last executing test programs: 3.318276334s ago: executing program 1 (id=1258): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.809581203s ago: executing program 2 (id=1254): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000640b4266254d02335d6de6fac961548d8e1979027a540709e9f5829799f87a4512f54af866603c4ef9220389fb3141f38462c520b3c4879b332cf42013cf37b321"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.75007567s ago: executing program 0 (id=1255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.679469126s ago: executing program 3 (id=1257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2.627658412s ago: executing program 3 (id=1259): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 2.627116211s ago: executing program 0 (id=1269): r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5125, 0x0, 0x0, 0x2cd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r0, 0x47ba, 0x3e00, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x400, &(0x7f0000000a40)=ANY=[]) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f0000000040)) 2.370557567s ago: executing program 1 (id=1261): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.370089177s ago: executing program 0 (id=1272): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2.351065829s ago: executing program 0 (id=1262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r6, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) 2.213088032s ago: executing program 0 (id=1264): r0 = semget(0x1, 0x0, 0x71) semctl$SETALL(r0, 0x0, 0x11, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x4, 0xa}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2.076013966s ago: executing program 1 (id=1265): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005700)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socket(0x1e, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.186527814s ago: executing program 4 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.185906304s ago: executing program 2 (id=1280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef) 1.185345704s ago: executing program 1 (id=1268): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000040)=@rnullb, 0x0, &(0x7f0000000100)={0x30ad7123, 0x8000000000000000, 0x8, 0x5, 0x10, 0x9, 0x973c, 0xe, 0x7}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x8091, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc2299feec75ae06d3eafa38e22c3acf88"], 0x2, 0x1213, &(0x7f00000002c0)="$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") r1 = syz_io_uring_setup(0x1902, &(0x7f0000000640)={0x0, 0xec26, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x500, 0xe, 0x0, 0x0) 1.185163714s ago: executing program 3 (id=1270): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc0042, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x10b8}, 0xff4c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffff"], 0x56) 738.469158ms ago: executing program 4 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c5fc8d3e63588", 0x21}], 0x2) 737.434838ms ago: executing program 2 (id=1274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 542.165147ms ago: executing program 2 (id=1275): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffffffffff57, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x28000600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x200}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 474.581893ms ago: executing program 4 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 409.65721ms ago: executing program 0 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 331.417308ms ago: executing program 2 (id=1278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") openat(r0, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) r3 = socket(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) getsockname$packet(r3, 0x0, &(0x7f0000001180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x2}) 305.48263ms ago: executing program 4 (id=1279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 168.818054ms ago: executing program 1 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xb, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x804000, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) 168.270794ms ago: executing program 3 (id=1282): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 161.891014ms ago: executing program 4 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 79.448513ms ago: executing program 4 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410e9) sendfile(r3, r2, 0x0, 0x100000000) 78.683363ms ago: executing program 3 (id=1285): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, &(0x7f0000000200)='net/anycast6\x00') close_range(r3, 0xffffffffffffffff, 0x100000000000000) 33.749737ms ago: executing program 3 (id=1286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r3, 0x30, r1}, 0x10) 1.15154ms ago: executing program 1 (id=1287): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): 7.634556][ T3975] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 47.642391][ T3975] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.164'. [ 47.801283][ T3994] loop4: detected capacity change from 0 to 512 [ 47.823711][ T3994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.861354][ T3994] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.172: corrupted in-inode xattr: e_value size too large [ 47.892230][ T3994] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.172: couldn't read orphan inode 15 (err -117) [ 47.910030][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 47.926675][ T3994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.971136][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.012367][ T4002] syz.4.173 uses obsolete (PF_INET,SOCK_PACKET) [ 48.030707][ T4004] veth2: entered promiscuous mode [ 48.035911][ T4004] veth2: entered allmulticast mode [ 48.162103][ T4010] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 48.294154][ T4023] pim6reg1: entered promiscuous mode [ 48.299564][ T4023] pim6reg1: entered allmulticast mode [ 48.335524][ T4029] capability: warning: `syz.3.187' uses deprecated v2 capabilities in a way that may be insecure [ 48.378534][ T4025] wg2: entered promiscuous mode [ 48.383466][ T4025] wg2: entered allmulticast mode [ 48.642715][ T4041] loop3: detected capacity change from 0 to 1024 [ 48.662787][ T4041] EXT4-fs: Ignoring removed bh option [ 48.692410][ T4041] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 48.714083][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.781123][ T4041] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 48.836036][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.968942][ T4062] veth2: entered promiscuous mode [ 48.974109][ T4062] veth2: entered allmulticast mode [ 49.026404][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 49.026421][ T29] audit: type=1400 audit(1760548557.353:751): avc: denied { nlmsg_write } for pid=4073 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 49.057338][ T4072] pimreg: entered allmulticast mode [ 49.064822][ T4072] pimreg: left allmulticast mode [ 49.071881][ T29] audit: type=1400 audit(1760548557.393:752): avc: denied { getopt } for pid=4075 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.108959][ T29] audit: type=1400 audit(1760548557.413:753): avc: denied { write } for pid=4075 comm="syz.4.208" lport=39081 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.133008][ T29] audit: type=1400 audit(1760548557.413:754): avc: denied { getopt } for pid=4075 comm="syz.4.208" lport=39081 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.218568][ T29] audit: type=1326 audit(1760548557.543:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 49.243286][ T29] audit: type=1326 audit(1760548557.563:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 49.266767][ T29] audit: type=1326 audit(1760548557.563:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 49.290075][ T29] audit: type=1326 audit(1760548557.563:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 49.313378][ T29] audit: type=1326 audit(1760548557.563:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 49.336700][ T29] audit: type=1326 audit(1760548557.563:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 49.672936][ T4118] loop1: detected capacity change from 0 to 1024 [ 49.707212][ T4121] loop4: detected capacity change from 0 to 512 [ 49.714506][ T4121] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.727815][ T4121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.739088][ T4121] EXT4-fs (loop4): 1 truncate cleaned up [ 49.745257][ T4121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.954421][ T4118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.993894][ T4128] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 50.073932][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.094348][ T4128] netlink: 'syz.0.228': attribute type 4 has an invalid length. [ 50.246878][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.614843][ T4143] tipc: Started in network mode [ 50.619874][ T4143] tipc: Node identity 3eac1df7d302, cluster identity 4711 [ 50.627207][ T4143] tipc: Enabled bearer , priority 0 [ 50.637850][ T4150] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 50.668206][ T4142] tipc: Resetting bearer [ 50.696399][ T4142] tipc: Disabling bearer [ 50.854607][ T4170] netlink: 'syz.4.247': attribute type 2 has an invalid length. [ 50.862411][ T4170] netlink: 'syz.4.247': attribute type 2 has an invalid length. [ 50.862561][ T4164] loop2: detected capacity change from 0 to 1024 [ 50.870080][ T4170] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 50.885119][ T4170] __nla_validate_parse: 2 callbacks suppressed [ 50.885137][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 50.914439][ T4172] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 50.930198][ T4169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.246'. [ 50.972256][ T4170] hub 9-0:1.0: USB hub found [ 50.977031][ T4170] hub 9-0:1.0: 8 ports detected [ 50.988242][ T4164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.016130][ T4164] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.049376][ T4182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.252'. [ 51.106412][ T4184] netlink: 76 bytes leftover after parsing attributes in process `syz.1.253'. [ 51.161961][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.263931][ T4202] wg2: entered promiscuous mode [ 51.268958][ T4202] wg2: entered allmulticast mode [ 51.414454][ T4227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 51.603350][ T4242] netlink: 'syz.2.273': attribute type 153 has an invalid length. [ 52.055867][ T4256] futex_wake_op: syz.4.279 tries to shift op by 144; fix this program [ 52.310333][ T4286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.289'. [ 52.388938][ T4293] syz.2.292 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.439386][ T4301] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 52.460416][ T4301] team0: Port device dummy0 added [ 52.475595][ T4301] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 52.487632][ T4301] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.498774][ T4301] team0: Failed to send options change via netlink (err -105) [ 52.511871][ T4301] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 52.523849][ T4301] team0: Port device dummy0 removed [ 52.587274][ T4313] wg2: left promiscuous mode [ 52.591983][ T4313] wg2: left allmulticast mode [ 52.630033][ T4313] wg2: entered promiscuous mode [ 52.634944][ T4313] wg2: entered allmulticast mode [ 52.644584][ T4314] loop3: detected capacity change from 0 to 4096 [ 52.683329][ T4314] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.739256][ T4322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.749596][ T4322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.821745][ T4314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.839600][ T4322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.849968][ T4322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.905630][ T4322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.916091][ T4322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.008799][ T4322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.019241][ T4322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.084225][ T3704] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.092488][ T3704] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.122067][ T3704] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.130292][ T3704] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.139601][ T3704] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.147971][ T3704] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.158135][ T3704] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.166374][ T3704] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.211813][ T4335] loop2: detected capacity change from 0 to 128 [ 53.353322][ T4348] loop4: detected capacity change from 0 to 512 [ 53.571284][ T4356] loop2: detected capacity change from 0 to 2048 [ 53.582662][ T4308] syz.3.298 (4308) used greatest stack depth: 6072 bytes left [ 53.592914][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.605959][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.641816][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 53.668297][ T4372] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 53.699653][ T4376] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.326'. [ 54.070041][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 54.070174][ T29] audit: type=1400 audit(1760548562.393:1415): avc: denied { create } for pid=4408 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.100197][ T29] audit: type=1400 audit(1760548562.423:1416): avc: denied { block_suspend } for pid=4402 comm="syz.4.338" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.222089][ T4417] ref_ctr_offset mismatch. inode: 0x194 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 54.266570][ T29] audit: type=1400 audit(1760548562.593:1417): avc: denied { getopt } for pid=4424 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.385243][ T29] audit: type=1400 audit(1760548562.703:1418): avc: denied { write } for pid=4432 comm="syz.1.350" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.408442][ T29] audit: type=1400 audit(1760548562.703:1419): avc: denied { open } for pid=4432 comm="syz.1.350" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 54.432503][ T4434] random: crng reseeded on system resumption [ 54.439285][ T4431] vhci_hcd: invalid port number 0 [ 54.474385][ T29] audit: type=1400 audit(1760548562.793:1420): avc: denied { bind } for pid=4437 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.512285][ T29] audit: type=1400 audit(1760548562.823:1421): avc: denied { read write } for pid=4439 comm="syz.3.354" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 54.536549][ T29] audit: type=1400 audit(1760548562.823:1422): avc: denied { open } for pid=4439 comm="syz.3.354" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 54.828318][ T4467] random: crng reseeded on system resumption [ 54.923010][ T29] audit: type=1326 audit(1760548563.233:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39710deec9 code=0x7ffc0000 [ 54.946442][ T29] audit: type=1326 audit(1760548563.233:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39710deec9 code=0x7ffc0000 [ 55.025388][ T4478] loop3: detected capacity change from 0 to 512 [ 55.063081][ T4479] loop2: detected capacity change from 0 to 1024 [ 55.071614][ T4479] EXT4-fs: Ignoring removed bh option [ 55.078861][ T4479] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.135828][ T4479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.170469][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.299417][ T4497] random: crng reseeded on system resumption [ 55.462774][ T4502] vhci_hcd: invalid port number 0 [ 55.481270][ T4500] loop3: detected capacity change from 0 to 1024 [ 55.504752][ T4512] loop1: detected capacity change from 0 to 1024 [ 55.511133][ T4500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.512297][ T4512] EXT4-fs: Ignoring removed bh option [ 55.529906][ T4512] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.569531][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.580907][ T4512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.622215][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.969541][ T4537] random: crng reseeded on system resumption [ 56.441525][ T4559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 56.442199][ T4556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.466030][ T4555] loop4: detected capacity change from 0 to 1024 [ 56.473022][ T4555] EXT4-fs: Ignoring removed bh option [ 56.479429][ T4555] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.493606][ T4561] pimreg: entered allmulticast mode [ 56.497753][ T4555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.501604][ T4561] pimreg: left allmulticast mode [ 56.516702][ T4563] vhci_hcd: invalid port number 0 [ 56.538621][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.539693][ T4556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.609001][ T4574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.649333][ T4556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.719203][ T4556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.776863][ T3704] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.785290][ T3704] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.797245][ T3704] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.809709][ T3722] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.926955][ T4589] wg2: entered promiscuous mode [ 56.931880][ T4589] wg2: entered allmulticast mode [ 57.028705][ T4595] wg2: left promiscuous mode [ 57.033505][ T4595] wg2: left allmulticast mode [ 57.046059][ T4595] wg2: entered promiscuous mode [ 57.051033][ T4595] wg2: entered allmulticast mode [ 57.078660][ T4597] loop0: detected capacity change from 0 to 1024 [ 57.085840][ T4597] EXT4-fs: Ignoring removed bh option [ 57.091558][ T4597] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.117368][ T4597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.142482][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.250173][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 57.486606][ T4616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.539411][ T4621] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 57.557494][ T4621] team0: Port device dummy0 added [ 57.571329][ T4616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.571738][ T4621] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 57.600549][ T4621] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.627470][ T4621] team0: Failed to send options change via netlink (err -105) [ 57.645054][ T4621] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 57.654151][ T4621] team0: Port device dummy0 removed [ 57.663624][ T4621] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.682573][ T4616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.742427][ T4616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.803450][ T3704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.818208][ T3704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.836640][ T3704] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.856828][ T3704] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.913598][ T4642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.928289][ T4642] Cannot find add_set index 2 as target [ 57.957587][ T4648] loop1: detected capacity change from 0 to 164 [ 58.014684][ T4654] netlink: 256 bytes leftover after parsing attributes in process `syz.4.439'. [ 58.047348][ T4661] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 58.307864][ T4674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.382897][ T4674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.432129][ T4674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.449847][ T3779] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 58.478317][ T4674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.542808][ T3779] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.553807][ T3779] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.565797][ T3755] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.576925][ T3755] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.633576][ T4692] loop3: detected capacity change from 0 to 164 [ 58.683994][ T4698] cgroup: fork rejected by pids controller in /syz3 [ 58.781593][ T4710] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 59.247959][ T4715] Cannot find add_set index 2 as target [ 59.388340][ T4719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.419182][ T4719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.490515][ T4719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.528637][ T4719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.558983][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 59.559047][ T29] audit: type=1400 audit(1760548567.883:1751): avc: denied { wake_alarm } for pid=4724 comm="syz.4.467" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.564146][ T3779] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.598341][ T3704] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.609431][ T3704] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.620777][ T3704] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.663341][ T4728] netlink: 'syz.0.468': attribute type 3 has an invalid length. [ 59.685349][ T29] audit: type=1326 audit(1760548568.003:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.708769][ T29] audit: type=1326 audit(1760548568.003:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.732244][ T29] audit: type=1326 audit(1760548568.003:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.755789][ T29] audit: type=1326 audit(1760548568.003:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.779133][ T29] audit: type=1326 audit(1760548568.003:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.802503][ T29] audit: type=1326 audit(1760548568.003:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.826044][ T29] audit: type=1326 audit(1760548568.003:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.849483][ T29] audit: type=1326 audit(1760548568.003:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 59.873117][ T29] audit: type=1326 audit(1760548568.003:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcded02eec9 code=0x7ffc0000 [ 60.000488][ T4745] loop9: detected capacity change from 0 to 7 [ 60.007054][ T4745] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.015093][ T4745] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.023086][ T4745] loop9: unable to read partition table [ 60.029863][ T4745] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 60.029863][ T4745] ) failed (rc=-5) [ 60.080856][ T4750] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.187027][ T4750] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.237045][ T4750] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.287018][ T4750] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.361829][ T3722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.372584][ T3722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.383071][ T3722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.394392][ T3722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.964786][ T3779] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.019456][ T3779] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.074310][ T4777] netlink: 'syz.1.486': attribute type 29 has an invalid length. [ 63.105967][ T4777] netlink: 'syz.1.486': attribute type 29 has an invalid length. [ 63.117052][ T4777] netlink: 500 bytes leftover after parsing attributes in process `syz.1.486'. [ 63.126126][ T4777] unsupported nla_type 66 [ 63.127993][ T3779] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.209415][ T3779] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.286160][ T3779] bridge_slave_1: left allmulticast mode [ 63.291937][ T3779] bridge_slave_1: left promiscuous mode [ 63.297757][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.306241][ T3779] bridge_slave_0: left allmulticast mode [ 63.311997][ T3779] bridge_slave_0: left promiscuous mode [ 63.317714][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.430698][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.443269][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.458703][ T3779] bond0 (unregistering): Released all slaves [ 63.503168][ T3779] hsr_slave_0: left promiscuous mode [ 63.515109][ T3779] hsr_slave_1: left promiscuous mode [ 63.525395][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.532861][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.542045][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.549566][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.550614][ T4844] xt_policy: output policy not valid in PREROUTING and INPUT [ 63.567599][ T3779] veth1_macvtap: left promiscuous mode [ 63.573140][ T3779] veth0_macvtap: left promiscuous mode [ 63.579073][ T3779] veth1_vlan: left promiscuous mode [ 63.584365][ T3779] veth0_vlan: left promiscuous mode [ 63.673017][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 63.686328][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 63.750364][ T4867] loop4: detected capacity change from 0 to 512 [ 63.759061][ T4867] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 63.810711][ T4778] chnl_net:caif_netlink_parms(): no params data found [ 63.814562][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'. [ 63.833836][ T4875] IPVS: Error connecting to the multicast addr [ 63.878876][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.886157][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.899414][ T4778] bridge_slave_0: entered allmulticast mode [ 63.909653][ T4778] bridge_slave_0: entered promiscuous mode [ 63.917068][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.924200][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.932286][ T4778] bridge_slave_1: entered allmulticast mode [ 63.939232][ T4778] bridge_slave_1: entered promiscuous mode [ 63.968275][ T4778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.993121][ T4778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.018973][ T4904] loop4: detected capacity change from 0 to 512 [ 64.019827][ T4778] team0: Port device team_slave_0 added [ 64.032863][ T4778] team0: Port device team_slave_1 added [ 64.034407][ T4904] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.045173][ T4904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.054291][ T4904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.062862][ T4904] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.081768][ T4904] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.502: Allocating blocks 41-42 which overlap fs metadata [ 64.086739][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.096178][ T4904] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.502: Allocating blocks 41-42 which overlap fs metadata [ 64.102430][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.116900][ T4904] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.502: Failed to acquire dquot type 1 [ 64.141894][ T4778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.164420][ T4904] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 64.176478][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.179383][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.502: corrupted inode contents [ 64.185884][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.223638][ T4778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.224658][ T4904] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.502: mark_inode_dirty error [ 64.245934][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.502: corrupted inode contents [ 64.257984][ T4904] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.502: mark_inode_dirty error [ 64.269824][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.502: corrupted inode contents [ 64.282006][ T4904] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 64.291873][ T4904] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.502: corrupted inode contents [ 64.294395][ T4778] hsr_slave_0: entered promiscuous mode [ 64.310401][ T4778] hsr_slave_1: entered promiscuous mode [ 64.311683][ T4904] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.502: mark_inode_dirty error [ 64.317331][ T4778] debugfs: 'hsr0' already exists in 'hsr' [ 64.332961][ T4778] Cannot create hsr debugfs directory [ 64.339030][ T4904] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 64.348473][ T4904] EXT4-fs (loop4): 1 truncate cleaned up [ 64.355762][ T4904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.402201][ T4904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.433270][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.618660][ T4962] sctp: [Deprecated]: syz.1.507 (pid 4962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.618660][ T4962] Use struct sctp_sack_info instead [ 64.645890][ T4960] pim6reg1: entered promiscuous mode [ 64.651507][ T4960] pim6reg1: entered allmulticast mode [ 64.711114][ T4778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.719963][ T4778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.728808][ T4778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.737890][ T4778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.779641][ T4778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.794984][ T4778] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.806001][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.806334][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 64.806351][ T29] audit: type=1326 audit(1760548573.133:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.813162][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.842793][ T29] audit: type=1326 audit(1760548573.143:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.873268][ T29] audit: type=1326 audit(1760548573.143:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.896837][ T29] audit: type=1326 audit(1760548573.143:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.920207][ T29] audit: type=1326 audit(1760548573.143:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.943636][ T29] audit: type=1326 audit(1760548573.143:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.944858][ T4982] loop2: detected capacity change from 0 to 512 [ 64.967293][ T29] audit: type=1326 audit(1760548573.143:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.967389][ T29] audit: type=1326 audit(1760548573.143:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.967442][ T29] audit: type=1326 audit(1760548573.143:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 64.967472][ T29] audit: type=1326 audit(1760548573.143:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 65.070223][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.077328][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.077634][ T4982] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 65.162340][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.328272][ T4778] veth0_vlan: entered promiscuous mode [ 65.341697][ T4778] veth1_vlan: entered promiscuous mode [ 65.369475][ T4778] veth0_macvtap: entered promiscuous mode [ 65.381798][ T4778] veth1_macvtap: entered promiscuous mode [ 65.398372][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.420236][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.433991][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.460155][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.473611][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489950][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.514192][ T5005] sctp: [Deprecated]: syz.4.518 (pid 5005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.514192][ T5005] Use struct sctp_sack_info instead [ 65.641486][ T5013] loop0: detected capacity change from 0 to 1024 [ 65.653695][ T5013] EXT4-fs: Ignoring removed orlov option [ 65.668855][ T5013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.670384][ T5017] pim6reg1: entered promiscuous mode [ 65.686393][ T5017] pim6reg1: entered allmulticast mode [ 65.712544][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.052466][ T5031] loop0: detected capacity change from 0 to 1024 [ 66.066006][ T5031] EXT4-fs: Ignoring removed orlov option [ 66.088914][ T5031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.193572][ T5040] loop2: detected capacity change from 0 to 256 [ 66.377073][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.400602][ T5053] loop0: detected capacity change from 0 to 128 [ 66.409162][ T5053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.421993][ T5053] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.477157][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.709137][ T5075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.236405][ T5081] Set syz1 is full, maxelem 65536 reached [ 67.768248][ T5112] loop2: detected capacity change from 0 to 1024 [ 67.796083][ T5112] EXT4-fs: Ignoring removed orlov option [ 67.848400][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.026800][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.503852][ T5075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.617825][ T5131] loop1: detected capacity change from 0 to 128 [ 68.639788][ T5131] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.669921][ T5131] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.836165][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.998637][ T5158] netlink: 64 bytes leftover after parsing attributes in process `syz.0.580'. [ 69.173434][ T5161] loop1: detected capacity change from 0 to 1024 [ 69.185253][ T5161] EXT4-fs: Ignoring removed orlov option [ 69.256145][ T5075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.269781][ T5161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.364721][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 69.374062][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.469669][ T5150] Set syz1 is full, maxelem 65536 reached [ 69.486355][ T5075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.502876][ T5166] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 69.571488][ T3789] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.583272][ T3789] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.607728][ T3789] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.625700][ T3789] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.808698][ T5196] loop1: detected capacity change from 0 to 1024 [ 69.816187][ T5196] EXT4-fs: Ignoring removed bh option [ 69.822005][ T5196] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 69.837895][ T5199] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 69.844521][ T5199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.852094][ T5199] vhci_hcd vhci_hcd.0: Device attached [ 69.860040][ T5199] netlink: 'syz.2.598': attribute type 4 has an invalid length. [ 69.868930][ T5196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.871583][ T5201] vhci_hcd: connection closed [ 69.897216][ T3720] vhci_hcd: stop threads [ 69.906238][ T3720] vhci_hcd: release socket [ 69.910704][ T3720] vhci_hcd: disconnect device [ 69.913663][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 69.913680][ T29] audit: type=1400 audit(1760548578.223:1988): avc: denied { mounton } for pid=5195 comm="syz.1.596" path="/145/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.944789][ T29] audit: type=1400 audit(1760548578.223:1989): avc: denied { mount } for pid=5195 comm="syz.1.596" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.967246][ T29] audit: type=1400 audit(1760548578.233:1990): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.988163][ T29] audit: type=1400 audit(1760548578.313:1991): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.009471][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.066271][ T5210] vhci_hcd: invalid port number 96 [ 70.071437][ T5210] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 70.230783][ T29] audit: type=1400 audit(1760548578.553:1992): avc: denied { read } for pid=5230 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.250889][ T29] audit: type=1400 audit(1760548578.553:1993): avc: denied { read } for pid=5231 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.271371][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 70.308005][ T5237] loop3: detected capacity change from 0 to 512 [ 70.327959][ T5237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.355257][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.370799][ T5237] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.381903][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.437308][ T5245] bridge0: entered promiscuous mode [ 70.458227][ T5245] macvtap1: entered allmulticast mode [ 70.463650][ T5245] bridge0: entered allmulticast mode [ 70.470860][ T5245] bridge0: port 3(macvtap1) entered blocking state [ 70.477560][ T5245] bridge0: port 3(macvtap1) entered disabled state [ 70.496895][ T5245] bridge0: left allmulticast mode [ 70.502004][ T5245] bridge0: left promiscuous mode [ 70.532712][ T5253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 70.542578][ T5253] netem: change failed [ 70.578642][ T5256] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 70.579182][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 70.579260][ T5256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.592061][ T5256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.598519][ T5258] loop2: detected capacity change from 0 to 512 [ 70.624294][ T5258] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.623: inode has both inline data and extents flags [ 70.624393][ T5258] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.623: couldn't read orphan inode 15 (err -117) [ 70.624918][ T5258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.704878][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.817772][ T29] audit: type=1400 audit(1760548579.143:1994): avc: denied { ioctl } for pid=5265 comm="syz.0.626" path="socket:[12447]" dev="sockfs" ino=12447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.134632][ T5283] netlink: 7 bytes leftover after parsing attributes in process `syz.0.632'. [ 71.266961][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 71.300188][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.310432][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.321522][ T3729] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.328902][ T29] audit: type=1400 audit(1760548579.653:1995): avc: denied { ioctl } for pid=5304 comm="syz.2.644" path="socket:[12497]" dev="sockfs" ino=12497 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.121276][ T29] audit: type=1400 audit(1760548580.443:1996): avc: denied { mount } for pid=5319 comm="syz.4.649" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.166302][ T5328] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.176244][ T5328] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.247222][ T5328] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.257119][ T5328] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.307008][ T5328] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.316925][ T5328] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.357276][ T5328] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.367253][ T5328] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.402383][ T3718] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.410839][ T3718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.421766][ T3718] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.430121][ T3718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.441401][ T3718] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.449740][ T3718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460604][ T3718] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.468923][ T3718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.520317][ T5338] loop1: detected capacity change from 0 to 512 [ 72.532458][ T5338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.545758][ T5338] EXT4-fs (loop1): 1 truncate cleaned up [ 72.551995][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.634831][ T29] audit: type=1400 audit(1760548580.953:1997): avc: denied { create } for pid=5342 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.664753][ T5345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 72.674251][ T5345] netem: change failed [ 72.784345][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.808453][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 73.355519][ T3826] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.443323][ T5378] netlink: 7 bytes leftover after parsing attributes in process `syz.1.673'. [ 73.537334][ T5388] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 73.543983][ T5388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.551589][ T5388] vhci_hcd vhci_hcd.0: Device attached [ 73.584851][ T5388] netlink: 'syz.4.677': attribute type 4 has an invalid length. [ 73.608048][ T5389] vhci_hcd: connection closed [ 73.608264][ T3779] vhci_hcd: stop threads [ 73.617248][ T3779] vhci_hcd: release socket [ 73.621662][ T3779] vhci_hcd: disconnect device [ 73.665929][ T5396] loop1: detected capacity change from 0 to 8192 [ 73.695733][ T5396] loop1: p1 < > p2 < > p3 p4 < > [ 73.700791][ T5396] loop1: partition table partially beyond EOD, truncated [ 73.708211][ T5396] loop1: p1 start 67108864 is beyond EOD, truncated [ 73.714847][ T5396] loop1: p2 start 4278190080 is beyond EOD, truncated [ 73.721670][ T5396] loop1: p3 start 100859904 is beyond EOD, truncated [ 73.761155][ T5402] sd 0:0:1:0: device reset [ 74.122881][ T5426] loop0: detected capacity change from 0 to 512 [ 74.140817][ T5426] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.695: inode has both inline data and extents flags [ 74.161161][ T5426] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.695: couldn't read orphan inode 15 (err -117) [ 74.173755][ T5426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.186483][ T5428] loop1: detected capacity change from 0 to 164 [ 74.234016][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.286580][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.293828][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.301668][ T5305] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 74.350814][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.361036][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.414605][ T5448] tipc: Started in network mode [ 74.419583][ T5448] tipc: Node identity ac14140f, cluster identity 4711 [ 74.427504][ T5448] tipc: New replicast peer: 255.255.255.83 [ 74.433405][ T5448] tipc: Enabled bearer , priority 10 [ 74.441173][ T3779] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.449675][ T3779] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.475938][ T3779] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.484589][ T3779] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.499197][ T3779] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.507723][ T3779] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.539436][ T3779] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.547900][ T3779] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.567918][ T5464] loop0: detected capacity change from 0 to 164 [ 74.637733][ T5473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.669675][ T5473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.694559][ T3779] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.759579][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 74.779224][ T5487] tipc: New replicast peer: 255.255.255.83 [ 74.785113][ T5487] tipc: Enabled bearer , priority 10 [ 74.811699][ T5489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'. [ 74.841428][ T5493] loop4: detected capacity change from 0 to 512 [ 74.848596][ T5493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.860926][ T5493] EXT4-fs (loop4): 1 truncate cleaned up [ 74.867418][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.938307][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 74.938325][ T29] audit: type=1400 audit(1760548583.263:2026): avc: denied { read write } for pid=5501 comm="syz.1.729" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.968084][ T29] audit: type=1400 audit(1760548583.263:2027): avc: denied { open } for pid=5501 comm="syz.1.729" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.545495][ T4761] tipc: Node number set to 2886997007 [ 75.606490][ T5511] loop3: detected capacity change from 0 to 1024 [ 75.613282][ T5511] EXT4-fs: Ignoring removed orlov option [ 75.621685][ T5511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.855157][ T4778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.895505][ T36] tipc: Node number set to 3987611127 [ 75.999627][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 76.009335][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 76.424309][ T5533] netlink: 76 bytes leftover after parsing attributes in process `syz.2.741'. [ 76.489675][ T5537] process 'syz.2.743' launched './file0' with NULL argv: empty string added [ 76.498956][ T29] audit: type=1400 audit(1760548584.823:2028): avc: denied { execute_no_trans } for pid=5536 comm="syz.2.743" path="/139/file0" dev="tmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.543392][ T29] audit: type=1326 audit(1760548584.863:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 76.566783][ T29] audit: type=1326 audit(1760548584.863:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 76.591505][ T29] audit: type=1326 audit(1760548584.863:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 76.614903][ T29] audit: type=1326 audit(1760548584.863:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 76.638303][ T29] audit: type=1326 audit(1760548584.863:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 76.661725][ T29] audit: type=1326 audit(1760548584.863:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.2.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4b02eec9 code=0x7ffc0000 [ 76.715256][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 76.724285][ T3826] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.784809][ T5549] netlink: 19 bytes leftover after parsing attributes in process `syz.3.749'. [ 76.812933][ T29] audit: type=1400 audit(1760548585.133:2035): avc: denied { create } for pid=5550 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.943592][ T5569] netlink: 240 bytes leftover after parsing attributes in process `syz.2.750'. [ 76.997881][ T5577] loop3: detected capacity change from 0 to 128 [ 77.006393][ T5577] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.018842][ T5577] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.061737][ T5581] tipc: Started in network mode [ 77.066815][ T5581] tipc: Node identity 167f03b09fdc, cluster identity 4711 [ 77.073995][ T5581] tipc: Enabled bearer , priority 0 [ 77.096353][ T4778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.111237][ T5581] syzkaller0: entered promiscuous mode [ 77.117026][ T5581] syzkaller0: entered allmulticast mode [ 77.123328][ T5581] tipc: Resetting bearer [ 77.131904][ T5580] tipc: Resetting bearer [ 77.145011][ T5580] tipc: Disabling bearer [ 77.398887][ T5607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5607 comm=syz.1.775 [ 77.429776][ T5612] netlink: 240 bytes leftover after parsing attributes in process `syz.3.772'. [ 77.461245][ T5616] loop1: detected capacity change from 0 to 512 [ 77.474706][ T5616] ------------[ cut here ]------------ [ 77.480296][ T5616] EA inode 11 i_nlink=2 [ 77.480608][ T5616] WARNING: CPU: 1 PID: 5616 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 77.494913][ T5616] Modules linked in: [ 77.498960][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: wÞ££‘ Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.508442][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.514253][ T5621] loop2: detected capacity change from 0 to 8192 [ 77.518677][ T5616] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 77.531697][ T5616] Code: 90 49 8d 7e 40 e8 b6 00 b9 ff 4d 8b 6e 40 4c 89 e7 e8 ca fb b8 ff 41 8b 56 48 48 c7 c7 df 4d 55 86 4c 89 ee e8 17 08 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 58 76 b0 03 0f 1f 84 00 00 00 00 00 [ 77.551439][ T5616] RSP: 0018:ffffc90001cb75a0 EFLAGS: 00010246 [ 77.557625][ T5616] RAX: eb1b862c4b750300 RBX: ffff88811a876468 RCX: 0000000000080000 [ 77.565675][ T5616] RDX: ffffc90001f61000 RSI: 000000000000405e RDI: 000000000000405f [ 77.573669][ T5616] RBP: 0000000000000002 R08: 0001c90001cb7427 R09: 0000000000000000 [ 77.581771][ T5616] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a876418 [ 77.586355][ T5624] loop3: detected capacity change from 0 to 128 [ 77.589789][ T5616] R13: 000000000000000b R14: ffff88811a8763d0 R15: 0000000000000001 [ 77.600916][ T5624] syz.3.782: attempt to access beyond end of device [ 77.600916][ T5624] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 77.604125][ T5616] FS: 00007fcdeba976c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 77.626468][ T5616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.633077][ T5616] CR2: 00007f4c243dcd80 CR3: 000000011cc94000 CR4: 00000000003506f0 [ 77.641173][ T5616] Call Trace: [ 77.644473][ T5616] [ 77.647470][ T5616] ext4_xattr_set_entry+0x77f/0x1020 [ 77.647619][ T5473] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 77.652914][ T5616] ext4_xattr_ibody_set+0x184/0x3c0 [ 77.664128][ T5616] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 77.670032][ T5616] __ext4_expand_extra_isize+0x246/0x280 [ 77.675746][ T5616] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 77.681359][ T5616] ext4_evict_inode+0x80e/0xd90 [ 77.686338][ T5616] ? __pfx_ext4_evict_inode+0x10/0x10 [ 77.691784][ T5616] evict+0x2e3/0x550 [ 77.695811][ T5616] ? __dquot_initialize+0x146/0x7c0 [ 77.698167][ T5624] syz.3.782: attempt to access beyond end of device [ 77.698167][ T5624] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 77.701128][ T5616] iput+0x4ed/0x650 [ 77.701163][ T5616] ext4_process_orphan+0x1a9/0x1c0 [ 77.715051][ T5624] syz.3.782: attempt to access beyond end of device [ 77.715051][ T5624] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 77.718351][ T5616] ext4_orphan_cleanup+0x6a8/0xa00 [ 77.723632][ T5624] syz.3.782: attempt to access beyond end of device [ 77.723632][ T5624] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 77.736962][ T5616] ext4_fill_super+0x3483/0x3810 [ 77.736998][ T5616] ? set_blocksize+0x1a8/0x310 [ 77.737027][ T5616] ? sb_set_blocksize+0xe3/0x100 [ 77.770506][ T5616] ? setup_bdev_super+0x30e/0x370 [ 77.772815][ T5624] syz.3.782: attempt to access beyond end of device [ 77.772815][ T5624] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 77.775593][ T5616] ? __pfx_ext4_fill_super+0x10/0x10 [ 77.794188][ T5616] get_tree_bdev_flags+0x291/0x300 [ 77.799391][ T5616] ? __pfx_ext4_fill_super+0x10/0x10 [ 77.804708][ T5616] get_tree_bdev+0x1f/0x30 [ 77.809283][ T5616] ext4_get_tree+0x1c/0x30 [ 77.813721][ T5616] vfs_get_tree+0x57/0x1d0 [ 77.818224][ T5616] do_new_mount+0x24d/0x660 [ 77.822810][ T5616] path_mount+0x4a5/0xb70 [ 77.827240][ T5616] ? user_path_at+0x109/0x130 [ 77.831987][ T5616] __se_sys_mount+0x28c/0x2e0 [ 77.836718][ T5616] __x64_sys_mount+0x67/0x80 [ 77.841347][ T5616] x64_sys_call+0x2b51/0x3000 [ 77.846114][ T5616] do_syscall_64+0xd2/0x200 [ 77.850749][ T5616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.856883][ T5616] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.862683][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.868629][ T5616] RIP: 0033:0x7fcded03066a [ 77.873068][ T5616] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.892732][ T5616] RSP: 002b:00007fcdeba96e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.901191][ T5616] RAX: ffffffffffffffda RBX: 00007fcdeba96ef0 RCX: 00007fcded03066a [ 77.909371][ T5616] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcdeba96eb0 [ 77.917438][ T5616] RBP: 0000200000000180 R08: 00007fcdeba96ef0 R09: 0000000000800718 [ 77.925462][ T5616] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 77.933461][ T5616] R13: 00007fcdeba96eb0 R14: 0000000000000473 R15: 0000200000000680 [ 77.941585][ T5616] [ 77.944630][ T5616] ---[ end trace 0000000000000000 ]--- [ 77.950669][ T5616] EXT4-fs (loop1): 1 orphan inode deleted [ 77.956663][ T3711] kworker/u8:17: attempt to access beyond end of device [ 77.956663][ T3711] loop3: rw=1, sector=161, nr_sectors = 1 limit=128 [ 77.956987][ T5616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.971112][ T5621] loop2: p1 < > p2 < > p3 p4 < > [ 77.987256][ T5621] loop2: partition table partially beyond EOD, truncated [ 77.999575][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.013915][ T5621] loop2: p1 start 67108864 is beyond EOD, truncated [ 78.020626][ T5621] loop2: p2 start 4278190080 is beyond EOD, truncated [ 78.027456][ T5621] loop2: p3 start 100859904 is beyond EOD, truncated [ 78.172625][ T5642] loop1: detected capacity change from 0 to 1024 [ 78.178424][ T5641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5641 comm=syz.2.788 [ 78.182853][ T5642] EXT4-fs: Ignoring removed orlov option [ 78.203584][ T5644] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.214377][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.245176][ T5649] netlink: 19 bytes leftover after parsing attributes in process `syz.2.792'. [ 78.262834][ T5644] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.407314][ T5644] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.468850][ T5644] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.544624][ T3711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.553091][ T5673] netlink: 'syz.2.795': attribute type 30 has an invalid length. [ 78.570039][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.581213][ T3711] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.609724][ T3711] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.629221][ T3711] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.707880][ T5689] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 78.715711][ T5689] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 78.752600][ T5689] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 78.760309][ T5689] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 78.900233][ T5714] loop2: detected capacity change from 0 to 256 [ 79.008365][ T5738] loop1: detected capacity change from 0 to 128 [ 79.017886][ T5738] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.041560][ T5738] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.173100][ T5745] loop0: detected capacity change from 0 to 8192 [ 79.181096][ T5770] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 79.197186][ T5770] team0: Port device dummy0 added [ 79.204918][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.239635][ T5745] loop0: p1 < > p2 < > p3 p4 < > [ 79.244800][ T5745] loop0: partition table partially beyond EOD, truncated [ 79.255601][ T5745] loop0: p1 start 67108864 is beyond EOD, truncated [ 79.262308][ T5745] loop0: p2 start 4278190080 is beyond EOD, truncated [ 79.269188][ T5745] loop0: p3 start 100859904 is beyond EOD, truncated [ 79.309988][ T5783] pim6reg1: entered promiscuous mode [ 79.315366][ T5783] pim6reg1: entered allmulticast mode [ 79.542862][ T5798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.565299][ T5800] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 79.585210][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.610711][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.627767][ T5800] bond0 (unregistering): Released all slaves [ 79.702219][ T5805] loop1: detected capacity change from 0 to 512 [ 79.743615][ T5810] loop2: detected capacity change from 0 to 512 [ 79.750442][ T5810] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.757499][ T5810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.772016][ T5810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.780544][ T5810] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.796131][ T5805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.825569][ T5805] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.852565][ T5810] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.827: Allocating blocks 41-42 which overlap fs metadata [ 79.867743][ T5805] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.825: corrupted inode contents [ 79.882820][ T5818] loop4: detected capacity change from 0 to 256 [ 79.895954][ T5810] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.827: Allocating blocks 41-42 which overlap fs metadata [ 79.902900][ T5805] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.825: mark_inode_dirty error [ 79.921467][ T5805] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.825: corrupted inode contents [ 79.945124][ T5805] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.825: mark_inode_dirty error [ 79.956816][ T5810] __quota_error: 113 callbacks suppressed [ 79.956849][ T5810] Quota error (device loop2): write_blk: dquota write failed [ 79.977179][ T5810] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 79.984647][ T5824] __nla_validate_parse: 7 callbacks suppressed [ 79.984665][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 79.987979][ T5810] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.827: Failed to acquire dquot type 1 [ 80.014057][ T5810] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 80.035564][ T5810] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.827: corrupted inode contents [ 80.050282][ T5810] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.827: mark_inode_dirty error [ 80.080540][ T5810] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.827: corrupted inode contents [ 80.081524][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.109103][ T5810] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.827: mark_inode_dirty error [ 80.121915][ T5810] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.827: corrupted inode contents [ 80.134551][ T5810] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 80.143717][ T5810] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.827: corrupted inode contents [ 80.156339][ T5810] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.827: mark_inode_dirty error [ 80.167581][ T5810] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 80.176902][ T5810] EXT4-fs (loop2): 1 truncate cleaned up [ 80.183019][ T5810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.226421][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.253326][ T5833] tipc: Started in network mode [ 80.258314][ T5833] tipc: Node identity ac14140f, cluster identity 4711 [ 80.265521][ T5833] tipc: New replicast peer: 255.255.255.255 [ 80.271647][ T5833] tipc: Enabled bearer , priority 10 [ 80.372568][ T5843] loop0: detected capacity change from 0 to 128 [ 80.382910][ T5843] syz.0.838: attempt to access beyond end of device [ 80.382910][ T5843] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 80.396753][ T5841] loop3: detected capacity change from 0 to 8192 [ 80.434293][ T29] audit: type=1400 audit(1760548588.753:2147): avc: denied { write } for pid=5844 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.453918][ T5841] loop3: p1 < > p2 < > p3 p4 < > [ 80.459206][ T5841] loop3: partition table partially beyond EOD, truncated [ 80.466814][ T5841] loop3: p1 start 67108864 is beyond EOD, truncated [ 80.473551][ T5841] loop3: p2 start 4278190080 is beyond EOD, truncated [ 80.480386][ T5841] loop3: p3 start 100859904 is beyond EOD, truncated [ 80.549909][ T5843] syz.0.838: attempt to access beyond end of device [ 80.549909][ T5843] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 80.570591][ T5843] syz.0.838: attempt to access beyond end of device [ 80.570591][ T5843] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 80.599616][ T5843] syz.0.838: attempt to access beyond end of device [ 80.599616][ T5843] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 80.852196][ T29] audit: type=1326 audit(1760548589.173:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 80.875614][ T29] audit: type=1326 audit(1760548589.173:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 80.903592][ T5871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.921847][ T5875] sch_tbf: burst 127 is lower than device ip6tnl0 mtu (1452) ! [ 80.935249][ T29] audit: type=1326 audit(1760548589.223:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 80.958876][ T29] audit: type=1326 audit(1760548589.223:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 80.982491][ T29] audit: type=1326 audit(1760548589.223:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 81.005905][ T29] audit: type=1326 audit(1760548589.223:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 81.029351][ T29] audit: type=1326 audit(1760548589.223:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.0.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 81.157366][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 81.166282][ T5887] loop1: detected capacity change from 0 to 128 [ 81.196685][ T5893] loop0: detected capacity change from 0 to 256 [ 81.229955][ T5896] loop3: detected capacity change from 0 to 1024 [ 81.265180][ T5896] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.860: Failed to acquire dquot type 0 [ 81.282372][ T5896] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 81.297274][ T5896] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.860: corrupted inode contents [ 81.309312][ T5896] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #13: comm syz.3.860: mark_inode_dirty error [ 81.321229][ T5896] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.860: corrupted inode contents [ 81.335597][ T5896] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.860: mark_inode_dirty error [ 81.349238][ T5896] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.860: corrupted inode contents [ 81.365850][ T5896] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 81.385074][ T5902] loop4: detected capacity change from 0 to 8192 [ 81.391503][ T23] tipc: Node number set to 2886997007 [ 81.397296][ T5896] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #13: comm syz.3.860: corrupted inode contents [ 81.409412][ T5896] EXT4-fs error (device loop3): ext4_truncate:4637: inode #13: comm syz.3.860: mark_inode_dirty error [ 81.420755][ T5896] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 81.434913][ T5896] EXT4-fs (loop3): 1 truncate cleaned up [ 81.441268][ T5896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.454081][ T5902] loop4: p1 < > p2 < > p3 p4 < > [ 81.459184][ T5902] loop4: partition table partially beyond EOD, truncated [ 81.467889][ T5902] loop4: p1 start 67108864 is beyond EOD, truncated [ 81.474595][ T5902] loop4: p2 start 4278190080 is beyond EOD, truncated [ 81.481496][ T5902] loop4: p3 start 100859904 is beyond EOD, truncated [ 81.506754][ T4778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.518518][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.864'. [ 81.537805][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 81.552218][ T5913] netlink: 'syz.3.866': attribute type 13 has an invalid length. [ 81.560929][ T5914] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 81.579617][ T5913] gretap0: refused to change device tx_queue_len [ 81.586243][ T5913] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.686222][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 81.721545][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 81.773436][ T5927] tipc: Enabled bearer , priority 0 [ 81.799866][ T5927] syzkaller0: entered promiscuous mode [ 81.805383][ T5927] syzkaller0: entered allmulticast mode [ 81.811219][ T5927] tipc: Resetting bearer [ 81.823169][ T5926] tipc: Resetting bearer [ 81.836280][ T5926] tipc: Disabling bearer [ 82.578370][ T5939] loop4: detected capacity change from 0 to 1024 [ 82.619571][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.664966][ T5939] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.875: Allocating blocks 449-513 which overlap fs metadata [ 82.689747][ T5937] EXT4-fs (loop4): pa ffff888107232150: logic 48, phys. 177, len 21 [ 82.697943][ T5937] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 82.726334][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.751878][ T5951] loop4: detected capacity change from 0 to 128 [ 82.762531][ T5951] bio_check_eod: 82 callbacks suppressed [ 82.762544][ T5951] syz.4.876: attempt to access beyond end of device [ 82.762544][ T5951] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 82.833358][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 82.867253][ T5960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'. [ 82.875572][ T5951] syz.4.876: attempt to access beyond end of device [ 82.875572][ T5951] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 82.890013][ T5951] syz.4.876: attempt to access beyond end of device [ 82.890013][ T5951] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 82.903844][ T5951] syz.4.876: attempt to access beyond end of device [ 82.903844][ T5951] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 82.913432][ T5962] loop3: detected capacity change from 0 to 512 [ 82.917789][ T5951] syz.4.876: attempt to access beyond end of device [ 82.917789][ T5951] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 82.937374][ T5951] syz.4.876: attempt to access beyond end of device [ 82.937374][ T5951] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 82.951290][ T5951] syz.4.876: attempt to access beyond end of device [ 82.951290][ T5951] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 82.967202][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.967677][ T5951] syz.4.876: attempt to access beyond end of device [ 82.967677][ T5951] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 82.979853][ T5962] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.018661][ T5962] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.888: corrupted inode contents [ 83.030914][ T5962] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.888: mark_inode_dirty error [ 83.042476][ T5962] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.888: corrupted inode contents [ 83.054612][ T5962] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.888: mark_inode_dirty error [ 83.054751][ T3733] kworker/u8:34: attempt to access beyond end of device [ 83.054751][ T3733] loop4: rw=1, sector=161, nr_sectors = 1 limit=128 [ 83.081356][ T4778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.110235][ T5970] loop4: detected capacity change from 0 to 512 [ 83.117081][ T5970] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.123774][ T5970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.132287][ T5970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.140769][ T5970] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.197184][ T3826] Bluetooth: hci0: command 0x1003 tx timeout [ 83.203278][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.239757][ T5970] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.890: Allocating blocks 41-42 which overlap fs metadata [ 83.279319][ T5970] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.890: Allocating blocks 41-42 which overlap fs metadata [ 83.303469][ T5970] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.890: Failed to acquire dquot type 1 [ 83.325212][ T5970] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 83.344992][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.890: corrupted inode contents [ 83.358159][ T5970] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.890: mark_inode_dirty error [ 83.369540][ T5979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.369782][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.890: corrupted inode contents [ 83.397200][ T5970] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.890: mark_inode_dirty error [ 83.410915][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.890: corrupted inode contents [ 83.432914][ T5970] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 83.451188][ T5970] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.890: corrupted inode contents [ 83.468180][ T5970] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.890: mark_inode_dirty error [ 83.479965][ T5970] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 83.489243][ T5970] EXT4-fs (loop4): 1 truncate cleaned up [ 83.496235][ T5970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.604857][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.617875][ T5995] loop2: detected capacity change from 0 to 128 [ 83.630219][ T5996] serio: Serial port ptm0 [ 83.641605][ T5995] syz.2.901: attempt to access beyond end of device [ 83.641605][ T5995] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 83.672228][ T6002] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 83.688513][ T6002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.718547][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 83.729535][ T6002] bond1 (unregistering): Released all slaves [ 83.780930][ T6015] netlink: 'syz.0.908': attribute type 13 has an invalid length. [ 83.831964][ T6015] gretap0: refused to change device tx_queue_len [ 83.838380][ T6015] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 83.865487][ T6020] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 83.880394][ T6020] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 83.889136][ T6020] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 83.898560][ T6020] team0: Port device dummy0 removed [ 83.904039][ T6022] loop3: detected capacity change from 0 to 512 [ 83.924549][ T6022] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.931565][ T6022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.951720][ T6022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.960350][ T6022] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.002977][ T6022] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.913: Allocating blocks 41-42 which overlap fs metadata [ 84.018606][ T6022] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.913: Allocating blocks 41-42 which overlap fs metadata [ 84.035512][ T6034] netlink: 'syz.1.917': attribute type 12 has an invalid length. [ 84.045888][ T6022] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.913: Failed to acquire dquot type 1 [ 84.065646][ T6022] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.066679][ T6036] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.080232][ T6022] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.913: corrupted inode contents [ 84.102571][ T6022] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.913: mark_inode_dirty error [ 84.114302][ T6022] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.913: corrupted inode contents [ 84.128184][ T6022] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.913: mark_inode_dirty error [ 84.145481][ T6022] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.913: corrupted inode contents [ 84.162705][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 84.171895][ T6022] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 84.181255][ T6022] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.913: corrupted inode contents [ 84.194724][ T6036] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.205086][ T6022] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.913: mark_inode_dirty error [ 84.220345][ T6022] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 84.247633][ T6022] EXT4-fs (loop3): 1 truncate cleaned up [ 84.256521][ T6047] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 84.264971][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.283880][ T6047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.293766][ T6036] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.306518][ T6047] bond2 (unregistering): Released all slaves [ 84.322793][ T4778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.342064][ T6036] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.355478][ T6050] netlink: 'syz.0.934': attribute type 12 has an invalid length. [ 84.441178][ T3746] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.460606][ T3779] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473619][ T3779] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.485490][ T3779] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.532344][ T6063] loop3: detected capacity change from 0 to 512 [ 84.550016][ T6063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.563851][ T6063] EXT4-fs (loop3): 1 truncate cleaned up [ 84.570199][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.628352][ T6071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.720801][ T4778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.306733][ T6080] loop2: detected capacity change from 0 to 1024 [ 85.318659][ T6082] loop1: detected capacity change from 0 to 512 [ 85.333602][ T6082] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.341897][ T6088] __nla_validate_parse: 1 callbacks suppressed [ 85.341914][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 85.348583][ T6082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.368496][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.383839][ T6084] loop4: detected capacity change from 0 to 1024 [ 85.391536][ T6082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.400098][ T6082] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.449057][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.466077][ T6084] __quota_error: 102 callbacks suppressed [ 85.466093][ T6084] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 85.481311][ T6084] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 85.491032][ T6084] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.940: Failed to acquire dquot type 0 [ 85.528010][ T6082] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.935: Allocating blocks 41-42 which overlap fs metadata [ 85.543687][ T6084] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.558497][ T6084] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.940: corrupted inode contents [ 85.570479][ T6084] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.940: mark_inode_dirty error [ 85.570509][ T6082] Quota error (device loop1): write_blk: dquota write failed [ 85.570528][ T6082] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 85.582087][ T6084] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.940: corrupted inode contents [ 85.610255][ T6082] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 85.620258][ T6082] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.935: Failed to acquire dquot type 1 [ 85.636063][ T6082] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.640581][ T6084] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.940: mark_inode_dirty error [ 85.663945][ T6082] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.935: corrupted inode contents [ 85.668196][ T6084] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.940: corrupted inode contents [ 85.688931][ T6084] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 85.702731][ T6084] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.940: corrupted inode contents [ 85.715880][ T6082] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.935: mark_inode_dirty error [ 85.728175][ T6084] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.940: mark_inode_dirty error [ 85.765710][ T6084] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 85.781562][ T6082] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.935: corrupted inode contents [ 85.812499][ T6082] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.935: mark_inode_dirty error [ 85.824100][ T29] audit: type=1400 audit(1760548594.143:2247): avc: denied { create } for pid=6106 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.846433][ T6084] EXT4-fs (loop4): 1 truncate cleaned up [ 85.859668][ T6082] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.935: corrupted inode contents [ 85.861549][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.889039][ T6110] netlink: 'syz.0.950': attribute type 12 has an invalid length. [ 85.901464][ T6082] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 85.925809][ T6082] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.935: corrupted inode contents [ 85.977756][ T6082] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.935: mark_inode_dirty error [ 85.990742][ T6082] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 85.997270][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.002772][ T6082] EXT4-fs (loop1): 1 truncate cleaned up [ 86.033142][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.167625][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 86.199042][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.297964][ T29] audit: type=1400 audit(1760548594.623:2248): avc: denied { write } for pid=6125 comm="syz.4.956" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 86.380720][ T29] audit: type=1400 audit(1760548594.703:2249): avc: denied { watch } for pid=6125 comm="syz.4.956" path="pipe:[14785]" dev="pipefs" ino=14785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.408464][ T6133] loop3: detected capacity change from 0 to 128 [ 86.417197][ T6133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.431428][ T6133] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.487237][ T4778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.592987][ T6153] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.687604][ T6153] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.757508][ T6153] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.807346][ T6153] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.851311][ T6170] loop2: detected capacity change from 0 to 128 [ 86.867723][ T3761] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.882185][ T6170] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.901974][ T3761] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.924829][ T3761] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933290][ T3761] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933629][ T6170] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.996678][ T6180] netlink: 'syz.0.977': attribute type 7 has an invalid length. [ 87.004416][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 87.035869][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.102287][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.982'. [ 87.308372][ T29] audit: type=1326 audit(1760548595.633:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 87.331831][ T29] audit: type=1326 audit(1760548595.633:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.3.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 87.346844][ T6219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.577265][ T6248] loop3: detected capacity change from 0 to 128 [ 87.599966][ T6248] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.619363][ T6248] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.729946][ T6254] netlink: 'syz.2.1011': attribute type 7 has an invalid length. [ 87.737823][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 87.748437][ T4778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.821984][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1015'. [ 87.842443][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 87.855340][ T6266] sd 0:0:1:0: device reset [ 87.873798][ T6268] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.952412][ T6278] loop2: detected capacity change from 0 to 764 [ 87.959954][ T6278] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 87.974267][ T6278] Symlink component flag not implemented [ 87.980595][ T6278] Symlink component flag not implemented (7) [ 88.020837][ T6283] pim6reg1: entered promiscuous mode [ 88.026318][ T6283] pim6reg1: entered allmulticast mode [ 88.194009][ T6298] infiniband syz0: set down [ 88.198800][ T6298] infiniband syz0: added bond_slave_0 [ 88.213921][ T6298] RDS/IB: syz0: added [ 88.532238][ T6315] blktrace: Concurrent blktraces are not allowed on loop5 [ 88.567892][ T6319] wg2: left promiscuous mode [ 88.572666][ T6319] wg2: left allmulticast mode [ 88.601816][ T6319] wg2: entered promiscuous mode [ 88.606779][ T6319] wg2: entered allmulticast mode [ 88.725384][ T6340] x_tables: ip_tables: osf match: only valid for protocol 6 [ 88.810794][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.818167][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.984717][ T6342] wg2: left promiscuous mode [ 88.989660][ T6342] wg2: left allmulticast mode [ 89.092784][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.112665][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.127853][ T6342] batadv_slave_1: left promiscuous mode [ 89.133504][ T6342] batadv_slave_1: left allmulticast mode [ 89.199819][ T3762] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.222777][ T3762] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.231513][ T3762] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.242873][ T3762] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.302531][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 89.339792][ T6369] vlan0: entered allmulticast mode [ 89.345010][ T6369] bridge0: entered allmulticast mode [ 89.351197][ T6369] bridge2: port 1(vlan0) entered blocking state [ 89.357606][ T6369] bridge2: port 1(vlan0) entered disabled state [ 89.376342][ T6369] vlan0: entered promiscuous mode [ 89.381494][ T6369] bridge0: entered promiscuous mode [ 89.491487][ T6374] loop1: detected capacity change from 0 to 512 [ 89.498560][ T6374] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.509659][ T6374] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 89.542246][ T6374] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.1058: inode #15: comm syz.1.1058: iget: illegal inode # [ 89.555196][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 89.565308][ T6377] loop2: detected capacity change from 0 to 2048 [ 89.566310][ T6374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.691519][ T6381] loop2: detected capacity change from 0 to 2048 [ 89.750437][ T6385] tipc: Enabled bearer , priority 0 [ 89.757701][ T6384] tipc: Resetting bearer [ 89.770289][ T6384] tipc: Disabling bearer [ 89.815768][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 89.945873][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1070'. [ 90.025936][ T6410] tipc: Enabled bearer , priority 0 [ 90.033519][ T6409] tipc: Resetting bearer [ 90.128559][ T6409] tipc: Disabling bearer [ 90.378633][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.418615][ T6437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.484280][ T6437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.548176][ T6437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.597623][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 90.597641][ T29] audit: type=1400 audit(1760548598.923:2463): avc: denied { read } for pid=6443 comm="syz.0.1086" path="socket:[16065]" dev="sockfs" ino=16065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.648370][ T6437] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.734256][ T29] audit: type=1400 audit(1760548599.053:2464): avc: denied { cpu } for pid=6447 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 90.761745][ T29] audit: type=1326 audit(1760548599.083:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.780613][ T3711] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.785518][ T29] audit: type=1326 audit(1760548599.083:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.817008][ T29] audit: type=1326 audit(1760548599.083:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.817383][ T3711] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.840432][ T29] audit: type=1326 audit(1760548599.083:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.840474][ T29] audit: type=1326 audit(1760548599.083:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.840503][ T29] audit: type=1326 audit(1760548599.083:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.896413][ T3711] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.919343][ T29] audit: type=1326 audit(1760548599.083:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.950917][ T29] audit: type=1326 audit(1760548599.083:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6447 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f87f088eec9 code=0x7ffc0000 [ 90.974703][ T3711] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.009838][ T6452] syzkaller0: entered promiscuous mode [ 91.015538][ T6452] syzkaller0: entered allmulticast mode [ 91.151882][ T6463] loop2: detected capacity change from 0 to 8192 [ 91.163643][ T6469] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.172299][ T6469] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.484816][ T6477] netlink: '+}[@': attribute type 2 has an invalid length. [ 91.571410][ T6479] sd 0:0:1:0: device reset [ 91.599907][ T6481] __nla_validate_parse: 1 callbacks suppressed [ 91.599926][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'. [ 91.745692][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 91.833810][ T6498] loop1: detected capacity change from 0 to 2048 [ 91.864466][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.865402][ T6503] tipc: Enabling of bearer rejected, failed to enable media [ 91.939288][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.990675][ T6512] loop3: detected capacity change from 0 to 1024 [ 92.014912][ T6512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.160759][ T6531] veth1_macvtap: left promiscuous mode [ 92.168734][ T6531] macsec0: entered promiscuous mode [ 92.202011][ T6537] loop1: detected capacity change from 0 to 512 [ 92.208776][ T6537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.226279][ T6537] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 92.234233][ T6537] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 92.249143][ T6537] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.256191][ T6537] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 92.270908][ T6537] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 92.296874][ T6537] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1126: bg 0: block 40: padding at end of block bitmap is not set [ 92.321852][ T6537] EXT4-fs (loop1): Remounting filesystem read-only [ 92.322458][ T4778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.328601][ T6537] EXT4-fs (loop1): 1 truncate cleaned up [ 92.343625][ T6537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.404259][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.535126][ T6566] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 92.535126][ T6566] program syz.1.1135 not setting count and/or reply_len properly [ 92.638440][ T6574] loop1: detected capacity change from 0 to 1024 [ 92.660649][ T6574] EXT4-fs: Ignoring removed bh option [ 92.672129][ T6574] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.697948][ T6574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.721694][ T6584] netlink: '+}[@': attribute type 2 has an invalid length. [ 92.800381][ T6600] siw: device registration error -23 [ 92.818243][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.894413][ T6614] tipc: Started in network mode [ 92.899380][ T6614] tipc: Node identity ceed6b89523f, cluster identity 4711 [ 92.906850][ T6614] tipc: Enabled bearer , priority 0 [ 92.924685][ T6618] loop4: detected capacity change from 0 to 2048 [ 92.939435][ T6614] syzkaller0: MTU too low for tipc bearer [ 92.945227][ T6614] tipc: Disabling bearer [ 92.992022][ T6618] loop4: p1 < > p4 [ 92.998110][ T6618] loop4: p4 size 8388608 extends beyond EOD, truncated [ 93.294532][ T6645] loop3: detected capacity change from 0 to 512 [ 93.306301][ T6645] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.1154: inode has both inline data and extents flags [ 93.320188][ T6645] EXT4-fs (loop3): get root inode failed [ 93.325992][ T6645] EXT4-fs (loop3): mount failed [ 93.406759][ T6651] siw: device registration error -23 [ 93.523548][ T1035] IPVS: starting estimator thread 0... [ 93.529366][ T6661] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 93.615548][ T6662] IPVS: using max 2352 ests per chain, 117600 per kthread [ 93.643990][ T6667] sd 0:0:1:0: device reset [ 93.737735][ T6675] loop2: detected capacity change from 0 to 1024 [ 93.747102][ T6675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.765444][ T6675] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 93.774499][ T6675] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.1165: Allocating blocks 497-513 which overlap fs metadata [ 93.791117][ T6675] EXT4-fs (loop2): pa ffff888107232310: logic 16, phys. 145, len 23 [ 93.799304][ T6675] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 93.857428][ T6675] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 93.869670][ T6675] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.869670][ T6675] [ 93.879508][ T6675] EXT4-fs (loop2): Total free blocks count 0 [ 93.885530][ T6675] EXT4-fs (loop2): Free/Dirty block details [ 93.891659][ T6675] EXT4-fs (loop2): free_blocks=16 [ 93.896760][ T6675] EXT4-fs (loop2): dirty_blocks=0 [ 93.901841][ T6675] EXT4-fs (loop2): Block reservation details [ 94.362512][ T6727] tipc: Enabled bearer , priority 0 [ 94.374379][ T6727] syzkaller0: MTU too low for tipc bearer [ 94.380173][ T6727] tipc: Disabling bearer [ 94.503322][ T6735] loop1: detected capacity change from 0 to 1024 [ 94.510220][ T6735] EXT4-fs: inline encryption not supported [ 94.516609][ T6735] EXT4-fs: Ignoring removed nobh option [ 94.522210][ T6735] EXT4-fs: Ignoring removed bh option [ 94.542553][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.573151][ T6735] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 94.583120][ T6735] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.666653][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.757957][ T6750] all: renamed from lo [ 94.961340][ T6760] tipc: Enabled bearer , priority 0 [ 94.974130][ T6760] syzkaller0: MTU too low for tipc bearer [ 94.980202][ T6760] tipc: Disabling bearer [ 94.996847][ T6758] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 95.145596][ T6777] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 95.145596][ T6777] program syz.2.1206 not setting count and/or reply_len properly [ 95.610980][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 95.611045][ T29] audit: type=1400 audit(1760548603.933:2976): avc: denied { listen } for pid=6802 comm="syz.0.1213" lport=43474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.640445][ T29] audit: type=1400 audit(1760548603.933:2977): avc: denied { accept } for pid=6802 comm="syz.0.1213" lport=43474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.810264][ T6809] tipc: Enabled bearer , priority 0 [ 95.819338][ T6809] syzkaller0: MTU too low for tipc bearer [ 95.825095][ T6809] tipc: Disabling bearer [ 95.885639][ T29] audit: type=1326 audit(1760548604.203:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 95.909381][ T29] audit: type=1326 audit(1760548604.203:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 95.954701][ T29] audit: type=1326 audit(1760548604.253:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 95.978216][ T29] audit: type=1326 audit(1760548604.253:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 96.001918][ T29] audit: type=1326 audit(1760548604.253:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 96.025813][ T29] audit: type=1400 audit(1760548604.323:2983): avc: denied { write } for pid=6804 comm="syz.2.1211" path="socket:[17587]" dev="sockfs" ino=17587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.049390][ T29] audit: type=1326 audit(1760548604.353:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 96.072927][ T29] audit: type=1326 audit(1760548604.353:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2418eec9 code=0x7ffc0000 [ 96.170269][ T6823] loop4: detected capacity change from 0 to 128 [ 96.177793][ T6828] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.245259][ T6828] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.263418][ T6823] bio_check_eod: 52 callbacks suppressed [ 96.263434][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.263434][ T6823] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 96.283146][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.283146][ T6823] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 96.297011][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.297011][ T6823] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 96.310663][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.310663][ T6823] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 96.311649][ T6828] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.325014][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.325014][ T6823] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 96.364447][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.364447][ T6823] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 96.378261][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.378261][ T6823] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 96.392294][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.392294][ T6823] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 96.406124][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.406124][ T6823] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 96.407853][ T6828] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.419912][ T6823] syz.4.1222: attempt to access beyond end of device [ 96.419912][ T6823] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 96.487840][ T3757] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.500879][ T3757] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.516021][ T3757] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.524382][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 96.544085][ T3757] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684052][ T6850] dummy0: entered allmulticast mode [ 96.756045][ T6850] dummy0: left allmulticast mode [ 97.053380][ T6878] loop3: detected capacity change from 0 to 164 [ 97.231402][ T6883] loop4: detected capacity change from 0 to 512 [ 97.250971][ T6883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.356073][ T6883] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.364042][ T6883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 97.399557][ T6883] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.540932][ T6883] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.555596][ T6883] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 97.565789][ T6883] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1241: bg 0: block 40: padding at end of block bitmap is not set [ 97.596597][ T6883] EXT4-fs (loop4): Remounting filesystem read-only [ 97.603170][ T6883] EXT4-fs (loop4): 1 truncate cleaned up [ 97.909440][ T6904] loop1: detected capacity change from 0 to 128 [ 97.922305][ T6906] loop2: detected capacity change from 0 to 512 [ 97.946261][ T6906] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1249: inode has both inline data and extents flags [ 97.959970][ T6906] EXT4-fs (loop2): get root inode failed [ 97.965736][ T6906] EXT4-fs (loop2): mount failed [ 98.886588][ T6943] all: renamed from lo [ 99.021207][ T6952] batadv_slave_1: entered promiscuous mode [ 99.034396][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 99.055587][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.080060][ T6952] batadv_slave_1 (unregistering): left promiscuous mode [ 99.087211][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.041217][ T6964] loop3: detected capacity change from 0 to 256 [ 100.053774][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.064839][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.076221][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.088329][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.098901][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.109665][ T6962] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.119992][ T6969] loop1: detected capacity change from 0 to 8192 [ 100.120041][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.136739][ T6962] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.146977][ T6962] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.161477][ T6964] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.578473][ T6977] tipc: Enabled bearer , priority 0 [ 100.615595][ T6974] tipc: Resetting bearer [ 100.639766][ T6974] tipc: Disabling bearer [ 100.649195][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 100.649208][ T29] audit: type=1400 audit(1760548608.973:3598): avc: denied { module_request } for pid=6978 comm="syz.2.1275" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.695710][ T29] audit: type=1400 audit(1760548609.003:3599): avc: denied { sys_module } for pid=6978 comm="syz.2.1275" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.748784][ T29] audit: type=1400 audit(1760548609.023:3600): avc: denied { ioctl } for pid=6978 comm="syz.2.1275" path="socket:[18501]" dev="sockfs" ino=18501 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.863171][ T6990] loop2: detected capacity change from 0 to 512 [ 100.900599][ T6990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.918350][ T6990] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.926361][ T6990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 100.983232][ T29] audit: type=1400 audit(1760548609.293:3601): avc: denied { create } for pid=6992 comm="syz.4.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.003077][ T29] audit: type=1400 audit(1760548609.293:3602): avc: denied { read } for pid=6992 comm="syz.4.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.026358][ T6990] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.032826][ T6990] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 101.042213][ T6990] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 101.056841][ T6990] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 101.069122][ T6990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1278: bg 0: block 40: padding at end of block bitmap is not set [ 101.098683][ T6990] EXT4-fs (loop2): Remounting filesystem read-only [ 101.105325][ T6990] EXT4-fs (loop2): 1 truncate cleaned up [ 101.111662][ T6990] EXT4-fs mount: 2 callbacks suppressed [ 101.111681][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.140508][ T29] audit: type=1400 audit(1760548609.463:3603): avc: denied { write } for pid=7003 comm="syz.3.1285" name="anycast6" dev="proc" ino=4026533426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.163573][ T29] audit: type=1400 audit(1760548609.463:3604): avc: denied { mount } for pid=6989 comm="syz.2.1278" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.235474][ T29] audit: type=1400 audit(1760548609.513:3605): avc: denied { read } for pid=6989 comm="syz.2.1278" dev="nsfs" ino=4026532755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.256872][ T29] audit: type=1400 audit(1760548609.513:3606): avc: denied { open } for pid=6989 comm="syz.2.1278" path="net:[4026532755]" dev="nsfs" ino=4026532755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.282626][ T7008] ================================================================== [ 101.290740][ T7008] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 101.299363][ T7008] [ 101.301696][ T7008] write to 0xffff88811951a228 of 8 bytes by task 7009 on cpu 0: [ 101.309329][ T7008] shmem_file_splice_read+0x470/0x600 [ 101.314719][ T7008] splice_direct_to_actor+0x26f/0x680 [ 101.320099][ T7008] do_splice_direct+0xda/0x150 [ 101.324907][ T7008] do_sendfile+0x380/0x650 [ 101.329341][ T7008] __x64_sys_sendfile64+0x105/0x150 [ 101.334558][ T7008] x64_sys_call+0x2bb4/0x3000 [ 101.339250][ T7008] do_syscall_64+0xd2/0x200 [ 101.343765][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.349665][ T7008] [ 101.351990][ T7008] write to 0xffff88811951a228 of 8 bytes by task 7008 on cpu 1: [ 101.359618][ T7008] shmem_file_splice_read+0x470/0x600 [ 101.365007][ T7008] splice_direct_to_actor+0x26f/0x680 [ 101.370386][ T7008] do_splice_direct+0xda/0x150 [ 101.375154][ T7008] do_sendfile+0x380/0x650 [ 101.379591][ T7008] __x64_sys_sendfile64+0x105/0x150 [ 101.384801][ T7008] x64_sys_call+0x2bb4/0x3000 [ 101.389486][ T7008] do_syscall_64+0xd2/0x200 [ 101.394004][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.399900][ T7008] [ 101.402237][ T7008] value changed: 0x0000000000036000 -> 0x0000000000043000 [ 101.409377][ T7008] [ 101.411700][ T7008] Reported by Kernel Concurrency Sanitizer on: [ 101.417854][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.4.1284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.429143][ T7008] Tainted: [W]=WARN [ 101.432946][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.443013][ T7008] ================================================================== [ 101.453067][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.583692][ T7018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1287'.