last executing test programs: 26.342813587s ago: executing program 1 (id=364): socket$inet6(0xa, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000"], 0x28}}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) 26.205293079s ago: executing program 1 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x61f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 26.071502461s ago: executing program 1 (id=369): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, r4, 0xffffff7f}, 0x10) 25.948278274s ago: executing program 1 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 25.635978939s ago: executing program 1 (id=381): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 22.555234322s ago: executing program 1 (id=412): openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) 22.517142513s ago: executing program 32 (id=412): openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) 4.247572167s ago: executing program 2 (id=752): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.427354181s ago: executing program 5 (id=761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 3.375687302s ago: executing program 5 (id=763): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, 0x0) 3.336020072s ago: executing program 5 (id=764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000300000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.283966324s ago: executing program 5 (id=765): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000e500000000000000000605000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 3.263005614s ago: executing program 5 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 3.246905474s ago: executing program 5 (id=767): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 2.518819577s ago: executing program 4 (id=770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0xfffffffffffffffd, 0x81, 0x7fffffff, 0x100000000}, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.394049346s ago: executing program 0 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 1.393627916s ago: executing program 2 (id=781): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffbfe, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 1.393087976s ago: executing program 4 (id=783): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c5902, 0x2d) r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_es_find_extent_range_exit\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r3 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r3, 0x0, 0x0, 0x7000000) 1.352044517s ago: executing program 3 (id=784): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) lseek(0xffffffffffffffff, 0xd437f9c, 0x4) semop(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x71e, &(0x7f0000000800)="$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") io_pgetevents(0x0, 0x10001, 0x0, 0x0, 0x0, 0x0) 1.346620146s ago: executing program 0 (id=785): mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x82e53cd7b373cfc0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r1, 0x1, 0x4000000, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040050}, 0x48804) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x7, 0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x5, "7805cc", 0x4, 0xf9}) 1.331473157s ago: executing program 0 (id=786): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000403000000000000000000000902"], 0x0, 0x56, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x1}]}}}]}, 0x3c}}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x5, 0x2, 0x1a, 0x1}, {0x2, 0xde, 0x6, 0xe}]}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa4b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x44081}, 0x24048001) acct(&(0x7f0000000500)='./file0\x00') 1.315162527s ago: executing program 2 (id=787): socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0), 0x1000000}, 0x20) 1.246831018s ago: executing program 4 (id=788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'vlan0\x00'}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xfffd, 0x100000, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x5, 0x7}}}, 0x90) r2 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x6, 0x2003) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.237623379s ago: executing program 0 (id=798): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000a18000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4000000000209, 0x0) mkdir(0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x24000408) close(r2) 1.182635549s ago: executing program 0 (id=789): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) r3 = socket$isdn(0x22, 0x3, 0x11) copy_file_range(r0, &(0x7f0000000040)=0x2, r3, &(0x7f00000000c0)=0x8c6, 0x0, 0x0) 1.18140139s ago: executing program 3 (id=790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlockall() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.18113179s ago: executing program 2 (id=800): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 1.14751316s ago: executing program 3 (id=791): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x6, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) getpid() socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 1.062549561s ago: executing program 4 (id=792): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) unshare(0x24040000) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_unlink(0x0) 337.310034ms ago: executing program 0 (id=793): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) 337.015664ms ago: executing program 3 (id=794): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) lstat(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_channels={0x24, 0x1, 0x2, 0xffff206e, 0xfffffffb, 0x1, 0x2, 0x0, 0x5}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0xffffbe96, 0x2, 0xfffffefc, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3000000000975ece494e857638ddd31d8b"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004831}, 0x20048880) 183.453867ms ago: executing program 4 (id=795): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="a58bc94ae742e11df77c3c9fa95307503f0f5e54", 0x14}, {&(0x7f0000001740)="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", 0x6ad}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000100000001000000411e2d3fc8759e30994d86cabc132478b092f4c8c584f581e994c179b3a687f565687feff21bc571bab1e5b02f3be5f3fcde8ca77e9d694bf52fd0dace576c737cbd", @ANYRES32, @ANYRES32=r0], 0x18, 0x40000}}], 0x2, 0x80004) 182.673626ms ago: executing program 3 (id=807): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 182.041987ms ago: executing program 2 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 159.693007ms ago: executing program 2 (id=797): unshare(0x62040200) mq_unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readlink(0x0, 0x0, 0x0) iopl(0x3) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x28}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.25836ms ago: executing program 3 (id=799): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) dup(0xffffffffffffffff) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 4 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x2}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): s [ 40.141552][ T3747] EXT4-fs (loop2): Remounting filesystem read-only [ 40.156714][ T3747] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 40.235440][ T168] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 40.244672][ T168] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 40.294840][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.471148][ T3770] loop2: detected capacity change from 0 to 8192 [ 40.822388][ T3782] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.855808][ T3779] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.108053][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 41.465472][ T3801] loop1: detected capacity change from 0 to 2048 [ 41.546570][ T3801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.637213][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.645749][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.814769][ T3814] siw: device registration error -23 [ 41.891744][ T3816] loop0: detected capacity change from 0 to 1024 [ 41.898790][ T3816] EXT4-fs: Ignoring removed nobh option [ 41.904439][ T3816] EXT4-fs: Ignoring removed bh option [ 41.925525][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.001004][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.134780][ T3823] SELinux: Context : is not valid (left unmapped). [ 42.276666][ T3830] loop3: detected capacity change from 0 to 512 [ 42.297131][ T3830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.345877][ T3830] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.381708][ T3830] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.136: corrupted inode contents [ 42.405559][ T3830] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.136: mark_inode_dirty error [ 42.417549][ T3830] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.136: corrupted inode contents [ 42.420366][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.430735][ T3830] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.136: mark_inode_dirty error [ 42.591716][ T3837] syzkaller0: entered promiscuous mode [ 42.597728][ T3837] syzkaller0: entered allmulticast mode [ 42.622542][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.946585][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 42.946601][ T29] audit: type=1400 audit(1745127288.597:481): avc: denied { name_connect } for pid=3852 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 42.995737][ T3854] loop4: detected capacity change from 0 to 512 [ 43.038829][ T3853] veth1_to_bond: entered allmulticast mode [ 43.059634][ T3856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.066867][ T3856] IPv6: NLM_F_CREATE should be set when creating new route [ 43.106362][ T3858] veth1_to_bond: entered promiscuous mode [ 43.128941][ T3854] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 43.147575][ T3853] veth1_to_bond: left promiscuous mode [ 43.153211][ T3853] veth1_to_bond: left allmulticast mode [ 43.165536][ T3854] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 43.215764][ T3854] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.143: corrupted inode contents [ 43.232034][ T3854] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #11: comm syz.4.143: mark_inode_dirty error [ 43.244194][ T3854] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.143: invalid indirect mapped block 1 (level 1) [ 43.265581][ T3854] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.143: corrupted inode contents [ 43.302627][ T3865] loop0: detected capacity change from 0 to 2048 [ 43.309744][ T3854] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 43.330555][ T3854] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.143: corrupted inode contents [ 43.349484][ T3854] EXT4-fs error (device loop4): ext4_truncate:4255: inode #11: comm syz.4.143: mark_inode_dirty error [ 43.362134][ T3865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.384399][ T3854] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 43.388316][ T3870] loop1: detected capacity change from 0 to 512 [ 43.393434][ T3865] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.412573][ T3854] EXT4-fs (loop4): 1 truncate cleaned up [ 43.420206][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.464551][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.487453][ T3873] loop3: detected capacity change from 0 to 512 [ 43.497015][ T3870] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.535774][ T29] audit: type=1400 audit(1745127289.177:482): avc: denied { create } for pid=3875 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.570769][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.588546][ T3870] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.148: corrupted inode contents [ 43.630859][ T3873] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.641846][ T3870] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.148: mark_inode_dirty error [ 43.672453][ T3870] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.148: corrupted inode contents [ 43.681321][ T29] audit: type=1400 audit(1745127289.237:483): avc: denied { setattr } for pid=3869 comm="syz.1.148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.692624][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.739024][ T29] audit: type=1400 audit(1745127289.387:484): avc: denied { setattr } for pid=3871 comm="syz.3.149" path="/32/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.745286][ T3881] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.148: corrupted inode contents [ 43.774166][ T168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 43.801560][ T3881] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.148: mark_inode_dirty error [ 43.824116][ T168] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 181 with error 117 [ 43.836667][ T168] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.836667][ T168] [ 43.863287][ T3881] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.148: corrupted inode contents [ 43.879579][ T3885] loop4: detected capacity change from 0 to 2048 [ 43.893342][ T29] audit: type=1400 audit(1745127289.527:485): avc: denied { ioctl } for pid=3871 comm="syz.3.149" path="/32/file1/file1" dev="loop3" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.919284][ T3881] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.148: mark_inode_dirty error [ 43.941468][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.149: corrupted inode contents [ 43.964539][ T3881] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.148: corrupted inode contents [ 43.977775][ T3885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.990764][ T3881] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.148: mark_inode_dirty error [ 44.005602][ T3883] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #19: comm syz.3.149: mark_inode_dirty error [ 44.017150][ T3885] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.029834][ T3870] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.148: corrupted inode contents [ 44.050643][ T29] audit: type=1326 audit(1745127289.697:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf3be169 code=0x7ffc0000 [ 44.087450][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.149: corrupted inode contents [ 44.105380][ T3889] loop2: detected capacity change from 0 to 512 [ 44.113866][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.123641][ T29] audit: type=1326 audit(1745127289.697:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf3be169 code=0x7ffc0000 [ 44.146980][ T29] audit: type=1326 audit(1745127289.697:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8cf3be169 code=0x7ffc0000 [ 44.154820][ T3883] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.149: mark_inode_dirty error [ 44.170233][ T29] audit: type=1326 audit(1745127289.697:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf3be169 code=0x7ffc0000 [ 44.192192][ T3883] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.149: mark inode dirty (error -117) [ 44.205155][ T29] audit: type=1326 audit(1745127289.697:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf3be169 code=0x7ffc0000 [ 44.244224][ T3883] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 44.319854][ T3889] EXT4-fs (loop2): 1 orphan inode deleted [ 44.326057][ T3889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.338733][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 44.352897][ T3894] loop1: detected capacity change from 0 to 2048 [ 44.373964][ T3889] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.417943][ T3894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.450614][ T168] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 197 with max blocks 1 with error 117 [ 44.463336][ T168] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.463336][ T168] [ 44.487103][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.577688][ T3889] bridge0: entered promiscuous mode [ 44.584024][ T3889] bridge0: port 3(macvlan2) entered blocking state [ 44.590678][ T3889] bridge0: port 3(macvlan2) entered disabled state [ 44.624221][ T3889] macvlan2: entered allmulticast mode [ 44.629643][ T3889] bridge0: entered allmulticast mode [ 44.654571][ T3889] macvlan2: left allmulticast mode [ 44.659734][ T3891] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.151: bg 0: block 345: padding at end of block bitmap is not set [ 44.659749][ T3889] bridge0: left allmulticast mode [ 44.706779][ T3891] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 44.719435][ T3891] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.719435][ T3891] [ 44.737498][ T3903] loop3: detected capacity change from 0 to 2048 [ 44.759588][ T3889] bridge0: left promiscuous mode [ 44.769893][ T3903] EXT4-fs (loop3): failed to initialize system zone (-117) [ 44.780733][ T3903] EXT4-fs (loop3): mount failed [ 44.810175][ T3891] syz.4.151 (3891) used greatest stack depth: 9472 bytes left [ 44.878612][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.931703][ T3876] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 198 with max blocks 1 with error 117 [ 44.944304][ T3876] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.944304][ T3876] [ 44.990419][ T3913] process 'syz.3.158' launched '/dev/fd/9' with NULL argv: empty string added [ 45.099591][ T3918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 45.133704][ T3918] syz_tun: entered promiscuous mode [ 45.164615][ T3918] macvtap1: entered promiscuous mode [ 45.170181][ T3918] macvtap1: entered allmulticast mode [ 45.175579][ T3918] syz_tun: entered allmulticast mode [ 45.213562][ T152] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 45.242994][ T152] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 45.255529][ T152] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.255529][ T152] [ 45.265229][ T152] EXT4-fs (loop1): Total free blocks count 0 [ 45.271273][ T152] EXT4-fs (loop1): Free/Dirty block details [ 45.277231][ T152] EXT4-fs (loop1): free_blocks=2415919504 [ 45.282947][ T152] EXT4-fs (loop1): dirty_blocks=16400 [ 45.288359][ T152] EXT4-fs (loop1): Block reservation details [ 45.294376][ T152] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 45.371672][ T152] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 45.413624][ T3865] syz.0.147 (3865) used greatest stack depth: 7112 bytes left [ 45.456742][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.476276][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.606502][ T3932] loop2: detected capacity change from 0 to 8192 [ 45.689175][ T3939] loop0: detected capacity change from 0 to 512 [ 45.702314][ T3939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.730453][ T3939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.818995][ T3946] loop3: detected capacity change from 0 to 512 [ 45.824223][ T3939] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.865362][ T3946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.891279][ T3946] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.939930][ T3939] sd 0:0:1:0: device reset [ 45.968857][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.979173][ T3953] loop2: detected capacity change from 0 to 8192 [ 46.003940][ T3948] syz.2.170: attempt to access beyond end of device [ 46.003940][ T3948] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 46.022231][ T3948] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 46.030102][ T3948] FAT-fs (loop2): Filesystem has been set read-only [ 46.037382][ T3960] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.171: corrupted inode contents [ 46.039730][ T3948] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 46.057925][ T3959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 46.061187][ T3948] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 46.070699][ T3960] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.171: mark_inode_dirty error [ 46.075575][ T3957] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.095605][ T3960] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.171: corrupted inode contents [ 46.108354][ T3946] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.171: corrupted inode contents [ 46.122384][ T3959] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.131132][ T3959] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.139896][ T3959] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.141654][ T3946] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.171: mark_inode_dirty error [ 46.148639][ T3959] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.161262][ T3946] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.171: corrupted inode contents [ 46.189176][ T3957] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.211769][ T3962] loop1: detected capacity change from 0 to 512 [ 46.219819][ T3946] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.171: mark_inode_dirty error [ 46.220807][ T3965] loop0: detected capacity change from 0 to 512 [ 46.248962][ T3946] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.171: corrupted inode contents [ 46.250456][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.269886][ T3946] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.171: mark_inode_dirty error [ 46.270745][ T3957] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.281602][ T3962] EXT4-fs (loop1): too many log groups per flexible block group [ 46.290909][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.298520][ T3962] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 46.317444][ T3962] EXT4-fs (loop1): mount failed [ 46.317631][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.334896][ T3965] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.345973][ T3957] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.380752][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.431861][ T3957] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.446804][ T3957] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.458716][ T3957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.467117][ T3976] loop1: detected capacity change from 0 to 1024 [ 46.471314][ T3957] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.474009][ T3976] EXT4-fs: Ignoring removed nobh option [ 46.487179][ T3976] EXT4-fs: Ignoring removed bh option [ 46.506439][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.533482][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.648370][ T3976] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.179: Allocating blocks 497-513 which overlap fs metadata [ 46.893721][ T3987] loop3: detected capacity change from 0 to 2048 [ 47.061047][ T3987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.170517][ T3989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 47.177124][ T3989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.184746][ T3989] vhci_hcd vhci_hcd.0: Device attached [ 47.199524][ T3989] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.214019][ T3989] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.228093][ T3989] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 47.241914][ T3989] batman_adv: batadv0: Adding interface: team0 [ 47.248215][ T3989] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.273376][ T3989] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 47.479583][ T3992] vhci_hcd: connection closed [ 47.479864][ T168] vhci_hcd: stop threads [ 47.489084][ T168] vhci_hcd: release socket [ 47.493615][ T168] vhci_hcd: disconnect device [ 47.505047][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.516205][ T3996] ref_ctr_offset mismatch. inode: 0x67 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 47.544360][ T36] vhci_hcd: vhci_device speed not set [ 47.603662][ T4000] loop1: detected capacity change from 0 to 128 [ 47.613631][ T3987] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 47.625868][ T3987] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.625868][ T3987] [ 47.636273][ T3987] EXT4-fs (loop3): Total free blocks count 0 [ 47.642744][ T3987] EXT4-fs (loop3): Free/Dirty block details [ 47.648717][ T3987] EXT4-fs (loop3): free_blocks=0 [ 47.653665][ T3987] EXT4-fs (loop3): dirty_blocks=0 [ 47.658709][ T3987] EXT4-fs (loop3): Block reservation details [ 47.664720][ T3987] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 47.713743][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.775268][ T4009] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 47.783042][ T4009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.189'. [ 47.792212][ T4000] syz.1.187: attempt to access beyond end of device [ 47.792212][ T4000] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 47.842044][ T4000] syz.1.187: attempt to access beyond end of device [ 47.842044][ T4000] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 47.856428][ T4000] syz.1.187: attempt to access beyond end of device [ 47.856428][ T4000] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 47.874237][ T4000] syz.1.187: attempt to access beyond end of device [ 47.874237][ T4000] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 47.929894][ T4000] syz.1.187: attempt to access beyond end of device [ 47.929894][ T4000] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 47.962010][ T4000] syz.1.187: attempt to access beyond end of device [ 47.962010][ T4000] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 47.994817][ T4000] syz.1.187: attempt to access beyond end of device [ 47.994817][ T4000] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 48.010678][ T4014] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.040999][ T4000] syz.1.187: attempt to access beyond end of device [ 48.040999][ T4000] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 48.083166][ T4016] vlan1: entered allmulticast mode [ 48.091769][ T4000] syz.1.187: attempt to access beyond end of device [ 48.091769][ T4000] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 48.116957][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 48.116970][ T29] audit: type=1400 audit(1745127293.757:616): avc: denied { read } for pid=4018 comm="syz.2.194" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.145678][ T29] audit: type=1400 audit(1745127293.757:617): avc: denied { open } for pid=4018 comm="syz.2.194" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.177787][ T4014] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.201764][ T3975] +}[@ (3975) used greatest stack depth: 6904 bytes left [ 48.223406][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.236123][ T4014] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.255881][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.282322][ T4026] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 48.295673][ T4026] loop4: detected capacity change from 0 to 512 [ 48.307345][ T4026] EXT4-fs: Ignoring removed oldalloc option [ 48.315706][ T4014] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.326303][ T4026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.337722][ T4026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 48.351637][ T4026] System zones: 1-12 [ 48.357354][ T4026] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 48.370749][ T4026] EXT4-fs (loop4): 1 truncate cleaned up [ 48.377965][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.398031][ T4014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.411014][ T4014] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.422399][ T4014] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.435448][ T4014] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.514761][ T4030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'. [ 48.596627][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.630257][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 48.651715][ T4034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.914503][ T4044] pim6reg1: entered promiscuous mode [ 48.919826][ T4044] pim6reg1: entered allmulticast mode [ 49.010186][ T4048] loop1: detected capacity change from 0 to 512 [ 49.030494][ T4046] loop2: detected capacity change from 0 to 8192 [ 49.047700][ T4048] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 49.047729][ T4046] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 49.063598][ T4046] FAT-fs (loop2): Filesystem has been set read-only [ 49.069490][ T4048] System zones: 0-2, 18-18, 34-35 [ 49.086448][ T4046] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 49.098929][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.111722][ T29] audit: type=1400 audit(1745127294.747:618): avc: denied { allowed } for pid=4045 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.132568][ T4046] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 49.159372][ T4048] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.172655][ T29] audit: type=1400 audit(1745127294.817:619): avc: denied { setattr } for pid=4047 comm="syz.1.205" path="/38/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.271465][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.357151][ T4058] loop2: detected capacity change from 0 to 164 [ 49.367774][ T4058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.376378][ T4056] loop1: detected capacity change from 0 to 2048 [ 49.376799][ T29] audit: type=1400 audit(1745127295.027:620): avc: denied { mount } for pid=4057 comm="syz.2.208" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.432724][ T4060] loop3: detected capacity change from 0 to 512 [ 49.443372][ T4060] EXT4-fs (loop3): filesystem is read-only [ 49.449629][ T3380] loop1: p2 < > p3 p4 < > [ 49.454179][ T3380] loop1: partition table partially beyond EOD, truncated [ 49.469656][ T4058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.474441][ T3380] loop1: p2 start 4294902784 is beyond EOD, truncated [ 49.484725][ T3380] loop1: p3 start 3724543488 is beyond EOD, truncated [ 49.517260][ T29] audit: type=1400 audit(1745127295.147:621): avc: denied { read append } for pid=4061 comm="syz.0.210" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.540829][ T29] audit: type=1400 audit(1745127295.147:622): avc: denied { open } for pid=4061 comm="syz.0.210" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.564129][ T29] audit: type=1400 audit(1745127295.147:623): avc: denied { ioctl } for pid=4061 comm="syz.0.210" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.604250][ T29] audit: type=1400 audit(1745127295.247:624): avc: denied { kexec_image_load } for pid=4063 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 49.640382][ T29] audit: type=1400 audit(1745127295.287:625): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.640418][ T4056] loop1: p2 < > p3 p4 < > [ 49.664948][ T4056] loop1: partition table partially beyond EOD, truncated [ 49.674819][ T4056] loop1: p2 start 4294902784 is beyond EOD, truncated [ 49.681690][ T4056] loop1: p3 start 3724543488 is beyond EOD, truncated [ 49.798430][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 49.835041][ T4083] loop3: detected capacity change from 0 to 2048 [ 49.846189][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 49.992108][ T3380] Alternate GPT is invalid, using primary GPT. [ 49.998442][ T3380] loop3: p2 p3 p7 [ 50.119070][ T4083] Alternate GPT is invalid, using primary GPT. [ 50.125440][ T4083] loop3: p2 p3 p7 [ 50.149933][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 50.197009][ T4099] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.204290][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.280231][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 50.281103][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 50.291185][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 50.362395][ T4121] loop1: detected capacity change from 0 to 1024 [ 50.382015][ T4121] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 50.391785][ T4121] EXT4-fs (loop1): group descriptors corrupted! [ 50.432819][ T4130] loop1: detected capacity change from 0 to 512 [ 50.460788][ T4133] tipc: New replicast peer: 255.255.255.255 [ 50.467090][ T4133] tipc: Enabled bearer , priority 10 [ 50.475049][ T4130] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.227: corrupted in-inode xattr: invalid ea_ino [ 50.517609][ T4130] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.227: couldn't read orphan inode 15 (err -117) [ 50.518238][ T4130] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.563151][ T3308] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 50.607558][ T4140] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 50.636836][ T4146] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 50.699768][ T4148] loop2: detected capacity change from 0 to 128 [ 50.706471][ T4148] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.726226][ T4152] loop1: detected capacity change from 0 to 2048 [ 50.752634][ T4152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.759197][ T4148] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.880915][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.892379][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.114536][ T4167] netlink: 96 bytes leftover after parsing attributes in process `syz.2.241'. [ 51.164922][ T4175] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 51.167122][ T4175] ip6gretap1: entered allmulticast mode [ 51.219053][ T4175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.244'. [ 51.312370][ T4186] loop1: detected capacity change from 0 to 512 [ 51.320410][ T4184] bridge: RTM_NEWNEIGH with invalid ether address [ 51.391886][ T4191] loop3: detected capacity change from 0 to 2048 [ 51.405887][ T4191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.589490][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.659905][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 51.691536][ T4202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.701906][ T4202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.776809][ T4202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.787191][ T4202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.847024][ T4202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.857650][ T4202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.877206][ T4212] tipc: Started in network mode [ 51.882101][ T4212] tipc: Node identity 26f91f44bdbe, cluster identity 4711 [ 51.889280][ T4212] tipc: Enabled bearer , priority 0 [ 51.897619][ T4212] €Â: renamed from syzkaller0 [ 51.903572][ T4212] tipc: Disabling bearer [ 51.912710][ T4202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.923123][ T4202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.989636][ T4202] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.997894][ T4202] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.009008][ T4202] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.017349][ T4202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.035669][ T4202] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.043862][ T4202] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.054876][ T4202] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.063077][ T4202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.091036][ T4217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4217 comm=+}[@ [ 52.103008][ T4217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4217 comm=+}[@ [ 52.202680][ T4221] loop4: detected capacity change from 0 to 1024 [ 52.219330][ T4221] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 52.229217][ T4221] EXT4-fs (loop4): group descriptors corrupted! [ 52.334989][ T4228] netlink: 'syz.0.265': attribute type 3 has an invalid length. [ 52.381735][ T4233] xt_connbytes: Forcing CT accounting to be enabled [ 52.381753][ T4233] Cannot find set identified by id 0 to match [ 52.482168][ T4235] loop0: detected capacity change from 0 to 128 [ 52.534417][ T4235] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.547105][ T4235] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.619563][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 52.634841][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.670493][ T4246] xt_hashlimit: size too large, truncated to 1048576 [ 52.755281][ T4246] Cannot find set identified by id 2 to match [ 52.946894][ T4262] loop1: detected capacity change from 0 to 512 [ 53.131536][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 53.131550][ T29] audit: type=1326 audit(1745127298.777:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56abf75127 code=0x7ffc0000 [ 53.131695][ T29] audit: type=1326 audit(1745127298.777:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56abf1a359 code=0x7ffc0000 [ 53.131849][ T29] audit: type=1326 audit(1745127298.777:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 53.141487][ T29] audit: type=1326 audit(1745127298.787:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56abf75127 code=0x7ffc0000 [ 53.258746][ T4272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.259333][ T29] audit: type=1326 audit(1745127298.897:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56abf1a359 code=0x7ffc0000 [ 53.259408][ T29] audit: type=1326 audit(1745127298.897:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56abf75127 code=0x7ffc0000 [ 53.259438][ T29] audit: type=1326 audit(1745127298.897:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56abf1a359 code=0x7ffc0000 [ 53.259458][ T29] audit: type=1326 audit(1745127298.897:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 53.360546][ T4272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.388921][ T29] audit: type=1400 audit(1745127299.037:1295): avc: denied { map } for pid=4279 comm="syz.4.284" path="socket:[7554]" dev="sockfs" ino=7554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 53.396208][ T4283] loop3: detected capacity change from 0 to 1024 [ 53.412444][ T4272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.454190][ T29] audit: type=1400 audit(1745127299.097:1296): avc: denied { connect } for pid=4282 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.500144][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.503975][ T4283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.506998][ T4272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.507777][ T4283] EXT4-fs (loop3): Remounting filesystem read-only [ 53.507817][ T4283] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 53.582320][ T4272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.585632][ T4272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.588962][ T4272] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.592550][ T4272] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.644476][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.756087][ T4306] netlink: 76 bytes leftover after parsing attributes in process `syz.1.293'. [ 53.928524][ T4310] hub 2-0:1.0: USB hub found [ 53.933246][ T4310] hub 2-0:1.0: 8 ports detected [ 55.321269][ T4368] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.367034][ T4368] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.437848][ T4368] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.456507][ T3379] IPVS: starting estimator thread 0... [ 55.456677][ T4370] net_ratelimit: 12 callbacks suppressed [ 55.456725][ T4370] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 55.495639][ T4368] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.554198][ T4373] IPVS: using max 2880 ests per chain, 144000 per kthread [ 55.651396][ T4378] tipc: Enabled bearer , priority 0 [ 55.662227][ T4378] €Â: renamed from syzkaller0 [ 55.671591][ T4378] tipc: Disabling bearer [ 55.703324][ T4383] vlan3: entered promiscuous mode [ 55.708480][ T4383] bridge0: entered promiscuous mode [ 55.713763][ T4383] vlan3: entered allmulticast mode [ 55.718941][ T4383] bridge0: entered allmulticast mode [ 55.773223][ T4383] batman_adv: batadv0: Interface deactivated: dummy0 [ 55.779955][ T4383] batman_adv: batadv0: Removing interface: dummy0 [ 55.788715][ T4383] bridge0: port 4(batadv0) entered disabled state [ 55.801335][ T4383] bridge_slave_0: left allmulticast mode [ 55.807111][ T4383] bridge_slave_0: left promiscuous mode [ 55.812824][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.822714][ T4383] bridge_slave_1: left allmulticast mode [ 55.828430][ T4383] bridge_slave_1: left promiscuous mode [ 55.834152][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.845057][ T4383] bond0: (slave bond_slave_0): Releasing backup interface [ 55.852882][ T4383] bond_slave_0: left promiscuous mode [ 55.858482][ T4383] bond_slave_0: left allmulticast mode [ 55.868463][ T4383] bond0: (slave bond_slave_1): Releasing backup interface [ 55.879045][ T4383] bond_slave_1: left promiscuous mode [ 55.884581][ T4383] bond_slave_1: left allmulticast mode [ 55.894911][ T4383] team0: Port device team_slave_0 removed [ 55.903374][ T4383] team0: Port device team_slave_1 removed [ 55.911135][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.918719][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.928553][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.936058][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.959002][ T4383] team0: Port device geneve1 removed [ 55.965301][ T4383] vlan2: left promiscuous mode [ 55.970148][ T4383] bond0: left promiscuous mode [ 55.975163][ T4383] bridge0: port 3(vlan2) entered disabled state [ 56.010125][ T4386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.306823][ T4407] loop0: detected capacity change from 0 to 1024 [ 56.328981][ T4407] EXT4-fs: Ignoring removed nobh option [ 56.334608][ T4407] EXT4-fs: Ignoring removed bh option [ 56.415554][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.439444][ T4407] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.333: Allocating blocks 385-513 which overlap fs metadata [ 56.511124][ T4407] EXT4-fs (loop0): pa ffff8881069582a0: logic 16, phys. 129, len 24 [ 56.519209][ T4407] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 56.564650][ T4407] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 56.576905][ T4407] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.576905][ T4407] [ 56.586692][ T4407] EXT4-fs (loop0): Total free blocks count 0 [ 56.592676][ T4407] EXT4-fs (loop0): Free/Dirty block details [ 56.598843][ T4407] EXT4-fs (loop0): free_blocks=128 [ 56.603988][ T4407] EXT4-fs (loop0): dirty_blocks=0 [ 56.609078][ T4407] EXT4-fs (loop0): Block reservation details [ 56.615089][ T4407] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 56.657954][ T4430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 56.664480][ T4430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.672087][ T4430] vhci_hcd vhci_hcd.0: Device attached [ 56.687838][ T4430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.697752][ T4430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.707438][ T4430] netlink: 'syz.4.338': attribute type 10 has an invalid length. [ 56.744487][ T4430] batman_adv: batadv0: Adding interface: team0 [ 56.750675][ T4430] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.775964][ T4430] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 56.789465][ T4438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 56.814421][ T4440] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 56.826678][ T4432] vhci_hcd: connection closed [ 56.826854][ T41] vhci_hcd: stop threads [ 56.835806][ T41] vhci_hcd: release socket [ 56.840271][ T41] vhci_hcd: disconnect device [ 56.851815][ T4440] bond1: entered promiscuous mode [ 56.856972][ T4440] bond1: entered allmulticast mode [ 56.862291][ T10] vhci_hcd: vhci_device speed not set [ 56.887696][ T4442] ip6gretap1: entered allmulticast mode [ 56.895174][ T4442] bond1: (slave ip6gretap1): making interface the new active one [ 56.902909][ T4442] ip6gretap1: entered promiscuous mode [ 56.909777][ T4442] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 56.928283][ T4440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 56.961579][ T4444] loop0: detected capacity change from 0 to 512 [ 56.969531][ T4440] bond1: left promiscuous mode [ 56.974333][ T4440] ip6gretap1: left promiscuous mode [ 56.979592][ T4440] bond1: left allmulticast mode [ 56.981244][ T4444] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.342: casefold flag without casefold feature [ 56.985384][ T4440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.001207][ T4444] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.342: couldn't read orphan inode 15 (err -117) [ 57.017101][ T4444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.051457][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.102677][ T4452] netlink: 'syz.3.345': attribute type 7 has an invalid length. [ 57.106687][ T4451] loop0: detected capacity change from 0 to 2048 [ 57.110363][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 57.137932][ T4451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.272712][ T4461] loop2: detected capacity change from 0 to 1024 [ 57.294535][ T4461] EXT4-fs: Ignoring removed oldalloc option [ 57.300539][ T4461] EXT4-fs: Ignoring removed orlov option [ 57.336681][ T4461] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 57.365247][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.379837][ T4467] loop3: detected capacity change from 0 to 1024 [ 57.396255][ T4467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.431970][ T4461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.480909][ T4461] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 57.495607][ T4461] EXT4-fs (loop2): Remounting filesystem read-only [ 57.521378][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.546695][ T4467] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 57.609190][ T4484] loop4: detected capacity change from 0 to 1024 [ 57.618134][ T4485] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.628047][ T4485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.633167][ T4481] xt_hashlimit: max too large, truncated to 1048576 [ 57.647125][ T4481] Cannot find set identified by id 0 to match [ 57.654858][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.725827][ T4485] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.735666][ T4485] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.806511][ T4485] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.816315][ T4485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.828778][ T4496] loop2: detected capacity change from 0 to 512 [ 57.864168][ T4496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.888308][ T4496] EXT4-fs (loop2): 1 truncate cleaned up [ 57.915467][ T4485] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.925232][ T4485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.991367][ T4368] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.023829][ T4368] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.045843][ T4368] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.078582][ T4368] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.107793][ T4485] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.116036][ T4485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.133415][ T4509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4509 comm=+}[@ [ 58.145444][ T4509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4509 comm=+}[@ [ 58.157521][ T4485] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.165774][ T4485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.249566][ T4485] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.257786][ T4485] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.327142][ T4485] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.335547][ T4485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.383441][ T4526] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 58.456790][ T4536] loop2: detected capacity change from 0 to 128 [ 58.477817][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 58.477830][ T29] audit: type=1400 audit(1745127304.127:1634): avc: denied { connect } for pid=4535 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.572301][ T4542] loop2: detected capacity change from 0 to 2048 [ 58.656128][ T29] audit: type=1400 audit(1745127304.307:1635): avc: denied { create } for pid=4541 comm="syz.2.375" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.701713][ T29] audit: type=1400 audit(1745127304.317:1636): avc: denied { read write open } for pid=4541 comm="syz.2.375" path="/77/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.734647][ T4554] loop4: detected capacity change from 0 to 512 [ 58.757397][ T29] audit: type=1400 audit(1745127304.397:1637): avc: denied { ioctl } for pid=4541 comm="syz.2.375" path="/77/file1/bus" dev="loop2" ino=18 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.793806][ T4557] vlan2: entered allmulticast mode [ 58.818469][ T4554] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.834787][ T29] audit: type=1400 audit(1745127304.487:1638): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.933002][ T29] audit: type=1400 audit(1745127304.517:1639): avc: denied { append } for pid=4553 comm="syz.4.380" path="/59/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.985630][ T36] IPVS: starting estimator thread 0... [ 58.991248][ T4561] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 59.074307][ T4563] IPVS: using max 2832 ests per chain, 141600 per kthread [ 59.101209][ T4571] loop4: detected capacity change from 0 to 1024 [ 59.114787][ T4571] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.123488][ T29] audit: type=1400 audit(1745127304.767:1640): avc: denied { setopt } for pid=4566 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.144372][ T29] audit: type=1400 audit(1745127304.767:1641): avc: denied { connect } for pid=4566 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.183223][ T4571] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.387: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.183289][ T4571] Quota error (device loop4): write_blk: dquota write failed [ 59.183303][ T4571] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 59.183330][ T4571] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.387: Failed to acquire dquot type 0 [ 59.183506][ T4571] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.387: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.183636][ T4571] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.387: Invalid inode bitmap blk 0 in block_group 0 [ 59.183824][ T4571] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 59.183888][ T4571] EXT4-fs (loop4): 1 orphan inode deleted [ 59.186827][ T31] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.186985][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 59.220751][ T4571] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.346720][ T4584] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.426314][ T4590] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.461430][ T4592] loop0: detected capacity change from 0 to 512 [ 59.472725][ T4592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.485706][ T4584] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.499286][ T4590] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.510821][ T4592] EXT4-fs (loop0): 1 truncate cleaned up [ 59.528366][ T4596] netlink: 165 bytes leftover after parsing attributes in process `syz.4.396'. [ 59.537852][ T4596] netlink: 277 bytes leftover after parsing attributes in process `syz.4.396'. [ 59.565705][ T4584] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.596453][ T4590] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.635305][ T4584] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.675377][ T4590] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.720701][ T4584] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.732270][ T4584] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.742989][ T4584] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.754558][ T4584] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.771161][ T4590] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.783008][ T4590] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.794301][ T4590] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.808044][ T4590] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.831730][ T4600] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 59.860819][ T4603] syzkaller0: entered promiscuous mode [ 59.866362][ T4603] syzkaller0: entered allmulticast mode [ 59.904758][ T4604] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 59.911815][ T3379] IPVS: starting estimator thread 0... [ 59.920217][ T4610] loop4: detected capacity change from 0 to 1024 [ 59.943249][ T4610] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.965073][ T4610] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.400: bg 0: block 393: padding at end of block bitmap is not set [ 59.980509][ T4610] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 59.993221][ T4610] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.993221][ T4610] [ 60.014150][ T4608] IPVS: using max 2448 ests per chain, 122400 per kthread [ 60.051169][ T4623] loop4: detected capacity change from 0 to 764 [ 60.079436][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 60.829327][ T4636] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.839199][ T4636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.865565][ T4636] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.875346][ T4636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.891819][ T4638] hsr0: entered promiscuous mode [ 60.925450][ T4636] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.935323][ T4636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.985627][ T4636] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.995482][ T4636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.936100][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.995458][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.045914][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.167914][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.229065][ T4636] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.237386][ T4636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.279468][ T4659] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 62.291870][ T4647] chnl_net:caif_netlink_parms(): no params data found [ 62.306292][ T4636] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.314497][ T4636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.336797][ T4636] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.345151][ T4636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.366883][ T4659] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.412167][ T4636] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.420388][ T4636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.465449][ T31] bridge_slave_1: left allmulticast mode [ 62.471179][ T31] bridge_slave_1: left promiscuous mode [ 62.476933][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.525858][ T31] bridge_slave_0: left allmulticast mode [ 62.531501][ T31] bridge_slave_0: left promiscuous mode [ 62.537297][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.691947][ T4668] loop0: detected capacity change from 0 to 1024 [ 62.716967][ T4668] EXT4-fs: Ignoring removed nobh option [ 62.722817][ T4668] EXT4-fs: Ignoring removed bh option [ 62.732568][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.748042][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.767455][ T31] bond0 (unregistering): Released all slaves [ 62.808690][ T4669] tipc: Started in network mode [ 62.813584][ T4669] tipc: Node identity 26065c8c3a27, cluster identity 4711 [ 62.820830][ T4669] tipc: Enabled bearer , priority 0 [ 62.862220][ T4661] tipc: Resetting bearer [ 62.889372][ T4661] tipc: Disabling bearer [ 62.896609][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.903693][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.928917][ T4647] bridge_slave_0: entered allmulticast mode [ 62.935353][ T4647] bridge_slave_0: entered promiscuous mode [ 62.942381][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.949477][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.956682][ T4647] bridge_slave_1: entered allmulticast mode [ 62.972922][ T4647] bridge_slave_1: entered promiscuous mode [ 62.983531][ T31] hsr_slave_0: left promiscuous mode [ 62.991576][ T31] hsr_slave_1: left promiscuous mode [ 62.997897][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.005441][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.013899][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.021422][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.035944][ T31] veth1_macvtap: left promiscuous mode [ 63.042420][ T31] veth0_macvtap: left promiscuous mode [ 63.049419][ T31] veth1_vlan: left promiscuous mode [ 63.054996][ T31] veth0_vlan: left promiscuous mode [ 63.125461][ T31] team0 (unregistering): Port device team_slave_1 removed [ 63.134981][ T31] team0 (unregistering): Port device C removed [ 63.167906][ T4693] netlink: 60 bytes leftover after parsing attributes in process `syz.4.427'. [ 63.176931][ T4693] netlink: 60 bytes leftover after parsing attributes in process `syz.4.427'. [ 63.193084][ T4647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.212939][ T4647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.234189][ T4647] team0: Port device team_slave_0 added [ 63.242372][ T4647] team0: Port device team_slave_1 added [ 63.257060][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.263999][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.289905][ T4647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.301058][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.308010][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.333914][ T4647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.362334][ T4647] hsr_slave_0: entered promiscuous mode [ 63.368494][ T4647] hsr_slave_1: entered promiscuous mode [ 63.374423][ T4647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.382060][ T4647] Cannot create hsr debugfs directory [ 63.462649][ T4647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.471580][ T4702] loop4: detected capacity change from 0 to 512 [ 63.479477][ T4647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.489302][ T4647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.497667][ T4647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.504493][ T4702] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.430: corrupted in-inode xattr: invalid ea_ino [ 63.525721][ T4702] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.430: couldn't read orphan inode 15 (err -117) [ 63.544757][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.555343][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 63.555356][ T29] audit: type=1400 audit(1745127309.207:1730): avc: denied { create } for pid=4701 comm="syz.4.430" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.607967][ T4647] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.617752][ T2276] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.624884][ T2276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.636066][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.643117][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.678850][ T4705] bridge: RTM_NEWNEIGH with invalid ether address [ 63.703142][ T4711] loop4: detected capacity change from 0 to 512 [ 63.708526][ T4647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.719014][ T4711] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.765455][ T4719] loop4: detected capacity change from 0 to 1024 [ 63.772283][ T4719] EXT4-fs: Ignoring removed nobh option [ 63.777942][ T4719] EXT4-fs: Ignoring removed bh option [ 63.829242][ T4647] veth0_vlan: entered promiscuous mode [ 63.841453][ T4647] veth1_vlan: entered promiscuous mode [ 63.854985][ T4647] veth0_macvtap: entered promiscuous mode [ 63.862644][ T4647] veth1_macvtap: entered promiscuous mode [ 63.891352][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.901840][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.911676][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.922102][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.932043][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.942547][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.953571][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.972620][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.983073][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.992967][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.003465][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.013309][ T4647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.023825][ T4647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.034723][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.043051][ T4647] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.051912][ T4647] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.060634][ T4647] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.069386][ T4647] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.101709][ T29] audit: type=1400 audit(1745127309.747:1731): avc: denied { mount } for pid=4647 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.130219][ T4738] loop3: detected capacity change from 0 to 2048 [ 64.137537][ T29] audit: type=1400 audit(1745127309.777:1732): avc: denied { mounton } for pid=4647 comm="syz-executor" path="/root/syzkaller.pvVsZn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.164456][ T29] audit: type=1400 audit(1745127309.787:1733): avc: denied { mount } for pid=4647 comm="syz-executor" name="/" dev="gadgetfs" ino=3898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.189426][ T4736] wg2: entered promiscuous mode [ 64.194415][ T4736] wg2: entered allmulticast mode [ 64.235409][ T29] audit: type=1400 audit(1745127309.887:1734): avc: denied { setopt } for pid=4746 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.307534][ T4760] netlink: 14 bytes leftover after parsing attributes in process `syz.2.446'. [ 64.321787][ T4760]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.331940][ T4760]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.344688][ T4760]  (unregistering): Released all slaves [ 64.507745][ T29] audit: type=1400 audit(1745127310.147:1735): avc: denied { bind } for pid=4778 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.527798][ T29] audit: type=1400 audit(1745127310.147:1736): avc: denied { connect } for pid=4778 comm="syz.2.454" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.592206][ T4782] serio: Serial port ptm0 [ 64.653444][ T4784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.454'. [ 64.717481][ T4788] loop3: detected capacity change from 0 to 2048 [ 64.731820][ T4790] netlink: 248 bytes leftover after parsing attributes in process `syz.2.458'. [ 64.761437][ T4786] loop4: detected capacity change from 0 to 1024 [ 64.771573][ T4786] EXT4-fs: Ignoring removed nobh option [ 64.777368][ T4786] EXT4-fs: Ignoring removed bh option [ 64.785916][ T4788] Alternate GPT is invalid, using primary GPT. [ 64.792295][ T4788] loop3: p1 p2 p3 [ 64.821971][ T29] audit: type=1400 audit(1745127310.467:1737): avc: denied { map } for pid=4794 comm="syz.2.459" path="socket:[10356]" dev="sockfs" ino=10356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.822029][ T4786] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 64.845204][ T29] audit: type=1400 audit(1745127310.467:1738): avc: denied { read } for pid=4794 comm="syz.2.459" path="socket:[10356]" dev="sockfs" ino=10356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.877860][ T4786] inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 64.999619][ T29] audit: type=1326 audit(1745127310.647:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf3be169 code=0x7ffc0000 [ 65.216272][ T4817] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.226211][ T4817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.237618][ T4812] lo: entered promiscuous mode [ 65.242388][ T4812] lo: entered allmulticast mode [ 65.261033][ T4821] loop2: detected capacity change from 0 to 164 [ 65.270474][ T4821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 65.305764][ T4819] syzkaller0: entered promiscuous mode [ 65.311250][ T4819] syzkaller0: entered allmulticast mode [ 65.321212][ T4817] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.331010][ T4817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.343246][ T4827] loop4: detected capacity change from 0 to 256 [ 65.376950][ T4829] bridge: RTM_NEWNEIGH with invalid ether address [ 65.385524][ T4817] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.395418][ T4817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.492561][ T4817] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.502414][ T4817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.915569][ T4846] loop2: detected capacity change from 0 to 512 [ 65.923545][ T4846] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.930547][ T4846] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.477: bg 0: block 248: padding at end of block bitmap is not set [ 65.945850][ T4846] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.477: Failed to acquire dquot type 1 [ 65.957625][ T4846] EXT4-fs (loop2): 1 truncate cleaned up [ 65.969883][ T4846] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 65.984408][ T4846] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 66.047792][ T4851] pim6reg1: entered promiscuous mode [ 66.053110][ T4851] pim6reg1: entered allmulticast mode [ 66.268993][ T4817] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.277216][ T4817] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.289676][ T4817] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.298014][ T4817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.310431][ T4817] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.318705][ T4817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.331399][ T4817] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.339643][ T4817] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.356946][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 66.588414][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 66.932688][ T4898] binfmt_misc: register: failed to install interpreter file ./file2 [ 66.960337][ T4900] bridge0: port 1(veth0_to_bridge) entered blocking state [ 66.967534][ T4900] bridge0: port 1(veth0_to_bridge) entered disabled state [ 66.975477][ T4900] veth0_to_bridge: entered allmulticast mode [ 66.995679][ T4900] veth0_to_bridge: entered promiscuous mode [ 67.003211][ T4900] bridge0: port 1(veth0_to_bridge) entered blocking state [ 67.010383][ T4900] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 67.043619][ T4904] loop3: detected capacity change from 0 to 512 [ 67.053026][ T4904] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.500: corrupted xattr block 95: invalid header [ 67.068623][ T4904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.500: bg 0: block 7: invalid block bitmap [ 67.081763][ T4904] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 67.091618][ T4904] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.500: corrupted xattr block 95: invalid header [ 67.106317][ T4904] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 67.116075][ T4904] EXT4-fs (loop3): 1 orphan inode deleted [ 67.181933][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.217285][ T4914] syzkaller0: entered promiscuous mode [ 67.222922][ T4914] syzkaller0: entered allmulticast mode [ 67.238787][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.264871][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.284369][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.286439][ T4918] loop4: detected capacity change from 0 to 2048 [ 67.313173][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.334169][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.353925][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.366517][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.379276][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.391802][ T4916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4916 comm=syz.5.504 [ 67.416995][ T4918] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.449907][ T3311] EXT4-fs unmount: 31 callbacks suppressed [ 67.450007][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.531141][ T4908] netlink: 76 bytes leftover after parsing attributes in process `syz.2.501'. [ 67.597584][ T4932] netlink: 96 bytes leftover after parsing attributes in process `syz.2.510'. [ 67.616450][ T4933] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.509'. [ 67.630603][ T4930] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.509'. [ 67.642651][ T4933] loop4: detected capacity change from 0 to 128 [ 67.649678][ T4933] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 67.659113][ T4933] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.671722][ T4935] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.679079][ T4935] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 67.694491][ T4933] ext2 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.728466][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.747185][ T4940] loop2: detected capacity change from 0 to 512 [ 67.757101][ T4940] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.766358][ T4940] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.773066][ T4940] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.513: invalid indirect mapped block 256 (level 2) [ 67.788789][ T4940] EXT4-fs (loop2): 2 truncates cleaned up [ 67.795307][ T4940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.107027][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.250076][ T4961] loop2: detected capacity change from 0 to 2048 [ 68.304488][ T4961] loop2: p1 < > p4 [ 68.309110][ T4961] loop2: p4 size 8388608 extends beyond EOD, truncated [ 68.384993][ T4970] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 68.398224][ T4970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.416840][ T4970] bond0: (slave dummy0): making interface the new active one [ 68.425260][ T4970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.454664][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 68.515948][ T4974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.581048][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 68.581062][ T29] audit: type=1400 audit(1745127314.227:1896): avc: denied { create } for pid=4975 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 68.608153][ T29] audit: type=1400 audit(1745127314.247:1897): avc: denied { bind } for pid=4975 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 68.628623][ T29] audit: type=1400 audit(1745127314.247:1898): avc: denied { bind } for pid=4975 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.647856][ T29] audit: type=1400 audit(1745127314.247:1899): avc: denied { node_bind } for pid=4975 comm="syz.2.523" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 68.875203][ T4985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.889621][ T4985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.988025][ T29] audit: type=1326 audit(1745127314.637:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 68.992156][ T4999] loop5: detected capacity change from 0 to 512 [ 69.011376][ T29] audit: type=1326 audit(1745127314.637:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 69.063383][ T29] audit: type=1326 audit(1745127314.637:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 69.086913][ T29] audit: type=1326 audit(1745127314.637:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 69.110307][ T29] audit: type=1326 audit(1745127314.637:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 69.133655][ T29] audit: type=1326 audit(1745127314.637:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4998 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 69.160597][ T4999] EXT4-fs (loop5): 1 orphan inode deleted [ 69.166858][ T4999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.185645][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 69.200955][ T4999] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.229852][ T4999] bridge0: entered promiscuous mode [ 69.237027][ T4999] bridge0: port 3(macvlan2) entered blocking state [ 69.243667][ T4999] bridge0: port 3(macvlan2) entered disabled state [ 69.265957][ T4999] macvlan2: entered allmulticast mode [ 69.271411][ T4999] bridge0: entered allmulticast mode [ 69.278940][ T4999] macvlan2: left allmulticast mode [ 69.284120][ T4999] bridge0: left allmulticast mode [ 69.289555][ T4999] bridge0: left promiscuous mode [ 69.316619][ T5025] xt_hashlimit: size too large, truncated to 1048576 [ 69.323324][ T5025] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 69.442859][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.476963][ T5078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 69.485898][ T5078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 69.494845][ T5078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 69.506586][ T5078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.544'. [ 69.515662][ T5080] loop2: detected capacity change from 0 to 2048 [ 69.538544][ T5080] EXT4-fs: Ignoring removed bh option [ 69.569436][ T5080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.708591][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 69.747868][ T5096] syzkaller0: entered promiscuous mode [ 69.753368][ T5096] syzkaller0: entered allmulticast mode [ 70.181381][ T5094] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.244502][ T5094] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 70.256788][ T5094] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.256788][ T5094] [ 70.266449][ T5094] EXT4-fs (loop2): Total free blocks count 0 [ 70.272422][ T5094] EXT4-fs (loop2): Free/Dirty block details [ 70.278400][ T5094] EXT4-fs (loop2): free_blocks=2415919104 [ 70.284195][ T5094] EXT4-fs (loop2): dirty_blocks=8224 [ 70.289625][ T5094] EXT4-fs (loop2): Block reservation details [ 70.295714][ T5094] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 70.343684][ T5126] loop4: detected capacity change from 0 to 512 [ 70.355963][ T5126] EXT4-fs: Ignoring removed oldalloc option [ 70.367600][ T5126] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.562: Parent and EA inode have the same ino 15 [ 70.382136][ T5126] EXT4-fs (loop4): Remounting filesystem read-only [ 70.388720][ T5126] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 70.399255][ T5133] loop3: detected capacity change from 0 to 4096 [ 70.400196][ T5126] EXT4-fs (loop4): 1 orphan inode deleted [ 70.411843][ T5126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.425969][ T5126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.440582][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.456352][ T5138] capability: warning: `syz.5.567' uses deprecated v2 capabilities in a way that may be insecure [ 70.469446][ T5126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.479016][ T5013] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 70.484671][ T5139] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 70.500474][ T5126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.511153][ T5126] bond0 (unregistering): Released all slaves [ 70.555619][ T5142] loop5: detected capacity change from 0 to 764 [ 70.680725][ T5152] loop5: detected capacity change from 0 to 512 [ 70.701332][ T5152] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.742183][ T5152] EXT4-fs (loop5): 1 truncate cleaned up [ 70.780060][ T5152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.896525][ T5163] tipc: Bearer : already 2 bearers with priority 10 [ 70.904145][ T5163] tipc: Bearer : trying with adjusted priority [ 70.915172][ T5163] tipc: New replicast peer: 10.1.1.2 [ 70.920528][ T5163] tipc: Enabled bearer , priority 9 [ 70.935052][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.966835][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.023839][ T5173] syzkaller0: entered promiscuous mode [ 71.029411][ T5173] syzkaller0: entered allmulticast mode [ 71.089643][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.097203][ T5178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.104914][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.112326][ T5178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.230638][ T5183] netlink: 'syz.5.585': attribute type 1 has an invalid length. [ 71.698480][ T5215] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 71.717863][ T5215] batman_adv: batadv0: Removing interface: team0 [ 71.729015][ T5215] team0 (unregistering): Port device team_slave_0 removed [ 71.738077][ T5215] team0 (unregistering): Port device team_slave_1 removed [ 72.209375][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.268205][ T5224] loop2: detected capacity change from 0 to 128 [ 72.502197][ T5237] loop5: detected capacity change from 0 to 512 [ 72.520377][ T5233] capability: warning: `syz.4.603' uses 32-bit capabilities (legacy support in use) [ 72.544545][ T5237] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 72.558909][ T5237] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.575054][ T5237] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.726102][ T5237] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 72.739061][ T5237] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.605: bg 0: block 40: padding at end of block bitmap is not set [ 72.788518][ T5237] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.810869][ T5237] EXT4-fs (loop5): 1 truncate cleaned up [ 72.838707][ T5237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.001509][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.064274][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.096563][ T5255] __nla_validate_parse: 4 callbacks suppressed [ 73.096581][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 73.144867][ T5255] bond0: (slave bond_slave_0): Releasing backup interface [ 73.337704][ T5275] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.346115][ T5275] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.354465][ T5275] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.362744][ T5275] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.395177][ T5275] geneve2: entered promiscuous mode [ 73.400442][ T5275] geneve2: entered allmulticast mode [ 73.424829][ T5292] xt_hashlimit: size too large, truncated to 1048576 [ 73.553785][ T5297] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 73.620933][ T5302] loop2: detected capacity change from 0 to 512 [ 73.753035][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 73.753049][ T29] audit: type=1326 audit(1745127319.397:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb7ace169 code=0x7ffc0000 [ 73.762341][ T5302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.788006][ T29] audit: type=1326 audit(1745127319.407:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb7ace169 code=0x7ffc0000 [ 73.871818][ T5314] loop5: detected capacity change from 0 to 2048 [ 73.879650][ T5302] EXT4-fs (loop2): 1 truncate cleaned up [ 73.885740][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.931782][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.941700][ T5314] loop5: p1 < > p4 [ 73.950906][ T5314] loop5: p4 size 8388608 extends beyond EOD, truncated [ 73.978842][ T5322] loop4: detected capacity change from 0 to 512 [ 73.994792][ T5322] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.006334][ T5322] EXT4-fs (loop4): 1 truncate cleaned up [ 74.012496][ T5322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.015981][ T29] audit: type=1400 audit(1745127319.657:2045): avc: denied { unmount } for pid=4647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.059248][ T29] audit: type=1326 audit(1745127319.707:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.082768][ T29] audit: type=1326 audit(1745127319.707:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.106153][ T29] audit: type=1326 audit(1745127319.707:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.129686][ T29] audit: type=1326 audit(1745127319.707:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.153140][ T29] audit: type=1326 audit(1745127319.707:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.176595][ T29] audit: type=1326 audit(1745127319.707:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.200144][ T29] audit: type=1326 audit(1745127319.707:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5328 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 74.225269][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.246248][ T5342] TCP: out of memory -- consider tuning tcp_mem [ 74.333989][ T5356] loop5: detected capacity change from 0 to 164 [ 74.354721][ T5358] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 74.392808][ T5356] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 74.478539][ T5365] loop3: detected capacity change from 0 to 4096 [ 74.492237][ T5372] SELinux: syz.5.655 (5372) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.496405][ T5371] loop4: detected capacity change from 0 to 2048 [ 74.515005][ T5365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.544713][ T5371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.700520][ T5382] loop5: detected capacity change from 0 to 1024 [ 74.707574][ T5382] EXT4-fs: Ignoring removed nobh option [ 74.713236][ T5382] EXT4-fs: Ignoring removed bh option [ 74.756214][ T5382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.787142][ T5382] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.657: Allocating blocks 385-513 which overlap fs metadata [ 74.803163][ T5382] EXT4-fs (loop5): pa ffff8881068ee700: logic 16, phys. 129, len 24 [ 74.811196][ T5382] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 74.834426][ T5382] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 74.846713][ T5382] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.846713][ T5382] [ 74.856433][ T5382] EXT4-fs (loop5): Total free blocks count 0 [ 74.862475][ T5382] EXT4-fs (loop5): Free/Dirty block details [ 74.868507][ T5382] EXT4-fs (loop5): free_blocks=128 [ 74.873629][ T5382] EXT4-fs (loop5): dirty_blocks=0 [ 74.878750][ T5382] EXT4-fs (loop5): Block reservation details [ 74.884773][ T5382] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 74.945505][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.314819][ T5400] vlan2: entered promiscuous mode [ 75.319957][ T5400] bridge0: entered promiscuous mode [ 75.325500][ T5400] vlan2: entered allmulticast mode [ 75.330629][ T5400] bridge0: entered allmulticast mode [ 75.364513][ T5400] bridge_slave_0: left promiscuous mode [ 75.370167][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.381146][ T5400] bridge_slave_1: left allmulticast mode [ 75.386998][ T5400] bridge_slave_1: left promiscuous mode [ 75.392740][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.433416][ T5400] bond0: (slave bond_slave_0): Releasing backup interface [ 75.447537][ T5400] bond0: (slave bond_slave_1): Releasing backup interface [ 75.461633][ T5400] team0: Port device team_slave_0 removed [ 75.476857][ T5400] team0: Port device team_slave_1 removed [ 75.483600][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.491150][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.500220][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.507726][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.525148][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.672045][ T5417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 76.146281][ T5423] loop3: detected capacity change from 0 to 1024 [ 76.153167][ T5423] EXT4-fs: Ignoring removed nobh option [ 76.158773][ T5423] EXT4-fs: Ignoring removed bh option [ 76.195171][ T5423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.212727][ T5423] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.671: Allocating blocks 385-513 which overlap fs metadata [ 76.229276][ T5423] EXT4-fs (loop3): pa ffff8881068ee690: logic 16, phys. 129, len 24 [ 76.237312][ T5423] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 76.248784][ T5423] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 76.261012][ T5423] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.261012][ T5423] [ 76.270656][ T5423] EXT4-fs (loop3): Total free blocks count 0 [ 76.276677][ T5423] EXT4-fs (loop3): Free/Dirty block details [ 76.282644][ T5423] EXT4-fs (loop3): free_blocks=128 [ 76.287790][ T5423] EXT4-fs (loop3): dirty_blocks=0 [ 76.292798][ T5423] EXT4-fs (loop3): Block reservation details [ 76.298979][ T5423] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 76.336110][ T5429] loop3: detected capacity change from 0 to 128 [ 76.367672][ T5431] loop3: detected capacity change from 0 to 512 [ 76.419194][ T5431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.431837][ T5431] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.457197][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.490786][ T5438] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 76.508263][ T5438] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 76.519105][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 76.538575][ T5438] bond0: (slave bridge0): Releasing backup interface [ 76.547291][ T5442] loop4: detected capacity change from 0 to 1024 [ 76.556531][ T5442] EXT4-fs: Ignoring removed nobh option [ 76.585319][ T5442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.600942][ T5442] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.677: Allocating blocks 385-513 which overlap fs metadata [ 76.622899][ T5442] EXT4-fs (loop4): pa ffff8881068ee7e0: logic 16, phys. 129, len 24 [ 76.630948][ T5442] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 76.656134][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.670246][ T5448] loop3: detected capacity change from 0 to 128 [ 76.690957][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 76.691537][ T5449] vlan0: entered allmulticast mode [ 76.751774][ T5457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.861784][ T5469] loop4: detected capacity change from 0 to 1024 [ 76.871890][ T5469] EXT4-fs: Ignoring removed nobh option [ 76.877594][ T5469] EXT4-fs: Ignoring removed bh option [ 76.908437][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.926708][ T5469] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.684: Allocating blocks 385-513 which overlap fs metadata [ 76.944310][ T5469] EXT4-fs (loop4): pa ffff8881068ee690: logic 16, phys. 129, len 24 [ 76.952317][ T5469] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 76.963806][ T5469] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 76.976011][ T5469] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.976011][ T5469] [ 76.985746][ T5469] EXT4-fs (loop4): Total free blocks count 0 [ 76.991714][ T5469] EXT4-fs (loop4): Free/Dirty block details [ 76.997667][ T5469] EXT4-fs (loop4): free_blocks=128 [ 77.002768][ T5469] EXT4-fs (loop4): dirty_blocks=0 [ 77.007799][ T5469] EXT4-fs (loop4): Block reservation details [ 77.013773][ T5469] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 77.080411][ T5481] loop2: detected capacity change from 0 to 512 [ 77.089652][ T5481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.113997][ T5481] EXT4-fs (loop2): 1 truncate cleaned up [ 77.120956][ T5485] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 77.126878][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.345985][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.487675][ T5509] gtp0: entered promiscuous mode [ 77.606911][ T5519] loop3: detected capacity change from 0 to 128 [ 77.653071][ T5522] syz.2.702 uses obsolete (PF_INET,SOCK_PACKET) [ 77.715360][ T5014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.735245][ T5524] loop3: detected capacity change from 0 to 512 [ 77.745159][ T5524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.776861][ T5524] EXT4-fs (loop3): 1 truncate cleaned up [ 77.794899][ T5524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.014976][ T5540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.711'. [ 78.116703][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 78.135708][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 78.183824][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.203934][ T5555] loop4: detected capacity change from 0 to 128 [ 78.222308][ T5557] loop3: detected capacity change from 0 to 128 [ 78.230178][ T5554] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.239975][ T5554] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.315475][ T5554] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.325270][ T5554] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.396078][ T5554] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.405840][ T5554] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.430183][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 78.491837][ T5571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.501962][ T5554] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.504903][ T5568] loop4: detected capacity change from 0 to 4096 [ 78.511967][ T5554] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.567871][ T5568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.597259][ T5554] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 78.605582][ T5554] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 78.617670][ T5554] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 78.626037][ T5554] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 78.661308][ T5554] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 78.669665][ T5554] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 78.680866][ T5575] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 78.713291][ T5554] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 78.721762][ T5554] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 78.795780][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 78.795794][ T29] audit: type=1326 audit(1745127324.437:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 78.825308][ T29] audit: type=1326 audit(1745127324.437:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 78.848702][ T29] audit: type=1326 audit(1745127324.437:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 78.920070][ T29] audit: type=1326 audit(1745127324.477:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5579 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56abf7e169 code=0x7ffc0000 [ 78.972933][ T5589] syzkaller0: entered promiscuous mode [ 78.978633][ T5589] syzkaller0: entered allmulticast mode [ 78.999864][ T29] audit: type=1326 audit(1745127324.597:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 79.023298][ T29] audit: type=1326 audit(1745127324.597:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 79.046637][ T29] audit: type=1326 audit(1745127324.597:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 79.069920][ T29] audit: type=1326 audit(1745127324.597:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 79.093226][ T29] audit: type=1326 audit(1745127324.597:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 79.103110][ T5591] loop2: detected capacity change from 0 to 512 [ 79.116435][ T29] audit: type=1326 audit(1745127324.597:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6651e169 code=0x7ffc0000 [ 79.206053][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.224974][ T5591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.294812][ T5595] loop5: detected capacity change from 0 to 128 [ 79.317595][ T5591] EXT4-fs (loop2): 1 truncate cleaned up [ 79.324392][ T5591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.343668][ T5603] loop5: detected capacity change from 0 to 128 [ 79.352600][ T5600] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.363330][ T5603] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.389212][ T5603] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.425687][ T5600] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.480335][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.491147][ T5600] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.525048][ T5600] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.536247][ T4647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.581464][ T5600] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613684][ T5600] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.647186][ T5600] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.675734][ T5600] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.771082][ T5617] vlan0: entered promiscuous mode [ 79.776159][ T5617] bridge0: entered promiscuous mode [ 79.781470][ T5617] vlan0: entered allmulticast mode [ 79.786637][ T5617] bridge0: entered allmulticast mode [ 79.801233][ T5617] bond0: (slave dummy0): Releasing active interface [ 79.813810][ T5617] bridge_slave_0: left promiscuous mode [ 79.819626][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.836354][ T5617] bridge_slave_1: left allmulticast mode [ 79.842080][ T5617] bridge_slave_1: left promiscuous mode [ 79.847829][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.862066][ T5617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.869568][ T5617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.891263][ T5617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.898765][ T5617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.969291][ T5627] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 80.011200][ T5626] syzkaller0: entered promiscuous mode [ 80.016750][ T5626] syzkaller0: entered allmulticast mode [ 80.062241][ T5633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.747'. [ 80.071136][ T5633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.747'. [ 80.080101][ T5633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.747'. [ 80.095378][ T5633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.747'. [ 80.251981][ T5648] loop3: detected capacity change from 0 to 1024 [ 80.260674][ T5647] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 80.262531][ T5648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.270651][ T5647] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 80.317628][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.335923][ T5647] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 80.345896][ T5647] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 80.385210][ T5647] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 80.395074][ T5647] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 80.436354][ T5662] loop5: detected capacity change from 0 to 1024 [ 80.443245][ T5662] EXT4-fs: Ignoring removed nobh option [ 80.448979][ T5662] EXT4-fs: Ignoring removed bh option [ 80.455706][ T5647] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 80.465611][ T5647] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 80.476688][ T5662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.647973][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.665903][ T5667] loop5: detected capacity change from 0 to 512 [ 80.673493][ T5667] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.759: corrupted in-inode xattr: invalid ea_ino [ 80.687210][ T5667] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.759: couldn't read orphan inode 15 (err -117) [ 80.699634][ T5667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.730906][ T4647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.752962][ T5670] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.792534][ T5670] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.850778][ T5670] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.918641][ T5670] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.970987][ T5670] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.982902][ T5670] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.994043][ T5670] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.006381][ T5670] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.050016][ T5674] netlink: 36 bytes leftover after parsing attributes in process `syz.5.761'. [ 81.058911][ T5674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.761'. [ 81.067920][ T5674] netlink: 36 bytes leftover after parsing attributes in process `syz.5.761'. [ 81.096786][ T5677] loop5: detected capacity change from 0 to 128 [ 81.103786][ T5677] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 81.124160][ T5014] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 81.160032][ T5680] wg2: entered promiscuous mode [ 81.165047][ T5680] wg2: entered allmulticast mode [ 81.233285][ T5692] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.276625][ T5692] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.326946][ T5692] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.367361][ T5692] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.131829][ T5706] tipc: Enabled bearer , priority 0 [ 82.141078][ T5705] tipc: Resetting bearer [ 82.152149][ T5705] tipc: Disabling bearer [ 82.429039][ T5647] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.437394][ T5647] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 82.448195][ T5647] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.456509][ T5647] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 82.467263][ T5647] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.475573][ T5647] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 82.486481][ T5647] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.494902][ T5647] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 83.091342][ T5723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.108903][ T5722] loop4: detected capacity change from 0 to 512 [ 83.143559][ T5731] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 83.150970][ T5726] loop3: detected capacity change from 0 to 2048 [ 83.174761][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.187367][ T5722] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.188053][ T5734] loop2: detected capacity change from 0 to 4096 [ 83.207133][ T5734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.222139][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.232559][ T5726] EXT4-fs (loop3): failed to initialize system zone (-117) [ 83.240364][ T5726] EXT4-fs (loop3): mount failed [ 83.242670][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.330365][ T5751] netlink: 'syz.3.791': attribute type 10 has an invalid length. [ 83.349538][ T5741] loop4: detected capacity change from 0 to 512 [ 83.358240][ T5741] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.369695][ T5741] EXT4-fs (loop4): 1 truncate cleaned up [ 83.375838][ T5741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.415040][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.476268][ T5049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.804622][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 83.804635][ T29] audit: type=1326 audit(1745127329.457:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd3ad5127 code=0x7ffc0000 [ 83.834215][ T29] audit: type=1326 audit(1745127329.457:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd3a7a359 code=0x7ffc0000 [ 83.857477][ T29] audit: type=1326 audit(1745127329.457:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0cd3ade169 code=0x7ffc0000 [ 83.880810][ T29] audit: type=1326 audit(1745127329.457:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd3ad5127 code=0x7ffc0000 [ 83.904128][ T29] audit: type=1326 audit(1745127329.457:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd3a7a359 code=0x7ffc0000 [ 83.927349][ T29] audit: type=1326 audit(1745127329.457:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0cd3ade169 code=0x7ffc0000 [ 83.950650][ T29] audit: type=1326 audit(1745127329.457:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd3ad5127 code=0x7ffc0000 [ 83.973855][ T29] audit: type=1326 audit(1745127329.457:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd3a7a359 code=0x7ffc0000 [ 83.997114][ T29] audit: type=1326 audit(1745127329.457:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0cd3ade169 code=0x7ffc0000 [ 84.020452][ T29] audit: type=1326 audit(1745127329.507:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd3ad5127 code=0x7ffc0000 [ 84.140132][ T5758] tipc: New replicast peer: 10.1.1.2 [ 84.145879][ T5758] tipc: Enabled bearer , priority 10 [ 84.302592][ T5767] __nla_validate_parse: 4 callbacks suppressed [ 84.302611][ T5767] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 84.318535][ T5767] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.473496][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 84.482457][ T5773] batman_adv: batadv0: Removing interface: team0 [ 84.489339][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.496893][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.504828][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.512292][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.522226][ T5775] loop3: detected capacity change from 0 to 2048 [ 84.535500][ T5775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.839143][ T5778] ================================================================== [ 84.847241][ T5778] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 84.855148][ T5778] [ 84.857464][ T5778] write to 0xffff8881350e4b84 of 4 bytes by task 5775 on cpu 1: [ 84.865076][ T5778] xas_set_mark+0x13d/0x150 [ 84.869572][ T5778] __folio_start_writeback+0x1ea/0x440 [ 84.875030][ T5778] ext4_bio_write_folio+0x591/0x9d0 [ 84.880256][ T5778] mpage_process_page_bufs+0x488/0x5d0 [ 84.885729][ T5778] mpage_prepare_extent_to_map+0x791/0xb80 [ 84.891543][ T5778] ext4_do_writepages+0xa3b/0x21d0 [ 84.896644][ T5778] ext4_writepages+0x183/0x320 [ 84.901396][ T5778] do_writepages+0x1d8/0x480 [ 84.905983][ T5778] file_write_and_wait_range+0x16e/0x2f0 [ 84.911609][ T5778] generic_buffers_fsync_noflush+0x46/0x120 [ 84.917496][ T5778] ext4_sync_file+0x1c3/0x6c0 [ 84.922158][ T5778] vfs_fsync_range+0x116/0x130 [ 84.926909][ T5778] ext4_buffered_write_iter+0x358/0x3c0 [ 84.932447][ T5778] ext4_file_write_iter+0x3b2/0xf80 [ 84.937630][ T5778] iter_file_splice_write+0x5f2/0x980 [ 84.943014][ T5778] direct_splice_actor+0x160/0x2c0 [ 84.948213][ T5778] splice_direct_to_actor+0x305/0x680 [ 84.953586][ T5778] do_splice_direct+0xd9/0x150 [ 84.958347][ T5778] do_sendfile+0x40a/0x690 [ 84.962757][ T5778] __x64_sys_sendfile64+0x113/0x160 [ 84.967944][ T5778] x64_sys_call+0xfc3/0x2e10 [ 84.972525][ T5778] do_syscall_64+0xc9/0x1a0 [ 84.977016][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.982908][ T5778] [ 84.985218][ T5778] read to 0xffff8881350e4b84 of 4 bytes by task 5778 on cpu 0: [ 84.992744][ T5778] __writeback_single_inode+0x210/0x850 [ 84.998284][ T5778] writeback_single_inode+0x16c/0x3f0 [ 85.003649][ T5778] sync_inode_metadata+0x60/0x90 [ 85.008579][ T5778] generic_buffers_fsync_noflush+0xd8/0x120 [ 85.014477][ T5778] ext4_sync_file+0x1c3/0x6c0 [ 85.019161][ T5778] vfs_fsync_range+0x116/0x130 [ 85.023905][ T5778] ext4_buffered_write_iter+0x358/0x3c0 [ 85.029435][ T5778] ext4_file_write_iter+0x3b2/0xf80 [ 85.034620][ T5778] iter_file_splice_write+0x5f2/0x980 [ 85.039990][ T5778] direct_splice_actor+0x160/0x2c0 [ 85.045098][ T5778] splice_direct_to_actor+0x305/0x680 [ 85.050470][ T5778] do_splice_direct+0xd9/0x150 [ 85.055228][ T5778] do_sendfile+0x40a/0x690 [ 85.059640][ T5778] __x64_sys_sendfile64+0x113/0x160 [ 85.064829][ T5778] x64_sys_call+0xfc3/0x2e10 [ 85.069413][ T5778] do_syscall_64+0xc9/0x1a0 [ 85.073903][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.079779][ T5778] [ 85.082085][ T5778] value changed: 0x0a000021 -> 0x04000021 [ 85.087801][ T5778] [ 85.090130][ T5778] Reported by Kernel Concurrency Sanitizer on: [ 85.096266][ T5778] CPU: 0 UID: 0 PID: 5778 Comm: syz.3.799 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 85.108586][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.118636][ T5778] ================================================================== [ 85.264069][ T3378] tipc: Node number set to 2605129540 [ 85.309842][ T5692] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.321149][ T5692] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.336971][ T5692] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.348357][ T5692] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.443684][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.594370][ T5049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.794884][ T1040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.354865][ T5049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration