last executing test programs: 20.108941367s ago: executing program 1 (id=824): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r2], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) 20.078822088s ago: executing program 1 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) r2 = mq_open(&(0x7f0000000680)='\x17seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X\x10\xef\x16\x15:\xa9N\n\xfd\x95\x01%\xe2C\xa6y\xb1\x11\x814\x8e\xd3\b#\xa3\xbb\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x10, &(0x7f00000002c0)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 20.003352101s ago: executing program 1 (id=833): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x7, 0x0, 0x0, 0x7, 0x8604, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x9}, 0x18, 0x10000, 0xfffffffe, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 19.984856612s ago: executing program 1 (id=835): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 19.880846326s ago: executing program 1 (id=839): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 19.851366508s ago: executing program 1 (id=840): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) 4.724601035s ago: executing program 32 (id=840): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) 2.166591295s ago: executing program 5 (id=1044): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r2, 0x80000000, r0}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x30000, 0x0, 0xa, 0x3}, 0x20) 2.089952719s ago: executing program 5 (id=1046): openat(0xffffffffffffff9c, 0x0, 0x82080, 0x174) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) setgroups(0x0, 0x0) 2.003752083s ago: executing program 5 (id=1050): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000280)="b5", 0x1, 0x800, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x6}, 0x8) 1.921405906s ago: executing program 5 (id=1053): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) listen(r0, 0x0) 1.889775368s ago: executing program 5 (id=1054): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 1.60785525s ago: executing program 5 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.008356266s ago: executing program 4 (id=1096): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000080b703000000000000a50000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 945.689589ms ago: executing program 2 (id=1099): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc04c015}, 0x20000804) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 945.503839ms ago: executing program 4 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x6f, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x4d, 0x0, @opaque="604889d37ccf5a9a3e2b8f19a3b0a58a55e33190841acd6f75d284b2f0a14885459c534e6bfc65fc8841674a76b6bd2b5dd771e5828baf4f728ee2e2e52aa809672dd838c4"}}}}}, 0x0) 945.284069ms ago: executing program 3 (id=1101): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16=r3, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 935.14331ms ago: executing program 2 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 924.83888ms ago: executing program 4 (id=1103): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 873.847892ms ago: executing program 2 (id=1104): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x4004) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001000ff"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 873.571442ms ago: executing program 2 (id=1105): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 873.379212ms ago: executing program 4 (id=1106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa906", 0x4, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000280)="a4", 0x34000}], 0x1) 873.237112ms ago: executing program 2 (id=1107): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r2, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 837.727743ms ago: executing program 2 (id=1108): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r3, 0xffffffffffffffff, 0x0) 401.710172ms ago: executing program 0 (id=1109): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) tgkill(0x0, 0x0, 0x0) 329.889255ms ago: executing program 0 (id=1110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x8016, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) 284.018128ms ago: executing program 0 (id=1111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 200.270741ms ago: executing program 0 (id=1112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 137.831354ms ago: executing program 0 (id=1113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = io_uring_setup(0x330b, &(0x7f0000000400)={0x0, 0xddb2, 0x1, 0x503fc, 0x38d}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='vfat\x00', 0x0, &(0x7f00000002c0)='kfree\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 100.692155ms ago: executing program 3 (id=1114): bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x509000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 88.629796ms ago: executing program 3 (id=1115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 33.883498ms ago: executing program 3 (id=1116): socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xd86e, 0x6, 0x0, 0x0) 33.549288ms ago: executing program 0 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 33.289029ms ago: executing program 3 (id=1118): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400000a0) 33.054088ms ago: executing program 3 (id=1119): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 25.373109ms ago: executing program 4 (id=1120): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x1161f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 0s ago: executing program 4 (id=1121): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd07, 0x7fff}, 0x100b28, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 31.944474][ T3323] veth0_macvtap: entered promiscuous mode [ 31.950921][ T3494] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 31.965229][ T269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.974808][ T3495] Illegal XDP return value 453146657 on prog (id 3) dev syz_tun, expect packet loss! [ 31.988260][ T269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.997540][ T3323] veth1_macvtap: entered promiscuous mode [ 32.023186][ T269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.049762][ T269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.072045][ T3503] netlink: 'syz.3.9': attribute type 13 has an invalid length. [ 32.144788][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.151963][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.205646][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.222727][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.298204][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.322514][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.341412][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.362842][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.373515][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.383665][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.396587][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.407047][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.416645][ T3522] vhci_hcd vhci_hcd.3: invalid port number 9 [ 32.455580][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477377][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.503990][ T3525] loop1: detected capacity change from 0 to 2048 [ 32.552377][ T3307] Alternate GPT is invalid, using primary GPT. [ 32.558710][ T3307] loop1: p2 p3 p7 [ 32.572658][ T3529] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.600457][ T3525] Alternate GPT is invalid, using primary GPT. [ 32.606854][ T3525] loop1: p2 p3 p7 [ 32.697271][ T3536] loop4: detected capacity change from 0 to 4096 [ 32.703643][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.705474][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 32.730501][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 32.747719][ T3540] vlan2: entered allmulticast mode [ 32.752919][ T3540] dummy0: entered allmulticast mode [ 32.766574][ T3536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.773973][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.795882][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 32.798931][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 32.807341][ T3540] Zero length message leads to an empty skb [ 32.970584][ T3553] ======================================================= [ 32.970584][ T3553] WARNING: The mand mount option has been deprecated and [ 32.970584][ T3553] and is ignored by this kernel. Remove the mand [ 32.970584][ T3553] option from the mount to silence this warning. [ 32.970584][ T3553] ======================================================= [ 33.105344][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.456036][ T3591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 33.524538][ T3599] vlan2: entered allmulticast mode [ 33.529700][ T3599] hsr0: entered allmulticast mode [ 33.534768][ T3599] hsr_slave_0: entered allmulticast mode [ 33.540416][ T3599] hsr_slave_1: entered allmulticast mode [ 33.931267][ T3628] 9p: Bad value for 'rfdno' [ 34.175568][ T3648] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 34.246348][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 34.280822][ T3653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 34.347411][ C1] hrtimer: interrupt took 46828 ns [ 34.380229][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 34.429050][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 34.471505][ T3664] team0: Port device team_slave_1 removed [ 34.649653][ T3677] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 34.657232][ T3677] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 34.664879][ T3677] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.73'. [ 34.680157][ T3677] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 34.687736][ T3677] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 34.695325][ T3677] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.73'. [ 34.869522][ T3692] loop4: detected capacity change from 0 to 512 [ 34.939419][ T3692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.973838][ T3692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.988587][ T3692] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.017312][ T3706] process 'syz.0.85' launched '/dev/fd/7' with NULL argv: empty string added [ 35.189646][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.280454][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 35.351648][ T3740] loop1: detected capacity change from 0 to 512 [ 35.382218][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.395348][ T3740] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.409219][ T3740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.99: corrupted inode contents [ 35.421307][ T3740] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.99: mark_inode_dirty error [ 35.433105][ T3740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.99: corrupted inode contents [ 35.455450][ T3740] sctp: [Deprecated]: syz.1.99 (pid 3740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 35.455450][ T3740] Use struct sctp_sack_info instead [ 35.473674][ T3740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.99: corrupted inode contents [ 35.485652][ T3740] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.99: mark_inode_dirty error [ 35.497200][ T3740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.99: corrupted inode contents [ 35.509890][ T3740] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.99: mark_inode_dirty error [ 35.539164][ T3740] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.99: corrupted inode contents [ 35.551841][ T3740] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.99: mark_inode_dirty error [ 35.567176][ T3748] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.99: corrupted inode contents [ 35.603751][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.757389][ T3767] team0: Port device team_slave_1 removed [ 35.778275][ T3773] loop4: detected capacity change from 0 to 128 [ 36.031110][ T3806] loop0: detected capacity change from 0 to 128 [ 36.173232][ T3816] can0: slcan on ptm0. [ 36.192497][ T3816] loop1: detected capacity change from 0 to 136 [ 36.259430][ T3815] can0 (unregistered): slcan off ptm0. [ 36.395925][ T3855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.418437][ T3855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.467632][ T3867] loop3: detected capacity change from 0 to 1024 [ 36.507191][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 36.507284][ T29] audit: type=1400 audit(1765259191.295:380): avc: denied { mounton } for pid=3865 comm="syz.3.143" path="/23/file1" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.600705][ T3867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.669254][ T29] audit: type=1400 audit(1765259191.435:381): avc: denied { mount } for pid=3865 comm="syz.3.143" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.701029][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.702151][ T29] audit: type=1400 audit(1765259191.495:382): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.771347][ T3893] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.803104][ T29] audit: type=1400 audit(1765259191.575:383): avc: denied { create } for pid=3891 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.831996][ T3896] loop1: detected capacity change from 0 to 128 [ 36.843893][ T29] audit: type=1400 audit(1765259191.635:384): avc: denied { mount } for pid=3895 comm="syz.1.150" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.900283][ T3896] syz.1.150: attempt to access beyond end of device [ 36.900283][ T3896] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 36.915101][ T29] audit: type=1326 audit(1765259191.665:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 36.938338][ T29] audit: type=1326 audit(1765259191.665:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 36.961395][ T29] audit: type=1326 audit(1765259191.665:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 36.984831][ T29] audit: type=1326 audit(1765259191.665:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 37.008270][ T29] audit: type=1326 audit(1765259191.665:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3895 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 37.163112][ T3901] loop2: detected capacity change from 0 to 128 [ 37.512932][ T3917] loop3: detected capacity change from 0 to 512 [ 37.539649][ T3917] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.552806][ T3917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.597698][ T3917] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.157: corrupted in-inode xattr: invalid ea_ino [ 37.639691][ T3917] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.157: couldn't read orphan inode 15 (err -117) [ 37.652154][ T3917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.678893][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.752622][ T3932] ref_ctr increment failed for inode: 0x99 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103daca40 [ 38.626373][ T3992] loop2: detected capacity change from 0 to 1024 [ 38.646170][ T3992] EXT4-fs: Ignoring removed orlov option [ 38.674230][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.904412][ T4035] __nla_validate_parse: 6 callbacks suppressed [ 38.904427][ T4035] netlink: 14 bytes leftover after parsing attributes in process `syz.1.181'. [ 38.959425][ T4035] hsr_slave_0: left promiscuous mode [ 38.981273][ T4035] hsr_slave_1: left promiscuous mode [ 39.324404][ T4051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.187'. [ 39.412873][ T4057] mmap: syz.3.189 (4057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.636731][ T4074] loop4: detected capacity change from 0 to 1024 [ 39.655082][ T4074] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.666039][ T4074] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 39.709347][ T4074] EXT4-fs (loop4): invalid journal inode [ 39.715010][ T4074] EXT4-fs (loop4): can't get journal size [ 39.766933][ T4074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.821177][ T4074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.841325][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.893638][ T4086] netlink: 'syz.3.203': attribute type 7 has an invalid length. [ 39.901329][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 39.915158][ T4088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4088 comm=syz.2.202 [ 40.013212][ T4098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 40.074807][ T4105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.087987][ T4105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.159794][ T4114] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 40.174679][ T4114] bond1: entered promiscuous mode [ 40.179992][ T4114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.238235][ T4114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 40.287031][ T4114] bond1: (slave bond2): making interface the new active one [ 40.294387][ T4114] bond2: entered promiscuous mode [ 40.335033][ T4114] bond1: (slave bond2): Enslaving as an active interface with an up link [ 40.386215][ T4133] syz.4.222 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.547695][ T4153] loop4: detected capacity change from 0 to 1024 [ 40.578038][ T4153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.613929][ T4153] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.679596][ T4170] netlink: 'syz.0.238': attribute type 11 has an invalid length. [ 40.690857][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.731554][ T4178] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.743984][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 40.782264][ T4180] hsr_slave_0: left promiscuous mode [ 40.788112][ T4180] hsr_slave_1: left promiscuous mode [ 40.891064][ T4196] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 40.903856][ T4196] team0: Failed to send options change via netlink (err -105) [ 40.911405][ T4196] team0: Port device dummy0 added [ 40.922253][ T4196] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 40.933960][ T4196] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 40.945420][ T4196] team0: Failed to send options change via netlink (err -105) [ 40.953305][ T4196] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 40.962568][ T4196] team0: Port device dummy0 removed [ 40.970917][ T4196] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.991383][ T4196] syz.0.249 (4196) used greatest stack depth: 9816 bytes left [ 41.019110][ T4199] loop0: detected capacity change from 0 to 256 [ 41.048010][ T4201] loop4: detected capacity change from 0 to 1024 [ 41.065522][ T4201] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.076522][ T4201] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.106814][ T4201] JBD2: no valid journal superblock found [ 41.112583][ T4201] EXT4-fs (loop4): Could not load journal inode [ 41.174525][ T4205] syz.0.253 uses obsolete (PF_INET,SOCK_PACKET) [ 41.251608][ T4207] loop0: detected capacity change from 0 to 512 [ 41.269764][ T4207] EXT4-fs: Ignoring removed bh option [ 41.287639][ T4209] capability: warning: `syz.4.255' uses 32-bit capabilities (legacy support in use) [ 41.301742][ T4207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.318193][ T4207] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.335492][ T4207] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.254: corrupted inode contents [ 41.348220][ T4207] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.254: mark_inode_dirty error [ 41.360384][ T4207] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.254: corrupted inode contents [ 41.379051][ T4207] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #18: comm syz.0.254: mark_inode_dirty error [ 41.393718][ T4207] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #18: comm syz.0.254: mark inode dirty (error -117) [ 41.411817][ T4222] loop2: detected capacity change from 0 to 164 [ 41.416754][ T4207] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 41.427298][ T4222] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.437862][ T4220] loop4: detected capacity change from 0 to 764 [ 41.480733][ T4222] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 41.509506][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 41.509521][ T29] audit: type=1400 audit(1765259196.305:536): avc: denied { write } for pid=4225 comm="syz.4.262" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.545543][ T4224] loop3: detected capacity change from 0 to 2048 [ 41.554505][ T29] audit: type=1400 audit(1765259196.305:537): avc: denied { open } for pid=4225 comm="syz.4.262" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.588403][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.613550][ T4224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.633800][ T29] audit: type=1400 audit(1765259196.425:538): avc: denied { bind } for pid=4230 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.653367][ T29] audit: type=1400 audit(1765259196.425:539): avc: denied { name_bind } for pid=4230 comm="syz.4.264" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 41.675149][ T29] audit: type=1400 audit(1765259196.425:540): avc: denied { node_bind } for pid=4230 comm="syz.4.264" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 41.696695][ T29] audit: type=1400 audit(1765259196.425:541): avc: denied { write } for pid=4230 comm="syz.4.264" laddr=::ffff:172.20.20.34 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.805630][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.842024][ T4244] EXT4-fs (loop4): too many log groups per flexible block group [ 41.851351][ T4244] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 41.902522][ T4244] EXT4-fs (loop4): mount failed [ 42.010731][ T4251] netlink: 96 bytes leftover after parsing attributes in process `syz.1.271'. [ 42.068297][ T4251] netlink: 96 bytes leftover after parsing attributes in process `syz.1.271'. [ 42.149657][ T4249] syz.3.269: attempt to access beyond end of device [ 42.149657][ T4249] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 42.165648][ T4261] wireguard0: entered promiscuous mode [ 42.171273][ T4261] wireguard0: entered allmulticast mode [ 42.201541][ T4249] syz.3.269: attempt to access beyond end of device [ 42.201541][ T4249] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 42.230101][ T29] audit: type=1326 audit(1765259197.005:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 42.253378][ T29] audit: type=1326 audit(1765259197.005:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 42.276584][ T29] audit: type=1326 audit(1765259197.005:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 42.290057][ T4249] syz.3.269: attempt to access beyond end of device [ 42.290057][ T4249] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 42.299712][ T29] audit: type=1326 audit(1765259197.005:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 42.339806][ T4249] syz.3.269: attempt to access beyond end of device [ 42.339806][ T4249] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 42.384513][ T4249] syz.3.269: attempt to access beyond end of device [ 42.384513][ T4249] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 42.429527][ T4249] syz.3.269: attempt to access beyond end of device [ 42.429527][ T4249] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 42.485774][ T4249] syz.3.269: attempt to access beyond end of device [ 42.485774][ T4249] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 42.499706][ T4249] syz.3.269: attempt to access beyond end of device [ 42.499706][ T4249] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 42.513732][ T4249] syz.3.269: attempt to access beyond end of device [ 42.513732][ T4249] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 42.552816][ T4275] set_capacity_and_notify: 2 callbacks suppressed [ 42.552832][ T4275] loop4: detected capacity change from 0 to 512 [ 42.559586][ T4249] syz.3.269: attempt to access beyond end of device [ 42.559586][ T4249] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 42.619182][ T4275] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.657506][ T4282] loop2: detected capacity change from 0 to 512 [ 42.685333][ T4282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.708276][ T4275] EXT4-fs (loop4): mount failed [ 42.729453][ T4282] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.742339][ T4282] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.284: corrupted inode contents [ 42.762801][ T4282] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.284: mark_inode_dirty error [ 42.790095][ T4282] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.284: corrupted inode contents [ 42.814998][ T4290] loop1: detected capacity change from 0 to 512 [ 42.843611][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 42.860472][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 42.884011][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.907974][ T4293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 43.054380][ T4299] loop1: detected capacity change from 0 to 1024 [ 43.122657][ T4299] EXT4-fs: Ignoring removed orlov option [ 43.180974][ T4299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.756497][ T4308] loop3: detected capacity change from 0 to 512 [ 43.958842][ T4308] EXT4-fs (loop3): too many log groups per flexible block group [ 43.972122][ T4308] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 43.982092][ T4308] EXT4-fs (loop3): mount failed [ 44.060796][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.986460][ T4332] can0: slcan on ptm0. [ 46.995937][ T4332] loop4: detected capacity change from 0 to 136 [ 47.382524][ T4334] sch_fq: defrate 0 ignored. [ 47.406851][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 47.417305][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 47.438258][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 47.625893][ T4342] loop3: detected capacity change from 0 to 1024 [ 47.637301][ T4344] loop1: detected capacity change from 0 to 512 [ 47.644501][ T4342] EXT4-fs: Ignoring removed orlov option [ 47.685497][ T4344] EXT4-fs (loop1): too many log groups per flexible block group [ 47.693386][ T4344] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 47.700503][ T4344] EXT4-fs (loop1): mount failed [ 47.712166][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.959709][ T4331] can0 (unregistered): slcan off ptm0. [ 48.577647][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.618330][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 48.618344][ T29] audit: type=1326 audit(1765259203.405:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f763e9365e7 code=0x7ffc0000 [ 48.719305][ T29] audit: type=1326 audit(1765259203.445:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f763e8db829 code=0x7ffc0000 [ 48.742455][ T29] audit: type=1326 audit(1765259203.445:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f763e9365e7 code=0x7ffc0000 [ 48.765684][ T29] audit: type=1326 audit(1765259203.445:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f763e8db829 code=0x7ffc0000 [ 48.788872][ T29] audit: type=1326 audit(1765259203.445:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 48.812145][ T29] audit: type=1326 audit(1765259203.445:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 48.835452][ T29] audit: type=1326 audit(1765259203.445:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 48.858671][ T29] audit: type=1326 audit(1765259203.445:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 48.858711][ T29] audit: type=1326 audit(1765259203.445:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 48.858733][ T29] audit: type=1326 audit(1765259203.445:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4363 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 49.018731][ T4383] loop2: detected capacity change from 0 to 512 [ 49.034180][ T4383] EXT4-fs (loop2): too many log groups per flexible block group [ 49.043394][ T4383] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 49.050516][ T4383] EXT4-fs (loop2): mount failed [ 49.117081][ T4392] can0: slcan on ptm0. [ 49.127612][ T4392] loop2: detected capacity change from 0 to 136 [ 49.179358][ T4390] can0 (unregistered): slcan off ptm0. [ 49.248664][ T4401] loop0: detected capacity change from 0 to 1024 [ 49.257505][ T4401] EXT4-fs: Ignoring removed orlov option [ 49.270617][ T4401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.690272][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 49.710335][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 50.173997][ T4425] loop4: detected capacity change from 0 to 1024 [ 50.248055][ T4425] EXT4-fs: Ignoring removed orlov option [ 50.317383][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.345722][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.404362][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.422964][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.238794][ T4436] syz.4.333 (4436) used greatest stack depth: 9744 bytes left [ 51.259260][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.414838][ T4478] loop0: detected capacity change from 0 to 764 [ 51.421997][ T4478] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.436401][ T4478] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.447394][ T4482] loop4: detected capacity change from 0 to 512 [ 51.523012][ T4482] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.343: error while reading EA inode 32 err=-116 [ 51.536858][ T4482] EXT4-fs (loop4): Remounting filesystem read-only [ 51.545021][ T4482] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.560624][ T4482] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 51.578879][ T4482] EXT4-fs (loop4): 1 orphan inode deleted [ 51.623063][ T4482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.671141][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.828612][ T4603] loop1: detected capacity change from 0 to 512 [ 52.879315][ T4603] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.356: error while reading EA inode 32 err=-116 [ 52.906565][ T4603] EXT4-fs (loop1): Remounting filesystem read-only [ 52.916143][ T4603] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 52.927172][ T4603] EXT4-fs (loop1): 1 orphan inode deleted [ 52.937137][ T4603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.014144][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.972475][ T4739] loop0: detected capacity change from 0 to 512 [ 53.984646][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 53.997377][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 54.007036][ T4742] loop4: detected capacity change from 0 to 1024 [ 54.015227][ T4742] EXT4-fs: Ignoring removed orlov option [ 54.025683][ T4739] EXT4-fs (loop0): too many log groups per flexible block group [ 54.033850][ T4739] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 54.041002][ T4739] EXT4-fs (loop0): mount failed [ 54.047398][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.098822][ T4745] loop2: detected capacity change from 0 to 512 [ 54.129482][ T4745] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.359: error while reading EA inode 32 err=-116 [ 54.143903][ T4745] EXT4-fs (loop2): Remounting filesystem read-only [ 54.153027][ T4745] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 54.165467][ T4745] EXT4-fs (loop2): 1 orphan inode deleted [ 54.176154][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.217193][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.292159][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 54.292171][ T29] audit: type=1326 audit(1765259209.085:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.416753][ T29] audit: type=1326 audit(1765259209.115:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.440136][ T29] audit: type=1326 audit(1765259209.115:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.463371][ T29] audit: type=1326 audit(1765259209.115:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.486573][ T29] audit: type=1326 audit(1765259209.115:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.509891][ T29] audit: type=1326 audit(1765259209.115:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.533165][ T29] audit: type=1326 audit(1765259209.115:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.549244][ T4763] loop3: detected capacity change from 0 to 1024 [ 54.556369][ T29] audit: type=1326 audit(1765259209.115:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.585954][ T29] audit: type=1326 audit(1765259209.115:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.609188][ T29] audit: type=1326 audit(1765259209.115:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 54.634881][ T4763] EXT4-fs: Ignoring removed orlov option [ 54.686629][ T4763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.011737][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.251067][ T4784] loop4: detected capacity change from 0 to 512 [ 55.292885][ T4784] EXT4-fs (loop4): too many log groups per flexible block group [ 55.300914][ T4784] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 55.316300][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 55.340810][ T4784] EXT4-fs (loop4): mount failed [ 55.349777][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 55.415494][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.469665][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 55.498851][ T4796] loop3: detected capacity change from 0 to 512 [ 55.524814][ T4796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.366: error while reading EA inode 32 err=-116 [ 55.541137][ T4796] EXT4-fs (loop3): Remounting filesystem read-only [ 55.548884][ T4796] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.559439][ T4796] EXT4-fs (loop3): 1 orphan inode deleted [ 55.574281][ T4796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.599364][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.043690][ T4818] loop3: detected capacity change from 0 to 1024 [ 56.109014][ T4818] EXT4-fs: Ignoring removed orlov option [ 56.193639][ T4818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.077707][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 57.107608][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 57.139713][ T4837] loop1: detected capacity change from 0 to 128 [ 57.148220][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.169545][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 57.234720][ T4844] loop3: detected capacity change from 0 to 1024 [ 57.249534][ T4844] EXT4-fs: Ignoring removed orlov option [ 57.281153][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 57.299612][ T4844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.131327][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.178752][ T4865] loop1: detected capacity change from 0 to 1024 [ 58.185659][ T4865] EXT4-fs: Ignoring removed orlov option [ 58.194295][ T4865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.054307][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 59.068313][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 59.083119][ T4893] team0: Port device team_slave_1 removed [ 59.188089][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.452923][ T4908] loop0: detected capacity change from 0 to 1024 [ 59.453272][ T4910] loop4: detected capacity change from 0 to 512 [ 59.471083][ T4909] loop1: detected capacity change from 0 to 512 [ 59.471927][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 59.495875][ T4908] EXT4-fs: Ignoring removed orlov option [ 59.506768][ T4908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.521569][ T4909] __quota_error: 104 callbacks suppressed [ 59.521581][ T4909] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 59.538306][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.559966][ T4910] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.570270][ T4909] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.587714][ T4909] EXT4-fs (loop1): mount failed [ 59.588165][ T4910] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.409: corrupted inode contents [ 59.606354][ T4910] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.409: mark_inode_dirty error [ 59.618716][ T4910] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.409: corrupted inode contents [ 59.676645][ T4910] sctp: [Deprecated]: syz.4.409 (pid 4910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.676645][ T4910] Use struct sctp_sack_info instead [ 59.696527][ T4910] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.409: corrupted inode contents [ 59.708993][ T4910] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.409: mark_inode_dirty error [ 59.720697][ T4910] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.409: corrupted inode contents [ 59.747219][ T4910] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.409: mark_inode_dirty error [ 59.769876][ T4910] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.409: corrupted inode contents [ 59.790428][ T4910] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.409: mark_inode_dirty error [ 59.805509][ T4924] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.409: corrupted inode contents [ 59.834515][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.862753][ T4926] loop2: detected capacity change from 0 to 512 [ 59.889431][ T29] audit: type=1400 audit(1765259214.685:752): avc: denied { read } for pid=4927 comm="syz.4.414" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.915670][ T29] audit: type=1400 audit(1765259214.685:753): avc: denied { open } for pid=4927 comm="syz.4.414" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.942198][ T4926] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 59.952370][ T4926] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.968069][ T4926] EXT4-fs (loop2): mount failed [ 60.365760][ T29] audit: type=1326 audit(1765259215.155:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 60.396134][ T29] audit: type=1326 audit(1765259215.185:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 60.419466][ T29] audit: type=1326 audit(1765259215.185:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 60.442956][ T29] audit: type=1326 audit(1765259215.185:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 60.444188][ T4908] syz.0.418 (4908) used greatest stack depth: 9640 bytes left [ 60.466299][ T29] audit: type=1326 audit(1765259215.185:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 60.496843][ T29] audit: type=1326 audit(1765259215.185:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 60.530430][ T4950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 60.540103][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.549953][ T4950] team0: Port device team_slave_1 removed [ 60.624590][ T4953] loop0: detected capacity change from 0 to 1024 [ 60.636786][ T4953] EXT4-fs: Ignoring removed orlov option [ 60.648461][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 60.697829][ T4953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.807199][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 60.951075][ T4971] loop3: detected capacity change from 0 to 512 [ 61.011870][ T4971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.039243][ T4971] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.176666][ T4971] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.427: corrupted inode contents [ 61.191220][ T4971] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.427: mark_inode_dirty error [ 61.276187][ T4971] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.427: corrupted inode contents [ 61.379781][ T4971] sctp: [Deprecated]: syz.3.427 (pid 4971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.379781][ T4971] Use struct sctp_sack_info instead [ 61.430844][ T4974] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.427: corrupted inode contents [ 61.494691][ T4974] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.427: mark_inode_dirty error [ 61.516277][ T4974] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.427: corrupted inode contents [ 61.561022][ T4974] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.427: mark_inode_dirty error [ 61.634273][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.643880][ T4974] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.427: corrupted inode contents [ 61.673316][ T4982] loop0: detected capacity change from 0 to 512 [ 61.681615][ T4974] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.427: mark_inode_dirty error [ 61.714285][ T4983] loop2: detected capacity change from 0 to 1024 [ 61.738314][ T4971] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.427: corrupted inode contents [ 61.755992][ T4983] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.766993][ T4983] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 61.778163][ T4982] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.805700][ T4982] EXT4-fs (loop0): mount failed [ 61.813731][ T4983] EXT4-fs (loop2): invalid journal inode [ 61.819766][ T4983] EXT4-fs (loop2): can't get journal size [ 61.840228][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.848110][ T4983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.862246][ T4983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.942354][ T4989] loop2: detected capacity change from 0 to 128 [ 62.033137][ T4989] bio_check_eod: 97 callbacks suppressed [ 62.033152][ T4989] syz.2.435: attempt to access beyond end of device [ 62.033152][ T4989] loop2: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 62.052269][ T4989] syz.2.435: attempt to access beyond end of device [ 62.052269][ T4989] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 62.065936][ T4989] syz.2.435: attempt to access beyond end of device [ 62.065936][ T4989] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 62.079722][ T4989] syz.2.435: attempt to access beyond end of device [ 62.079722][ T4989] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 62.102657][ T4989] syz.2.435: attempt to access beyond end of device [ 62.102657][ T4989] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 62.116550][ T4989] syz.2.435: attempt to access beyond end of device [ 62.116550][ T4989] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 62.131616][ T4989] syz.2.435: attempt to access beyond end of device [ 62.131616][ T4989] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 62.146373][ T4989] syz.2.435: attempt to access beyond end of device [ 62.146373][ T4989] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 62.160937][ T4989] syz.2.435: attempt to access beyond end of device [ 62.160937][ T4989] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 62.174723][ T4989] syz.2.435: attempt to access beyond end of device [ 62.174723][ T4989] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 62.519721][ T5007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.681304][ T5007] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.443: invalid indirect mapped block 4294967295 (level 0) [ 62.728733][ T5007] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.443: invalid indirect mapped block 4294967295 (level 1) [ 62.785383][ T5007] EXT4-fs (loop1): 1 orphan inode deleted [ 62.791145][ T5007] EXT4-fs (loop1): 1 truncate cleaned up [ 62.850624][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.916899][ T5007] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.031437][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.240674][ T5024] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 63.505543][ T5042] wg2: entered promiscuous mode [ 63.510433][ T5042] wg2: entered allmulticast mode [ 63.764249][ T5046] set_capacity_and_notify: 2 callbacks suppressed [ 63.764267][ T5046] loop2: detected capacity change from 0 to 512 [ 63.803829][ T5046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.845531][ T5046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.878566][ T5046] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.933780][ T5064] loop4: detected capacity change from 0 to 512 [ 63.954564][ T5064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.055900][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.155072][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.168956][ T5084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.472'. [ 64.177937][ T5084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.472'. [ 64.533474][ T5123] loop2: detected capacity change from 0 to 128 [ 64.581923][ T5126] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 64.598798][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 64.598812][ T29] audit: type=1400 audit(1765259219.385:923): avc: denied { read write } for pid=5128 comm="syz.3.494" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.628157][ T29] audit: type=1400 audit(1765259219.385:924): avc: denied { open } for pid=5128 comm="syz.3.494" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.655299][ T29] audit: type=1400 audit(1765259219.445:925): avc: denied { ioctl } for pid=5128 comm="syz.3.494" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.695438][ T5126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.745507][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 64.772116][ T5140] bond3 (unregistering): Released all slaves [ 64.827682][ T29] audit: type=1326 audit(1765259219.515:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 64.851085][ T29] audit: type=1326 audit(1765259219.515:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 64.874419][ T29] audit: type=1326 audit(1765259219.515:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 64.897753][ T29] audit: type=1326 audit(1765259219.515:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 64.921107][ T29] audit: type=1326 audit(1765259219.515:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 64.944494][ T29] audit: type=1326 audit(1765259219.515:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 64.967803][ T29] audit: type=1326 audit(1765259219.515:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3860d6f749 code=0x7ffc0000 [ 65.066248][ T5154] loop4: detected capacity change from 0 to 512 [ 65.092666][ T5157] xt_hashlimit: max too large, truncated to 1048576 [ 65.097766][ T5154] EXT4-fs: Ignoring removed bh option [ 65.124175][ T5160] loop0: detected capacity change from 0 to 512 [ 65.136741][ T5160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.173692][ T5154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.199632][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.209001][ T5154] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.251703][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.504: corrupted inode contents [ 65.305928][ T5154] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.504: mark_inode_dirty error [ 65.317434][ T5154] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.504: corrupted inode contents [ 65.331511][ T5154] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.504: mark_inode_dirty error [ 65.343974][ T5154] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.504: mark inode dirty (error -117) [ 65.356931][ T5154] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 65.417290][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.653489][ T5187] tipc: Started in network mode [ 65.658459][ T5187] tipc: Node identity 1ea0ee661f65, cluster identity 4711 [ 65.665673][ T5187] tipc: Enabled bearer , priority 0 [ 65.691550][ T5187] syzkaller0: MTU too low for tipc bearer [ 65.697326][ T5187] tipc: Disabling bearer [ 65.920000][ T5196] loop4: detected capacity change from 0 to 512 [ 66.020205][ T5196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.057089][ T5196] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.073478][ T5209] netlink: 'syz.1.523': attribute type 7 has an invalid length. [ 66.081173][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 66.176112][ T5196] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.518: corrupted inode contents [ 66.289398][ T5196] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.518: mark_inode_dirty error [ 66.319512][ T5196] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.518: corrupted inode contents [ 66.372225][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 66.412753][ T5216] loop2: detected capacity change from 0 to 512 [ 66.421439][ T5216] EXT4-fs: Ignoring removed i_version option [ 66.427534][ T5216] EXT4-fs: Ignoring removed bh option [ 66.483752][ T5238] loop0: detected capacity change from 0 to 512 [ 66.497811][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.514985][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.550667][ T5238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.586969][ T5216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.589275][ T5238] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.613136][ T5216] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.768763][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.808464][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.827057][ T5257] loop2: detected capacity change from 0 to 512 [ 66.853450][ T5265] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 66.879391][ T5257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.886927][ T5265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.907497][ T5270] loop0: detected capacity change from 0 to 512 [ 66.914478][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 66.962399][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.962536][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.984287][ T5270] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.050873][ T5271] bond1 (unregistering): Released all slaves [ 67.073721][ T5270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.539: corrupted inode contents [ 67.131366][ T5270] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.539: mark_inode_dirty error [ 67.167415][ T5270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.539: corrupted inode contents [ 67.239966][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.319398][ T5295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.354882][ T5299] EXT4-fs: Ignoring removed bh option [ 67.371708][ T5295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.384667][ T5295] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.411108][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.433225][ T5308] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 67.447431][ T5299] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.468775][ T5299] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.550: corrupted inode contents [ 67.495171][ T5301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.520913][ T5299] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.550: mark_inode_dirty error [ 67.559573][ T5299] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.550: corrupted inode contents [ 67.577970][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.609433][ T5299] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.550: mark_inode_dirty error [ 67.639352][ T5299] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.550: mark inode dirty (error -117) [ 67.668882][ T5299] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 67.720663][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.807935][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.841763][ T5325] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 67.854931][ T5325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.888787][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 67.903912][ T5325] bond1 (unregistering): Released all slaves [ 67.934832][ T5328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.977335][ T5328] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.052160][ T5328] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.558: corrupted inode contents [ 68.103930][ T5328] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.558: mark_inode_dirty error [ 68.139539][ T5328] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.558: corrupted inode contents [ 68.174211][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.467097][ T5357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.494475][ T5357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.515447][ T5357] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.632352][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.709893][ T5370] netlink: 'syz.0.573': attribute type 13 has an invalid length. [ 68.761250][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.768459][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.802244][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.812452][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.858923][ T4020] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.868463][ T4020] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.878739][ T4020] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.887796][ T4020] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.930287][ T5377] set_capacity_and_notify: 6 callbacks suppressed [ 68.930297][ T5377] loop1: detected capacity change from 0 to 512 [ 68.943368][ T5377] EXT4-fs: Ignoring removed bh option [ 68.960672][ T5377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.973573][ T5377] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.989786][ T5377] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.575: corrupted inode contents [ 69.001748][ T5377] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.575: mark_inode_dirty error [ 69.013477][ T5377] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.575: corrupted inode contents [ 69.025492][ T5377] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.575: mark_inode_dirty error [ 69.037643][ T5377] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.575: mark inode dirty (error -117) [ 69.050516][ T5377] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 69.069337][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.331230][ T5389] loop3: detected capacity change from 0 to 512 [ 69.338336][ T5389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.350438][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.363556][ T5389] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.486189][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.630075][ T5410] loop2: detected capacity change from 0 to 512 [ 69.645649][ T5410] ext4: Unknown parameter 'fowner' [ 69.882005][ T5425] loop0: detected capacity change from 0 to 512 [ 69.897031][ T5425] EXT4-fs: Ignoring removed i_version option [ 69.903176][ T5425] EXT4-fs: Ignoring removed bh option [ 69.939629][ T5425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.992601][ T5425] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.049361][ T5435] netlink: 'syz.2.596': attribute type 4 has an invalid length. [ 70.121905][ T5440] netlink: 'syz.1.598': attribute type 13 has an invalid length. [ 70.132468][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.160834][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 70.160850][ T29] audit: type=1326 audit(1765259224.955:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.196083][ T29] audit: type=1326 audit(1765259224.985:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.219555][ T29] audit: type=1326 audit(1765259224.985:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.242898][ T29] audit: type=1326 audit(1765259224.985:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.266276][ T29] audit: type=1326 audit(1765259224.985:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.289629][ T29] audit: type=1326 audit(1765259224.985:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.312927][ T29] audit: type=1326 audit(1765259224.985:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.336205][ T29] audit: type=1326 audit(1765259224.985:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.359493][ T29] audit: type=1326 audit(1765259224.985:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.382763][ T29] audit: type=1326 audit(1765259224.985:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513818f749 code=0x7ffc0000 [ 70.411805][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.419117][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.481351][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.490991][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.536971][ T4020] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.550662][ T4020] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.569320][ T4020] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.578249][ T4020] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.935417][ T5460] loop4: detected capacity change from 0 to 512 [ 70.935724][ T5461] loop1: detected capacity change from 0 to 1024 [ 70.948625][ T5460] EXT4-fs: Ignoring removed bh option [ 70.956580][ T5461] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.967567][ T5461] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 70.978328][ T5461] EXT4-fs (loop1): invalid journal inode [ 70.984470][ T5461] EXT4-fs (loop1): can't get journal size [ 70.992679][ T5460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.994892][ T5461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.018597][ T5461] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.027135][ T5460] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.058377][ T5460] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.606: corrupted inode contents [ 71.079488][ T5460] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.606: mark_inode_dirty error [ 71.130614][ T5460] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.606: corrupted inode contents [ 71.169294][ T5460] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.606: mark_inode_dirty error [ 71.181439][ T5460] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.606: mark inode dirty (error -117) [ 71.194346][ T5460] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 71.249656][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.590318][ T5480] loop1: detected capacity change from 0 to 512 [ 71.602551][ T5480] EXT4-fs: Ignoring removed i_version option [ 71.608590][ T5480] EXT4-fs: Ignoring removed bh option [ 71.840270][ T5480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.853808][ T5480] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.987806][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.115799][ T5497] loop3: detected capacity change from 0 to 4096 [ 72.153508][ T5497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.308845][ T5503] netlink: 'syz.4.617': attribute type 13 has an invalid length. [ 72.388420][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.395625][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.453719][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.463664][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.513955][ T4022] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.523021][ T4022] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.532743][ T4022] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.551804][ T4022] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.798202][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.853801][ T5508] loop3: detected capacity change from 0 to 1024 [ 72.880376][ T5508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.917449][ T5514] loop2: detected capacity change from 0 to 512 [ 72.924099][ T5514] EXT4-fs: Ignoring removed bh option [ 72.929709][ T5508] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.951644][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.952941][ T5514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.975109][ T5514] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.026453][ T5519] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.026652][ T5514] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.623: corrupted inode contents [ 73.037413][ T5519] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 73.059322][ T5514] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.623: mark_inode_dirty error [ 73.060594][ T5519] EXT4-fs (loop3): invalid journal inode [ 73.082101][ T5514] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.623: corrupted inode contents [ 73.084408][ T5519] EXT4-fs (loop3): can't get journal size [ 73.097795][ T5514] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.623: mark_inode_dirty error [ 73.112596][ T5514] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.623: mark inode dirty (error -117) [ 73.125581][ T5514] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 73.166643][ T5519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.179717][ T5519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.242620][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.305314][ T5539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.319361][ T5539] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.344195][ T3307] Alternate GPT is invalid, using primary GPT. [ 73.350800][ T3307] loop4: p2 p3 p7 [ 73.366558][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.629: corrupted inode contents [ 73.399917][ T5541] Alternate GPT is invalid, using primary GPT. [ 73.406285][ T5541] loop4: p2 p3 p7 [ 73.444668][ T5539] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.629: mark_inode_dirty error [ 73.444839][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 73.476565][ T5548] vlan0: entered allmulticast mode [ 73.492592][ T5548] dummy0: entered allmulticast mode [ 73.520033][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 73.520758][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.531068][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 73.549320][ T5550] sctp: [Deprecated]: syz.2.629 (pid 5550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.549320][ T5550] Use struct sctp_sack_info instead [ 73.565942][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.573627][ T5539] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.629: corrupted inode contents [ 73.593432][ T5555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.598773][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.601644][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 73.613913][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 73.639849][ T5552] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.629: corrupted inode contents [ 73.652082][ T5552] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.629: mark_inode_dirty error [ 73.663823][ T5552] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.629: corrupted inode contents [ 73.675779][ T5552] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.629: mark_inode_dirty error [ 73.687151][ T5552] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.629: corrupted inode contents [ 73.699021][ T5552] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.629: mark_inode_dirty error [ 73.728700][ T5556] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.629: corrupted inode contents [ 73.840451][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.992192][ T5558] set_capacity_and_notify: 3 callbacks suppressed [ 73.992206][ T5558] loop3: detected capacity change from 0 to 512 [ 74.009517][ T5558] EXT4-fs: Ignoring removed i_version option [ 74.015615][ T5558] EXT4-fs: Ignoring removed bh option [ 74.049320][ T5566] netlink: 'syz.2.641': attribute type 13 has an invalid length. [ 74.077891][ T5558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.100559][ T5558] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.150070][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.157244][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.223291][ T5577] loop1: detected capacity change from 0 to 512 [ 74.252302][ T5577] EXT4-fs: Ignoring removed bh option [ 74.270972][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.285792][ T5577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.310565][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.375725][ T5577] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.376686][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.456168][ T5587] loop4: detected capacity change from 0 to 764 [ 74.493239][ T5594] loop0: detected capacity change from 0 to 2048 [ 74.511093][ T5577] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.642: corrupted inode contents [ 74.524248][ T4014] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.539672][ T5587] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 74.549536][ T4014] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.565136][ T3537] Alternate GPT is invalid, using primary GPT. [ 74.568736][ T4014] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.571600][ T3537] loop0: p2 p3 p7 [ 74.584228][ T4000] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.584485][ T5577] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.642: mark_inode_dirty error [ 74.623402][ T5577] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.642: corrupted inode contents [ 74.635601][ T5577] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.642: mark_inode_dirty error [ 74.647879][ T5577] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.642: mark inode dirty (error -117) [ 74.669630][ T5587] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 74.683693][ T5577] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 74.703236][ T5594] Alternate GPT is invalid, using primary GPT. [ 74.709671][ T5594] loop0: p2 p3 p7 [ 74.740507][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.801824][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 74.802960][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 74.813318][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 74.820610][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 74.839382][ T5597] sctp: [Deprecated]: syz.0.649 (pid 5597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.839382][ T5597] Use struct sctp_sack_info instead [ 74.868233][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 74.869338][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.932154][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.544708][ T5627] loop2: detected capacity change from 0 to 4096 [ 75.568998][ T5627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.622537][ T5631] loop4: detected capacity change from 0 to 512 [ 75.642665][ T5633] loop3: detected capacity change from 0 to 512 [ 75.649503][ T5631] ext4: Unknown parameter 'fowner' [ 75.668006][ T5633] EXT4-fs: Ignoring removed bh option [ 75.692448][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.726787][ T5633] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.749878][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.768886][ T5633] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.660: corrupted inode contents [ 75.793937][ T5633] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.660: mark_inode_dirty error [ 75.805907][ T5633] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.660: corrupted inode contents [ 75.818046][ T5633] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #18: comm syz.3.660: mark_inode_dirty error [ 75.830193][ T5633] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #18: comm syz.3.660: mark inode dirty (error -117) [ 75.849499][ T5633] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 75.898456][ T5646] netlink: 'syz.1.663': attribute type 4 has an invalid length. [ 75.921718][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.944749][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 75.944798][ T29] audit: type=1400 audit(1765259230.735:2081): avc: denied { getopt } for pid=5651 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.983159][ T5653] loop3: detected capacity change from 0 to 764 [ 75.990272][ T29] audit: type=1326 audit(1765259230.745:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.013724][ T29] audit: type=1326 audit(1765259230.745:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.019733][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 76.037220][ T29] audit: type=1326 audit(1765259230.745:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.069244][ T29] audit: type=1326 audit(1765259230.745:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.092736][ T29] audit: type=1326 audit(1765259230.745:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.123374][ T5660] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 76.131797][ T5653] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.140438][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.153804][ T29] audit: type=1400 audit(1765259230.945:2087): avc: denied { connect } for pid=5662 comm="syz.0.675" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.175598][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.205388][ T5660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.235738][ T5664] bond1: (slave geneve2): making interface the new active one [ 76.246882][ T5664] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.255620][ T5653] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.263571][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.280398][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.289223][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.298039][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.344871][ T29] audit: type=1326 audit(1765259231.135:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.2.679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb0ba3f749 code=0x0 [ 76.392470][ T5677] loop3: detected capacity change from 0 to 512 [ 76.402283][ T5677] EXT4-fs: Ignoring removed bh option [ 76.402974][ T29] audit: type=1326 audit(1765259231.195:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.440208][ T29] audit: type=1326 audit(1765259231.195:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f129f749 code=0x7ffc0000 [ 76.463724][ T5677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.502884][ T5677] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.550129][ T5677] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.682: corrupted inode contents [ 76.567974][ T5677] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.682: mark_inode_dirty error [ 76.585682][ T5677] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.682: corrupted inode contents [ 76.601476][ T5697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.689'. [ 76.604298][ T5677] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #18: comm syz.3.682: mark_inode_dirty error [ 76.629470][ T5677] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #18: comm syz.3.682: mark inode dirty (error -117) [ 76.646832][ T5701] loop4: detected capacity change from 0 to 512 [ 76.659826][ T5677] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 76.682559][ T5701] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 76.684151][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 76.694100][ T5701] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 76.712998][ T5701] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.690: Corrupt directory, running e2fsck is recommended [ 76.741716][ T5701] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 76.750040][ T5701] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.690: corrupted in-inode xattr: invalid ea_ino [ 76.764477][ T5701] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.690: couldn't read orphan inode 15 (err -117) [ 76.777466][ T5701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.778665][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.817540][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.860419][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 76.870256][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.877972][ T5708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.894627][ T5712] EXT4-fs: Ignoring removed bh option [ 76.920637][ T5712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.922450][ T3537] printk: udevd: 5 output lines suppressed due to ratelimiting [ 76.941988][ T5718] EXT4-fs: Ignoring removed orlov option [ 76.945688][ T5712] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.960692][ T5718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.982641][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'. [ 76.994467][ T5712] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.702: corrupted inode contents [ 77.006702][ T5712] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.702: mark_inode_dirty error [ 77.030168][ T5712] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.702: corrupted inode contents [ 77.044181][ T5712] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #18: comm syz.0.702: mark_inode_dirty error [ 77.149440][ T5712] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #18: comm syz.0.702: mark inode dirty (error -117) [ 77.201382][ T5712] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 77.234522][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 77.270173][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 77.299015][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.341350][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 77.358665][ T5744] ref_ctr_offset mismatch. inode: 0x30a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000380 [ 77.786999][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.795991][ T5772] EXT4-fs: Ignoring removed bh option [ 77.844894][ T5772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.869117][ T5772] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.916399][ T5772] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.716: corrupted inode contents [ 77.932425][ T5772] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.716: mark_inode_dirty error [ 77.943872][ T5772] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.716: corrupted inode contents [ 77.955978][ T5772] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.716: mark_inode_dirty error [ 77.968350][ T5772] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.716: mark inode dirty (error -117) [ 77.981096][ T5772] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 78.016117][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.051896][ T5798] netlink: 'syz.0.723': attribute type 30 has an invalid length. [ 78.118824][ T5803] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.131078][ T5803] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.170195][ T5803] syzkaller1: entered promiscuous mode [ 78.175686][ T5803] syzkaller1: entered allmulticast mode [ 78.198504][ T5811] hsr_slave_0: left promiscuous mode [ 78.206014][ T5811] hsr_slave_1: left promiscuous mode [ 78.220759][ T5813] EXT4-fs (loop1): too many log groups per flexible block group [ 78.228636][ T5813] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 78.235506][ T5813] EXT4-fs (loop1): mount failed [ 78.294371][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.319590][ T5822] EXT4-fs: Ignoring removed bh option [ 78.341395][ T5822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.365440][ T5822] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.399181][ T5822] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.736: corrupted inode contents [ 78.445751][ T5822] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.736: mark_inode_dirty error [ 78.481014][ T5822] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.736: corrupted inode contents [ 78.493203][ T5822] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.736: mark_inode_dirty error [ 78.505640][ T5822] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.736: mark inode dirty (error -117) [ 78.519593][ T5822] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 78.876690][ T5833] Set syz1 is full, maxelem 65536 reached [ 78.922477][ T5858] bridge: RTM_NEWNEIGH with invalid ether address [ 79.064467][ T5872] syzkaller0: entered allmulticast mode [ 79.073271][ T5874] set_capacity_and_notify: 6 callbacks suppressed [ 79.073283][ T5874] loop4: detected capacity change from 0 to 512 [ 79.087400][ T5872] syzkaller0 (unregistering): left allmulticast mode [ 79.095266][ T5874] EXT4-fs: Ignoring removed bh option [ 79.112251][ T5874] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.120021][ T5878] __nla_validate_parse: 4 callbacks suppressed [ 79.120034][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 79.144361][ T5874] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.752: corrupted inode contents [ 79.169520][ T5874] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.752: mark_inode_dirty error [ 79.185648][ T5874] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.752: corrupted inode contents [ 79.199926][ T5874] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.752: mark_inode_dirty error [ 79.224287][ T5874] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.752: mark inode dirty (error -117) [ 79.244849][ T5882] loop2: detected capacity change from 0 to 512 [ 79.245777][ T5874] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 79.270873][ T5882] EXT4-fs: Ignoring removed oldalloc option [ 79.314305][ T5882] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.370031][ T5900] netlink: 204 bytes leftover after parsing attributes in process `syz.4.758'. [ 79.400798][ T5902] netlink: 96 bytes leftover after parsing attributes in process `syz.4.763'. [ 79.506144][ T5918] loop0: detected capacity change from 0 to 512 [ 79.516069][ T5918] EXT4-fs: Ignoring removed bh option [ 79.537207][ T5918] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.611941][ T5918] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.770: corrupted inode contents [ 79.650052][ T5931] loop4: detected capacity change from 0 to 1024 [ 79.658025][ T5918] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.770: mark_inode_dirty error [ 79.677537][ T5918] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.770: corrupted inode contents [ 79.691796][ T5918] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #18: comm syz.0.770: mark_inode_dirty error [ 79.705700][ T5918] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #18: comm syz.0.770: mark inode dirty (error -117) [ 79.718430][ T5918] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 79.794422][ T5949] wireguard0: entered promiscuous mode [ 79.799962][ T5949] wireguard0: entered allmulticast mode [ 79.858340][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 80.019224][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.070556][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 80.085314][ T5976] team1: entered promiscuous mode [ 80.090383][ T5976] team1: entered allmulticast mode [ 80.097768][ T5976] 8021q: adding VLAN 0 to HW filter on device team1 [ 80.105122][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 80.224741][ T5996] loop3: detected capacity change from 0 to 512 [ 80.268175][ T5996] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.437866][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 80.530298][ T6033] netlink: 168 bytes leftover after parsing attributes in process `syz.1.817'. [ 80.550932][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 80.630455][ T6044] loop4: detected capacity change from 0 to 512 [ 80.638308][ T6044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.650965][ T6044] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.665660][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 80.898988][ T6085] loop1: detected capacity change from 0 to 2048 [ 81.164111][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 81.164127][ T29] audit: type=1326 audit(1765259235.955:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0ba3f749 code=0x7ffc0000 [ 81.206321][ T29] audit: type=1326 audit(1765259235.985:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcb0ba3f749 code=0x7ffc0000 [ 81.229669][ T29] audit: type=1326 audit(1765259235.985:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.2.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0ba3f749 code=0x7ffc0000 [ 81.386435][ T6112] loop0: detected capacity change from 0 to 1024 [ 81.396834][ T6112] EXT4-fs: Ignoring removed bh option [ 81.402345][ T6112] EXT4-fs: inline encryption not supported [ 81.408643][ T6112] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.429022][ T6112] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 81.438718][ T6112] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.851: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.449191][ T29] audit: type=1400 audit(1765259236.235:2174): avc: denied { read } for pid=6114 comm="syz.2.852" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.475561][ T29] audit: type=1400 audit(1765259236.235:2175): avc: denied { open } for pid=6114 comm="syz.2.852" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.498985][ T6112] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 81.520230][ T6112] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.851: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.537242][ T6112] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 81.546051][ T6112] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.851: Failed to acquire dquot type 0 [ 81.570088][ T6112] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 81.579807][ T6112] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.851: mark_inode_dirty error [ 81.606428][ T6112] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 81.617024][ T6112] EXT4-fs (loop0): 1 orphan inode deleted [ 81.629344][ T52] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.662900][ T52] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 81.671370][ T52] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 81.682970][ T6126] loop2: detected capacity change from 0 to 512 [ 81.693477][ T29] audit: type=1400 audit(1765259236.485:2176): avc: denied { create } for pid=6127 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.694185][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.734600][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.735478][ T6126] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.759874][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.857: corrupted inode contents [ 81.776005][ T6126] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.857: mark_inode_dirty error [ 81.787881][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 81.809388][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.857: corrupted inode contents [ 81.812218][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 81.838483][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 81.889116][ T29] audit: type=1326 audit(1765259236.655:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.3.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 81.986845][ T6152] loop2: detected capacity change from 0 to 512 [ 81.998612][ T6152] EXT4-fs: Ignoring removed oldalloc option [ 82.009918][ T6152] EXT4-fs (loop2): 1 truncate cleaned up [ 82.016093][ T6154] bio_check_eod: 97 callbacks suppressed [ 82.016151][ T6154] syz.0.868: attempt to access beyond end of device [ 82.016151][ T6154] loop0: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 82.036017][ T6154] syz.0.868: attempt to access beyond end of device [ 82.036017][ T6154] loop0: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 82.104506][ T6157] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.118474][ T6157] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.139141][ T6157] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.159297][ T6157] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 82.176160][ T6157] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.870: bg 0: block 40: padding at end of block bitmap is not set [ 82.204611][ T6157] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 82.215075][ T6169] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.259742][ T6157] EXT4-fs (loop3): 1 truncate cleaned up [ 82.462186][ T6196] ALSA: seq fatal error: cannot create timer (-19) [ 82.916261][ T6216] ip6gre1: entered promiscuous mode [ 82.921517][ T6216] ip6gre1: entered allmulticast mode [ 82.938689][ T6216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6216 comm=syz.3.894 [ 82.938720][ T4000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.958504][ T4000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.966202][ T5449] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.969420][ T6216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.068782][ T6230] ext4: Unknown parameter 'fowner' [ 83.176025][ T6238] EXT4-fs (loop2): 1 truncate cleaned up [ 83.245296][ T6238] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.905: bg 0: block 465: padding at end of block bitmap is not set [ 83.340873][ T6238] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1292 with error 117 [ 83.353524][ T6238] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.353524][ T6238] [ 83.396342][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.403778][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.411217][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.418587][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.426054][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.433477][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.440865][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.448264][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.455662][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.463048][ T3409] hid-generic 214E:0000:0000.0001: unknown main item tag 0x0 [ 83.536900][ T3409] hid-generic 214E:0000:0000.0001: hidraw0: HID vffffff.ff Device [sy] on syz0 [ 83.686736][ T6273] xt_connbytes: Forcing CT accounting to be enabled [ 83.700202][ T6273] Cannot find set identified by id 0 to match [ 83.869203][ T3409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.949482][ T3409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.994101][ T3409] IPVS: starting estimator thread 0... [ 84.047350][ T6290] EXT4-fs: Mount option(s) incompatible with ext3 [ 84.109216][ T6288] IPVS: using max 2352 ests per chain, 117600 per kthread [ 84.364502][ T6303] set_capacity_and_notify: 6 callbacks suppressed [ 84.364517][ T6303] loop3: detected capacity change from 0 to 1024 [ 84.389767][ T6303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.701179][ T6310] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.708791][ T6310] vhci_hcd vhci_hcd.2: invalid port number 96 [ 84.710581][ T6317] __nla_validate_parse: 6 callbacks suppressed [ 84.710594][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 84.714921][ T6310] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 84.854921][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 84.864405][ T6329] netlink: 32 bytes leftover after parsing attributes in process `syz.3.943'. [ 84.960015][ T6338] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 84.992892][ T6338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.020277][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.031811][ T6340] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.112419][ T6340] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 85.141874][ T6343] netlink: 96 bytes leftover after parsing attributes in process `syz.4.948'. [ 85.549136][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.759904][ T6364] vhci_hcd vhci_hcd.3: invalid port number 9 [ 86.125186][ T6370] netlink: 96 bytes leftover after parsing attributes in process `syz.3.961'. [ 86.386428][ T6390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6390 comm=syz.0.969 [ 86.442952][ T6396] loop2: detected capacity change from 0 to 256 [ 86.489863][ T6398] vhci_hcd vhci_hcd.3: invalid port number 9 [ 86.989133][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.289818][ T6432] vhci_hcd vhci_hcd.3: invalid port number 9 [ 87.308816][ T6437] loop0: detected capacity change from 0 to 512 [ 87.339926][ T6437] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.375710][ T6448] loop4: detected capacity change from 0 to 1024 [ 87.391244][ T6448] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.402380][ T6448] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.414886][ T6448] JBD2: no valid journal superblock found [ 87.420725][ T6448] EXT4-fs (loop4): Could not load journal inode [ 87.431104][ T6448] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 87.447262][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 87.487676][ T6452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.495525][ T6456] netlink: 'syz.4.995': attribute type 7 has an invalid length. [ 87.500194][ T6452] macvlan0: entered promiscuous mode [ 87.503245][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 87.508521][ T6452] macvlan0: entered allmulticast mode [ 87.583684][ T6452] bond2: (slave macvlan0): Opening slave failed [ 94.989114][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.075505][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 96.075517][ T29] audit: type=1326 audit(1765259250.865:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.141021][ T29] audit: type=1400 audit(1765259250.875:2283): avc: denied { mounton } for pid=6471 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.162550][ T29] audit: type=1326 audit(1765259250.905:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.185869][ T29] audit: type=1326 audit(1765259250.905:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.209170][ T29] audit: type=1326 audit(1765259250.905:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.232599][ T29] audit: type=1326 audit(1765259250.905:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.256021][ T29] audit: type=1326 audit(1765259250.905:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.279492][ T29] audit: type=1326 audit(1765259250.905:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.302626][ T29] audit: type=1326 audit(1765259250.905:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.326009][ T29] audit: type=1326 audit(1765259250.905:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763e93f749 code=0x7ffc0000 [ 96.399730][ T6493] loop4: detected capacity change from 0 to 128 [ 96.399950][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 96.408063][ T6493] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.420618][ T6493] FAT-fs (loop4): Filesystem has been set read-only [ 96.428067][ T3314] EXT4-fs unmount: 28 callbacks suppressed [ 96.428086][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.446666][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.446666][ T6493] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 96.476024][ T6493] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.476524][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 96.483909][ T6493] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.492851][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 96.509767][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.509767][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.533216][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.533216][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.547221][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.547221][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.561159][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.561159][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.575120][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.575120][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.589245][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.589245][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.603049][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.603049][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.617128][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.617128][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.630919][ T6493] syz.4.1007: attempt to access beyond end of device [ 96.630919][ T6493] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 96.647402][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.654488][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.674162][ T6471] bridge_slave_0: entered allmulticast mode [ 96.680770][ T6471] bridge_slave_0: entered promiscuous mode [ 96.687580][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.694766][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.702200][ T6471] bridge_slave_1: entered allmulticast mode [ 96.708711][ T6471] bridge_slave_1: entered promiscuous mode [ 96.729290][ T4027] bridge_slave_1: left allmulticast mode [ 96.734954][ T4027] bridge_slave_1: left promiscuous mode [ 96.740626][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.748594][ T4027] bridge_slave_0: left allmulticast mode [ 96.754282][ T4027] bridge_slave_0: left promiscuous mode [ 96.760038][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.081098][ T4027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.090471][ T4027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.099505][ T4027] bond0 (unregistering): Released all slaves [ 97.118418][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.128848][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.149667][ T6471] team0: Port device team_slave_0 added [ 97.156981][ T6471] team0: Port device team_slave_1 added [ 97.188445][ T4027] team0 (unregistering): Port device team_slave_0 removed [ 97.219518][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.226464][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.252389][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.265065][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.272226][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.298139][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.327239][ T6471] hsr_slave_0: entered promiscuous mode [ 97.333281][ T6471] hsr_slave_1: entered promiscuous mode [ 97.339032][ T6471] debugfs: 'hsr0' already exists in 'hsr' [ 97.344796][ T6471] Cannot create hsr debugfs directory [ 97.401347][ T6471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.409749][ T6471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.418223][ T6471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.426736][ T6471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.459948][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.471936][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.481862][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.488909][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.500115][ T4020] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.507149][ T4020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.562121][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.642305][ T6471] veth0_vlan: entered promiscuous mode [ 97.649667][ T6471] veth1_vlan: entered promiscuous mode [ 97.663629][ T6471] veth0_macvtap: entered promiscuous mode [ 97.671028][ T6471] veth1_macvtap: entered promiscuous mode [ 97.681241][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.691801][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.701505][ T4000] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.710248][ T4000] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.718950][ T4000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.727859][ T4000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.868744][ T6544] loop2: detected capacity change from 0 to 128 [ 97.880996][ T6546] loop5: detected capacity change from 0 to 512 [ 97.887665][ T6546] EXT4-fs: Ignoring removed bh option [ 97.889468][ T6544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.917708][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 97.930189][ T6546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.975536][ T6546] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.986727][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 98.007222][ T6546] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1008: corrupted inode contents [ 98.024313][ T6561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.049959][ T6546] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.1008: mark_inode_dirty error [ 98.062230][ T6546] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1008: corrupted inode contents [ 98.075273][ T6546] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #18: comm syz.5.1008: mark_inode_dirty error [ 98.087750][ T6546] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #18: comm syz.5.1008: mark inode dirty (error -117) [ 98.100692][ T6546] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 98.144059][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.222122][ T6577] loop5: detected capacity change from 0 to 1024 [ 98.283164][ T6577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.341060][ T6471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.504933][ T6603] netlink: 'syz.5.1040': attribute type 1 has an invalid length. [ 98.625841][ T6614] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1045'. [ 98.832004][ T6627] netlink: 'syz.2.1051': attribute type 13 has an invalid length. [ 98.848152][ T6631] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 98.889114][ T6631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.938255][ T6631] macvlan0: entered promiscuous mode [ 98.967536][ T6644] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 98.980967][ T6631] bond1: entered promiscuous mode [ 99.081678][ T6631] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 99.089998][ T6631] bond1: left promiscuous mode [ 99.190263][ T6659] netlink: 'syz.5.1064': attribute type 39 has an invalid length. [ 99.213308][ T6663] bridge: RTM_NEWNEIGH with invalid ether address [ 99.225729][ T6661] SELinux: failed to load policy [ 99.274405][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1071'. [ 99.350294][ T6684] syzkaller0: entered allmulticast mode [ 99.379842][ T6684] syzkaller0 (unregistering): left allmulticast mode [ 99.428260][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 99.576737][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 99.585691][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 99.676218][ T6720] netlink: 'syz.3.1090': attribute type 3 has an invalid length. [ 99.908338][ T6754] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.1107'. [ 100.374279][ T6760] program syz.0.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.383695][ T6760] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.405522][ T6762] syzkaller1: entered promiscuous mode [ 100.411118][ T6762] syzkaller1: entered allmulticast mode [ 100.753362][ T6784] ip6gre1: entered allmulticast mode [ 100.813219][ T6794] ================================================================== [ 100.821311][ T6794] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 100.830922][ T6794] [ 100.833232][ T6794] write to 0xffff888123688300 of 8 bytes by task 6791 on cpu 1: [ 100.840832][ T6794] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 100.846706][ T6794] page_pool_alloc_pages+0xd0/0x130 [ 100.851881][ T6794] bpf_test_run_xdp_live+0x54d/0x11d0 [ 100.857231][ T6794] bpf_prog_test_run_xdp+0x525/0x970 [ 100.862497][ T6794] bpf_prog_test_run+0x22a/0x390 [ 100.867423][ T6794] __sys_bpf+0x4c0/0x7c0 [ 100.871639][ T6794] __x64_sys_bpf+0x41/0x50 [ 100.876025][ T6794] x64_sys_call+0x28e1/0x3000 [ 100.880677][ T6794] do_syscall_64+0xd8/0x2a0 [ 100.885173][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.891043][ T6794] [ 100.893349][ T6794] read to 0xffff888123688300 of 8 bytes by task 6794 on cpu 0: [ 100.900860][ T6794] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 100.906728][ T6794] napi_pp_put_page+0xe9/0x200 [ 100.911465][ T6794] skb_free_head+0x12c/0x150 [ 100.916033][ T6794] skb_release_data+0x33b/0x370 [ 100.920863][ T6794] __kfree_skb+0x44/0x150 [ 100.925177][ T6794] sk_skb_reason_drop+0xbd/0x270 [ 100.930097][ T6794] skb_vlan_untag+0x52a/0x690 [ 100.934768][ T6794] __netif_receive_skb_core+0x23e/0x1920 [ 100.940391][ T6794] __netif_receive_skb_list_core+0x113/0x500 [ 100.946363][ T6794] netif_receive_skb_list_internal+0x487/0x600 [ 100.952498][ T6794] gro_receive_skb+0x374/0x570 [ 100.957242][ T6794] cpu_map_kthread_run+0x1013/0x1560 [ 100.962504][ T6794] kthread+0x489/0x510 [ 100.966550][ T6794] ret_from_fork+0x149/0x290 [ 100.971116][ T6794] ret_from_fork_asm+0x1a/0x30 [ 100.975856][ T6794] [ 100.978152][ T6794] value changed: 0xffffea000454d8c0 -> 0x0000000000000000 [ 100.985229][ T6794] [ 100.987528][ T6794] Reported by Kernel Concurrency Sanitizer on: [ 100.993659][ T6794] CPU: 0 UID: 0 PID: 6794 Comm: cpumap/0/map:57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.003783][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.013813][ T6794] ==================================================================