last executing test programs: 37.898765666s ago: executing program 2 (id=587): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x3, 0x0, 0xcf, 0x80000000, 0xdd2, 0xfffffffffffffff8, 0x4, 0x4040c405}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) creat(0x0, 0x0) semget$private(0x0, 0x1, 0x400) open(0x0, 0x400141042, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4d, 0x8e, 0xa1, 0x8, 0x108c, 0x159, 0x9ce5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x65, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0xe1, 0x93, 0xfd}}]}}]}}, 0x0) 37.272435655s ago: executing program 2 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000043000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00002d8000/0x4000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 37.208538376s ago: executing program 2 (id=598): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 37.166454497s ago: executing program 2 (id=599): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 36.96048039s ago: executing program 2 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) lsm_list_modules(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) getgroups(0x0, 0x0) 36.773787253s ago: executing program 2 (id=610): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='S', 0x1, 0x404c810, 0x0, 0x0) 36.765666473s ago: executing program 32 (id=610): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='S', 0x1, 0x404c810, 0x0, 0x0) 24.870363853s ago: executing program 3 (id=830): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x401, 0xfffb, 0x0, 0x0, 0x0, 0x8005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 23.932396668s ago: executing program 3 (id=847): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(0x3) 23.748063211s ago: executing program 3 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) capget(&(0x7f0000000040)={0x19980330}, 0x0) 23.424920725s ago: executing program 3 (id=861): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 23.398331906s ago: executing program 3 (id=862): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rename(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x6, 0x900}}) 23.276239507s ago: executing program 3 (id=864): socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e00000004000000040000000200020000", @ANYBLOB="00000000ebffffffffffdff9eeb1"], 0x50) 23.275864598s ago: executing program 33 (id=864): socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e00000004000000040000000200020000", @ANYBLOB="00000000ebffffffffffdff9eeb1"], 0x50) 1.890787222s ago: executing program 0 (id=1391): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 1.441238589s ago: executing program 6 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.398682859s ago: executing program 6 (id=1405): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.276007961s ago: executing program 0 (id=1407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30000000003800038034000080280001802300"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.125016463s ago: executing program 6 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 1.024417585s ago: executing program 5 (id=1413): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 989.401175ms ago: executing program 5 (id=1415): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB], 0x0, 0x2b, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 896.503987ms ago: executing program 5 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 876.714957ms ago: executing program 5 (id=1418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r2, &(0x7f0000000480)='2', 0x1, 0x8080c64) socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 871.715427ms ago: executing program 0 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) 715.54045ms ago: executing program 6 (id=1422): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) 649.37422ms ago: executing program 6 (id=1424): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 465.263903ms ago: executing program 4 (id=1429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) 412.646844ms ago: executing program 0 (id=1430): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x805) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x5d) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 402.517624ms ago: executing program 4 (id=1431): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4", 0x2) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 382.831615ms ago: executing program 4 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x12}, 0x9c) r1 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r4, 0x0, 0x0, r4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 358.954605ms ago: executing program 0 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 358.336505ms ago: executing program 0 (id=1434): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) 351.909905ms ago: executing program 5 (id=1435): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff1f, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x200809) 304.432796ms ago: executing program 4 (id=1436): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 294.014876ms ago: executing program 5 (id=1438): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='cq_alloc_error\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) 292.403136ms ago: executing program 6 (id=1439): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000f500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) write$binfmt_elf64(r5, &(0x7f0000001f80)=ANY=[], 0x678) 281.865156ms ago: executing program 1 (id=1440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0xf2db72b, 0x0, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4eebbcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fce0082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 272.272176ms ago: executing program 4 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) 256.455056ms ago: executing program 1 (id=1442): socket$qrtr(0x2a, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 234.301097ms ago: executing program 1 (id=1443): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000380)=@raw=[@alu={0x7, 0x0, 0x8, 0x6, 0x1, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 143.227349ms ago: executing program 1 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfc, 0x0, 0x30, 0xfd, [0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000, 0x0, 0x2]}}) 109.640899ms ago: executing program 1 (id=1445): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) close(r0) 50.11821ms ago: executing program 1 (id=1446): r0 = syz_io_uring_setup(0x3c03, &(0x7f0000000000)={0x0, 0x2283, 0x80, 0x100001, 0x160}, &(0x7f0000000780)=0x0, &(0x7f0000000080)=0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0xbeed3c6170858c64}) io_uring_enter(r0, 0x1d69, 0x4b5d, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1447): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 46.253625][ T4308] macvlan2: entered allmulticast mode [ 46.259068][ T4308] bridge0: entered allmulticast mode [ 46.274860][ T4308] macvlan2: left allmulticast mode [ 46.280078][ T4308] bridge0: left allmulticast mode [ 46.290252][ T4308] bridge0: left promiscuous mode [ 46.551386][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 46.561014][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 46.571570][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 46.648176][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 46.701881][ T4327] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 46.709688][ T4327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.327'. [ 46.735707][ T4327] dummy0: entered promiscuous mode [ 46.817564][ T4333] ip6gre1: entered allmulticast mode [ 46.914792][ T4338] loop4: detected capacity change from 0 to 128 [ 46.978732][ T4338] syz.4.334: attempt to access beyond end of device [ 46.978732][ T4338] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 47.002966][ T4336] loop1: detected capacity change from 0 to 8192 [ 47.022783][ T4338] syz.4.334: attempt to access beyond end of device [ 47.022783][ T4338] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 47.091725][ T4338] syz.4.334: attempt to access beyond end of device [ 47.091725][ T4338] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 47.150819][ T4346] syz.4.334: attempt to access beyond end of device [ 47.150819][ T4346] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 47.198985][ T4347] netlink: 'syz.3.337': attribute type 7 has an invalid length. [ 47.206815][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 47.220126][ T4338] syz.4.334: attempt to access beyond end of device [ 47.220126][ T4338] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 47.268775][ T4346] syz.4.334: attempt to access beyond end of device [ 47.268775][ T4346] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 47.281024][ T4338] syz.4.334: attempt to access beyond end of device [ 47.281024][ T4338] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 47.332100][ T4346] syz.4.334: attempt to access beyond end of device [ 47.332100][ T4346] loop4: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 47.351374][ T4351] loop1: detected capacity change from 0 to 512 [ 47.358149][ T4355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.339'. [ 47.358215][ T4338] syz.4.334: attempt to access beyond end of device [ 47.358215][ T4338] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 47.358295][ T4338] syz.4.334: attempt to access beyond end of device [ 47.358295][ T4338] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 47.367154][ T4355] netlink: 196 bytes leftover after parsing attributes in process `syz.3.339'. [ 47.403985][ T4355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.339'. [ 47.439536][ T4329] loop0: detected capacity change from 0 to 512 [ 47.449941][ T4329] EXT4-fs: Ignoring removed i_version option [ 47.483548][ T4365] loop2: detected capacity change from 0 to 2048 [ 47.492278][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.506558][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.519328][ T4351] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.530734][ T52] Buffer I/O error on dev loop4, logical block 305, lost async page write [ 47.535147][ T4329] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.553757][ T4365] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 47.568825][ T4365] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 47.581155][ T4365] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.581155][ T4365] [ 47.591006][ T4365] EXT4-fs (loop2): Total free blocks count 0 [ 47.597076][ T4365] EXT4-fs (loop2): Free/Dirty block details [ 47.603115][ T4365] EXT4-fs (loop2): free_blocks=2415919504 [ 47.609048][ T4365] EXT4-fs (loop2): dirty_blocks=16 [ 47.614249][ T4365] EXT4-fs (loop2): Block reservation details [ 47.620259][ T4365] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 47.628162][ T4329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 47.659107][ T4329] System zones: 1-12 [ 47.664430][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.675035][ T4329] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.696328][ T4329] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.328: invalid indirect mapped block 12 (level 1) [ 47.782201][ T4329] EXT4-fs (loop0): Remounting filesystem read-only [ 47.798234][ T4329] EXT4-fs (loop0): 1 truncate cleaned up [ 47.804640][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.816048][ T4390] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 47.825927][ T4329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.869551][ T4390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.934716][ T4390] bond1 (unregistering): Released all slaves [ 47.941479][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 48.029164][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.065544][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.095331][ T4444] loop8: detected capacity change from 0 to 79 [ 48.114850][ T4452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.150588][ T4454] loop2: detected capacity change from 0 to 128 [ 48.173328][ T4444] loop8: detected capacity change from 79 to 78 [ 48.192056][ T4452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.217562][ T4454] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 48.267758][ T4452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.322159][ T4452] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.382412][ T4452] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.397000][ T4452] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.434681][ T4452] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.454445][ T4452] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.876026][ T4484] loop3: detected capacity change from 0 to 8192 [ 49.126334][ T4510] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 49.145811][ T4510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.175009][ T4495] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 49.197529][ T4510] bond1 (unregistering): Released all slaves [ 49.259559][ T4513] loop1: detected capacity change from 0 to 256 [ 49.463489][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 49.463520][ T29] audit: type=1400 audit(1750306188.411:518): avc: denied { cpu } for pid=4520 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.511572][ T29] audit: type=1400 audit(1750306188.451:519): avc: denied { create } for pid=4528 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.554416][ T29] audit: type=1400 audit(1750306188.461:520): avc: denied { setopt } for pid=4528 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.595501][ T29] audit: type=1400 audit(1750306188.541:521): avc: denied { mounton } for pid=4507 comm="syz.1.379" path="/87/file1" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.618836][ T4513] FAT-fs (loop1): Directory bread(block 1285) failed [ 49.630142][ T29] audit: type=1400 audit(1750306188.581:522): avc: denied { mount } for pid=4507 comm="syz.1.379" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.658968][ T4508] FAT-fs (loop1): Directory bread(block 1285) failed [ 49.666350][ T4508] FAT-fs (loop1): Directory bread(block 1285) failed [ 49.674141][ T4508] FAT-fs (loop1): Directory bread(block 1285) failed [ 49.692140][ T4533] ref_ctr increment failed for inode: 0x1a6 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888102380000 [ 49.710094][ T29] audit: type=1400 audit(1750306188.641:523): avc: denied { execmem } for pid=4532 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.740280][ T4532] uprobe: syz.4.388:4532 failed to unregister, leaking uprobe [ 49.748251][ T29] audit: type=1400 audit(1750306188.661:524): avc: denied { create } for pid=4535 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.767553][ T29] audit: type=1400 audit(1750306188.661:525): avc: denied { setopt } for pid=4535 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.786871][ T29] audit: type=1400 audit(1750306188.681:526): avc: denied { create } for pid=4537 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.817943][ T29] audit: type=1400 audit(1750306188.761:527): avc: denied { mounton } for pid=4541 comm="syz.3.393" path="/67/file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.929686][ T4554] xt_hashlimit: size too large, truncated to 1048576 [ 50.061639][ T4561] x_tables: ip_tables: udp match: only valid for protocol 17 [ 50.191551][ T4573] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 50.297209][ T4587] syzkaller1: entered promiscuous mode [ 50.302851][ T4587] syzkaller1: entered allmulticast mode [ 50.342103][ T4590] wg2: left promiscuous mode [ 50.346776][ T4590] wg2: left allmulticast mode [ 50.351979][ T4596] loop0: detected capacity change from 0 to 128 [ 50.352973][ T4594] veth1_to_bond: entered allmulticast mode [ 50.377415][ T4590] wg2: entered promiscuous mode [ 50.382471][ T4590] wg2: entered allmulticast mode [ 50.410513][ T4594] veth1_to_bond: entered promiscuous mode [ 50.437662][ T4600] loop3: detected capacity change from 0 to 2048 [ 50.445264][ T4594] veth1_to_bond: left promiscuous mode [ 50.450943][ T4594] veth1_to_bond: left allmulticast mode [ 50.512602][ T4600] loop3: p1 < > p4 [ 50.518187][ T4600] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.986242][ T4643] loop4: detected capacity change from 0 to 1024 [ 50.993167][ T4643] EXT4-fs: Ignoring removed bh option [ 50.999604][ T4643] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.013612][ T4643] EXT4-fs error (device loop4): ext4_quota_enable:7124: comm syz.4.437: inode #2304: comm syz.4.437: iget: illegal inode # [ 51.045032][ T4643] EXT4-fs (loop4): Remounting filesystem read-only [ 51.051724][ T4643] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 51.067235][ T4643] EXT4-fs (loop4): mount failed [ 51.565739][ T4670] loop4: detected capacity change from 0 to 512 [ 51.585464][ T4670] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 51.836531][ T4675] tipc: Started in network mode [ 51.841511][ T4675] tipc: Node identity 9eba613f5425, cluster identity 4711 [ 51.848691][ T4675] tipc: Enabled bearer , priority 0 [ 51.875118][ T4674] tipc: Resetting bearer [ 51.910947][ T4674] tipc: Disabling bearer [ 52.151975][ T4693] __nla_validate_parse: 11 callbacks suppressed [ 52.152212][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 52.623104][ T4707] syzkaller0: entered promiscuous mode [ 52.628714][ T4707] syzkaller0: entered allmulticast mode [ 52.765976][ T4717] loop0: detected capacity change from 0 to 512 [ 52.803837][ T4717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.828300][ T4717] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.842018][ T4722] wg2: left promiscuous mode [ 52.846667][ T4722] wg2: left allmulticast mode [ 52.864895][ T4722] wg2: entered promiscuous mode [ 52.869822][ T4722] wg2: entered allmulticast mode [ 52.877793][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.892938][ T4725] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 52.926197][ T4729] loop2: detected capacity change from 0 to 512 [ 52.934394][ T4729] EXT4-fs: Ignoring removed nobh option [ 52.941599][ T4729] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 52.958906][ T4729] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.472: attempt to clear invalid blocks 2 len 1 [ 52.984577][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 52.993070][ T4729] EXT4-fs (loop2): 1 truncate cleaned up [ 53.002519][ T4729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.030639][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.710858][ T4760] loop0: detected capacity change from 0 to 1024 [ 53.718074][ T4760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.742002][ T4760] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.764445][ T4760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 53.773937][ T4760] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.494: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.789783][ T4760] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.494: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.805571][ T4760] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.494: Failed to acquire dquot type 0 [ 53.818778][ T4760] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 53.829573][ T4760] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.494: mark_inode_dirty error [ 53.842151][ T4760] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 53.852762][ T4760] EXT4-fs (loop0): 1 orphan inode deleted [ 53.859164][ T4760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.872512][ T4406] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.887093][ T4406] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 53.902422][ T4760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.921806][ T4760] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.494: Invalid inode table block 1 in block_group 0 [ 53.940163][ T4760] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 53.962204][ T4760] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.494: mark_inode_dirty error [ 54.015992][ T4760] loop0: detected capacity change from 0 to 1764 [ 54.029801][ T4777] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.048951][ T4778] loop2: detected capacity change from 0 to 512 [ 54.065309][ T4778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.082434][ T4778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 54.090663][ T4778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 54.101111][ T4777] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.107405][ T4778] System zones: 0-1, 15-15, 18-18, 34-34 [ 54.117641][ T4778] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.125260][ T4778] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.139864][ T4778] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 54.147805][ T4778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.493: bg 0: block 40: padding at end of block bitmap is not set [ 54.163023][ T4778] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.172422][ T4778] EXT4-fs (loop2): 1 truncate cleaned up [ 54.178752][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.179020][ T4777] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.230547][ T4774] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 54.238860][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.260255][ T4777] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.307741][ T4777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.326696][ T4777] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.354938][ T4794] loop3: detected capacity change from 0 to 1024 [ 54.364922][ T4777] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.378199][ T4777] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.386983][ T4794] EXT4-fs: Ignoring removed bh option [ 54.392569][ T4794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.408423][ T4794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.592531][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.021004][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 55.021093][ T29] audit: type=1400 audit(1750306193.971:715): avc: denied { name_bind } for pid=4804 comm="syz.2.505" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.048988][ T29] audit: type=1400 audit(1750306193.971:716): avc: denied { node_bind } for pid=4804 comm="syz.2.505" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.090146][ T29] audit: type=1400 audit(1750306194.021:717): avc: denied { create } for pid=4805 comm="syz.1.504" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.110855][ T29] audit: type=1400 audit(1750306194.031:718): avc: denied { write } for pid=4805 comm="syz.1.504" name="file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.133209][ T29] audit: type=1400 audit(1750306194.031:719): avc: denied { open } for pid=4805 comm="syz.1.504" path="/110/file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.158268][ T29] audit: type=1400 audit(1750306194.081:720): avc: denied { create } for pid=4807 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.178782][ T29] audit: type=1400 audit(1750306194.081:721): avc: denied { write } for pid=4807 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.199129][ T29] audit: type=1400 audit(1750306194.091:722): avc: denied { read } for pid=4807 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.224751][ T29] audit: type=1400 audit(1750306194.171:723): avc: denied { ioctl } for pid=4805 comm="syz.1.504" path="/110/file0" dev="tmpfs" ino=598 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.284683][ T29] audit: type=1400 audit(1750306194.231:724): avc: denied { watch watch_reads } for pid=4819 comm="syz.0.509" path="/87/file0" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.471434][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 55.587506][ T4838] netlink: 'syz.3.517': attribute type 27 has an invalid length. [ 55.597044][ T4838] wg2: left promiscuous mode [ 55.601740][ T4838] wg2: left allmulticast mode [ 55.606572][ T4840] loop4: detected capacity change from 0 to 256 [ 55.613194][ T4825] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 55.638797][ T4838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.647662][ T4840] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.652886][ T4838] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.668181][ T4838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.792830][ T4845] loop0: detected capacity change from 0 to 128 [ 55.800964][ T4845] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.852278][ T4845] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.873366][ T4849] usb usb8: usbfs: process 4849 (syz.3.522) did not claim interface 0 before use [ 55.935482][ T4858] loop1: detected capacity change from 0 to 512 [ 55.984345][ T4858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.040323][ T4858] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.327492][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.344426][ T4870] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 56.592777][ T4880] loop2: detected capacity change from 0 to 512 [ 56.599416][ T4894] loop4: detected capacity change from 0 to 512 [ 56.613094][ T4880] EXT4-fs: Ignoring removed i_version option [ 56.633884][ T4894] EXT4-fs (loop4): 1 orphan inode deleted [ 56.644665][ T4880] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.657344][ T4894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.658872][ T4377] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 56.691297][ T4894] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.714271][ T4880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 56.724679][ T4880] System zones: 1-12 [ 56.731240][ T4894] netlink: 332 bytes leftover after parsing attributes in process `syz.4.541'. [ 56.740389][ T4880] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.758138][ T4880] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.534: invalid indirect mapped block 12 (level 1) [ 56.779989][ T4894] netlink: 'syz.4.541': attribute type 9 has an invalid length. [ 56.787698][ T4894] netlink: 108 bytes leftover after parsing attributes in process `syz.4.541'. [ 56.796698][ T4894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.541'. [ 56.816909][ T4880] EXT4-fs (loop2): Remounting filesystem read-only [ 56.827585][ T4880] EXT4-fs (loop2): 1 truncate cleaned up [ 56.841396][ T4880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 56.866567][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.951679][ T4880] netlink: 256 bytes leftover after parsing attributes in process `syz.2.534'. [ 56.964413][ T4917] tipc: Started in network mode [ 56.969322][ T4917] tipc: Node identity ac14140f, cluster identity 4711 [ 56.974062][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 56.985139][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 56.994091][ T4917] tipc: New replicast peer: 0.0.255.255 [ 56.999723][ T4917] tipc: Enabled bearer , priority 10 [ 57.009646][ T4919] syz_tun: entered promiscuous mode [ 57.017290][ T4919] syz_tun: left promiscuous mode [ 57.158142][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 57.254740][ T4922] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 57.349827][ T4929] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 57.426208][ T4929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.443093][ T4937] bond1: (slave gretap1): making interface the new active one [ 57.480946][ T4937] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.512585][ T4929] vlan2: entered allmulticast mode [ 57.515347][ T4939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 57.517794][ T4929] bond1: entered allmulticast mode [ 57.517809][ T4929] gretap1: entered allmulticast mode [ 57.518483][ T4929] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 57.671418][ T4947] lo: entered promiscuous mode [ 57.678324][ T4947] tunl0: entered promiscuous mode [ 57.705474][ T4947] gre0: entered promiscuous mode [ 57.711779][ T4953] loop3: detected capacity change from 0 to 1024 [ 57.718436][ T4947] gretap0: entered promiscuous mode [ 57.718695][ T4953] EXT4-fs: inline encryption not supported [ 57.729700][ T4947] erspan0: entered promiscuous mode [ 57.729704][ T4953] EXT4-fs: Ignoring removed bh option [ 57.742511][ T4953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.743313][ T4947] ip_vti0: entered promiscuous mode [ 57.762094][ T4947] ip6_vti0: entered promiscuous mode [ 57.769125][ T4947] sit0: entered promiscuous mode [ 57.777063][ T4947] ip6tnl0: entered promiscuous mode [ 57.784433][ T4947] ip6gre0: entered promiscuous mode [ 57.819027][ T4947] syz_tun: entered promiscuous mode [ 57.836100][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.843371][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.854700][ T4947] bridge0: entered promiscuous mode [ 57.867044][ T4947] vcan0: entered promiscuous mode [ 57.877430][ T4947] bond0: entered promiscuous mode [ 57.882563][ T4947] bond_slave_0: entered promiscuous mode [ 57.888397][ T4947] bond_slave_1: entered promiscuous mode [ 57.902593][ T4947] team0: entered promiscuous mode [ 57.913593][ T4947] team_slave_0: entered promiscuous mode [ 57.919423][ T4947] team_slave_1: entered promiscuous mode [ 57.928157][ T4947] dummy0: entered promiscuous mode [ 57.935733][ T4947] nlmon0: entered promiscuous mode [ 57.943759][ T4947] caif0: entered promiscuous mode [ 57.949136][ T4947] batadv0: entered promiscuous mode [ 57.956645][ T4947] vxcan0: entered promiscuous mode [ 57.962618][ T4947] vxcan1: entered promiscuous mode [ 57.968717][ T4947] veth0: entered promiscuous mode [ 57.975924][ T4947] veth1: entered promiscuous mode [ 57.982913][ T4947] wg0: entered promiscuous mode [ 57.988692][ T4947] wg1: entered promiscuous mode [ 57.993865][ T3394] tipc: Node number set to 2886997007 [ 57.999880][ T4947] wg2: entered promiscuous mode [ 58.005827][ T4947] veth0_to_bridge: entered promiscuous mode [ 58.013751][ T4947] veth1_to_bridge: entered promiscuous mode [ 58.022227][ T4947] veth0_to_bond: entered promiscuous mode [ 58.029543][ T4947] veth1_to_bond: entered promiscuous mode [ 58.037542][ T4947] veth0_to_team: entered promiscuous mode [ 58.045427][ T4947] veth1_to_team: entered promiscuous mode [ 58.053264][ T4947] veth0_to_batadv: entered promiscuous mode [ 58.060225][ T4947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.067792][ T4947] batadv_slave_0: entered promiscuous mode [ 58.075036][ T4947] veth1_to_batadv: entered promiscuous mode [ 58.082170][ T4947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.089660][ T4947] batadv_slave_1: entered promiscuous mode [ 58.096590][ T4947] xfrm0: entered promiscuous mode [ 58.102685][ T4947] veth1_to_hsr: entered promiscuous mode [ 58.109791][ T4947] hsr0: entered promiscuous mode [ 58.115512][ T4947] veth1_virt_wifi: entered promiscuous mode [ 58.123120][ T4947] veth0_virt_wifi: entered promiscuous mode [ 58.133317][ T4947] vlan0: entered promiscuous mode [ 58.138477][ T4947] vlan1: entered promiscuous mode [ 58.144148][ T4947] macvlan0: entered promiscuous mode [ 58.150556][ T4947] macvlan1: entered promiscuous mode [ 58.156574][ T4947] ipvlan0: entered promiscuous mode [ 58.161859][ T4947] ipvlan1: entered promiscuous mode [ 58.168823][ T4947] macvtap0: entered promiscuous mode [ 58.176439][ T4947] macsec0: entered promiscuous mode [ 58.183107][ T4947] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.191613][ T4947] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.200113][ T4947] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.208699][ T4947] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.217302][ T4947] geneve1: entered promiscuous mode [ 58.223571][ T4947] netdevsim netdevsim0 eth0: entered promiscuous mode [ 58.230754][ T4947] netdevsim netdevsim0 eth1: entered promiscuous mode [ 58.237775][ T4947] netdevsim netdevsim0 eth2: entered promiscuous mode [ 58.241973][ T4971] netlink: 'syz.2.569': attribute type 6 has an invalid length. [ 58.245471][ T4947] netdevsim netdevsim0 eth3: entered promiscuous mode [ 58.278927][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 58.289187][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 58.292695][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.328943][ T4973] netlink: 'syz.1.571': attribute type 7 has an invalid length. [ 58.336731][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 58.375258][ T4977] all: renamed from lo (while UP) [ 58.395655][ T4981] loop2: detected capacity change from 0 to 1024 [ 58.427822][ T4981] EXT4-fs: Ignoring removed bh option [ 58.433438][ T4981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.441760][ T4987] loop0: detected capacity change from 0 to 512 [ 58.452630][ T4981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.500857][ T4987] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 58.636202][ T4998] loop1: detected capacity change from 0 to 512 [ 58.648861][ T4998] EXT4-fs: inline encryption not supported [ 58.655683][ T4998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.660241][ T5002] batadv_slave_0: entered promiscuous mode [ 58.679855][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 58.696250][ T5002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.708814][ T5002] batadv_slave_0 (unregistering): left promiscuous mode [ 58.716097][ T5002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.743189][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.782395][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.793298][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.832152][ T5012] loop4: detected capacity change from 0 to 2048 [ 58.843574][ T5010] loop1: detected capacity change from 0 to 2048 [ 58.852404][ T5012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.865864][ T5010] EXT4-fs (loop1): failed to initialize system zone (-117) [ 58.865896][ T5010] EXT4-fs (loop1): mount failed [ 58.964511][ T5025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.288608][ T5034] pim6reg1: entered promiscuous mode [ 59.294123][ T5034] pim6reg1: entered allmulticast mode [ 59.389679][ T5031] loop3: detected capacity change from 0 to 512 [ 59.398527][ T5031] EXT4-fs: Ignoring removed i_version option [ 59.416995][ T5031] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.435141][ T5031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 59.436641][ T5039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.598'. [ 59.476766][ T5031] System zones: 1-12 [ 59.481160][ T5031] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.487818][ T5041] loop2: detected capacity change from 0 to 1024 [ 59.494253][ T5031] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.595: invalid indirect mapped block 12 (level 1) [ 59.508464][ T5031] EXT4-fs (loop3): Remounting filesystem read-only [ 59.509861][ T5041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.515703][ T5031] EXT4-fs (loop3): 1 truncate cleaned up [ 59.534288][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 59.571229][ T5031] netlink: 256 bytes leftover after parsing attributes in process `syz.3.595'. [ 59.671343][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.712080][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 59.748909][ T5054] bridge: RTM_NEWNEIGH with invalid ether address [ 59.793221][ T5061] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 59.805654][ T5061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.819639][ T5061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.821929][ T5048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.827073][ T5061] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 59.856851][ T5061] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 59.897801][ T5066] ip6erspan0: entered promiscuous mode [ 59.914621][ T5066] bond1: (slave ip6erspan0): making interface the new active one [ 59.922899][ T5066] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 60.070005][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 60.070025][ T29] audit: type=1400 audit(1750306199.011:979): avc: denied { cmd } for pid=5077 comm="syz.3.613" path="socket:[11294]" dev="sockfs" ino=11294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.195516][ T29] audit: type=1400 audit(1750306199.141:980): avc: denied { setopt } for pid=5091 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.258226][ T5094] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.274138][ T29] audit: type=1400 audit(1750306199.221:981): avc: denied { mounton } for pid=5095 comm="syz.0.619" path="/103/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.365614][ T5071] chnl_net:caif_netlink_parms(): no params data found [ 60.390783][ T5102] netlink: 404 bytes leftover after parsing attributes in process `syz.0.621'. [ 60.564542][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.571944][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.581686][ T5071] bridge_slave_0: entered allmulticast mode [ 60.588361][ T5071] bridge_slave_0: entered promiscuous mode [ 60.606725][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.613910][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.653077][ T5071] bridge_slave_1: entered allmulticast mode [ 60.668402][ T5071] bridge_slave_1: entered promiscuous mode [ 60.701758][ T29] audit: type=1400 audit(1750306199.651:982): avc: denied { create } for pid=5114 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.722819][ T29] audit: type=1400 audit(1750306199.651:983): avc: denied { connect } for pid=5114 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.742929][ T29] audit: type=1400 audit(1750306199.651:984): avc: denied { bind } for pid=5114 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.762033][ T29] audit: type=1400 audit(1750306199.651:985): avc: denied { write } for pid=5114 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.785341][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.796391][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.824459][ T5071] team0: Port device team_slave_0 added [ 60.831418][ T5071] team0: Port device team_slave_1 added [ 60.852195][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.859211][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.885315][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.896528][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.903661][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.930012][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.959604][ T5119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.972656][ T5119] netlink: 92 bytes leftover after parsing attributes in process `syz.1.627'. [ 60.984381][ T5071] hsr_slave_0: entered promiscuous mode [ 60.991404][ T5071] hsr_slave_1: entered promiscuous mode [ 60.997409][ T5071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.005165][ T5071] Cannot create hsr debugfs directory [ 61.028609][ T5122] bond2: entered promiscuous mode [ 61.033812][ T5122] bond2: entered allmulticast mode [ 61.047266][ T5122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.056483][ T5122] bond2 (unregistering): Released all slaves [ 61.066001][ T5125] batadv_slave_0: entered promiscuous mode [ 61.078622][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 61.089435][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.103215][ T5125] batadv_slave_0 (unregistering): left promiscuous mode [ 61.110467][ T5125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.131123][ T29] audit: type=1400 audit(1750306200.081:986): avc: denied { execute } for pid=5127 comm="syz.4.629" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 61.207532][ T5071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.216765][ T5071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.226551][ T5071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.233566][ T29] audit: type=1400 audit(1750306200.181:987): avc: denied { setopt } for pid=5131 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.253726][ T29] audit: type=1400 audit(1750306200.181:988): avc: denied { write } for pid=5131 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.279177][ T5071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.312699][ T5136] loop1: detected capacity change from 0 to 128 [ 61.319866][ T5136] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.402238][ T5136] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.413803][ T5151] loop3: detected capacity change from 0 to 256 [ 61.414099][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.430722][ T5151] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.441464][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.462406][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.469670][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.488761][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.495939][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.514137][ T5071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.524576][ T5071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.607399][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.629643][ T5168] loop1: detected capacity change from 0 to 1024 [ 61.669108][ T5168] EXT4-fs: Ignoring removed bh option [ 61.674714][ T5168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.688545][ T5157] loop4: detected capacity change from 0 to 1024 [ 61.712532][ T5157] EXT4-fs: Ignoring removed nobh option [ 61.718180][ T5157] EXT4-fs: Ignoring removed nobh option [ 61.728746][ T5168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.748438][ T5179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.781159][ T5157] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 61.796715][ T5157] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.632: inode #4294967295: comm syz.4.632: iget: illegal inode # [ 61.838977][ T5157] EXT4-fs (loop4): no journal found [ 61.844332][ T5157] EXT4-fs (loop4): can't get journal size [ 61.858870][ T5071] veth0_vlan: entered promiscuous mode [ 61.867071][ T5071] veth1_vlan: entered promiscuous mode [ 61.922979][ T5071] veth0_macvtap: entered promiscuous mode [ 61.940163][ T5071] veth1_macvtap: entered promiscuous mode [ 61.950209][ T5157] EXT4-fs (loop4): failed to initialize system zone (-22) [ 61.957406][ T5157] EXT4-fs (loop4): mount failed [ 61.966213][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.977287][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.986922][ T5071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.995811][ T5071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.004737][ T5071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.013529][ T5071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.074908][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.244531][ T5204] loop5: detected capacity change from 0 to 128 [ 62.272867][ T5204] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.303369][ T5204] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.708496][ T5214] tipc: New replicast peer: 255.255.255.255 [ 62.714680][ T5214] tipc: Enabled bearer , priority 10 [ 63.092685][ T5134] syz.4.632 (5134) used greatest stack depth: 6952 bytes left [ 63.332411][ T5234] __nla_validate_parse: 1 callbacks suppressed [ 63.332429][ T5234] netlink: 96 bytes leftover after parsing attributes in process `syz.1.659'. [ 63.507017][ T3409] hid-generic 0000:0000:30303000.0002: unknown main item tag 0x3 [ 63.524447][ T3409] hid-generic 0000:0000:30303000.0002: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 63.734862][ T5254] hid-generic 0000:0000:30303000.0002: pid 5254 passed too large report [ 63.878738][ T5269] bond1: entered promiscuous mode [ 63.878758][ T5269] bond1: entered allmulticast mode [ 63.889187][ T5269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.897095][ T5269] bond1 (unregistering): Released all slaves [ 64.027238][ T5291] loop3: detected capacity change from 0 to 512 [ 64.033713][ T5291] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 64.325245][ T5312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.700'. [ 64.408228][ T5316] IPv4: Oversized IP packet from 127.202.26.0 [ 64.412120][ T5317] bond1: entered promiscuous mode [ 64.419480][ T5317] bond1: entered allmulticast mode [ 64.425410][ T5317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.435647][ T5317] bond1 (unregistering): Released all slaves [ 64.609418][ T5321] loop4: detected capacity change from 0 to 1024 [ 64.625432][ T5321] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.685103][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 64.847372][ T5327] 9pnet_fd: Insufficient options for proto=fd [ 65.008393][ T5338] loop5: detected capacity change from 0 to 512 [ 65.016518][ T5338] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.024031][ T5338] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 65.034898][ T5338] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.701: iget: bad extended attribute block 1 [ 65.051626][ T5338] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.701: couldn't read orphan inode 15 (err -117) [ 65.072891][ T5338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.077135][ T5342] loop3: detected capacity change from 0 to 1764 [ 65.121859][ T5342] iso9660: Bad value for 'block' [ 65.140575][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 65.140590][ T29] audit: type=1400 audit(1750306204.091:1059): avc: denied { ioctl } for pid=5341 comm="syz.3.703" path="socket:[11902]" dev="sockfs" ino=11902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.252812][ T29] audit: type=1400 audit(1750306204.161:1060): avc: denied { map } for pid=5335 comm="syz.5.701" path="/18/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.263774][ T5351] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.312580][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 65.364818][ T5360] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 65.391226][ T29] audit: type=1326 audit(1750306204.211:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.415234][ T29] audit: type=1326 audit(1750306204.211:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.415260][ T29] audit: type=1326 audit(1750306204.211:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.415281][ T29] audit: type=1326 audit(1750306204.211:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.486171][ T29] audit: type=1326 audit(1750306204.211:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.510228][ T29] audit: type=1326 audit(1750306204.211:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.533626][ T29] audit: type=1326 audit(1750306204.211:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.557482][ T29] audit: type=1326 audit(1750306204.211:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.3.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546476e929 code=0x7ffc0000 [ 65.590265][ T5340] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7816 vs 220 free clusters [ 65.721596][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.737646][ T5380] veth0: entered promiscuous mode [ 65.743304][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 65.753443][ T5382] loop5: detected capacity change from 0 to 128 [ 65.768944][ T5382] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.781653][ T5386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'. [ 65.792391][ T5382] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.834374][ T5384] bond1: entered promiscuous mode [ 65.839474][ T5384] bond1: entered allmulticast mode [ 65.850838][ T5384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.876146][ T5071] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.878344][ T5384] bond1 (unregistering): Released all slaves [ 65.902692][ T5391] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 65.942289][ T5391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.993614][ T5391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.014309][ T5391] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 66.053524][ T5391] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 66.063517][ T5400] loop5: detected capacity change from 0 to 128 [ 66.108422][ T5402] ip6erspan0: entered promiscuous mode [ 66.115793][ T5402] bond1: (slave ip6erspan0): making interface the new active one [ 66.124074][ T5402] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 66.203849][ T5405] syz_tun: entered allmulticast mode [ 66.213473][ T5404] syz_tun: left allmulticast mode [ 66.329261][ T5417] loop3: detected capacity change from 0 to 2048 [ 66.350358][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.497536][ T5442] loop0: detected capacity change from 0 to 128 [ 66.511977][ T5444] loop5: detected capacity change from 0 to 512 [ 66.518600][ T5442] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.532662][ T5444] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 66.548879][ T5442] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.565280][ T5442] Invalid ELF header magic: != ELF [ 66.583316][ T4397] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.710225][ T5457] loop4: detected capacity change from 0 to 512 [ 66.720944][ T5457] EXT4-fs (loop4): too many log groups per flexible block group [ 66.728715][ T5457] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 66.736312][ T5457] EXT4-fs (loop4): mount failed [ 66.768807][ T5461] Cannot find add_set index 0 as target [ 67.229529][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.304456][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 67.357301][ T5472] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.481803][ T5478] SELinux: failed to load policy [ 67.507231][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 67.558305][ T5484] lo: entered promiscuous mode [ 67.572742][ T5484] tunl0: entered promiscuous mode [ 67.593287][ T5484] gre0: entered promiscuous mode [ 67.612404][ T5484] gretap0: entered promiscuous mode [ 67.628551][ T5484] erspan0: entered promiscuous mode [ 67.639476][ T5484] ip_vti0: entered promiscuous mode [ 67.645529][ T5484] ip6_vti0: entered promiscuous mode [ 67.655790][ T5484] sit0: entered promiscuous mode [ 67.673022][ T5484] ip6tnl0: entered promiscuous mode [ 67.679272][ T5484] ip6gre0: entered promiscuous mode [ 67.689140][ T5484] syz_tun: entered promiscuous mode [ 67.699617][ T5484] ip6gretap0: entered promiscuous mode [ 67.713020][ T5484] vcan0: entered promiscuous mode [ 67.723299][ T5484] bond0: entered promiscuous mode [ 67.728384][ T5484] bond_slave_0: entered promiscuous mode [ 67.734299][ T5484] bond_slave_1: entered promiscuous mode [ 67.741677][ T5484] dummy0: entered promiscuous mode [ 67.749391][ T5484] team0: entered promiscuous mode [ 67.754571][ T5484] team_slave_0: entered promiscuous mode [ 67.760460][ T5484] team_slave_1: entered promiscuous mode [ 67.772120][ T5484] nlmon0: entered promiscuous mode [ 67.783416][ T5484] caif0: entered promiscuous mode [ 67.788572][ T5484] batadv0: entered promiscuous mode [ 67.793866][ T5484] vxcan0: entered promiscuous mode [ 67.798980][ T5484] vxcan1: entered promiscuous mode [ 67.804732][ T5484] veth0: entered promiscuous mode [ 67.810022][ T5484] veth1: entered promiscuous mode [ 67.815121][ T5484] wg0: entered promiscuous mode [ 67.820076][ T5484] wg1: entered promiscuous mode [ 67.825014][ T5484] wg2: entered promiscuous mode [ 67.829976][ T5484] veth0_to_bridge: entered promiscuous mode [ 67.835947][ T5484] bridge_slave_0: entered promiscuous mode [ 67.842191][ T5484] veth1_to_bridge: entered promiscuous mode [ 67.848115][ T5484] bridge_slave_1: entered promiscuous mode [ 67.854163][ T5484] veth0_to_bond: entered promiscuous mode [ 67.860081][ T5484] veth1_to_bond: entered promiscuous mode [ 67.865865][ T5484] veth0_to_team: entered promiscuous mode [ 67.872102][ T5484] veth1_to_team: entered promiscuous mode [ 67.877979][ T5484] veth0_to_batadv: entered promiscuous mode [ 67.884154][ T5484] batadv_slave_0: entered promiscuous mode [ 67.890143][ T5484] veth1_to_batadv: entered promiscuous mode [ 67.896164][ T5484] batadv_slave_1: entered promiscuous mode [ 67.902615][ T5484] xfrm0: entered promiscuous mode [ 67.907698][ T5484] veth0_to_hsr: entered promiscuous mode [ 67.913902][ T5484] veth1_to_hsr: entered promiscuous mode [ 67.919685][ T5484] hsr0: entered promiscuous mode [ 67.924856][ T5484] veth1_virt_wifi: entered promiscuous mode [ 67.925052][ T5502] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 67.930859][ T5484] veth0_virt_wifi: entered promiscuous mode [ 67.945691][ T5484] vlan0: entered promiscuous mode [ 67.950857][ T5484] vlan1: entered promiscuous mode [ 67.955970][ T5484] macvlan0: entered promiscuous mode [ 67.961362][ T5484] macvlan1: entered promiscuous mode [ 67.966766][ T5484] ipvlan0: entered promiscuous mode [ 67.972387][ T5484] ipvlan1: entered promiscuous mode [ 67.977837][ T5484] macvtap0: entered promiscuous mode [ 67.983135][ T5484] macsec0: entered promiscuous mode [ 67.988483][ T5484] geneve0: entered promiscuous mode [ 67.993793][ T5484] geneve1: entered promiscuous mode [ 67.999093][ T5484] syztnl1: entered promiscuous mode [ 68.004878][ T5484] team1: entered promiscuous mode [ 68.010601][ T5484] netdevsim netdevsim3 eth0: entered promiscuous mode [ 68.017700][ T5484] netdevsim netdevsim3 eth1: entered promiscuous mode [ 68.026220][ T5484] netdevsim netdevsim3 eth2: entered promiscuous mode [ 68.034432][ T5484] netdevsim netdevsim3 eth3: entered promiscuous mode [ 68.041483][ T5484] bridge0: entered promiscuous mode [ 68.046867][ T5488] @: renamed from vlan0 (while UP) [ 68.064943][ T5502] team1: entered promiscuous mode [ 68.078946][ T5502] team1: entered allmulticast mode [ 68.123508][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 68.123848][ T5507] loop1: detected capacity change from 0 to 512 [ 68.139059][ T5507] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 68.998347][ T5517] bond2: entered promiscuous mode [ 69.004098][ T5517] bond2: entered allmulticast mode [ 69.011680][ T5517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.032170][ T5517] bond2 (unregistering): Released all slaves [ 69.158686][ T5533] syz_tun: entered allmulticast mode [ 69.169686][ T5531] syz_tun: left allmulticast mode [ 69.179183][ T5534] -1: renamed from syzkaller0 [ 69.380919][ T5563] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.427422][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 69.441083][ T5571] 8021q: adding VLAN 0 to HW filter on device team1 [ 69.506678][ T5563] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.552258][ T5563] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.609485][ T5584] SELinux: failed to load policy [ 69.653676][ T5563] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.696265][ T5563] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.706671][ T5563] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.717694][ T5563] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.728446][ T5563] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.920170][ T5595] chnl_net:caif_netlink_parms(): no params data found [ 69.961466][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.968639][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.976392][ T5595] bridge_slave_0: entered allmulticast mode [ 69.986962][ T5595] bridge_slave_0: entered promiscuous mode [ 69.996366][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.003724][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.042735][ T5595] bridge_slave_1: entered allmulticast mode [ 70.055264][ T5595] bridge_slave_1: entered promiscuous mode [ 70.100365][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.119822][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.138177][ T4410] bridge_slave_1: left allmulticast mode [ 70.144256][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.165358][ T4410] bridge_slave_0: left allmulticast mode [ 70.171354][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.195763][ T4410] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 70.262694][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.277280][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.286897][ T4410] bond0 (unregistering): Released all slaves [ 70.312456][ T4410] bond1 (unregistering): Released all slaves [ 70.353079][ T5595] team0: Port device team_slave_0 added [ 70.360284][ T5595] team0: Port device team_slave_1 added [ 70.379414][ T5623] SELinux: failed to load policy [ 70.390343][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.466742][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 70.466770][ T29] audit: type=1400 audit(1750306209.411:1159): avc: denied { mount } for pid=5629 comm="syz.4.813" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.501400][ T4410] team0 (unregistering): Port device team_slave_1 removed [ 70.522404][ T4410] team0 (unregistering): Port device team_slave_0 removed [ 70.560038][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.567222][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.593340][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.614343][ T5628] bond1: entered promiscuous mode [ 70.619434][ T5628] bond1: entered allmulticast mode [ 70.624930][ T5628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.635235][ T5628] bond1 (unregistering): Released all slaves [ 70.645142][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.652792][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.679074][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.719153][ T5595] hsr_slave_0: entered promiscuous mode [ 70.725882][ T5595] hsr_slave_1: entered promiscuous mode [ 70.732436][ T5595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.753974][ T5595] Cannot create hsr debugfs directory [ 71.066216][ T29] audit: type=1326 audit(1750306210.011:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.090393][ T29] audit: type=1326 audit(1750306210.011:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.114032][ T29] audit: type=1326 audit(1750306210.011:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.138292][ T29] audit: type=1326 audit(1750306210.011:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.163818][ T5639] capability: warning: `syz.5.817' uses 32-bit capabilities (legacy support in use) [ 71.185208][ T29] audit: type=1326 audit(1750306210.011:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.209144][ T29] audit: type=1326 audit(1750306210.011:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.233152][ T29] audit: type=1326 audit(1750306210.011:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.256492][ T29] audit: type=1326 audit(1750306210.011:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.280459][ T29] audit: type=1326 audit(1750306210.011:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5638 comm="syz.5.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 71.360678][ T5646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5646 comm=syz.5.819 [ 71.373382][ T5646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5646 comm=syz.5.819 [ 71.391588][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.401049][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.432661][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.444480][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.546817][ T5650] SELinux: failed to load policy [ 71.562870][ T5660] syzkaller0: entered promiscuous mode [ 71.568602][ T5660] syzkaller0: entered allmulticast mode [ 71.586469][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.610494][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.658339][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.665594][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.687677][ T5595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.698186][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.728333][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.735642][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.781937][ T5676] loop3: detected capacity change from 0 to 512 [ 71.792380][ T5676] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 71.811104][ T5676] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.830: bad orphan inode 15 [ 71.827808][ T5676] ext4_test_bit(bit=14, block=18) = 1 [ 71.831306][ T5682] loop5: detected capacity change from 0 to 256 [ 71.833315][ T5676] is_bad_inode(inode)=0 [ 71.844454][ T5676] NEXT_ORPHAN(inode)=1023 [ 71.848803][ T5676] max_ino=32 [ 71.848878][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.852042][ T5676] i_nlink=0 [ 71.852697][ T5676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 71.877090][ T5676] ext2 filesystem being mounted at /150/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 71.935709][ T5685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.832'. [ 72.057459][ T5595] veth0_vlan: entered promiscuous mode [ 72.079130][ T5595] veth1_vlan: entered promiscuous mode [ 72.112951][ T5595] veth0_macvtap: entered promiscuous mode [ 72.120637][ T5595] veth1_macvtap: entered promiscuous mode [ 72.134637][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.149342][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.176741][ T5595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185744][ T5595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194688][ T5595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.203668][ T5595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.228613][ T5697] SELinux: failed to load policy [ 72.302275][ T5705] netlink: 'syz.4.836': attribute type 29 has an invalid length. [ 72.332374][ T5705] netlink: 'syz.4.836': attribute type 29 has an invalid length. [ 72.346975][ T5711] bridge: RTM_NEWNEIGH with invalid ether address [ 72.361315][ T5705] netlink: 'syz.4.836': attribute type 29 has an invalid length. [ 72.392216][ T5705] netlink: 'syz.4.836': attribute type 29 has an invalid length. [ 72.487284][ T5723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'. [ 72.579890][ T5730] loop0: detected capacity change from 0 to 512 [ 72.598445][ T5730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.609793][ T5730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.623892][ T5730] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.651335][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 72.664120][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 72.718347][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.852366][ T5752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.927585][ T5752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.974287][ T5752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.023240][ T5752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.087707][ T5752] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.108879][ T5752] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.134076][ T5752] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.159819][ T5752] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.582341][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.592124][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.601655][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 73.610355][ T12] bond0 (unregistering): Released all slaves [ 73.646513][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.654252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.714324][ T5797] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.871'. [ 73.731663][ T12] team0 (unregistering): Port device team_slave_1 removed [ 73.744353][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.838557][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 73.918078][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.925423][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.936075][ T5775] bridge_slave_0: entered allmulticast mode [ 73.942344][ T5817] loop1: detected capacity change from 0 to 2048 [ 73.942867][ T5775] bridge_slave_0: entered promiscuous mode [ 73.957271][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.964872][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.973585][ T5775] bridge_slave_1: entered allmulticast mode [ 73.980302][ T5775] bridge_slave_1: entered promiscuous mode [ 73.987956][ T5817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.007721][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.021242][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.051941][ T5775] team0: Port device team_slave_0 added [ 74.058725][ T5775] team0: Port device team_slave_1 added [ 74.085133][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.092367][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.118439][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.132887][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.142819][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.169045][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.198916][ T5775] hsr_slave_0: entered promiscuous mode [ 74.205456][ T5775] hsr_slave_1: entered promiscuous mode [ 74.211458][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.219078][ T5775] Cannot create hsr debugfs directory [ 74.243013][ T5829] loop0: detected capacity change from 0 to 512 [ 74.250193][ T5829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.271621][ T5829] EXT4-fs (loop0): 1 truncate cleaned up [ 74.278008][ T5829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.301410][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.368131][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 74.377665][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 74.390448][ T5775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 74.393081][ T5841] loop5: detected capacity change from 0 to 512 [ 74.397517][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 74.415892][ T5775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 74.425005][ T5775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 74.433040][ T5841] EXT4-fs (loop5): too many log groups per flexible block group [ 74.434467][ T5775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 74.440815][ T5841] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 74.467024][ T5841] EXT4-fs (loop5): mount failed [ 74.504849][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.516203][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.533836][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.540963][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.561336][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.568432][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.751791][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.768108][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.038910][ T5775] veth0_vlan: entered promiscuous mode [ 75.068738][ T5775] veth1_vlan: entered promiscuous mode [ 75.106625][ T5775] veth0_macvtap: entered promiscuous mode [ 75.122323][ T5775] veth1_macvtap: entered promiscuous mode [ 75.146591][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.163501][ T5899] loop0: detected capacity change from 0 to 8192 [ 75.170911][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.194862][ T5775] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.203757][ T5775] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.212861][ T5775] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.222570][ T5775] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484879][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 75.484898][ T29] audit: type=1326 audit(1750306214.431:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd43309e9b7 code=0x7ffc0000 [ 75.515878][ T5923] loop6: detected capacity change from 0 to 8192 [ 75.572063][ T29] audit: type=1326 audit(1750306214.441:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd43309d290 code=0x7ffc0000 [ 75.595505][ T29] audit: type=1326 audit(1750306214.441:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd43309e52b code=0x7ffc0000 [ 75.618787][ T29] audit: type=1326 audit(1750306214.481:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd43309d58a code=0x7ffc0000 [ 75.642335][ T29] audit: type=1326 audit(1750306214.481:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd43309d58a code=0x7ffc0000 [ 75.665890][ T29] audit: type=1326 audit(1750306214.481:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd43309d197 code=0x7ffc0000 [ 75.689324][ T29] audit: type=1326 audit(1750306214.481:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd4330a00ca code=0x7ffc0000 [ 75.712982][ T29] audit: type=1326 audit(1750306214.501:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd43309d290 code=0x7ffc0000 [ 75.736347][ T29] audit: type=1326 audit(1750306214.501:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd43309d677 code=0x7ffc0000 [ 75.759734][ T29] audit: type=1326 audit(1750306214.501:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.6.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd43309d290 code=0x7ffc0000 [ 75.828437][ T5942] loop6: detected capacity change from 0 to 512 [ 75.862011][ T5942] EXT4-fs (loop6): too many log groups per flexible block group [ 75.869750][ T5942] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 75.877838][ T5942] EXT4-fs (loop6): mount failed [ 76.258652][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.932'. [ 76.381289][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.931'. [ 76.444849][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 76.528231][ T5985] team2: entered promiscuous mode [ 76.548860][ T5985] team2: entered allmulticast mode [ 76.764977][ T5995] netlink: '+}[@': attribute type 5 has an invalid length. [ 76.768874][ T5990] loop4: detected capacity change from 0 to 2048 [ 76.772272][ T5995] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 76.784387][ T5995] : renamed from bond0 (while UP) [ 76.851607][ T5990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 76.895698][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.941'. [ 76.908043][ T6007] sch_tbf: burst 88 is lower than device macvtap0 mtu (1514) ! [ 76.981879][ T6011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=188 sclass=netlink_route_socket pid=6011 comm=syz.5.943 [ 77.055369][ T6015] atomic_op ffff888128ead928 conn xmit_atomic 0000000000000000 [ 77.150115][ T6027] netlink: 'syz.6.952': attribute type 13 has an invalid length. [ 77.185572][ T6027] gretap0: refused to change device tx_queue_len [ 77.192746][ T6027] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.355709][ T6045] loop9: detected capacity change from 0 to 7 [ 77.367881][ T6045] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.391670][ T6045] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.399597][ T6045] loop9: unable to read partition table [ 77.412352][ T6045] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 77.412352][ T6045] U) failed (rc=-5) [ 77.488717][ T6056] xt_hashlimit: max too large, truncated to 1048576 [ 77.548042][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 77.601996][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.6.972'. [ 77.675512][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.976'. [ 77.696736][ T6080] vlan2: entered allmulticast mode [ 77.701965][ T6080] bond_slave_1: entered allmulticast mode [ 77.727231][ T6074] loop4: detected capacity change from 0 to 8192 [ 77.839439][ T6089] syzkaller1: entered promiscuous mode [ 77.845060][ T6089] syzkaller1: entered allmulticast mode [ 77.854548][ T6095] pim6reg1: entered promiscuous mode [ 77.860090][ T6095] pim6reg1: entered allmulticast mode [ 78.031621][ T6109] loop1: detected capacity change from 0 to 512 [ 78.038933][ T6109] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 78.048754][ T6109] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 78.060287][ T6109] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.990: Invalid inode table block 0 in block_group 0 [ 78.074185][ T6109] EXT4-fs (loop1): get root inode failed [ 78.079863][ T6109] EXT4-fs (loop1): mount failed [ 78.126786][ T6116] pim6reg1: entered promiscuous mode [ 78.132200][ T6116] pim6reg1: entered allmulticast mode [ 78.226725][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.996'. [ 78.235845][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.996'. [ 78.254839][ T6127] loop1: detected capacity change from 0 to 512 [ 78.264921][ T6129] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 78.274212][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.287937][ T6127] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.323865][ T6127] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.997: corrupted inode contents [ 78.336221][ T6127] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.997: mark_inode_dirty error [ 78.349040][ T6127] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.997: corrupted inode contents [ 78.361159][ T6127] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.997: mark_inode_dirty error [ 78.373907][ T6127] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.997: mark inode dirty (error -117) [ 78.386645][ T6127] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 78.405284][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.513924][ T6136] loop1: detected capacity change from 0 to 512 [ 78.521176][ T6136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.541785][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.554526][ T6136] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.573500][ T6136] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 78.583378][ T6136] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 78.606952][ T6136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.861768][ T6164] netlink: 'syz.1.1023': attribute type 13 has an invalid length. [ 78.873015][ T6166] loop6: detected capacity change from 0 to 2048 [ 78.890660][ T6164] gretap0: refused to change device tx_queue_len [ 78.897506][ T6164] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.916597][ T6166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 79.107956][ T6182] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1018'. [ 79.128673][ T6190] loop4: detected capacity change from 0 to 512 [ 79.136343][ T6190] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 79.147033][ T6190] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1021: bad orphan inode 15 [ 79.157345][ T6190] ext4_test_bit(bit=14, block=18) = 1 [ 79.162836][ T6190] is_bad_inode(inode)=0 [ 79.167009][ T6190] NEXT_ORPHAN(inode)=1023 [ 79.171442][ T6190] max_ino=32 [ 79.174762][ T6190] i_nlink=0 [ 79.194994][ T6190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 79.208816][ T6190] ext2 filesystem being mounted at /209/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 79.251784][ T6201] syzkaller1: entered promiscuous mode [ 79.257350][ T6201] syzkaller1: entered allmulticast mode [ 79.417295][ T6209] IPVS: Error joining to the multicast group [ 79.715776][ T5775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 79.836697][ T6230] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.873192][ T6230] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.923204][ T6230] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.974284][ T6230] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.001425][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 80.033742][ T6230] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.046130][ T6230] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.062335][ T6230] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.085128][ T6230] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.093970][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.128146][ T6255] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 80.130052][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.158462][ T6255] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 80.220542][ T6264] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.228818][ T6264] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.237159][ T6264] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.245642][ T6264] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.264271][ T6264] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.273319][ T6264] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.281810][ T6264] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.290293][ T6264] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.349148][ T6281] netlink: 'syz.0.1062': attribute type 13 has an invalid length. [ 80.381119][ T6281] gretap0: refused to change device tx_queue_len [ 80.387616][ T6281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.451532][ T6290] sd 0:0:1:0: device reset [ 80.471617][ T6292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.529334][ T6292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.546865][ T6298] loop6: detected capacity change from 0 to 512 [ 80.577148][ T6298] EXT4-fs (loop6): 1 orphan inode deleted [ 80.584101][ T6298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.598145][ T6298] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.608737][ T4440] __quota_error: 350 callbacks suppressed [ 80.608753][ T4440] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.611528][ T6292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.614579][ T4440] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 1 [ 80.647326][ T29] audit: type=1400 audit(1750306219.601:2028): avc: denied { mounton } for pid=6297 comm="syz.6.1071" path="/27/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.671373][ T29] audit: type=1400 audit(1750306219.621:2029): avc: denied { setattr } for pid=6297 comm="syz.6.1071" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.711251][ T29] audit: type=1400 audit(1750306219.661:2030): avc: denied { map } for pid=6302 comm="syz.1.1072" path="socket:[16048]" dev="sockfs" ino=16048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.737717][ T5775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.756419][ T6292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.811601][ T29] audit: type=1400 audit(1750306219.761:2031): avc: denied { listen } for pid=6312 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.832987][ T29] audit: type=1400 audit(1750306219.771:2032): avc: denied { connect } for pid=6312 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.867543][ T6292] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.880232][ T6292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.894596][ T6292] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.907642][ T6292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.919393][ T29] audit: type=1400 audit(1750306219.861:2033): avc: denied { create } for pid=6320 comm="syz.6.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.059836][ T29] audit: type=1400 audit(1750306220.001:2034): avc: denied { write } for pid=6323 comm="syz.1.1082" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.161147][ T6330] loop6: detected capacity change from 0 to 2048 [ 81.181566][ T6330] EXT4-fs: Ignoring removed bh option [ 81.203619][ T6330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.220528][ T6330] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.235536][ T6330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.247899][ T6330] EXT4-fs (loop6): This should not happen!! Data will be lost [ 81.247899][ T6330] [ 81.257616][ T6330] EXT4-fs (loop6): Total free blocks count 0 [ 81.263642][ T6330] EXT4-fs (loop6): Free/Dirty block details [ 81.269629][ T6330] EXT4-fs (loop6): free_blocks=2415919104 [ 81.275413][ T6330] EXT4-fs (loop6): dirty_blocks=16 [ 81.280587][ T6330] EXT4-fs (loop6): Block reservation details [ 81.286661][ T6330] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 81.302270][ T6330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.314762][ T29] audit: type=1400 audit(1750306220.241:2035): avc: denied { map } for pid=6329 comm="syz.6.1084" path="/30/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.338467][ T29] audit: type=1400 audit(1750306220.241:2036): avc: denied { execute } for pid=6329 comm="syz.6.1084" path="/30/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.676226][ T6356] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.743703][ T6356] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.861962][ T6356] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.922456][ T6356] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.998793][ T6356] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.010926][ T6356] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.031998][ T6356] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.048418][ T6356] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.122077][ T6383] netlink: 'syz.5.1104': attribute type 10 has an invalid length. [ 82.130594][ T6383] netlink: 'syz.5.1104': attribute type 19 has an invalid length. [ 82.138493][ T6383] __nla_validate_parse: 4 callbacks suppressed [ 82.138508][ T6383] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1104'. [ 82.333369][ T6401] loop6: detected capacity change from 0 to 512 [ 82.342404][ T6401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.375613][ T6401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.389788][ T6401] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.445311][ T6401] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 82.446315][ T6410] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 82.481959][ T6401] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.511275][ T6410] bond2: entered promiscuous mode [ 82.516345][ T6410] bond2: entered allmulticast mode [ 82.521888][ T6410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.535619][ T6410] bridge4: entered promiscuous mode [ 82.541071][ T6410] bridge4: entered allmulticast mode [ 82.547558][ T6410] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 82.630642][ T4394] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.683151][ T6428] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.721952][ T6428] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.760046][ T4432] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 82.823897][ T6428] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.892142][ T6428] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.913508][ T6459] loop4: detected capacity change from 0 to 512 [ 82.933411][ T6459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.946693][ T6459] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.978170][ T6428] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.991700][ T6428] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.001610][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.003552][ T6428] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.020564][ T6469] loop5: detected capacity change from 0 to 512 [ 83.022613][ T6428] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.027621][ T6469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.072287][ T6469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.086418][ T6469] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.108332][ T6473] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 83.307456][ T6476] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.1142: corrupted inode contents [ 83.321527][ T6476] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.1142: mark_inode_dirty error [ 83.338519][ T6476] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.1142: corrupted inode contents [ 83.365357][ T6476] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1142: mark_inode_dirty error [ 83.384876][ T6476] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1142: mark inode dirty (error -117) [ 83.398698][ T6476] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 83.450555][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.642247][ T6501] pim6reg1: entered promiscuous mode [ 83.647630][ T6501] pim6reg1: entered allmulticast mode [ 83.693176][ T6507] loop4: detected capacity change from 0 to 512 [ 83.713275][ T6507] EXT4-fs (loop4): 1 orphan inode deleted [ 83.719483][ T6507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.732502][ T6507] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.743422][ T4440] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 1 [ 83.785807][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.881075][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1162'. [ 84.009689][ T6530] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.144348][ T6530] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.242536][ T6530] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.289711][ T6544] loop4: detected capacity change from 0 to 512 [ 84.297688][ T6544] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.312183][ T6530] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.340680][ T3305] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 84.356800][ T6547] loop5: detected capacity change from 0 to 512 [ 84.373132][ T6547] EXT4-fs (loop5): 1 orphan inode deleted [ 84.379521][ T6547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.394003][ T6547] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.401054][ T4437] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:62: Failed to release dquot type 1 [ 84.424396][ T6530] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.435783][ T6530] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.447777][ T6530] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.457697][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.459505][ T6530] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.571577][ T6567] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.643796][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1180'. [ 84.658088][ T6567] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.727066][ T6567] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.810742][ T6567] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.928246][ T6600] tipc: Started in network mode [ 84.933207][ T6600] tipc: Node identity 2000007, cluster identity 4711 [ 84.940091][ T6600] tipc: Node number set to 33554439 [ 85.021151][ T6612] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 85.048150][ T6610] can0: slcan on ttyS3. [ 85.100624][ T6609] can0 (unregistered): slcan off ttyS3. [ 85.881952][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 85.881969][ T29] audit: type=1400 audit(1750306224.831:2641): avc: denied { ioctl } for pid=6647 comm="syz.4.1215" path="socket:[18456]" dev="sockfs" ino=18456 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.923177][ T29] audit: type=1400 audit(1750306224.871:2642): avc: denied { relabelfrom } for pid=6651 comm="syz.4.1217" name="NETLINK" dev="sockfs" ino=17920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.956812][ T6655] pim6reg1: entered promiscuous mode [ 85.962290][ T6655] pim6reg1: entered allmulticast mode [ 85.962574][ T29] audit: type=1400 audit(1750306224.891:2643): avc: denied { relabelto } for pid=6651 comm="syz.4.1217" name="NETLINK" dev="sockfs" ino=17920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 86.113126][ T29] audit: type=1400 audit(1750306225.061:2644): avc: denied { wake_alarm } for pid=6665 comm="syz.4.1223" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.134483][ T6666] loop4: detected capacity change from 0 to 1764 [ 86.143743][ T29] audit: type=1400 audit(1750306225.091:2645): avc: denied { mount } for pid=6665 comm="syz.4.1223" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 86.166674][ T29] audit: type=1400 audit(1750306225.091:2646): avc: denied { mounton } for pid=6665 comm="syz.4.1223" path="/266/file1/file0" dev="loop4" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 86.190257][ T29] audit: type=1400 audit(1750306225.091:2647): avc: denied { write } for pid=6667 comm="syz.0.1224" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.211077][ T29] audit: type=1400 audit(1750306225.091:2648): avc: denied { open } for pid=6667 comm="syz.0.1224" path="/84/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.233697][ T29] audit: type=1400 audit(1750306225.141:2649): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 86.327188][ T6676] loop4: detected capacity change from 0 to 1024 [ 86.334760][ T6676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.363313][ T6676] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.374392][ T6676] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.392553][ T6676] JBD2: no valid journal superblock found [ 86.398385][ T6676] EXT4-fs (loop4): Could not load journal inode [ 86.611126][ T29] audit: type=1326 audit(1750306225.561:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6974b0e929 code=0x7ffc0000 [ 86.738794][ T6693] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 86.787001][ T6693] batman_adv: batadv0: Adding interface: team0 [ 86.793293][ T6693] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.818532][ T6693] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 86.934601][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1237'. [ 86.950853][ T6698] loop5: detected capacity change from 0 to 1024 [ 86.966281][ T6698] EXT4-fs: Ignoring removed orlov option [ 87.005671][ T6698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.033145][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.055030][ T6736] 9pnet_fd: Insufficient options for proto=fd [ 87.105778][ T6740] loop5: detected capacity change from 0 to 512 [ 87.137333][ T6740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.163670][ T6740] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.244433][ T6751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6751 comm=syz.0.1244 [ 87.335618][ T6752] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.1242: corrupted inode contents [ 87.359783][ T6752] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.1242: mark_inode_dirty error [ 87.393776][ T6752] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.1242: corrupted inode contents [ 87.417934][ T6752] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1242: mark_inode_dirty error [ 87.444164][ T6752] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1242: mark inode dirty (error -117) [ 87.468742][ T6752] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 87.487453][ T6754] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1246'. [ 87.514076][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.559595][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 87.571678][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 87.706103][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1259'. [ 87.841643][ T6783] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.853450][ T6783] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 87.938574][ T6794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.991619][ T6794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.020184][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 88.042920][ T6794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.122802][ T6794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.180483][ T6794] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.192948][ T6794] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205515][ T6794] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.217784][ T6794] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.352722][ T6812] can0: slcan on ttyS3. [ 88.420202][ T6810] can0 (unregistered): slcan off ttyS3. [ 88.456199][ T6823] loop5: detected capacity change from 0 to 128 [ 88.464360][ T6823] vfat: Bad value for 'gid' [ 88.468915][ T6823] vfat: Bad value for 'gid' [ 88.586760][ T6567] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.598049][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 88.599516][ T6567] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.620233][ T6567] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.637172][ T6835] netlink: 'syz.1.1282': attribute type 27 has an invalid length. [ 88.638868][ T6567] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.693744][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.701228][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.750491][ T6835] dummy0: left promiscuous mode [ 88.822163][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.861763][ T6835] macsec0: left promiscuous mode [ 88.868127][ T6835] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.876591][ T6835] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.885096][ T6835] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.893548][ T6835] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.904739][ T6835] vlan2: left allmulticast mode [ 88.909622][ T6835] hsr0: left allmulticast mode [ 88.914587][ T6835] hsr_slave_0: left allmulticast mode [ 88.920279][ T6835] hsr_slave_1: left allmulticast mode [ 88.939023][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1287'. [ 88.951290][ T6835] ip6gre1: left allmulticast mode [ 88.959869][ T6835] ip6erspan0: left promiscuous mode [ 88.965648][ T6835] team1: left promiscuous mode [ 88.972544][ T6835] team1: left allmulticast mode [ 88.977618][ T6835] team2: left promiscuous mode [ 88.982712][ T6835] team2: left allmulticast mode [ 88.988260][ T6835] bond2: left promiscuous mode [ 88.993285][ T6835] bridge4: left promiscuous mode [ 88.998535][ T6835] bond2: left allmulticast mode [ 89.003518][ T6835] bridge4: left allmulticast mode [ 89.012658][ T6845] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.049572][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 89.069574][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 89.090235][ T6845] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.155307][ T6845] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.314014][ T6845] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.619221][ T6845] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.669812][ T6845] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.709844][ T6845] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.734313][ T6845] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.877927][ T6871] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1292'. [ 89.928802][ T6873] xt_hashlimit: max too large, truncated to 1048576 [ 89.969457][ T6879] netlink: 'syz.4.1297': attribute type 13 has an invalid length. [ 90.019957][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.027336][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.116107][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.282607][ T6879] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.291277][ T6879] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.299724][ T6879] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.308181][ T6879] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.583593][ T6906] loop4: detected capacity change from 0 to 512 [ 90.591886][ T6906] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1305: corrupted in-inode xattr: invalid ea_ino [ 90.605626][ T6906] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1305: couldn't read orphan inode 15 (err -117) [ 90.618089][ T6906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.642846][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.812145][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1308'. [ 90.980400][ T6923] xt_CT: No such helper "pptp" [ 91.256706][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.265306][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.324561][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.333099][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.416915][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 91.416935][ T29] audit: type=1326 audit(1750306230.361:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f143e929 code=0x7ffc0000 [ 91.448329][ T29] audit: type=1326 audit(1750306230.361:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f143e929 code=0x7ffc0000 [ 91.471863][ T29] audit: type=1326 audit(1750306230.361:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa4f143e929 code=0x7ffc0000 [ 91.495368][ T29] audit: type=1326 audit(1750306230.361:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f143e929 code=0x7ffc0000 [ 91.503880][ T6944] macsec1: entered promiscuous mode [ 91.518871][ T29] audit: type=1326 audit(1750306230.371:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f143e929 code=0x7ffc0000 [ 91.524135][ T6944] bridge0: entered promiscuous mode [ 91.525949][ T6944] bridge0: port 3(macsec1) entered blocking state [ 91.559542][ T6944] bridge0: port 3(macsec1) entered disabled state [ 91.566177][ T6944] macsec1: entered allmulticast mode [ 91.571514][ T6944] bridge0: entered allmulticast mode [ 91.577388][ T6944] macsec1: left allmulticast mode [ 91.582511][ T6944] bridge0: left allmulticast mode [ 91.587839][ T6944] bridge0: left promiscuous mode [ 91.647612][ T6947] tipc: Started in network mode [ 91.652560][ T6947] tipc: Node identity ac14140f, cluster identity 4711 [ 91.659406][ T6947] tipc: New replicast peer: 10.1.1.2 [ 91.664813][ T6947] tipc: Enabled bearer , priority 10 [ 91.683408][ T6949] netlink: 'syz.4.1322': attribute type 27 has an invalid length. [ 91.692385][ T6949] wg2: left promiscuous mode [ 91.697192][ T6949] wg2: left allmulticast mode [ 91.717832][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.725530][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.732558][ T6949] batman_adv: batadv0: Interface activated: team0 [ 91.741251][ T6949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.781834][ T6951] loop4: detected capacity change from 0 to 512 [ 91.789334][ T6951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.797171][ T6951] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1323: bg 0: block 248: padding at end of block bitmap is not set [ 91.812047][ T6951] Quota error (device loop4): write_blk: dquota write failed [ 91.819510][ T6951] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.829454][ T6951] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1323: Failed to acquire dquot type 1 [ 91.841257][ T6951] EXT4-fs (loop4): 1 truncate cleaned up [ 91.847513][ T6951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.870084][ T6951] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 91.892361][ T6951] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.914722][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.528157][ T6972] loop6: detected capacity change from 0 to 1024 [ 92.535240][ T6972] EXT4-fs: Ignoring removed nobh option [ 92.540979][ T6972] EXT4-fs: Ignoring removed bh option [ 92.552729][ T6972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.583734][ T5775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.646726][ T6984] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.660209][ T3418] tipc: Node number set to 2886997007 [ 92.691448][ T6984] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.741670][ T6984] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.811771][ T6984] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.853680][ T29] audit: type=1400 audit(1750306231.801:2901): avc: denied { bind } for pid=6988 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.883950][ T6984] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.894641][ T6984] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.905597][ T6984] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.916371][ T6984] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.953198][ T29] audit: type=1326 audit(1750306231.901:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 92.980643][ T29] audit: type=1326 audit(1750306231.901:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6990 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44a39ce929 code=0x7ffc0000 [ 92.990431][ T6991] loop5: detected capacity change from 0 to 8192 [ 93.011989][ T6991] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.273779][ T7030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7030 comm=syz.0.1348 [ 93.408042][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.415279][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.489723][ T7039] netlink: 'syz.6.1353': attribute type 27 has an invalid length. [ 93.508097][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.515324][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.551206][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.561455][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.595750][ T7039] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.604543][ T7039] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.613265][ T7039] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.621997][ T7039] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.848747][ T7054] vlan2: entered allmulticast mode [ 94.168425][ T7088] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.194058][ T7087] loop6: detected capacity change from 0 to 8192 [ 94.201957][ T7087] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.252160][ T7088] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.302906][ T7088] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.391966][ T7088] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.496033][ T7088] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.523500][ T7088] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.560805][ T7088] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.599608][ T7088] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.737826][ T7122] netlink: 'syz.6.1389': attribute type 1 has an invalid length. [ 94.798099][ T7131] loop6: detected capacity change from 0 to 128 [ 94.927848][ T7138] netlink: 'syz.6.1396': attribute type 4 has an invalid length. [ 94.949141][ T7138] netlink: 'syz.6.1396': attribute type 4 has an invalid length. [ 95.002776][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1397'. [ 95.085610][ T7133] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1394'. [ 95.096017][ T7133] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1394'. [ 95.259233][ T7162] capability: warning: `syz.1.1404' uses deprecated v2 capabilities in a way that may be insecure [ 95.280326][ T7160] loop6: detected capacity change from 0 to 512 [ 95.299051][ T7160] EXT4-fs (loop6): orphan cleanup on readonly fs [ 95.321996][ T7160] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1405: bg 0: block 248: padding at end of block bitmap is not set [ 95.350380][ T7160] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1405: Failed to acquire dquot type 1 [ 95.386263][ T7160] EXT4-fs (loop6): 1 truncate cleaned up [ 95.410744][ T7160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.433736][ T7160] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 95.449414][ T7168] loop5: detected capacity change from 0 to 1024 [ 95.457980][ T7168] EXT4-fs: Ignoring removed orlov option [ 95.463790][ T7168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.465391][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 95.479784][ T7160] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 95.485551][ T7170] netlink: 'syz.0.1407': attribute type 13 has an invalid length. [ 95.498984][ T7168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.512394][ T5775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.552796][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.599223][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.612273][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.676363][ T7170] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.685040][ T7170] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.693678][ T7170] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.702193][ T7170] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.783922][ T7195] loop5: detected capacity change from 0 to 1024 [ 95.822412][ T7195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.056386][ T7217] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 96.068258][ T7219] loop6: detected capacity change from 0 to 1024 [ 96.088016][ T7219] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.098735][ T7217] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 96.120651][ T7219] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.131615][ T7219] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.156511][ T7195] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1418: Allocating blocks 497-513 which overlap fs metadata [ 96.173317][ T7219] JBD2: no valid journal superblock found [ 96.179131][ T7219] EXT4-fs (loop6): Could not load journal inode [ 96.195895][ T7193] EXT4-fs (loop5): pa ffff888106df5380: logic 128, phys. 273, len 15 [ 96.204073][ T7193] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 96.286232][ T5071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.648979][ T7270] loop4: detected capacity change from 0 to 1024 [ 96.659720][ T7270] EXT4-fs: Ignoring removed orlov option [ 96.668322][ T7270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.804930][ T7270] ================================================================== [ 96.813039][ T7270] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 96.821270][ T7270] [ 96.823581][ T7270] write to 0xffff888106e42460 of 4 bytes by task 7272 on cpu 1: [ 96.831191][ T7270] writeback_single_inode+0x14a/0x3e0 [ 96.836596][ T7270] sync_inode_metadata+0x5b/0x90 [ 96.841521][ T7270] generic_buffers_fsync_noflush+0xd9/0x120 [ 96.847436][ T7270] ext4_sync_file+0x1ab/0x690 [ 96.852101][ T7270] vfs_fsync_range+0x10d/0x130 [ 96.856851][ T7270] ext4_buffered_write_iter+0x34f/0x3c0 [ 96.862449][ T7270] ext4_file_write_iter+0x383/0xf00 [ 96.867653][ T7270] iter_file_splice_write+0x5f2/0x970 [ 96.873017][ T7270] direct_splice_actor+0x156/0x2a0 [ 96.878114][ T7270] splice_direct_to_actor+0x312/0x680 [ 96.883488][ T7270] do_splice_direct+0xda/0x150 [ 96.888256][ T7270] do_sendfile+0x380/0x650 [ 96.892656][ T7270] __x64_sys_sendfile64+0x105/0x150 [ 96.897848][ T7270] x64_sys_call+0xb39/0x2fb0 [ 96.902524][ T7270] do_syscall_64+0xd2/0x200 [ 96.907025][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.912956][ T7270] [ 96.915288][ T7270] read to 0xffff888106e42460 of 4 bytes by task 7270 on cpu 0: [ 96.922817][ T7270] __mark_inode_dirty+0x52/0x760 [ 96.927841][ T7270] ext4_write_inline_data_end+0x3e5/0x5f0 [ 96.933560][ T7270] ext4_write_end+0x4cd/0x730 [ 96.938255][ T7270] generic_perform_write+0x312/0x490 [ 96.943547][ T7270] ext4_buffered_write_iter+0x1ee/0x3c0 [ 96.949098][ T7270] ext4_file_write_iter+0x383/0xf00 [ 96.954304][ T7270] iter_file_splice_write+0x5f2/0x970 [ 96.959685][ T7270] direct_splice_actor+0x156/0x2a0 [ 96.964788][ T7270] splice_direct_to_actor+0x312/0x680 [ 96.970531][ T7270] do_splice_direct+0xda/0x150 [ 96.975326][ T7270] do_sendfile+0x380/0x650 [ 96.979738][ T7270] __x64_sys_sendfile64+0x105/0x150 [ 96.984917][ T7270] x64_sys_call+0xb39/0x2fb0 [ 96.989511][ T7270] do_syscall_64+0xd2/0x200 [ 96.993998][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.999886][ T7270] [ 97.002198][ T7270] value changed: 0x00000038 -> 0x00000002 [ 97.007894][ T7270] [ 97.010204][ T7270] Reported by Kernel Concurrency Sanitizer on: [ 97.016347][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.4.1447 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 97.028756][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.038985][ T7270] ================================================================== [ 97.498960][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.