EXT4-fs (loop4): mount failed [ 50.615299][ T4505] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.631252][ T4505] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662505][ T4520] loop5: detected capacity change from 0 to 512 [ 50.675906][ T4505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.696139][ T4520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.714026][ T4520] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.755256][ T4505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.789908][ T4503] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.301: Allocating blocks 497-513 which overlap fs metadata [ 50.824280][ T4520] netlink: 52 bytes leftover after parsing attributes in process `syz.5.306'. [ 50.889248][ T4500] EXT4-fs (loop0): pa ffff888106e82070: logic 128, phys. 273, len 15 [ 50.897547][ T4500] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 50.909326][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.961184][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.971882][ T4544] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.076629][ T4544] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.184976][ T4562] loop4: detected capacity change from 0 to 1024 [ 51.199833][ T4565] loop0: detected capacity change from 0 to 512 [ 51.204365][ T4562] ext4: Unknown parameter 'nouser_xattr' [ 51.235913][ T4565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.316: bg 0: block 5: invalid block bitmap [ 51.251140][ T4544] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.307721][ T4565] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.344671][ T4544] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.368157][ T4565] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.316: invalid indirect mapped block 3 (level 2) [ 51.368449][ T4565] EXT4-fs (loop0): 2 truncates cleaned up [ 51.368843][ T4565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.422637][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.472174][ T4544] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.478400][ T4544] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.497809][ T4544] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.501233][ T4544] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.620031][ T4592] loop5: detected capacity change from 0 to 1024 [ 51.666299][ T4591] loop4: detected capacity change from 0 to 512 [ 51.673140][ T4591] EXT4-fs: Ignoring removed bh option [ 51.688068][ T4592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.769562][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.804547][ T4591] EXT4-fs: Ignoring removed bh option [ 51.814797][ T4591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.825910][ T4591] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 51.867092][ T4591] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.905659][ T4591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.935009][ T4591] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.995277][ T4591] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 52.004564][ T4603] loop0: detected capacity change from 0 to 512 [ 52.043516][ T4591] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.319: Invalid block bitmap block 0 in block_group 0 [ 52.097528][ T4591] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 52.108641][ T4603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.138076][ T4607] loop5: detected capacity change from 0 to 1024 [ 52.145189][ T4591] EXT4-fs (loop4): 1 orphan inode deleted [ 52.171788][ T4591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.206590][ T4607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.219129][ T4603] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.264377][ T4603] netlink: 52 bytes leftover after parsing attributes in process `syz.0.321'. [ 52.314921][ T4618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.343223][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.354463][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.376770][ T4618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.438014][ T4618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.488117][ T4607] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.322: Allocating blocks 497-513 which overlap fs metadata [ 52.530584][ T4606] EXT4-fs (loop5): pa ffff888106df0620: logic 128, phys. 273, len 15 [ 52.538823][ T4606] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 52.572302][ T4618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.591419][ T4642] loop4: detected capacity change from 0 to 1024 [ 52.600340][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.625158][ T4642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.632015][ T4642] EXT4-fs: Ignoring removed bh option [ 52.680852][ T4618] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.681980][ T4642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.704562][ T4618] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.716642][ T4618] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.721247][ T4650] loop0: detected capacity change from 0 to 512 [ 52.728891][ T4618] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.742026][ T4650] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.795949][ T4650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.827821][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.856311][ T4650] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.908673][ T4650] EXT4-fs (loop0): 1 truncate cleaned up [ 52.915472][ T4650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.939397][ T4663] loop1: detected capacity change from 0 to 1024 [ 52.949664][ T4663] ext4: Unknown parameter 'nouser_xattr' [ 52.959579][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.068593][ T4673] loop4: detected capacity change from 0 to 1024 [ 53.117573][ T4673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.173553][ T4673] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.184642][ T4673] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.247128][ T4685] serio: Serial port ptm0 [ 53.261367][ T4673] JBD2: no valid journal superblock found [ 53.267243][ T4673] EXT4-fs (loop4): Could not load journal inode [ 53.616595][ T4707] loop4: detected capacity change from 0 to 1024 [ 53.664951][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.743168][ T4707] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.338: Allocating blocks 449-513 which overlap fs metadata [ 53.782832][ T4719] loop1: detected capacity change from 0 to 1024 [ 53.868999][ T4719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.908084][ T4723] syzkaller0: entered promiscuous mode [ 53.913631][ T4723] syzkaller0: entered allmulticast mode [ 53.974344][ T4719] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.340: Allocating blocks 497-513 which overlap fs metadata [ 54.000028][ T4726] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.030900][ T4716] EXT4-fs (loop1): pa ffff888106e821c0: logic 128, phys. 273, len 15 [ 54.039182][ T4716] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 54.054738][ T4706] EXT4-fs (loop4): pa ffff888106e82230: logic 48, phys. 177, len 21 [ 54.062787][ T4706] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 54.076345][ T4726] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.097006][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.139873][ T4726] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.161558][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 54.161575][ T29] audit: type=1326 audit(1750257519.240:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.191114][ T29] audit: type=1326 audit(1750257519.240:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.214435][ T29] audit: type=1326 audit(1750257519.240:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.237773][ T29] audit: type=1326 audit(1750257519.240:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.261034][ T29] audit: type=1326 audit(1750257519.240:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.284297][ T29] audit: type=1326 audit(1750257519.240:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.294731][ T4738] vhci_hcd: invalid port number 128 [ 54.307570][ T29] audit: type=1326 audit(1750257519.240:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.336100][ T29] audit: type=1326 audit(1750257519.240:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.359384][ T29] audit: type=1326 audit(1750257519.240:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.382778][ T29] audit: type=1326 audit(1750257519.240:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9058ce929 code=0x7ffc0000 [ 54.412262][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.425607][ T4726] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.488048][ T4744] loop1: detected capacity change from 0 to 512 [ 54.545897][ T4744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.577215][ T4744] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.602925][ T4744] netlink: 52 bytes leftover after parsing attributes in process `syz.1.346'. [ 54.672759][ T4752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.674224][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.683315][ T4752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.757192][ T4752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.767601][ T4752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.817154][ T4752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.827578][ T4752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.844801][ T4757] loop2: detected capacity change from 0 to 512 [ 54.851844][ T4757] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.859635][ T4757] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.879530][ T4757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04ec11c, mo2=0002] [ 54.887754][ T4757] System zones: 1-12 [ 54.892544][ T4757] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.355: corrupted in-inode xattr: e_value size too large [ 54.907362][ T4757] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.355: couldn't read orphan inode 15 (err -117) [ 54.919958][ T4757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.936309][ T4752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.946671][ T4752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.976023][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.004955][ T4767] loop2: detected capacity change from 0 to 1024 [ 55.018837][ T4752] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.027182][ T4752] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.039238][ T4752] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.047595][ T4752] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.060110][ T4752] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.068506][ T4752] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.080713][ T4752] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.089076][ T4752] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.131100][ T4767] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.358: Allocating blocks 497-513 which overlap fs metadata [ 55.152156][ T4766] EXT4-fs (loop2): pa ffff888106e82230: logic 128, phys. 273, len 15 [ 55.160467][ T4766] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 55.247411][ T4778] loop1: detected capacity change from 0 to 1024 [ 55.266536][ T4779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 55.289738][ T4778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.359239][ T4778] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.370271][ T4778] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.420641][ T4778] JBD2: no valid journal superblock found [ 55.426476][ T4778] EXT4-fs (loop1): Could not load journal inode [ 55.881510][ T4726] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.906743][ T4726] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.930943][ T4726] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.955916][ T4726] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.308119][ T4790] loop2: detected capacity change from 0 to 512 [ 56.365653][ T4790] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.382333][ T4797] loop5: detected capacity change from 0 to 512 [ 56.423928][ T4790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.365'. [ 56.434692][ T4797] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.482016][ T4797] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.366: corrupted inode contents [ 56.501335][ T4804] netlink: 'syz.1.369': attribute type 4 has an invalid length. [ 56.510178][ T4797] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.366: mark_inode_dirty error [ 56.529039][ T4804] netlink: 'syz.1.369': attribute type 4 has an invalid length. [ 56.538191][ T4806] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 56.566639][ T4797] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.366: corrupted inode contents [ 56.587005][ T4797] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.366: mark_inode_dirty error [ 56.599367][ T4797] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.366: mark inode dirty (error -117) [ 56.621837][ T4797] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 57.243382][ T4816] loop2: detected capacity change from 0 to 512 [ 57.257495][ T4816] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.325140][ T4820] syzkaller0: entered promiscuous mode [ 57.330794][ T4820] syzkaller0: entered allmulticast mode [ 57.350511][ T4821] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.372: corrupted inode contents [ 57.387194][ T4821] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm syz.2.372: mark_inode_dirty error [ 57.427959][ T4821] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.372: corrupted inode contents [ 57.468117][ T4821] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.372: mark_inode_dirty error [ 57.523304][ T4821] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.372: mark inode dirty (error -117) [ 57.543310][ T4821] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 57.654766][ T4837] loop2: detected capacity change from 0 to 128 [ 57.840141][ T4837] syz.2.380: attempt to access beyond end of device [ 57.840141][ T4837] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 58.057897][ T4850] loop4: detected capacity change from 0 to 256 [ 58.071994][ T4850] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.113373][ T4852] lo speed is unknown, defaulting to 1000 [ 58.127551][ T4852] lo speed is unknown, defaulting to 1000 [ 58.136223][ T4852] lo speed is unknown, defaulting to 1000 [ 58.143585][ T4852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.153071][ T4852] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 58.176717][ T4852] lo speed is unknown, defaulting to 1000 [ 58.185530][ T4852] lo speed is unknown, defaulting to 1000 [ 58.197417][ T4852] lo speed is unknown, defaulting to 1000 [ 58.223542][ T4852] lo speed is unknown, defaulting to 1000 [ 58.239729][ T4852] lo speed is unknown, defaulting to 1000 [ 58.312882][ T4866] netlink: 72 bytes leftover after parsing attributes in process `syz.2.392'. [ 58.412462][ T4871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 58.457322][ T4871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4871 comm=syz.1.393 [ 59.118784][ T4890] netlink: 'syz.4.399': attribute type 39 has an invalid length. [ 59.135516][ T4887] lo speed is unknown, defaulting to 1000 [ 59.173280][ T4892] loop0: detected capacity change from 0 to 1024 [ 59.180215][ T4892] EXT4-fs: Ignoring removed orlov option [ 59.307041][ T4898] loop4: detected capacity change from 0 to 512 [ 59.328984][ T4898] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.342065][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 59.342078][ T29] audit: type=1400 audit(1750257524.420:761): avc: denied { mounton } for pid=4897 comm="syz.4.401" path="/102/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.520913][ T4905] loop4: detected capacity change from 0 to 2048 [ 59.528272][ T4905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.548413][ T4905] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 5: comm syz.4.402: path /103/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 59.570194][ T4905] EXT4-fs (loop4): Remounting filesystem read-only [ 59.742763][ T29] audit: type=1326 audit(1750257524.820:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.5.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2350dee929 code=0x0 [ 59.814995][ T29] audit: type=1400 audit(1750257524.900:763): avc: denied { firmware_load } for pid=4908 comm="syz.1.416" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 59.958180][ T4915] loop2: detected capacity change from 0 to 1024 [ 60.190489][ T29] audit: type=1400 audit(1750257525.260:764): avc: denied { setopt } for pid=4923 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.211671][ T4926] loop0: detected capacity change from 0 to 128 [ 60.225774][ T4915] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.406: Allocating blocks 497-513 which overlap fs metadata [ 60.226249][ T4928] loop1: detected capacity change from 0 to 512 [ 60.262680][ T4928] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.411: casefold flag without casefold feature [ 60.284093][ T4928] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.411: couldn't read orphan inode 15 (err -117) [ 60.308629][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 60.328740][ T4914] EXT4-fs (loop2): pa ffff888106df0690: logic 128, phys. 273, len 15 [ 60.336946][ T4914] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 60.347495][ T4928] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 60.366138][ T4928] bridge0: port 3(team0) entered disabled state [ 60.373219][ T4928] team0: left allmulticast mode [ 60.379297][ T4928] team_slave_0: left allmulticast mode [ 60.384814][ T4928] team_slave_1: left allmulticast mode [ 60.390330][ T4928] team0: left promiscuous mode [ 60.396531][ T4928] team_slave_0: left promiscuous mode [ 60.402012][ T4928] team_slave_1: left promiscuous mode [ 60.407692][ T4928] bridge0: port 3(team0) entered disabled state [ 60.417737][ T4928] batman_adv: batadv0: Adding interface: team0 [ 60.424145][ T4928] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.449372][ T4928] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 60.461316][ T4932] tipc: Started in network mode [ 60.466388][ T4932] tipc: Node identity 7ae4310a3571, cluster identity 4711 [ 60.473553][ T4932] tipc: Enabled bearer , priority 0 [ 60.486684][ T4931] tipc: Resetting bearer [ 60.517533][ T4931] tipc: Disabling bearer [ 62.517128][ T4939] loop5: detected capacity change from 0 to 256 [ 62.517978][ T4945] loop4: detected capacity change from 0 to 1024 [ 62.567451][ T29] audit: type=1400 audit(1750257527.640:765): avc: denied { prog_load } for pid=4940 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.586521][ T29] audit: type=1400 audit(1750257527.640:766): avc: denied { bpf } for pid=4940 comm="syz.1.417" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.607047][ T29] audit: type=1400 audit(1750257527.640:767): avc: denied { perfmon } for pid=4940 comm="syz.1.417" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.627902][ T29] audit: type=1400 audit(1750257527.640:768): avc: denied { prog_run } for pid=4940 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.721831][ T4951] lo speed is unknown, defaulting to 1000 [ 62.771844][ T29] audit: type=1400 audit(1750257527.690:769): avc: denied { open } for pid=4944 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.791033][ T29] audit: type=1400 audit(1750257527.690:770): avc: denied { kernel } for pid=4944 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.836386][ T4945] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.415: Allocating blocks 497-513 which overlap fs metadata [ 62.860778][ T4944] EXT4-fs (loop4): pa ffff888106df0690: logic 128, phys. 273, len 15 [ 62.869019][ T4944] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 62.881119][ T4962] vlan2: entered allmulticast mode [ 62.978661][ T4972] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 63.092848][ T4982] loop1: detected capacity change from 0 to 512 [ 63.114227][ T4982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.165825][ T4988] loop4: detected capacity change from 0 to 128 [ 63.190685][ T4982] EXT4-fs (loop1): 1 truncate cleaned up [ 63.570162][ T5009] loop4: detected capacity change from 0 to 1024 [ 63.623066][ T5011] loop0: detected capacity change from 0 to 1024 [ 63.648551][ T5011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.662658][ T5011] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.675968][ T5011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 63.711449][ T5018] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.746544][ T5011] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.444: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.782816][ T5011] EXT4-fs (loop0): Remounting filesystem read-only [ 63.789777][ T5011] EXT4-fs (loop0): 1 orphan inode deleted [ 63.987400][ T5052] netlink: 79 bytes leftover after parsing attributes in process `syz.1.457'. [ 64.033824][ T5052] netlink: 79 bytes leftover after parsing attributes in process `syz.1.457'. [ 64.080885][ T5059] SELinux: syz.4.460 (5059) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.128023][ T36] kernel write not supported for file /219/attr/exec (pid: 36 comm: kworker/1:1) [ 64.269051][ T5063] lo speed is unknown, defaulting to 1000 [ 64.336096][ T5068] syzkaller0: entered promiscuous mode [ 64.341631][ T5068] syzkaller0: entered allmulticast mode [ 64.373781][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 64.373798][ T29] audit: type=1400 audit(1750257529.450:958): avc: denied { relabelfrom } for pid=5067 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.399903][ T29] audit: type=1400 audit(1750257529.450:959): avc: denied { relabelto } for pid=5067 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.458543][ T29] audit: type=1400 audit(1750257529.530:960): avc: denied { kexec_image_load } for pid=5073 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 64.465913][ T5076] loop4: detected capacity change from 0 to 2048 [ 64.575385][ T29] audit: type=1400 audit(1750257529.600:961): avc: denied { append } for pid=5079 comm="syz.0.468" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.599028][ T29] audit: type=1400 audit(1750257529.600:962): avc: denied { open } for pid=5079 comm="syz.0.468" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.622825][ T29] audit: type=1400 audit(1750257529.600:963): avc: denied { ioctl } for pid=5079 comm="syz.0.468" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.648121][ T29] audit: type=1400 audit(1750257529.610:964): avc: denied { create } for pid=5075 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.667449][ T29] audit: type=1400 audit(1750257529.610:965): avc: denied { connect } for pid=5075 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.686793][ T29] audit: type=1400 audit(1750257529.610:966): avc: denied { bind } for pid=5075 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.705909][ T29] audit: type=1400 audit(1750257529.610:967): avc: denied { write } for pid=5075 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.728019][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.741841][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.792287][ T5089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.470'. [ 65.366292][ T5087] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 66.248287][ T5135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.491'. [ 66.304084][ T5138] veth1_macvtap: left promiscuous mode [ 66.309847][ T5138] macsec0: entered promiscuous mode [ 66.463141][ T5150] loop2: detected capacity change from 0 to 512 [ 66.487609][ T5150] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.498: iget: bad i_size value: 38620345925642 [ 66.572604][ T5150] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.498: couldn't read orphan inode 15 (err -117) [ 66.596345][ T5159] loop0: detected capacity change from 0 to 164 [ 66.633275][ T5159] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.076357][ T1729] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 67.118379][ T1729] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 67.130942][ T1729] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.130942][ T1729] [ 67.140683][ T1729] EXT4-fs (loop2): Total free blocks count 0 [ 67.146740][ T1729] EXT4-fs (loop2): Free/Dirty block details [ 67.152687][ T1729] EXT4-fs (loop2): free_blocks=0 [ 67.157691][ T1729] EXT4-fs (loop2): dirty_blocks=16000 [ 67.157707][ T1729] EXT4-fs (loop2): Block reservation details [ 67.157719][ T1729] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 67.180227][ T1729] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 67.180255][ T1729] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.180255][ T1729] [ 67.338698][ T5184] loop4: detected capacity change from 0 to 512 [ 67.352861][ T5184] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.367435][ T5184] EXT4-fs (loop4): 1 truncate cleaned up [ 67.445008][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 67.453910][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 67.564904][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 67.707590][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 67.850773][ T5199] $Hÿ: renamed from bond0 (while UP) [ 67.858713][ T5199] $Hÿ: entered promiscuous mode [ 67.863848][ T5199] bond_slave_0: entered promiscuous mode [ 67.869628][ T5199] bond_slave_1: entered promiscuous mode [ 67.941895][ T5197] loop2: detected capacity change from 0 to 8192 [ 68.027486][ T51] kworker/u8:3 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 68.041176][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 68.041234][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.041266][ T51] Workqueue: loop4 loop_rootcg_workfn [ 68.041339][ T51] Call Trace: [ 68.041348][ T51] [ 68.041380][ T51] __dump_stack+0x1d/0x30 [ 68.041405][ T51] dump_stack_lvl+0xe8/0x140 [ 68.041433][ T51] dump_stack+0x15/0x1b [ 68.041454][ T51] dump_header+0x81/0x220 [ 68.041495][ T51] oom_kill_process+0x334/0x3f0 [ 68.041603][ T51] out_of_memory+0x979/0xb80 [ 68.041644][ T51] try_charge_memcg+0x5e6/0x9e0 [ 68.041761][ T51] charge_memcg+0x51/0xc0 [ 68.041800][ T51] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 68.041906][ T51] __read_swap_cache_async+0x1df/0x350 [ 68.041944][ T51] swap_cluster_readahead+0x376/0x3e0 [ 68.042042][ T51] shmem_swapin_folio+0x71e/0xe40 [ 68.042087][ T51] shmem_get_folio_gfp+0x26c/0xd60 [ 68.042188][ T51] ? update_curr+0x16e/0x320 [ 68.042217][ T51] ? enqueue_task_fair+0x35e/0x980 [ 68.042256][ T51] shmem_write_begin+0xa8/0x190 [ 68.042318][ T51] generic_perform_write+0x184/0x490 [ 68.042349][ T51] shmem_file_write_iter+0xc5/0xf0 [ 68.042371][ T51] lo_rw_aio+0x6ed/0x7a0 [ 68.042415][ T51] loop_process_work+0x52d/0xa60 [ 68.042483][ T51] ? __list_add_valid_or_report+0x38/0xe0 [ 68.042513][ T51] ? __pwq_activate_work+0x1ad/0x290 [ 68.042548][ T51] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 68.042638][ T51] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 68.042725][ T51] ? try_to_wake_up+0x212/0x630 [ 68.042754][ T51] loop_rootcg_workfn+0x22/0x30 [ 68.042783][ T51] process_scheduled_works+0x4ce/0x9d0 [ 68.042874][ T51] worker_thread+0x582/0x770 [ 68.042959][ T51] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 68.042982][ T51] ? schedule+0x5f/0xd0 [ 68.043011][ T51] kthread+0x486/0x510 [ 68.043107][ T51] ? finish_task_switch+0xad/0x2b0 [ 68.043128][ T51] ? __pfx_worker_thread+0x10/0x10 [ 68.043214][ T51] ? __pfx_kthread+0x10/0x10 [ 68.043294][ T51] ret_from_fork+0xdd/0x150 [ 68.043318][ T51] ? __pfx_kthread+0x10/0x10 [ 68.043365][ T51] ret_from_fork_asm+0x1a/0x30 [ 68.043394][ T51] [ 68.043402][ T51] memory: usage 307200kB, limit 307200kB, failcnt 252 [ 68.135570][ T5207] loop5: detected capacity change from 0 to 256 [ 68.136523][ T51] memory+swap: usage 307796kB, limit 9007199254740988kB, failcnt 0 [ 68.165425][ T5207] msdos: Bad value for 'tz' [ 68.166734][ T51] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 68.297854][ T51] Memory cgroup stats for /syz4: [ 68.341916][ T5209] loop1: detected capacity change from 0 to 8192 [ 68.355562][ T51] cache 176128 [ 68.358979][ T51] rss 0 [ 68.361842][ T51] shmem 0 [ 68.364935][ T51] mapped_file 0 [ 68.368522][ T51] dirty 0 [ 68.371628][ T51] writeback 167936 [ 68.375439][ T51] workingset_refault_anon 62 [ 68.380224][ T51] workingset_refault_file 5 [ 68.384803][ T51] swap 610304 [ 68.388141][ T51] swapcached 0 [ 68.391534][ T51] pgpgin 49459 [ 68.394961][ T51] pgpgout 49416 [ 68.398432][ T51] pgfault 63059 [ 68.401940][ T51] pgmajfault 47 [ 68.405532][ T51] inactive_anon 0 [ 68.409185][ T51] active_anon 0 [ 68.412668][ T51] inactive_file 176128 [ 68.416839][ T51] active_file 0 [ 68.420315][ T51] unevictable 0 [ 68.423820][ T51] hierarchical_memory_limit 314572800 [ 68.429214][ T51] hierarchical_memsw_limit 9223372036854771712 [ 68.435648][ T51] total_cache 176128 [ 68.439787][ T51] total_rss 0 [ 68.443096][ T51] total_shmem 0 [ 68.446634][ T51] total_mapped_file 0 [ 68.450639][ T51] total_dirty 0 [ 68.454152][ T51] total_writeback 167936 [ 68.458477][ T51] total_workingset_refault_anon 62 [ 68.463622][ T51] total_workingset_refault_file 5 [ 68.468714][ T51] total_swap 610304 [ 68.472543][ T51] total_swapcached 0 [ 68.476571][ T51] total_pgpgin 49459 [ 68.480479][ T51] total_pgpgout 49416 [ 68.484511][ T51] total_pgfault 63059 [ 68.488566][ T51] total_pgmajfault 47 [ 68.492584][ T51] total_inactive_anon 0 [ 68.496777][ T51] total_active_anon 0 [ 68.500815][ T51] total_inactive_file 176128 [ 68.505466][ T51] total_active_file 0 [ 68.509466][ T51] total_unevictable 0 [ 68.513550][ T51] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.512,pid=5183,uid=0 [ 68.528335][ T51] Memory cgroup out of memory: Killed process 5183 (syz.4.512) total-vm:93752kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 68.635534][ T5222] usb usb1: usbfs: process 5222 (syz.5.525) did not claim interface 0 before use [ 68.651178][ T5219] syzkaller0: entered promiscuous mode [ 68.656787][ T5219] syzkaller0: entered allmulticast mode [ 68.752570][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 68.761613][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 68.789544][ T5183] syz.4.512 (5183) used greatest stack depth: 9528 bytes left [ 68.811880][ T5230] loop2: detected capacity change from 0 to 4096 [ 68.872299][ T5230] EXT4-fs mount: 31 callbacks suppressed [ 68.872319][ T5230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.995820][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.018068][ T5184] syz.4.512 (5184) used greatest stack depth: 6784 bytes left [ 69.044585][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.187504][ T5252] loop5: detected capacity change from 0 to 8192 [ 69.199363][ T5252] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.235042][ T5260] loop2: detected capacity change from 0 to 7 [ 69.366223][ T5278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 69.400165][ T5280] 9pnet_fd: Insufficient options for proto=fd [ 69.433819][ T5284] veth1_macvtap: left promiscuous mode [ 69.439631][ T5284] macsec0: entered allmulticast mode [ 69.479008][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.542'. [ 69.608800][ T5295] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.608800][ T5295] The task syz.5.550 (5295) triggered the difference, watch for misbehavior. [ 69.691814][ T5300] bridge_slave_0: left allmulticast mode [ 69.697599][ T5300] bridge_slave_0: left promiscuous mode [ 69.703478][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.730613][ T5300] bridge_slave_1: left allmulticast mode [ 69.736532][ T5300] bridge_slave_1: left promiscuous mode [ 69.742723][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.777770][ T5280] Set syz1 is full, maxelem 65536 reached [ 69.783989][ T5300] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 69.792914][ T5300] bond_slave_0: left promiscuous mode [ 69.801056][ T5300] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 69.822291][ T5300] bond_slave_1: left promiscuous mode [ 69.851588][ T5300] team0: Port device team_slave_0 removed [ 69.867808][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 69.867824][ T29] audit: type=1400 audit(1750257534.950:1097): avc: denied { create } for pid=5303 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.921051][ T5300] team0: Port device team_slave_1 removed [ 69.949823][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.957594][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.960781][ T29] audit: type=1400 audit(1750257534.980:1098): avc: denied { setopt } for pid=5303 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.984235][ T29] audit: type=1400 audit(1750257534.980:1099): avc: denied { connect } for pid=5303 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.015965][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.023438][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.131024][ T29] audit: type=1326 audit(1750257535.210:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.158671][ T29] audit: type=1326 audit(1750257535.240:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.182093][ T29] audit: type=1326 audit(1750257535.240:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.205448][ T29] audit: type=1326 audit(1750257535.240:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.228912][ T29] audit: type=1326 audit(1750257535.240:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.252297][ T29] audit: type=1326 audit(1750257535.240:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.260721][ T5321] lo speed is unknown, defaulting to 1000 [ 70.281578][ T29] audit: type=1326 audit(1750257535.360:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a989be929 code=0x7ffc0000 [ 70.381787][ T5333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 70.425780][ T5336] loop0: detected capacity change from 0 to 512 [ 70.460660][ T5339] loop5: detected capacity change from 0 to 1024 [ 70.480829][ T5339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.496857][ T5336] EXT4-fs (loop0): 1 orphan inode deleted [ 70.519594][ T5339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.523811][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.544729][ T1729] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 70.554462][ T5336] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.574318][ T5345] syzkaller0: entered promiscuous mode [ 70.579843][ T5345] syzkaller0: entered allmulticast mode [ 70.650532][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.774244][ T5358] sock: sock_set_timeout: `syz.4.570' (pid 5358) tries to set negative timeout [ 70.822375][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.571'. [ 70.918602][ T5371] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.955873][ T5374] SELinux: failed to load policy [ 70.975454][ T5371] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.055534][ T5371] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.106015][ T5371] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.161884][ T5371] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.173163][ T5371] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.188434][ T5371] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.213149][ T5371] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.247707][ T5389] loop0: detected capacity change from 0 to 8192 [ 71.315127][ T5395] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.366498][ T5395] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.377328][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.386171][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.415422][ T5395] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.485366][ T5395] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.744158][ T5408] loop1: detected capacity change from 0 to 1024 [ 71.756537][ T5408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.807878][ T5408] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.591: Allocating blocks 497-513 which overlap fs metadata [ 71.825717][ T5407] EXT4-fs (loop1): pa ffff888106df0770: logic 128, phys. 273, len 15 [ 71.833927][ T5407] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 71.922263][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.227299][ T5417] netlink: 'syz.5.594': attribute type 39 has an invalid length. [ 72.341550][ T5422] loop5: detected capacity change from 0 to 512 [ 72.360148][ T5418] lo speed is unknown, defaulting to 1000 [ 72.392818][ T5422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.405683][ T5422] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.476890][ T5428] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #19: comm syz.5.596: corrupted inode contents [ 72.489505][ T5428] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #19: comm syz.5.596: mark_inode_dirty error [ 72.501256][ T5428] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #19: comm syz.5.596: corrupted inode contents [ 72.525937][ T5428] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.596: mark_inode_dirty error [ 72.542395][ T5428] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.596: mark inode dirty (error -117) [ 72.549970][ T5430] loop1: detected capacity change from 0 to 1024 [ 72.555769][ T5428] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 72.579033][ T5430] EXT4-fs: Ignoring removed orlov option [ 72.593202][ T5430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.660990][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.975817][ T5438] lo speed is unknown, defaulting to 1000 [ 73.112671][ T5443] netlink: 'syz.5.600': attribute type 10 has an invalid length. [ 73.120611][ T5443] team0: Device dummy0 is up. Set it down before adding it as a team port [ 73.290471][ T5452] loop0: detected capacity change from 0 to 1024 [ 73.320949][ T5452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.321312][ T5451] syzkaller1: entered promiscuous mode [ 73.338726][ T5451] syzkaller1: entered allmulticast mode [ 73.350175][ T5451] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 73.392867][ T5452] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.603: Allocating blocks 497-513 which overlap fs metadata [ 73.417677][ T5450] EXT4-fs (loop0): pa ffff888106df0770: logic 128, phys. 273, len 15 [ 73.425866][ T5450] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 73.514493][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.543920][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.280896][ T5456] delete_channel: no stack [ 74.308518][ T5470] netlink: 'syz.2.610': attribute type 39 has an invalid length. [ 74.486651][ T5479] loop0: detected capacity change from 0 to 512 [ 74.526183][ T5479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.538974][ T5479] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.617459][ T5479] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm syz.0.612: corrupted inode contents [ 74.626995][ T5395] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630189][ T5479] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #19: comm syz.0.612: mark_inode_dirty error [ 74.642512][ T5395] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.649734][ T5479] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm syz.0.612: corrupted inode contents [ 74.661467][ T5395] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.669927][ T5479] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.612: mark_inode_dirty error [ 74.681291][ T5395] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697645][ T5479] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.612: mark inode dirty (error -117) [ 74.719052][ T5479] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 74.758896][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.811615][ T5496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 74.825236][ T5498] loop5: detected capacity change from 0 to 1024 [ 74.831609][ T5496] bond1: entered promiscuous mode [ 74.838287][ T5496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.849895][ T5498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.945321][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 74.945344][ T29] audit: type=1400 audit(1750257540.030:1189): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.001363][ T5498] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.619: Allocating blocks 497-513 which overlap fs metadata [ 75.027397][ T5497] EXT4-fs (loop5): pa ffff888106e82310: logic 128, phys. 273, len 15 [ 75.035612][ T5497] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 75.122927][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.203305][ T5511] loop5: detected capacity change from 0 to 1024 [ 75.241482][ T5511] EXT4-fs: Ignoring removed orlov option [ 75.287038][ T5511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.332109][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 75.404802][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'. [ 75.505405][ T5528] batman_adv: batadv0: Adding interface: dummy0 [ 75.512208][ T5528] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.540700][ T5528] batman_adv: batadv0: Interface activated: dummy0 [ 75.551423][ T29] audit: type=1400 audit(1750257540.630:1190): avc: denied { ioctl } for pid=5527 comm="syz.1.629" path="socket:[12459]" dev="sockfs" ino=12459 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.556008][ T5528] batadv0: mtu less than device minimum [ 75.582521][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.593347][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.604175][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.614909][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.625950][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.636914][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.647737][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.658554][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.669326][ T5528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 75.870065][ T29] audit: type=1326 audit(1750257540.860:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 75.893475][ T29] audit: type=1326 audit(1750257540.860:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 75.916879][ T29] audit: type=1326 audit(1750257540.870:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 75.940265][ T29] audit: type=1326 audit(1750257540.870:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 75.963753][ T29] audit: type=1326 audit(1750257540.870:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 75.987185][ T29] audit: type=1326 audit(1750257540.870:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 76.010567][ T29] audit: type=1326 audit(1750257540.870:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 76.034004][ T29] audit: type=1326 audit(1750257540.870:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e243ae929 code=0x7ffc0000 [ 76.195964][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.209324][ T5553] netlink: 92 bytes leftover after parsing attributes in process `syz.2.643'. [ 76.272800][ T5560] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.337056][ T5560] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.425561][ T5560] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.453673][ T5570] netlink: 'syz.1.650': attribute type 4 has an invalid length. [ 76.479738][ T5570] netlink: 'syz.1.650': attribute type 4 has an invalid length. [ 76.494689][ T5560] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.556631][ T5560] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.573129][ T5560] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.586686][ T5560] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.598650][ T5560] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.633063][ T5575] tipc: Started in network mode [ 76.638090][ T5575] tipc: Node identity 4, cluster identity 4711 [ 76.644565][ T5575] tipc: Node number set to 4 [ 76.983908][ T5585] loop4: detected capacity change from 0 to 1024 [ 76.992091][ T5585] EXT4-fs: Ignoring removed orlov option [ 77.010497][ T5585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.239640][ T5595] loop5: detected capacity change from 0 to 512 [ 77.265955][ T5595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.317026][ T5595] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.657: bad orphan inode 17 [ 77.679582][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 77.727905][ T5595] EXT4-fs (loop5): Remounting filesystem read-only [ 77.734622][ T5595] ext4_test_bit(bit=16, block=4) = 1 [ 77.740026][ T5595] is_bad_inode(inode)=0 [ 77.744237][ T5595] NEXT_ORPHAN(inode)=2147418128 [ 77.749106][ T5595] max_ino=32 [ 77.752456][ T5595] i_nlink=0 [ 77.794530][ T5595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.817988][ T5609] loop2: detected capacity change from 0 to 512 [ 77.855200][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.880301][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.890001][ T5609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.890364][ T5613] netlink: 96 bytes leftover after parsing attributes in process `syz.0.665'. [ 77.903436][ T5609] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.040438][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.141846][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.306591][ T5638] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.338441][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 78.366399][ T5638] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.435750][ T5638] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.486829][ T5638] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.523536][ T5656] loop5: detected capacity change from 0 to 1024 [ 78.531993][ T5656] EXT4-fs: Ignoring removed orlov option [ 78.567520][ T5656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.742898][ T5665] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 78.769756][ T5638] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.784058][ T5638] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.800525][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 78.833339][ T5638] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.847905][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 78.857491][ T5666] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 78.870117][ T5638] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.898401][ T5665] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 78.913170][ T5665] bond1 (unregistering): Released all slaves [ 79.135303][ T5684] netlink: 'syz.4.690': attribute type 3 has an invalid length. [ 79.143812][ T5684] netlink: 'syz.4.690': attribute type 3 has an invalid length. [ 79.825903][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.958902][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 79.958919][ T29] audit: type=1400 audit(1750257545.040:1874): avc: denied { prog_load } for pid=5708 comm="syz.5.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.984194][ T29] audit: type=1400 audit(1750257545.040:1875): avc: denied { bpf } for pid=5708 comm="syz.5.700" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.006581][ T5697] netlink: 80 bytes leftover after parsing attributes in process `syz.0.693'. [ 80.094709][ T5712] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.100307][ T29] audit: type=1400 audit(1750257545.130:1876): avc: denied { open } for pid=5700 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.123780][ T29] audit: type=1400 audit(1750257545.130:1877): avc: denied { perfmon } for pid=5700 comm="syz.4.697" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.144686][ T29] audit: type=1400 audit(1750257545.130:1878): avc: denied { kernel } for pid=5700 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.164166][ T29] audit: type=1400 audit(1750257545.140:1879): avc: denied { prog_load } for pid=5700 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.183161][ T29] audit: type=1400 audit(1750257545.140:1880): avc: denied { bpf } for pid=5700 comm="syz.4.697" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.203734][ T29] audit: type=1400 audit(1750257545.140:1881): avc: denied { map_create } for pid=5700 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.222895][ T29] audit: type=1400 audit(1750257545.140:1882): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.247143][ T29] audit: type=1400 audit(1750257545.140:1883): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.551940][ T5712] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.648875][ T5712] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.661302][ T5722] netlink: 100 bytes leftover after parsing attributes in process `syz.0.705'. [ 80.723395][ T5712] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.747062][ T5728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 80.765478][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 80.782424][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'. [ 80.792949][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.818090][ T5728] bridge_slave_1 (unregistering): left allmulticast mode [ 80.825306][ T5728] bridge_slave_1 (unregistering): left promiscuous mode [ 80.832291][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.877113][ T5712] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.897643][ T5712] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.921306][ T5734] loop2: detected capacity change from 0 to 1024 [ 80.947275][ T5734] EXT4-fs: Ignoring removed orlov option [ 80.957680][ T5712] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.977547][ T5712] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.990473][ T5734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.232460][ T5736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 81.309867][ T5709] lo speed is unknown, defaulting to 1000 [ 81.328302][ T5745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.384814][ T5745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.857766][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.188565][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 82.272402][ T5783] loop0: detected capacity change from 0 to 1024 [ 82.308261][ T5783] EXT4-fs: Ignoring removed orlov option [ 82.331989][ T5783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.574252][ T5796] mmap: syz.4.728 (5796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.017549][ T5806] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.252838][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.260204][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.283571][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.380306][ T5813] tipc: Enabled bearer , priority 0 [ 83.389185][ T5812] tipc: Resetting bearer [ 83.410778][ T5812] tipc: Disabling bearer [ 83.422575][ T5816] netlink: 'syz.0.735': attribute type 6 has an invalid length. [ 83.622955][ T5827] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.742'. [ 83.810449][ T5834] tls_set_device_offload_rx: netdev not found [ 83.811064][ T5836] loop2: detected capacity change from 0 to 1024 [ 83.844780][ T5836] EXT4-fs: Ignoring removed orlov option [ 83.855290][ T5836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.079787][ T5842] loop5: detected capacity change from 0 to 1024 [ 84.119862][ T5842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.137650][ T5842] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 84.168920][ T5842] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 84.181508][ T5842] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.181508][ T5842] [ 84.191295][ T5842] EXT4-fs (loop5): Total free blocks count 0 [ 84.197393][ T5842] EXT4-fs (loop5): Free/Dirty block details [ 84.203446][ T5842] EXT4-fs (loop5): free_blocks=68451041280 [ 84.208224][ T5853] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 84.209322][ T5842] EXT4-fs (loop5): dirty_blocks=80 [ 84.221580][ T5853] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.221580][ T5853] [ 84.226676][ T5842] EXT4-fs (loop5): Block reservation details [ 84.288102][ T5856] loop4: detected capacity change from 0 to 128 [ 84.307470][ T5856] EXT4-fs: Ignoring removed nobh option [ 84.317315][ T5856] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.349044][ T5856] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.460558][ T5863] pim6reg1: entered promiscuous mode [ 84.466082][ T5863] pim6reg1: entered allmulticast mode [ 84.475075][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.697987][ T5878] loop4: detected capacity change from 0 to 1024 [ 84.738852][ T5878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.807438][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.828915][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.860604][ T5885] bridge: RTM_NEWNEIGH with invalid ether address [ 84.965236][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 84.965298][ T29] audit: type=1400 audit(1750257550.050:2726): avc: denied { open } for pid=5892 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.990796][ T29] audit: type=1400 audit(1750257550.050:2727): avc: denied { perfmon } for pid=5892 comm="syz.5.769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.011649][ T29] audit: type=1400 audit(1750257550.050:2728): avc: denied { kernel } for pid=5892 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.083909][ T29] audit: type=1400 audit(1750257550.080:2729): avc: denied { prog_load } for pid=5892 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.103122][ T29] audit: type=1400 audit(1750257550.080:2730): avc: denied { bpf } for pid=5892 comm="syz.5.769" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.123666][ T29] audit: type=1400 audit(1750257550.080:2731): avc: denied { perfmon } for pid=5892 comm="syz.5.769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.144997][ T29] audit: type=1400 audit(1750257550.120:2732): avc: denied { map_create } for pid=5892 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.164178][ T29] audit: type=1400 audit(1750257550.120:2733): avc: denied { perfmon } for pid=5892 comm="syz.5.769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.171905][ T5901] loop0: detected capacity change from 0 to 512 [ 85.185111][ T29] audit: type=1400 audit(1750257550.130:2734): avc: denied { map_read map_write } for pid=5892 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.185142][ T29] audit: type=1400 audit(1750257550.130:2735): avc: denied { prog_load } for pid=5892 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.262453][ T5905] loop5: detected capacity change from 0 to 2048 [ 85.273658][ T5901] EXT4-fs: Ignoring removed oldalloc option [ 85.282918][ T5905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.319310][ T5901] EXT4-fs: inline encryption not supported [ 85.327348][ T5905] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.773: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 85.346345][ T5901] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 85.355016][ T5905] EXT4-fs (loop5): Remounting filesystem read-only [ 85.362929][ T5901] EXT4-fs (loop0): 1 truncate cleaned up [ 85.373991][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.487582][ T5914] loop4: detected capacity change from 0 to 1024 [ 85.510015][ T5914] EXT4-fs: Ignoring removed orlov option [ 85.531929][ T5914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.577514][ T3697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.593446][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.682403][ T5924] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 85.692567][ T5924] batman_adv: batadv0: Interface deactivated: dummy0 [ 85.700588][ T5924] batman_adv: batadv0: Removing interface: dummy0 [ 85.700825][ T5923] loop2: detected capacity change from 0 to 1024 [ 85.715504][ T5923] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.722286][ T5924] team0: Port device dummy0 added [ 85.726509][ T5923] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.746091][ T5924] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 85.760143][ T5923] JBD2: no valid journal superblock found [ 85.765436][ T5924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.765983][ T5923] EXT4-fs (loop2): Could not load journal inode [ 85.779957][ T5921] SELinux: failed to load policy [ 85.786800][ T5924] team0: Failed to send options change via netlink (err -105) [ 85.820206][ T5924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.821512][ T5923] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 85.845261][ T5924] team0: Port device dummy0 removed [ 85.855729][ T5924] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.915573][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.780'. [ 85.924517][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.780'. [ 85.933435][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.780'. [ 85.955844][ T5933] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 85.965973][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.973224][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.984854][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.780'. [ 85.997221][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 86.003558][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.013188][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.020603][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.027696][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.048242][ T5933] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.063491][ T5934] hsr_slave_0 (unregistering): left promiscuous mode [ 86.083992][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 86.093009][ T5933] bridge_slave_1: left allmulticast mode [ 86.098734][ T5933] bridge_slave_1: left promiscuous mode [ 86.104510][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.115602][ T5933] bridge_slave_0: left promiscuous mode [ 86.121454][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.132750][ T5933] bond0: (slave bridge0): Releasing backup interface [ 86.170710][ T5917] ================================================================== [ 86.178876][ T5917] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 86.187020][ T5917] [ 86.189367][ T5917] write to 0xffff8881039fdfa8 of 8 bytes by task 5914 on cpu 1: [ 86.197032][ T5917] filemap_splice_read+0x47e/0x6b0 [ 86.202201][ T5917] ext4_file_splice_read+0x8f/0xb0 [ 86.207350][ T5917] splice_direct_to_actor+0x26c/0x680 [ 86.212756][ T5917] do_splice_direct+0xda/0x150 [ 86.217557][ T5917] do_sendfile+0x380/0x650 [ 86.222007][ T5917] __x64_sys_sendfile64+0x105/0x150 [ 86.227240][ T5917] x64_sys_call+0xb39/0x2fb0 [ 86.231861][ T5917] do_syscall_64+0xd2/0x200 [ 86.236405][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.242331][ T5917] [ 86.244676][ T5917] write to 0xffff8881039fdfa8 of 8 bytes by task 5917 on cpu 0: [ 86.252326][ T5917] filemap_splice_read+0x47e/0x6b0 [ 86.257487][ T5917] ext4_file_splice_read+0x8f/0xb0 [ 86.262639][ T5917] splice_direct_to_actor+0x26c/0x680 [ 86.268055][ T5917] do_splice_direct+0xda/0x150 [ 86.272865][ T5917] do_sendfile+0x380/0x650 [ 86.277325][ T5917] __x64_sys_sendfile64+0x105/0x150 [ 86.282546][ T5917] x64_sys_call+0xb39/0x2fb0 [ 86.287158][ T5917] do_syscall_64+0xd2/0x200 [ 86.291690][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.297607][ T5917] [ 86.299956][ T5917] value changed: 0x0000000000000773 -> 0x0000000000000774 [ 86.307089][ T5917] [ 86.309425][ T5917] Reported by Kernel Concurrency Sanitizer on: [ 86.315594][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: syz.4.777 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 86.328035][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.338117][ T5917] ================================================================== [ 86.446342][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.