last executing test programs: 3m10.984691452s ago: executing program 3 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m9.919426914s ago: executing program 3 (id=105): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r2, 0x0, 0x0) 3m9.819155327s ago: executing program 3 (id=106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) 3m9.787382042s ago: executing program 3 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r1, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 3m9.742558278s ago: executing program 3 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500"], 0x28}}, 0x0) 3m9.435148238s ago: executing program 3 (id=117): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 3m9.435010379s ago: executing program 32 (id=117): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 1m34.384444739s ago: executing program 1 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000040), 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1m34.281644392s ago: executing program 1 (id=2687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580017, r1}) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000800)=@generic={0x0, 0x7}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x6, 0x0, 0x100, 0x5, 0x8618018b}) 1m34.194267104s ago: executing program 1 (id=2680): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="72617700000000000000000000a200000000000000000000000000000000000002"], 0x48) 1m33.879456357s ago: executing program 1 (id=2696): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1m33.835814192s ago: executing program 1 (id=2688): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab0000ffff000000003200000008001701"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1m33.599230414s ago: executing program 1 (id=2692): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 1m33.562572719s ago: executing program 33 (id=2692): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 1m29.939028474s ago: executing program 0 (id=2761): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1m29.900733229s ago: executing program 0 (id=2772): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = inotify_init1(0x80000) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400000a0) r4 = dup(r2) inotify_rm_watch(r4, r3) 1m29.768428007s ago: executing program 0 (id=2765): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 1m29.725111373s ago: executing program 0 (id=2766): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1m29.701543946s ago: executing program 0 (id=2767): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x200000000000000) 1m29.624863976s ago: executing program 0 (id=2769): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x9, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8) 1m29.59786096s ago: executing program 34 (id=2769): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x9, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8) 2.027059398s ago: executing program 2 (id=4779): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a0, &(0x7f0000001400)="$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") mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000009c0)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e096881cb}, 0x8006) 2.001237792s ago: executing program 7 (id=4783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0xa4}}, 0x0) 1.885823757s ago: executing program 7 (id=4785): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x40804) 1.780603841s ago: executing program 7 (id=4788): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1.773427872s ago: executing program 5 (id=4789): r0 = fsopen(&(0x7f0000000280)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.742145126s ago: executing program 5 (id=4791): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x9c3d, 0xc000, 0xc, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.728742228s ago: executing program 7 (id=4793): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.621230183s ago: executing program 5 (id=4794): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x1000000000800000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 1.5645903s ago: executing program 5 (id=4795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 1.535292094s ago: executing program 2 (id=4796): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) tkill(0x0, 0x3e) 1.414662921s ago: executing program 6 (id=4797): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) 1.414440591s ago: executing program 2 (id=4798): mq_open(0x0, 0x40, 0x20, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1.414291061s ago: executing program 5 (id=4799): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x5, 0x6, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.282971958s ago: executing program 4 (id=4800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) 1.183136242s ago: executing program 4 (id=4801): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 1.139664797s ago: executing program 4 (id=4802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@private2, r3}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 963.300171ms ago: executing program 5 (id=4803): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 963.194181ms ago: executing program 4 (id=4804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 962.534771ms ago: executing program 2 (id=4813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 961.928811ms ago: executing program 6 (id=4805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa40, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000a00)=""/4096, 0x0, 0x1000, 0x0, 0x100}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 877.344833ms ago: executing program 6 (id=4806): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x2, 0x13, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 743.09787ms ago: executing program 7 (id=4807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x7c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffe09, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 105.053936ms ago: executing program 6 (id=4808): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r3, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 94.894068ms ago: executing program 4 (id=4809): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 77.59921ms ago: executing program 2 (id=4810): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) shutdown(r1, 0x1) 75.85644ms ago: executing program 7 (id=4811): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.045074ms ago: executing program 6 (id=4812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 44.161644ms ago: executing program 2 (id=4814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x116, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 30.355236ms ago: executing program 4 (id=4815): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000140)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000004c0)='maps\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=4816): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) kernel console output (not intermixed with test programs): `syz.7.3267'. [ 152.321074][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3267'. [ 152.785819][T11742] loop5: detected capacity change from 0 to 512 [ 152.843729][T11742] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.859296][T11742] EXT4-fs (loop5): mount failed [ 152.958660][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3283'. [ 152.967628][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3283'. [ 153.013517][T11756] lo speed is unknown, defaulting to 1000 [ 153.743785][T11822] loop4: detected capacity change from 0 to 512 [ 153.792221][T11822] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3315: couldn't read orphan inode 26 (err -116) [ 153.818673][T11822] EXT4-fs (loop4): Remounting filesystem read-only [ 153.836148][T11822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.867813][T11822] ext4 filesystem being mounted at /737/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.897743][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 153.897757][ T29] audit: type=1400 audit(1768475512.342:8828): avc: denied { rmdir } for pid=11821 comm="syz.4.3315" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.977518][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.031064][ T29] audit: type=1326 audit(1768475512.482:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.104164][T11855] dvmrp1: tun_chr_ioctl cmd 35108 [ 154.109172][ T29] audit: type=1326 audit(1768475512.512:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.132804][ T29] audit: type=1326 audit(1768475512.512:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.133592][T11862] loop4: detected capacity change from 0 to 2048 [ 154.156611][ T29] audit: type=1326 audit(1768475512.512:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.186480][ T29] audit: type=1326 audit(1768475512.512:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.210085][ T29] audit: type=1326 audit(1768475512.512:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.234040][ T29] audit: type=1326 audit(1768475512.512:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.257591][ T29] audit: type=1326 audit(1768475512.512:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.281203][ T29] audit: type=1326 audit(1768475512.512:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11850 comm="syz.4.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 154.330657][T11862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.378827][T11862] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 154.404699][T11862] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 154.417086][T11862] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.417086][T11862] [ 154.426748][T11862] EXT4-fs (loop4): Total free blocks count 0 [ 154.432758][T11862] EXT4-fs (loop4): Free/Dirty block details [ 154.438642][T11862] EXT4-fs (loop4): free_blocks=2415919504 [ 154.444505][T11862] EXT4-fs (loop4): dirty_blocks=48 [ 154.449710][T11862] EXT4-fs (loop4): Block reservation details [ 154.455693][T11862] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 154.490143][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.500296][T11865] SELinux: failed to load policy [ 154.553518][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'. [ 154.562556][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'. [ 154.571758][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'. [ 154.689471][T11910] loop2: detected capacity change from 0 to 164 [ 154.704656][T11910] rock: directory entry would overflow storage [ 154.711377][T11910] rock: sig=0x4f50, size=4, remaining=3 [ 154.716959][T11910] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.789015][T11922] netlink: 'syz.6.3330': attribute type 13 has an invalid length. [ 154.810394][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3329'. [ 155.053972][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.081272][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.148531][T11972] loop4: detected capacity change from 0 to 128 [ 155.314860][ T53] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.325379][ T53] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.343527][ T53] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.360218][ T53] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.758467][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 155.765103][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.772811][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.794433][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 155.800990][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.808900][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.827619][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 155.834205][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.842211][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.851959][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 155.858504][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.866257][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.876426][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 155.883042][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.890581][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.907000][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 155.913702][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.921425][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.928642][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 155.935464][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.943544][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.956236][T12053] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 155.962870][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.970434][T12053] vhci_hcd vhci_hcd.0: Device attached [ 155.976013][ T3491] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 155.989782][T12084] vhci_hcd: connection closed [ 155.989805][T12080] vhci_hcd: connection closed [ 155.994516][ T53] vhci_hcd vhci_hcd.2: stop threads [ 155.994535][ T53] vhci_hcd vhci_hcd.2: release socket [ 155.994561][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.020715][T12077] vhci_hcd: connection closed [ 156.020858][T12073] vhci_hcd: connection closed [ 156.025705][T12070] vhci_hcd: connection closed [ 156.030922][T12067] vhci_hcd: connection closed [ 156.030992][T12063] vhci_hcd: connection closed [ 156.041066][T12054] vhci_hcd: connection closed [ 156.048986][ T3491] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 156.067367][T12088] loop6: detected capacity change from 0 to 128 [ 156.074573][T12055] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 156.079089][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.085696][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.091132][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.099433][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.104657][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.104980][T12092] loop7: detected capacity change from 0 to 1024 [ 156.110196][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.123676][T12092] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.134699][T12092] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.145614][T12092] JBD2: no valid journal superblock found [ 156.145998][T12088] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.151739][T12092] EXT4-fs (loop7): Could not load journal inode [ 156.170257][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.175530][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.181051][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.190005][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.195255][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.200677][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.206927][T12088] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.239789][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.245030][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.250746][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.257727][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.263000][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.268452][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.274599][ T53] vhci_hcd vhci_hcd.2: stop threads [ 156.280603][ T53] vhci_hcd vhci_hcd.2: release socket [ 156.286098][ T53] vhci_hcd vhci_hcd.2: disconnect device [ 156.292991][T10243] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.581505][T12124] loop6: detected capacity change from 0 to 1024 [ 156.605731][T12124] EXT4-fs: inline encryption not supported [ 156.624068][T12124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.655072][T10243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.823214][T12149] loop6: detected capacity change from 0 to 512 [ 156.840735][T12149] EXT4-fs (loop6): orphan cleanup on readonly fs [ 156.847477][T12149] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3384: bg 0: block 127: padding at end of block bitmap is not set [ 156.863603][T12149] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.3384: corrupted inode contents [ 156.904855][T12149] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 156.929965][T12149] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.3384: corrupted inode contents [ 156.943415][T12149] EXT4-fs error (device loop6): ext4_evict_inode:301: inode #15: comm syz.6.3384: mark_inode_dirty error [ 156.970126][T12149] EXT4-fs (loop6): 1 orphan inode deleted [ 156.979916][T12149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.084749][T10243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.524333][T12204] lo speed is unknown, defaulting to 1000 [ 158.029364][T12219] loop5: detected capacity change from 0 to 1024 [ 158.046854][T12219] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 158.070117][T12219] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.099850][T12219] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 158.112349][T12219] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.120112][T12219] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.3411: Inode bitmap for bg 0 marked uninitialized [ 158.134566][T12219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.187150][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.300610][T12228] loop6: detected capacity change from 0 to 8192 [ 158.427927][T12237] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.459631][T12237] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 158.611206][T12248] loop6: detected capacity change from 0 to 512 [ 158.648607][T12248] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3422: couldn't read orphan inode 26 (err -116) [ 158.670633][T12248] EXT4-fs (loop6): Remounting filesystem read-only [ 158.687859][T12248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.698988][T12258] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.710792][T12248] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.755321][T12262] loop5: detected capacity change from 0 to 1024 [ 158.781275][T10243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.798469][T12262] EXT4-fs: inline encryption not supported [ 158.830139][T12262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.894762][T12273] __nla_validate_parse: 1 callbacks suppressed [ 158.894842][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3433'. [ 158.946477][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.000523][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 159.000539][ T29] audit: type=1400 audit(1768475517.452:8973): avc: denied { map } for pid=12279 comm="syz.5.3435" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.030941][ T29] audit: type=1400 audit(1768475517.452:8974): avc: denied { execute } for pid=12279 comm="syz.5.3435" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.224423][T12294] netlink: 'syz.6.3441': attribute type 1 has an invalid length. [ 159.270927][ T29] audit: type=1400 audit(1768475517.722:8975): avc: denied { mounton } for pid=12298 comm="syz.7.3443" path="/138/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 159.463760][T12295] loop2: detected capacity change from 0 to 32768 [ 159.495313][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3461'. [ 159.506726][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3451'. [ 159.516706][T12315] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3461'. [ 159.537650][T12295] loop2: p1 p2 p3 < p5 p6 > [ 159.556790][T12295] loop2: p2 size 16775168 extends beyond EOD, truncated [ 159.624038][T12295] loop2: p5 start 4294970168 is beyond EOD, truncated [ 159.725981][T12321] loop6: detected capacity change from 0 to 136 [ 159.741878][T12321] Attempt to read inode for relocated directory [ 159.755902][T12322] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.817373][T12322] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.846524][T12322] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.920931][T12322] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.976169][ T898] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.989909][ T898] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.014510][ T898] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.022879][ T898] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.083964][T12332] loop7: detected capacity change from 0 to 512 [ 160.112999][T12332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.145684][T12332] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.157366][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 160.167082][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3460'. [ 160.197755][T12342] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3459'. [ 160.206771][T12342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.249528][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.557045][ T29] audit: type=1326 audit(1768475519.002:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.626974][ T29] audit: type=1326 audit(1768475519.032:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.630643][T12374] vlan0: entered allmulticast mode [ 160.650603][ T29] audit: type=1326 audit(1768475519.032:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.679105][ T29] audit: type=1326 audit(1768475519.032:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.702864][ T29] audit: type=1326 audit(1768475519.032:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.726460][ T29] audit: type=1326 audit(1768475519.032:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.749968][ T29] audit: type=1326 audit(1768475519.032:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.7.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 160.906728][T12384] loop4: detected capacity change from 0 to 512 [ 160.917745][T12380] lo speed is unknown, defaulting to 1000 [ 160.949151][T12384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.080110][T12384] ext4 filesystem being mounted at /770/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.090737][ T3491] usb 5-1: enqueue for inactive port 0 [ 161.096311][ T3491] usb 5-1: enqueue for inactive port 0 [ 161.160260][T12383] SELinux: failed to load policy [ 161.167452][T12392] loop2: detected capacity change from 0 to 256 [ 161.219126][ T3491] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 161.229167][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.243578][T12396] loop6: detected capacity change from 0 to 764 [ 161.271086][T12396] ISOFS: unable to read i-node block [ 161.440635][T12414] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 161.811650][T12423] +}[@: attempt to access beyond end of device [ 161.811650][T12423] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 161.825122][T12423] +}[@: attempt to access beyond end of device [ 161.825122][T12423] loop6: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 161.840147][T12423] +}[@: attempt to access beyond end of device [ 161.840147][T12423] loop6: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 161.853790][T12423] +}[@: attempt to access beyond end of device [ 161.853790][T12423] loop6: rw=2049, sector=170, nr_sectors = 2 limit=128 [ 161.867711][T12423] +}[@: attempt to access beyond end of device [ 161.867711][T12423] loop6: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 161.894536][T12423] +}[@: attempt to access beyond end of device [ 161.894536][T12423] loop6: rw=2049, sector=178, nr_sectors = 2 limit=128 [ 161.913782][T12423] +}[@: attempt to access beyond end of device [ 161.913782][T12423] loop6: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 161.931155][T12423] +}[@: attempt to access beyond end of device [ 161.931155][T12423] loop6: rw=2049, sector=202, nr_sectors = 2 limit=128 [ 161.944580][T12423] +}[@: attempt to access beyond end of device [ 161.944580][T12423] loop6: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 161.958094][T12423] +}[@: attempt to access beyond end of device [ 161.958094][T12423] loop6: rw=2049, sector=210, nr_sectors = 2 limit=128 [ 161.970567][T12429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.983707][T12429] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.020450][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.037688][T12434] netlink: 'syz.7.3501': attribute type 1 has an invalid length. [ 162.045576][T12434] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3501'. [ 162.056230][T12435] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.067211][T12435] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.078325][T12435] JBD2: no valid journal superblock found [ 162.084127][T12435] EXT4-fs (loop4): Could not load journal inode [ 162.136144][T12435] .`: (slave vlan0): Opening slave failed [ 162.213839][T12446] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 162.241235][T12446] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.262068][T12446] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 162.290787][T12446] EXT4-fs (loop7): orphan cleanup on readonly fs [ 162.297629][T12446] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.3502: Inode bitmap for bg 0 marked uninitialized [ 162.329910][T12446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.386528][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.824498][T12462] SELinux: failed to load policy [ 162.845033][T12474] netlink: 'syz.2.3515': attribute type 29 has an invalid length. [ 162.863707][T12474] netlink: 'syz.2.3515': attribute type 29 has an invalid length. [ 162.883998][T12474] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3515'. [ 162.893387][T12474] unsupported nla_type 58 [ 162.909741][T12476] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l65535 [ 162.981057][T12484] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.992325][T12484] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.030012][T12484] JBD2: no valid journal superblock found [ 163.035820][T12484] EXT4-fs (loop6): Could not load journal inode [ 163.054221][T12484] bond0: (slave vlan0): Opening slave failed [ 163.090141][T12497] netlink: 'syz.5.3528': attribute type 1 has an invalid length. [ 163.097922][T12497] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3528'. [ 163.165642][T12505] set_capacity_and_notify: 5 callbacks suppressed [ 163.165661][T12505] loop6: detected capacity change from 0 to 512 [ 163.189887][T12505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.222009][T12505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.234868][T12505] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.252962][T12505] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.3531: corrupted inode contents [ 163.265151][T12505] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.3531: mark_inode_dirty error [ 163.276719][T12505] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.3531: corrupted inode contents [ 163.289227][T12505] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #18: comm syz.6.3531: mark_inode_dirty error [ 163.301402][T12505] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #18: comm syz.6.3531: mark inode dirty (error -117) [ 163.314205][T12505] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 163.338166][T10243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.350214][T12510] netlink: 'syz.5.3533': attribute type 10 has an invalid length. [ 163.360924][T12510] team0: Failed to send options change via netlink (err -105) [ 163.368426][T12510] team0: Port device dummy0 added [ 163.375519][T12510] netlink: 'syz.5.3533': attribute type 10 has an invalid length. [ 163.386191][T12510] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.398343][T12510] team0: Failed to send options change via netlink (err -105) [ 163.406363][T12510] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.415700][T12510] team0: Port device dummy0 removed [ 163.446239][T12510] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.456878][T12516] netlink: 'syz.7.3534': attribute type 30 has an invalid length. [ 163.692939][T12522] SELinux: failed to load policy [ 163.855331][T12530] loop2: detected capacity change from 0 to 1024 [ 163.876213][T12534] loop4: detected capacity change from 0 to 1024 [ 163.884207][T12534] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.895200][T12534] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.905957][T12530] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 163.916101][T12530] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.927584][T12534] JBD2: no valid journal superblock found [ 163.933424][T12534] EXT4-fs (loop4): Could not load journal inode [ 163.940903][T12530] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 163.958369][T12534] .`: (slave vlan0): Opening slave failed [ 163.964655][T12530] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.971803][T12530] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.3537: Inode bitmap for bg 0 marked uninitialized [ 163.992529][T12530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.152953][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.170759][T12547] netlink: 'syz.4.3549': attribute type 30 has an invalid length. [ 164.236788][T12549] loop2: detected capacity change from 0 to 512 [ 164.260653][T12551] lo speed is unknown, defaulting to 1000 [ 164.289377][T12549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.317818][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 164.317833][ T29] audit: type=1400 audit(1768475522.762:8995): avc: denied { cpu } for pid=12550 comm="syz.5.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 164.348951][T12549] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.376248][T12557] __nla_validate_parse: 2 callbacks suppressed [ 164.376262][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3553'. [ 164.416120][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.681316][T12573] rdma_rxe: rxe_newlink: failed to add lo [ 164.692354][ T29] audit: type=1400 audit(1768475523.142:8996): avc: denied { bind } for pid=12570 comm="syz.5.3567" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.719892][T12574] netlink: 'syz.2.3558': attribute type 1 has an invalid length. [ 164.727838][T12574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3558'. [ 165.091410][T12594] lo speed is unknown, defaulting to 1000 [ 165.438345][ T3491] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 165.459182][ T3491] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.471643][T12605] loop4: detected capacity change from 0 to 2048 [ 165.479704][T12605] EXT4-fs: quotafile must be on filesystem root [ 165.490093][T12607] rdma_rxe: rxe_newlink: failed to add lo [ 166.301361][ T29] audit: type=1326 audit(1768475524.752:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 166.327847][T12614] loop5: detected capacity change from 0 to 512 [ 166.341285][T12617] loop4: detected capacity change from 0 to 1024 [ 166.349070][T12615] loop2: detected capacity change from 0 to 128 [ 166.357139][T12617] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 166.388949][ T29] audit: type=1326 audit(1768475524.752:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 166.395201][T12617] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.412633][ T29] audit: type=1326 audit(1768475524.782:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 166.412680][ T29] audit: type=1326 audit(1768475524.822:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.6.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 166.431029][T12614] EXT4-fs (loop5): 1 truncate cleaned up [ 166.519888][T12617] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 166.537411][T12614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.547308][T12625] loop6: detected capacity change from 0 to 1024 [ 166.550062][T12617] EXT4-fs (loop4): orphan cleanup on readonly fs [ 166.566763][T12625] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 166.568228][T12617] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.3574: Inode bitmap for bg 0 marked uninitialized [ 166.577884][T12625] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 166.600059][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.610327][T12625] JBD2: no valid journal superblock found [ 166.616090][T12625] EXT4-fs (loop6): Could not load journal inode [ 166.645991][T12625] bond0: (slave vlan0): Opening slave failed [ 166.668496][T12617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.739897][T12635] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 166.882947][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.167739][ T29] audit: type=1326 audit(1768475525.612:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 167.224674][ T29] audit: type=1326 audit(1768475525.642:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 167.248257][ T29] audit: type=1326 audit(1768475525.652:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 167.271958][ T29] audit: type=1326 audit(1768475525.652:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 167.336457][T12656] loop4: detected capacity change from 0 to 8192 [ 167.345848][T12656] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.406534][T12663] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.417622][T12663] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 167.473252][T12663] JBD2: no valid journal superblock found [ 167.479161][T12663] EXT4-fs (loop5): Could not load journal inode [ 167.490119][T12666] EXT4-fs (loop7): 1 truncate cleaned up [ 167.501590][T12666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.525452][T12666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.589194][T12663] bond0: (slave vlan0): Opening slave failed [ 167.872436][T12679] SELinux: failed to load policy [ 168.493419][T12644] Set syz1 is full, maxelem 65536 reached [ 168.541490][T12714] set_capacity_and_notify: 2 callbacks suppressed [ 168.541556][T12714] loop5: detected capacity change from 0 to 128 [ 168.635986][T12720] loop6: detected capacity change from 0 to 2048 [ 168.677860][T12725] loop7: detected capacity change from 0 to 1024 [ 168.685123][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3617'. [ 168.686951][T12725] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 168.710436][T12720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.729267][T12725] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.730905][T12714] bio_check_eod: 40 callbacks suppressed [ 168.730919][T12714] syz.5.3609: attempt to access beyond end of device [ 168.730919][T12714] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 168.762739][T12725] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 168.771771][T12725] EXT4-fs (loop7): orphan cleanup on readonly fs [ 168.778530][T12725] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.3616: Inode bitmap for bg 0 marked uninitialized [ 168.780270][T12720] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 168.792856][T12725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.825775][T12714] syz.5.3609: attempt to access beyond end of device [ 168.825775][T12714] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 168.839658][T12714] syz.5.3609: attempt to access beyond end of device [ 168.839658][T12714] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 168.853304][T12714] syz.5.3609: attempt to access beyond end of device [ 168.853304][T12714] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 168.872886][T10243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.885618][T12714] syz.5.3609: attempt to access beyond end of device [ 168.885618][T12714] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 168.913265][T12714] syz.5.3609: attempt to access beyond end of device [ 168.913265][T12714] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 168.927645][T12714] syz.5.3609: attempt to access beyond end of device [ 168.927645][T12714] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 168.942270][T12714] syz.5.3609: attempt to access beyond end of device [ 168.942270][T12714] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 168.991710][T12714] syz.5.3609: attempt to access beyond end of device [ 168.991710][T12714] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 169.005779][T12714] syz.5.3609: attempt to access beyond end of device [ 169.005779][T12714] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 169.045862][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3623'. [ 169.081311][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.108413][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3623'. [ 169.315768][T12763] loop7: detected capacity change from 0 to 1024 [ 169.338473][T12763] SELinux: security_context_str_to_sid (us) failed with errno=-22 [ 169.355896][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3631'. [ 169.502398][T12774] netlink: 'syz.7.3633': attribute type 1 has an invalid length. [ 169.596498][T12774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.613933][T12778] bond1: (slave ip6gretap1): making interface the new active one [ 169.623203][T12778] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 169.644611][T12781] loop2: detected capacity change from 0 to 1024 [ 169.686155][T12781] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 169.695900][T12781] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.729075][T12781] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 169.743782][T12781] EXT4-fs (loop2): orphan cleanup on readonly fs [ 169.758381][T12781] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.3635: Inode bitmap for bg 0 marked uninitialized [ 169.784151][T12781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.917216][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.000200][T12743] Set syz1 is full, maxelem 65536 reached [ 170.052170][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.088774][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.153400][T12801] loop6: detected capacity change from 0 to 512 [ 170.170661][T12801] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 170.192357][T12801] System zones: 0-2, 18-18, 34-34 [ 170.198442][T12801] EXT4-fs (loop6): too many log groups per flexible block group [ 170.207051][T12801] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 170.214456][T12801] EXT4-fs (loop6): mount failed [ 170.605285][T12826] loop5: detected capacity change from 0 to 128 [ 170.613092][T12826] vfat: Unknown parameter 's' [ 170.620085][T12828] netlink: 'syz.7.3651': attribute type 10 has an invalid length. [ 170.641522][T12828] team0: Failed to send options change via netlink (err -105) [ 170.649415][T12828] team0: Port device dummy0 added [ 170.664747][T12828] netlink: 'syz.7.3651': attribute type 10 has an invalid length. [ 170.673601][T12828] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.686422][T12830] loop5: detected capacity change from 0 to 512 [ 170.693970][T12830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.703360][T12828] team0: Failed to send options change via netlink (err -105) [ 170.711275][T12828] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.720588][T12828] team0: Port device dummy0 removed [ 170.728613][T12828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.746490][T12830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.761462][T12830] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.807094][T12835] loop6: detected capacity change from 0 to 128 [ 170.826728][T12837] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.860702][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.893204][T12837] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.936085][T12843] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 170.956891][T12837] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.017983][T12837] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.035146][T12845] loop4: detected capacity change from 0 to 8192 [ 171.124664][ T94] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.142576][ T94] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.174210][ T94] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.208940][ T94] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.254046][T12860] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 171.326154][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 171.326168][ T29] audit: type=1400 audit(1768475529.772:9036): avc: denied { create } for pid=12866 comm="syz.4.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.372589][ T29] audit: type=1400 audit(1768475529.802:9037): avc: denied { ioctl } for pid=12866 comm="syz.4.3668" path="socket:[49540]" dev="sockfs" ino=49540 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.397460][ T29] audit: type=1400 audit(1768475529.812:9038): avc: denied { write } for pid=12866 comm="syz.4.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.517800][T12875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3672'. [ 171.835267][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.922999][T12895] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 171.946350][T12895] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.987379][T12895] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 172.011743][T12895] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.022987][T12900] lo speed is unknown, defaulting to 1000 [ 172.033327][T12895] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.3681: Inode bitmap for bg 0 marked uninitialized [ 172.079763][T12895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.247627][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.991700][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3684'. [ 173.191095][T12921] tipc: Enabling of bearer rejected, already enabled [ 173.195103][T12919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.199851][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3690'. [ 173.216985][T12919] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, [ 173.220194][T12921] tipc: Disabling bearer [ 173.234546][T12919] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.243812][T12919] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 173.256970][T12919] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.256970][T12919] [ 173.266669][T12919] EXT4-fs (loop2): Total free blocks count 0 [ 173.272712][T12919] EXT4-fs (loop2): Free/Dirty block details [ 173.278735][T12919] EXT4-fs (loop2): free_blocks=2415919104 [ 173.285317][T12919] EXT4-fs (loop2): dirty_blocks=32 [ 173.291198][T12919] EXT4-fs (loop2): Block reservation details [ 173.297200][T12919] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 173.316929][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.622601][T12941] set_capacity_and_notify: 3 callbacks suppressed [ 173.622618][T12941] loop6: detected capacity change from 0 to 512 [ 173.636300][T12941] EXT4-fs: Ignoring removed bh option [ 173.646038][T12941] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 173.660147][T12941] EXT4-fs (loop6): 1 truncate cleaned up [ 173.667957][T12941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.747979][T10243] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.793595][T12954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12954 comm=syz.6.3701 [ 173.806535][T12954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12954 comm=syz.6.3701 [ 173.879977][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 173.886100][ T3807] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.055734][T12964] lo speed is unknown, defaulting to 1000 [ 174.132002][T12976] syzkaller1: entered promiscuous mode [ 174.137536][T12976] syzkaller1: entered allmulticast mode [ 174.644983][T13008] loop7: detected capacity change from 0 to 512 [ 174.663746][T13008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.696494][T13008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.718546][T13008] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.837431][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.982395][ T29] audit: type=1400 audit(1768475533.432:9039): avc: denied { read } for pid=13017 comm="syz.7.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 175.369489][T13026] loop7: detected capacity change from 0 to 32768 [ 175.419891][T13026] loop7: p1 p2 p3 < p5 p6 > [ 175.429045][T13026] loop7: p2 size 16775168 extends beyond EOD, truncated [ 175.449592][T13026] loop7: p5 start 4294970168 is beyond EOD, truncated [ 175.557665][ T29] audit: type=1326 audit(1768475534.002:9040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 175.581268][ T29] audit: type=1326 audit(1768475534.002:9041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 175.604988][ T29] audit: type=1326 audit(1768475534.002:9042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 175.707076][T13043] tipc: Started in network mode [ 175.712850][T13043] tipc: Node identity ac14140f, cluster identity 4711 [ 175.739866][T13043] tipc: New replicast peer: 255.255.255.255 [ 175.745946][T13043] tipc: Enabled bearer , priority 10 [ 175.749022][ T29] audit: type=1326 audit(1768475534.002:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 175.775603][ T29] audit: type=1326 audit(1768475534.002:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 175.781758][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3732'. [ 175.799177][ T29] audit: type=1326 audit(1768475534.032:9045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.5.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 175.833398][T13043] tipc: Disabling bearer [ 176.115639][T13059] loop2: detected capacity change from 0 to 128 [ 176.127749][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3738'. [ 176.243494][T13073] bio_check_eod: 320 callbacks suppressed [ 176.243511][T13073] syz.2.3740: attempt to access beyond end of device [ 176.243511][T13073] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 176.262276][T13072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.275737][T13073] syz.2.3740: attempt to access beyond end of device [ 176.275737][T13073] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 176.291553][T13073] syz.2.3740: attempt to access beyond end of device [ 176.291553][T13073] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 176.310692][T13073] syz.2.3740: attempt to access beyond end of device [ 176.310692][T13073] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 176.362521][T13073] syz.2.3740: attempt to access beyond end of device [ 176.362521][T13073] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 176.417139][T13073] syz.2.3740: attempt to access beyond end of device [ 176.417139][T13073] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 176.505281][T13073] syz.2.3740: attempt to access beyond end of device [ 176.505281][T13073] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 176.560915][T13073] syz.2.3740: attempt to access beyond end of device [ 176.560915][T13073] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 176.615818][T13073] syz.2.3740: attempt to access beyond end of device [ 176.615818][T13073] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 176.639492][T13073] syz.2.3740: attempt to access beyond end of device [ 176.639492][T13073] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 176.708255][T13088] loop4: detected capacity change from 0 to 32768 [ 176.770557][T13088] loop4: p1 p2 p3 < p5 p6 > [ 176.782355][T13088] loop4: p2 size 16775168 extends beyond EOD, truncated [ 176.804757][T13088] loop4: p5 start 4294970168 is beyond EOD, truncated [ 177.409370][T13102] dvmrp0: entered allmulticast mode [ 177.422642][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 177.422657][ T29] audit: type=1326 audit(1768475535.872:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.521891][ T29] audit: type=1326 audit(1768475535.902:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.525807][T13110] loop2: detected capacity change from 0 to 512 [ 177.545434][ T29] audit: type=1326 audit(1768475535.902:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.545477][ T29] audit: type=1326 audit(1768475535.912:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.583560][T13110] EXT4-fs: Ignoring removed bh option [ 177.598934][ T29] audit: type=1326 audit(1768475535.912:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.598976][ T29] audit: type=1326 audit(1768475535.912:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.651352][ T29] audit: type=1326 audit(1768475535.912:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.652849][T13110] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 177.674870][ T29] audit: type=1326 audit(1768475535.912:9059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.674956][ T29] audit: type=1326 audit(1768475535.912:9060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.674994][ T29] audit: type=1326 audit(1768475535.912:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 177.909939][T13110] EXT4-fs (loop2): 1 truncate cleaned up [ 177.929958][T13110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.106917][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.272966][T13127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3766'. [ 178.540218][T13133] netlink: 'syz.4.3768': attribute type 4 has an invalid length. [ 178.592724][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3770'. [ 178.621394][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3770'. [ 178.669495][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3770'. [ 178.924942][T13159] loop4: detected capacity change from 0 to 1024 [ 178.932729][T13159] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.943687][T13159] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.979025][T13159] JBD2: no valid journal superblock found [ 178.984889][T13159] EXT4-fs (loop4): Could not load journal inode [ 179.014380][T13159] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 179.040857][T13166] IPVS: Error connecting to the multicast addr [ 179.438198][T13186] loop2: detected capacity change from 0 to 512 [ 179.462384][T13186] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3792: error while reading EA inode 32 err=-116 [ 179.491406][T13186] EXT4-fs (loop2): Remounting filesystem read-only [ 179.498177][T13186] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.511274][T13186] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 179.631672][T13186] EXT4-fs (loop2): 1 orphan inode deleted [ 179.666570][T13186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.722926][T13186] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.895184][T13196] loop5: detected capacity change from 0 to 128 [ 180.019834][ T1040] Process accounting resumed [ 180.318794][T13203] lo speed is unknown, defaulting to 1000 [ 181.103370][T13181] Set syz1 is full, maxelem 65536 reached [ 181.256113][T13216] loop2: detected capacity change from 0 to 1024 [ 181.302436][T13216] EXT4-fs: Ignoring removed bh option [ 181.344136][T13216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.398064][T13216] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3802: Allocating blocks 385-513 which overlap fs metadata [ 181.482852][T13216] EXT4-fs (loop2): pa ffff88810056fbd0: logic 16, phys. 129, len 24 [ 181.490959][T13216] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 181.560523][T13239] loop7: detected capacity change from 0 to 512 [ 181.577651][T13239] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3813: EA inode hash validation failed [ 181.580014][T13243] loop5: detected capacity change from 0 to 512 [ 181.598542][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.607889][T13239] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.3813: corrupted inode contents [ 181.621965][T13239] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.3813: mark_inode_dirty error [ 181.633929][T13239] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.3813: corrupted inode contents [ 181.640295][T13243] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 181.647290][T13239] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.3813: mark_inode_dirty error [ 181.673895][T13243] EXT4-fs (loop5): mount failed [ 181.706635][T13247] lo speed is unknown, defaulting to 1000 [ 181.715492][T13239] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.3813: mark inode dirty (error -117) [ 181.750046][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3817'. [ 181.777202][T13239] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 181.833592][T13239] EXT4-fs (loop7): 1 orphan inode deleted [ 181.840544][T13239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.915407][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.056034][T13266] loop7: detected capacity change from 0 to 512 [ 182.086915][T13266] ------------[ cut here ]------------ [ 182.092416][T13266] EA inode 11 i_nlink=2 [ 182.092428][T13266] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.7.3823/13266 [ 182.107392][T13266] Modules linked in: [ 182.111326][T13266] CPU: 0 UID: 0 PID: 13266 Comm: syz.7.3823 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.121463][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.131543][T13266] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 182.138210][T13266] Code: 71 e2 9c ff 4c 8d 2d 3a ed 20 05 49 8d 7e 40 e8 11 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 25 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 7c 9b ba 03 66 66 66 2e 0f 1f 84 [ 182.157837][T13266] RSP: 0018:ffffc9000b85b778 EFLAGS: 00010246 [ 182.163986][T13266] RAX: ffff888102054c90 RBX: ffff88811a946080 RCX: ffffffff81bb1e8b [ 182.172017][T13266] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 182.180008][T13266] RBP: 000000000000000b R08: 000188811a946033 R09: 0000000000000000 [ 182.188032][T13266] R10: ffffc9000b85b6a8 R11: 0001c9000b85b6a8 R12: ffff88811a946030 [ 182.196034][T13266] R13: ffffffff86dc0bb0 R14: ffff88811a945fe8 R15: 0000000000000001 [ 182.204071][T13266] FS: 00007fcff72a76c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 182.213153][T13266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.219741][T13266] CR2: 0000001b34321ff8 CR3: 000000011b476000 CR4: 00000000003506f0 [ 182.227712][T13266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 182.235732][T13266] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 182.243779][T13266] Call Trace: [ 182.247069][T13266] [ 182.250021][T13266] ext4_xattr_inode_dec_ref_all+0x57c/0x870 [ 182.256001][T13266] ? errseq_check+0x2c/0x50 [ 182.260530][T13266] ext4_xattr_delete_inode+0x6b7/0x790 [ 182.266164][T13266] ? ext4_truncate+0x92b/0xae0 [ 182.270963][T13266] ext4_evict_inode+0xa20/0xd40 [ 182.275824][T13266] ? __pfx_ext4_evict_inode+0x10/0x10 [ 182.281231][T13266] evict+0x2af/0x510 [ 182.285138][T13266] ? __dquot_initialize+0x146/0x7c0 [ 182.290496][T13266] iput+0x4bd/0x650 [ 182.294323][T13266] ext4_process_orphan+0x1a9/0x1c0 [ 182.299518][T13266] ext4_orphan_cleanup+0x6a8/0xa00 [ 182.304701][T13266] ext4_fill_super+0x3411/0x37a0 [ 182.309648][T13266] ? set_blocksize+0x1a8/0x310 [ 182.314432][T13266] ? sb_set_blocksize+0xfc/0x170 [ 182.319380][T13266] ? setup_bdev_super+0x30e/0x370 [ 182.324442][T13266] ? __pfx_ext4_fill_super+0x10/0x10 [ 182.329787][T13266] get_tree_bdev_flags+0x291/0x300 [ 182.334962][T13266] ? __pfx_ext4_fill_super+0x10/0x10 [ 182.340278][T13266] get_tree_bdev+0x1f/0x30 [ 182.344697][T13266] ext4_get_tree+0x1c/0x30 [ 182.349142][T13266] vfs_get_tree+0x57/0x1d0 [ 182.353622][T13266] do_new_mount+0x24d/0x6a0 [ 182.358127][T13266] path_mount+0x4ab/0xb80 [ 182.362510][T13266] ? user_path_at+0xbf/0x130 [ 182.367171][T13266] __se_sys_mount+0x28c/0x2e0 [ 182.371873][T13266] __x64_sys_mount+0x67/0x80 [ 182.376471][T13266] x64_sys_call+0x2cca/0x3000 [ 182.381254][T13266] do_syscall_64+0xca/0x2b0 [ 182.385808][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.391780][T13266] RIP: 0033:0x7fcff8840eea [ 182.396283][T13266] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.415924][T13266] RSP: 002b:00007fcff72a6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.424374][T13266] RAX: ffffffffffffffda RBX: 00007fcff72a6ef0 RCX: 00007fcff8840eea [ 182.432424][T13266] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcff72a6eb0 [ 182.440455][T13266] RBP: 0000200000000180 R08: 00007fcff72a6ef0 R09: 0000000000800718 [ 182.448513][T13266] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 182.456506][T13266] R13: 00007fcff72a6eb0 R14: 000000000000047f R15: 0000200000000200 [ 182.464511][T13266] [ 182.467526][T13266] ---[ end trace 0000000000000000 ]--- [ 182.473558][T13266] EXT4-fs (loop7): 1 orphan inode deleted [ 182.485833][T13266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.641139][T13266] lo speed is unknown, defaulting to 1000 [ 182.684390][T13284] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3830'. [ 182.707325][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 182.707341][ T29] audit: type=1326 audit(1768475541.152:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.5.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 182.791821][T13290] loop5: detected capacity change from 0 to 764 [ 182.802060][ T29] audit: type=1326 audit(1768475541.192:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.5.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 182.825525][ T29] audit: type=1326 audit(1768475541.192:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.5.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 182.849187][ T29] audit: type=1326 audit(1768475541.192:9129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.5.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 182.873151][ T29] audit: type=1326 audit(1768475541.192:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.5.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 182.915170][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.003629][ T29] audit: type=1326 audit(1768475541.452:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.7.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 183.060573][T13299] loop7: detected capacity change from 0 to 128 [ 183.089381][T13299] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.093861][ T29] audit: type=1326 audit(1768475541.452:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.7.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 183.124979][ T29] audit: type=1326 audit(1768475541.452:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.7.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 183.148516][ T29] audit: type=1326 audit(1768475541.472:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.7.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 183.172076][ T29] audit: type=1326 audit(1768475541.482:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13298 comm="syz.7.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcff883f783 code=0x7ffc0000 [ 183.197575][T13299] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.231574][T13303] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 183.231574][T13303] program syz.5.3838 not setting count and/or reply_len properly [ 183.258437][ T94] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.299292][T13309] pim6reg: entered allmulticast mode [ 183.323374][T13309] pim6reg: left allmulticast mode [ 183.662331][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3854'. [ 183.711231][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.719610][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3854'. [ 183.730458][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.742701][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.770854][ T12] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.771002][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'. [ 183.793510][T13344] netlink: 'syz.7.3859': attribute type 29 has an invalid length. [ 183.818634][T13344] netlink: 'syz.7.3859': attribute type 29 has an invalid length. [ 183.827671][T13344] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3859'. [ 184.972079][T13398] netlink: 'syz.5.3881': attribute type 30 has an invalid length. [ 184.999855][T13399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13399 comm=syz.2.3878 [ 185.091898][T13410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13410 comm=syz.4.3886 [ 185.104541][T13410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13410 comm=syz.4.3886 [ 185.132632][T13415] loop5: detected capacity change from 0 to 512 [ 185.155077][T13415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.187397][T13415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.210694][T13427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13427 comm=syz.7.3903 [ 185.216560][T13415] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.277828][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'. [ 185.306940][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 185.327094][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.356175][T13444] atomic_op ffff888128988928 conn xmit_atomic 0000000000000000 [ 186.204925][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3935'. [ 186.232256][T13525] team0 (unregistering): Port device team_slave_0 removed [ 186.242179][T13525] team0 (unregistering): Port device team_slave_1 removed [ 186.399788][T13556] loop7: detected capacity change from 0 to 1024 [ 186.423438][T13556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.462298][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 186.473148][T13568] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3952'. [ 186.482383][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 186.508438][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.814188][T13605] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.824352][T13605] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.873382][T13610] loop9: detected capacity change from 0 to 7 [ 186.880083][T13610] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.888155][T13610] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.896875][T13610] loop9: unable to read partition table [ 186.902810][T13610] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 186.902810][T13610] ) failed (rc=-5) [ 186.927460][T13605] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.937299][T13605] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.980044][T13616] loop5: detected capacity change from 0 to 512 [ 186.987676][T13616] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.988261][T13605] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.001742][T13616] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 187.006526][T13605] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.016202][T13616] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 187.034317][T13616] System zones: 0-2, 18-18, 34-34 [ 187.039926][T13616] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3973: bad orphan inode 15 [ 187.050219][T13616] ext4_test_bit(bit=14, block=18) = 1 [ 187.055589][T13616] is_bad_inode(inode)=0 [ 187.059817][T13616] NEXT_ORPHAN(inode)=2264924160 [ 187.064671][T13616] max_ino=32 [ 187.067856][T13616] i_nlink=0 [ 187.071218][T13616] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.3973: corrupted inode contents [ 187.083511][T13616] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.3973: mark_inode_dirty error [ 187.085041][T13605] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.095160][T13616] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.3973: corrupted inode contents [ 187.105544][T13605] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.116760][T13616] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.3973: mark_inode_dirty error [ 187.138330][T13616] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.3973: mark inode dirty (error -117) [ 187.151274][T13616] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 187.161844][T13616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.231261][ T94] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.239535][ T94] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.252487][T13616] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3973: bg 0: block 80: padding at end of block bitmap is not set [ 187.287074][ T94] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.295577][ T94] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.349035][ T94] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.357314][ T94] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.371080][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.381756][ T94] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.390011][ T94] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.608124][T13648] lo speed is unknown, defaulting to 1000 [ 187.803217][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 187.803232][ T29] audit: type=1400 audit(1768475546.252:9373): avc: denied { write } for pid=13665 comm="syz.7.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.635795][T13739] loop2: detected capacity change from 0 to 512 [ 188.667690][T13739] EXT4-fs (loop2): 1 orphan inode deleted [ 188.690905][T13739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.748392][T13756] __nla_validate_parse: 9 callbacks suppressed [ 188.748408][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4032'. [ 188.765625][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4032'. [ 188.782666][T13739] lo speed is unknown, defaulting to 1000 [ 188.918583][T13764] ref_ctr_offset mismatch. inode: 0x4b8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 188.981193][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.997444][ T29] audit: type=1326 audit(1768475547.442:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.021057][ T29] audit: type=1326 audit(1768475547.442:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.044924][ T29] audit: type=1326 audit(1768475547.442:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.068449][ T29] audit: type=1326 audit(1768475547.442:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.092037][ T29] audit: type=1326 audit(1768475547.442:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.115921][ T29] audit: type=1326 audit(1768475547.442:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.139700][ T29] audit: type=1326 audit(1768475547.442:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.163571][ T29] audit: type=1326 audit(1768475547.442:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.187318][ T29] audit: type=1326 audit(1768475547.442:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.5.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 189.202961][T13769] lo speed is unknown, defaulting to 1000 [ 189.301140][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4040'. [ 189.419534][T13784] pimreg: entered allmulticast mode [ 189.427033][T13784] pimreg: left allmulticast mode [ 189.548506][T13790] netem: change failed [ 189.960503][T13816] lo speed is unknown, defaulting to 1000 [ 190.088710][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4067'. [ 190.372253][T13866] loop4: detected capacity change from 0 to 512 [ 190.378762][T13864] loop7: detected capacity change from 0 to 2048 [ 190.405931][T13864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 190.421656][T13866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.467307][T13866] ext4 filesystem being mounted at /902/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.570388][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.688996][T13864] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.707723][T13864] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 190.720211][T13864] EXT4-fs (loop7): This should not happen!! Data will be lost [ 190.720211][T13864] [ 190.729947][T13864] EXT4-fs (loop7): Total free blocks count 0 [ 190.735945][T13864] EXT4-fs (loop7): Free/Dirty block details [ 190.741863][T13864] EXT4-fs (loop7): free_blocks=2415919104 [ 190.747588][T13864] EXT4-fs (loop7): dirty_blocks=8208 [ 190.752910][T13864] EXT4-fs (loop7): Block reservation details [ 190.758914][T13864] EXT4-fs (loop7): i_reserved_data_blocks=513 [ 190.821433][ T2790] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 190.937337][T13908] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4098'. [ 191.017725][T13916] loop7: detected capacity change from 0 to 512 [ 191.038743][T13916] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.051853][T13916] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 191.061207][T13916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 191.069229][T13916] System zones: 0-2, 18-18, 34-34 [ 191.070047][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4102'. [ 191.089836][T13916] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4093: bad orphan inode 15 [ 191.108136][T13916] ext4_test_bit(bit=14, block=18) = 1 [ 191.113604][T13916] is_bad_inode(inode)=0 [ 191.117765][T13916] NEXT_ORPHAN(inode)=2264924160 [ 191.122756][T13916] max_ino=32 [ 191.125948][T13916] i_nlink=0 [ 191.129546][T13916] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.4093: corrupted inode contents [ 191.141613][T13916] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.4093: mark_inode_dirty error [ 191.153871][T13916] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.4093: corrupted inode contents [ 191.179909][T13916] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.4093: mark_inode_dirty error [ 191.194468][T13916] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.4093: mark inode dirty (error -117) [ 191.207489][T13916] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 191.218040][T13916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.222134][T13931] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4106'. [ 191.256100][T13916] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4093: bg 0: block 80: padding at end of block bitmap is not set [ 191.290338][T13931] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4106'. [ 191.295752][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.596224][T13954] loop5: detected capacity change from 0 to 1024 [ 191.618813][T13954] journal_path: Non-blockdev passed as './file1' [ 191.625307][T13954] EXT4-fs: error: could not find journal device path [ 191.693685][T13964] loop4: detected capacity change from 0 to 512 [ 191.710751][T13964] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.889289][T13964] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 191.898404][T13964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 191.928364][T13964] System zones: 0-2, 18-18, 34-34 [ 191.934139][T13964] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4120: bad orphan inode 15 [ 191.964919][T13964] ext4_test_bit(bit=14, block=18) = 1 [ 191.970424][T13964] is_bad_inode(inode)=0 [ 191.974620][T13964] NEXT_ORPHAN(inode)=2264924160 [ 191.979493][T13964] max_ino=32 [ 191.982698][T13964] i_nlink=0 [ 192.007533][T13964] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.4120: corrupted inode contents [ 192.032334][T13964] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.4120: mark_inode_dirty error [ 192.044022][T13964] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.4120: corrupted inode contents [ 192.056973][T13964] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.4120: mark_inode_dirty error [ 192.060625][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.076326][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.084191][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.091704][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.099194][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.106667][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.109997][T13964] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.4120: mark inode dirty (error -117) [ 192.114074][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.127614][T13964] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 192.133968][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.149719][T13964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.150375][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.150467][ T1040] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 192.180820][ T1040] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 192.196491][T13960] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4120: bg 0: block 80: padding at end of block bitmap is not set [ 192.231125][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.235759][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4127'. [ 192.337890][T13989] loop5: detected capacity change from 0 to 512 [ 192.376179][T14003] netlink: 'syz.7.4135': attribute type 3 has an invalid length. [ 192.410981][T13989] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4132: iget: bad extra_isize 90 (inode size 256) [ 192.433425][T13989] EXT4-fs (loop5): Remounting filesystem read-only [ 192.440129][T13989] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 192.449244][T13989] EXT4-fs (loop5): 1 orphan inode deleted [ 192.455950][T13989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.482069][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.494291][T14012] loop2: detected capacity change from 0 to 512 [ 192.582335][T14012] EXT4-fs (loop2): 1 truncate cleaned up [ 192.590641][T14012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.760515][T14012] EXT4-fs (loop2): shut down requested (1) [ 192.800486][T14012] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 192.824560][T14012] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 192.857584][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 192.857597][ T29] audit: type=1400 audit(1768475551.302:9531): avc: denied { read } for pid=14009 comm="syz.2.4136" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.883528][T14074] syzkaller0: entered allmulticast mode [ 192.887494][T14012] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 192.952946][ T29] audit: type=1400 audit(1768475551.382:9532): avc: denied { open } for pid=14009 comm="syz.2.4136" path="/319/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.993839][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.056252][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4143'. [ 193.192387][T14040] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.216300][T14040] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.272119][T14040] .` (unregistering): Released all slaves [ 193.301848][T14040] bond1 (unregistering): (slave veth3): Releasing active interface [ 193.310614][T14040] batadv2: entered promiscuous mode [ 193.335768][T14040] bond1 (unregistering): (slave batadv2): Releasing active interface [ 193.379636][T14040] bond1 (unregistering): Released all slaves [ 193.401023][T14040] bond2 (unregistering): Released all slaves [ 193.414725][T14074] syzkaller0: entered promiscuous mode [ 193.422172][T14086] syzkaller0 (unregistering): left allmulticast mode [ 193.429914][T14086] syzkaller0 (unregistering): left promiscuous mode [ 193.508520][T14083] team1: entered promiscuous mode [ 193.513634][T14083] team1: entered allmulticast mode [ 193.543154][T14083] 8021q: adding VLAN 0 to HW filter on device team1 [ 193.595187][T14040] hsr_slave_0: left promiscuous mode [ 193.620041][T14040] hsr_slave_1: left promiscuous mode [ 193.626400][T14040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.642886][T14040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.538070][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4157'. [ 194.551293][ T320] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.599317][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4159'. [ 194.631564][T14232] loop5: detected capacity change from 0 to 512 [ 194.669666][ T29] audit: type=1326 audit(1768475553.122:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.6.4161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d0bd1f749 code=0x0 [ 194.694021][T14232] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.4160: corrupted in-inode xattr: e_value size too large [ 194.708443][T14232] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4160: couldn't read orphan inode 15 (err -117) [ 194.722781][T14232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.761015][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.827082][ T29] audit: type=1326 audit(1768475553.262:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 194.850968][ T29] audit: type=1326 audit(1768475553.262:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 194.876090][ T29] audit: type=1326 audit(1768475553.262:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 194.900682][ T29] audit: type=1326 audit(1768475553.272:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 194.924508][ T29] audit: type=1326 audit(1768475553.272:9538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 194.948239][ T29] audit: type=1326 audit(1768475553.272:9539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 194.972755][ T29] audit: type=1326 audit(1768475553.272:9540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.5.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabf512f749 code=0x7ffc0000 [ 195.083548][T14272] loop2: detected capacity change from 0 to 1024 [ 195.084538][T14274] loop5: detected capacity change from 0 to 736 [ 195.092289][T14272] ext4: Unknown parameter 'nouser_xattr' [ 195.096613][T14274] iso9660: Unknown parameter 'm000000004' [ 195.388775][T14295] netlink: 'syz.7.4179': attribute type 1 has an invalid length. [ 195.416291][T14295] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 195.427404][T14295] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 195.482049][T14295] bond2: (slave ip6gre1): making interface the new active one [ 195.492603][T14295] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 195.501383][T14297] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 195.581217][T14300] loop7: detected capacity change from 0 to 164 [ 195.616275][T14303] loop2: detected capacity change from 0 to 512 [ 195.626275][T14303] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.4182: EA inode hash validation failed [ 195.660327][T14303] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4182: corrupted inode contents [ 195.688731][T14303] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.4182: mark_inode_dirty error [ 195.701417][T14303] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.4182: corrupted inode contents [ 195.714957][T14303] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.4182: mark_inode_dirty error [ 195.727551][T14303] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.4182: mark inode dirty (error -117) [ 195.749142][T14303] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 195.758380][T14303] EXT4-fs (loop2): 1 orphan inode deleted [ 195.765628][T14303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.793446][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.182017][T14349] sch_tbf: burst 22 is lower than device lo mtu (1550) ! [ 196.190446][T14349] sch_tbf: burst 22 is lower than device lo mtu (1550) ! [ 196.352450][T14351] loop2: detected capacity change from 0 to 512 [ 196.361569][T14351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.374755][T14351] EXT4-fs (loop2): 1 truncate cleaned up [ 196.381204][T14351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.406349][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.602102][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 196.608129][ T3807] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.975294][T14375] IPVS: Error connecting to the multicast addr [ 197.087177][T14379] lo speed is unknown, defaulting to 1000 [ 197.265280][T14390] loop2: detected capacity change from 0 to 512 [ 197.292108][T14390] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.333200][T14396] netlink: 'syz.4.4216': attribute type 12 has an invalid length. [ 197.334285][T14390] EXT4-fs (loop2): 1 truncate cleaned up [ 197.360260][T14390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.564137][T14405] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4221'. [ 197.640162][ T3491] page_pool_release_retry() stalled pool shutdown: id 133, 1 inflight 60 sec [ 197.668231][ T9765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.813189][T14425] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4231'. [ 197.961771][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 197.961784][ T29] audit: type=1326 audit(1768475556.412:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 198.029657][ T29] audit: type=1326 audit(1768475556.452:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 198.053419][ T29] audit: type=1326 audit(1768475556.452:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d0bd1f783 code=0x7ffc0000 [ 198.076838][ T29] audit: type=1326 audit(1768475556.452:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d0bd1e1ff code=0x7ffc0000 [ 198.100145][ T29] audit: type=1326 audit(1768475556.452:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0d0bd1f7d7 code=0x7ffc0000 [ 198.123578][ T29] audit: type=1326 audit(1768475556.452:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d0bd1df90 code=0x7ffc0000 [ 198.147183][ T29] audit: type=1326 audit(1768475556.452:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d0bd1e3aa code=0x7ffc0000 [ 198.170498][ T29] audit: type=1326 audit(1768475556.452:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 198.194066][ T29] audit: type=1326 audit(1768475556.452:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 198.217666][ T29] audit: type=1326 audit(1768475556.462:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.6.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 198.756882][T14465] loop7: detected capacity change from 0 to 1024 [ 198.774006][T14465] EXT4-fs: Ignoring removed bh option [ 198.786570][T14466] bond5: Removing last ns target with arp_interval on [ 198.847690][T14465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.888601][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.963047][T14513] lo speed is unknown, defaulting to 1000 [ 200.229409][T14516] loop4: detected capacity change from 0 to 1024 [ 200.270475][T14516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.348093][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.521654][T14537] loop7: detected capacity change from 0 to 512 [ 200.557735][T14537] EXT4-fs: Ignoring removed i_version option [ 200.563996][T14537] EXT4-fs: Ignoring removed nobh option [ 200.579331][T14537] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 200.601823][T14537] EXT4-fs (loop7): 1 truncate cleaned up [ 200.608007][T14537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.743723][T14547] lo speed is unknown, defaulting to 1000 [ 200.789177][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.295992][T14568] netlink: 'syz.6.4287': attribute type 30 has an invalid length. [ 201.314402][T14569] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 201.741358][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4303'. [ 202.456282][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4320'. [ 202.483722][T14640] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4320'. [ 202.534836][T14649] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 202.543261][T14649] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 202.569902][T14654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4325'. [ 202.625064][T14661] netlink: 'syz.5.4329': attribute type 3 has an invalid length. [ 202.632871][T14661] netlink: 'syz.5.4329': attribute type 1 has an invalid length. [ 202.640662][T14661] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.4329'. [ 202.952418][T14687] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4340'. [ 203.434305][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 203.434322][ T29] audit: type=1326 audit(1768475561.882:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.517838][ T29] audit: type=1326 audit(1768475561.882:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.541624][ T29] audit: type=1326 audit(1768475561.922:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.565151][ T29] audit: type=1326 audit(1768475561.922:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.588914][ T29] audit: type=1326 audit(1768475561.922:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.612484][ T29] audit: type=1326 audit(1768475561.922:9891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.636127][ T29] audit: type=1326 audit(1768475561.922:9892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.659725][ T29] audit: type=1326 audit(1768475561.922:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 203.683669][ T29] audit: type=1326 audit(1768475561.922:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0c4f749 code=0x7ffc0000 [ 204.441778][ T29] audit: type=1326 audit(1768475562.892:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14734 comm="syz.6.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 204.524224][T14742] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 204.548677][T14742] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 204.557538][T14745] IPVS: Error connecting to the multicast addr [ 204.618631][T14747] loop4: detected capacity change from 0 to 1024 [ 204.633983][T14747] EXT4-fs: Ignoring removed bh option [ 204.642435][T14751] netlink: 'syz.5.4368': attribute type 30 has an invalid length. [ 204.676167][T14747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.756087][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.823511][T14766] loop5: detected capacity change from 0 to 512 [ 204.842981][T14766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.870076][T14766] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.968386][ T9688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.166984][T14788] loop4: detected capacity change from 0 to 512 [ 205.178700][T14788] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4384: error while reading EA inode 32 err=-116 [ 205.229020][T14788] EXT4-fs (loop4): Remounting filesystem read-only [ 205.254133][T14788] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 205.284977][T14788] EXT4-fs (loop4): 1 orphan inode deleted [ 205.307194][T14788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.364083][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.639392][T14829] lo speed is unknown, defaulting to 1000 [ 205.962898][ T3385] page_pool_release_retry() stalled pool shutdown: id 138, 1 inflight 60 sec [ 206.009051][T14846] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4403'. [ 206.127340][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4406'. [ 206.285757][T14873] pimreg: entered allmulticast mode [ 206.310036][T14873] pimreg: left allmulticast mode [ 206.858377][T14897] loop5: detected capacity change from 0 to 128 [ 207.012212][T14897] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.044627][T14897] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.242699][ T9688] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.265927][T14902] loop7: detected capacity change from 0 to 512 [ 207.326524][T14902] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.4430: iget: bad extra_isize 90 (inode size 256) [ 207.346469][T14904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14904 comm=syz.6.4431 [ 207.369319][T14902] EXT4-fs (loop7): Remounting filesystem read-only [ 207.404072][T14902] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 207.432234][T14902] EXT4-fs (loop7): 1 orphan inode deleted [ 207.452663][T14902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.609547][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.698477][T14923] loop7: detected capacity change from 0 to 736 [ 207.715977][T14923] iso9660: Unknown parameter 'm000000004' [ 208.383983][T14955] loop5: detected capacity change from 0 to 2048 [ 208.412279][T14955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 208.596638][T14962] loop4: detected capacity change from 0 to 512 [ 208.739124][T14792] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.757141][T14962] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4453: iget: bad extra_isize 90 (inode size 256) [ 208.761653][T14955] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 208.782958][T14955] EXT4-fs (loop5): This should not happen!! Data will be lost [ 208.782958][T14955] [ 208.792611][T14955] EXT4-fs (loop5): Total free blocks count 0 [ 208.798580][T14955] EXT4-fs (loop5): Free/Dirty block details [ 208.804540][T14955] EXT4-fs (loop5): free_blocks=2415919104 [ 208.810290][T14955] EXT4-fs (loop5): dirty_blocks=8208 [ 208.815559][T14955] EXT4-fs (loop5): Block reservation details [ 208.821574][T14955] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 208.829040][T14962] EXT4-fs (loop4): Remounting filesystem read-only [ 208.835757][T14962] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 208.853659][T14962] EXT4-fs (loop4): 1 orphan inode deleted [ 208.866648][T14962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.930870][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.951722][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 208.951818][ T29] audit: type=1326 audit(1768475567.402:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.049367][ T29] audit: type=1326 audit(1768475567.442:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.073069][ T29] audit: type=1326 audit(1768475567.442:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.097115][ T29] audit: type=1326 audit(1768475567.442:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.120951][ T29] audit: type=1326 audit(1768475567.442:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.144563][ T29] audit: type=1326 audit(1768475567.442:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.168277][ T29] audit: type=1326 audit(1768475567.442:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.192086][ T29] audit: type=1326 audit(1768475567.442:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.215623][ T29] audit: type=1326 audit(1768475567.442:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.239420][ T29] audit: type=1326 audit(1768475567.442:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14964 comm="syz.6.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 209.271886][ T320] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 209.732746][T14998] loop4: detected capacity change from 0 to 512 [ 209.761260][T15000] lo speed is unknown, defaulting to 1000 [ 209.789516][T14998] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 209.830741][T14998] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4466: iget: bad extended attribute block 851968 [ 209.879526][T14998] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4466: couldn't read orphan inode 15 (err -117) [ 209.924990][T14998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.063011][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.973301][T15043] netlink: 'syz.6.4484': attribute type 29 has an invalid length. [ 211.495276][T15063] loop4: detected capacity change from 0 to 512 [ 211.559624][T15063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.585081][T15063] ext4 filesystem being mounted at /987/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.651790][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4501'. [ 211.691090][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4502'. [ 211.701757][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4502'. [ 211.744717][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.755148][T15088] loop7: detected capacity change from 0 to 1024 [ 211.769464][T15088] EXT4-fs: inline encryption not supported [ 211.804925][T15088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.998503][T10466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.140715][T15118] geneve2: entered promiscuous mode [ 212.146055][T15118] geneve2: entered allmulticast mode [ 212.315803][T15136] futex_wake_op: syz.6.4523 tries to shift op by 144; fix this program [ 212.528765][T15159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.662800][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 212.784515][ T3491] IPVS: starting estimator thread 0... [ 212.893315][T15181] IPVS: using max 2544 ests per chain, 127200 per kthread [ 213.033131][T15183] SELinux: failed to load policy [ 213.062945][T15189] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.4548'. [ 213.078953][T15189] netlink: zone id is out of range [ 213.084106][T15189] netlink: zone id is out of range [ 213.091164][T15189] netlink: zone id is out of range [ 213.096662][T15189] netlink: zone id is out of range [ 213.102246][T15189] netlink: zone id is out of range [ 213.107533][T15189] netlink: zone id is out of range [ 213.112959][T15189] netlink: zone id is out of range [ 213.145567][T15189] netlink: zone id is out of range [ 213.196807][T15189] netlink: set zone limit has 8 unknown bytes [ 213.225056][T15197] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4552'. [ 213.234452][T15197] hsr_slave_0: left promiscuous mode [ 213.242461][T15197] hsr_slave_1: left promiscuous mode [ 213.385521][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4556'. [ 213.932795][T15259] veth0: entered promiscuous mode [ 213.940034][T15259] veth0: left promiscuous mode [ 213.971159][T15265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.980703][T15265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.990404][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 213.990416][ T29] audit: type=1400 audit(1768475572.442:10137): avc: denied { read } for pid=15264 comm="syz.2.4582" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.019427][ T29] audit: type=1400 audit(1768475572.442:10138): avc: denied { open } for pid=15264 comm="syz.2.4582" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.044391][ T29] audit: type=1326 audit(1768475572.452:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.067998][ T29] audit: type=1326 audit(1768475572.452:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.091954][ T29] audit: type=1326 audit(1768475572.452:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.115656][ T29] audit: type=1326 audit(1768475572.452:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.139255][ T29] audit: type=1326 audit(1768475572.452:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.162918][ T29] audit: type=1326 audit(1768475572.462:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.186510][ T29] audit: type=1326 audit(1768475572.462:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.210120][ T29] audit: type=1326 audit(1768475572.492:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff883f749 code=0x7ffc0000 [ 214.578508][T15286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15286 comm=syz.2.4589 [ 215.224418][T15347] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4616'. [ 215.439263][T15359] bond0: (slave dummy0): Releasing backup interface [ 215.448598][T15359] batman_adv: batadv0: Adding interface: dummy0 [ 215.454902][T15359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.480394][T15359] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 215.515103][T15364] sctp: [Deprecated]: syz.5.4622 (pid 15364) Use of int in max_burst socket option. [ 215.515103][T15364] Use struct sctp_assoc_value instead [ 215.569413][T15371] veth0: entered promiscuous mode [ 215.576811][T15371] veth0: left promiscuous mode [ 215.600902][T15378] loop5: detected capacity change from 0 to 128 [ 215.692757][T15384] Trying to write to read-only block-device loop5 [ 215.707144][T15384] bio_check_eod: 212 callbacks suppressed [ 215.707158][T15384] syz.5.4630: attempt to access beyond end of device [ 215.707158][T15384] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 215.756536][T15384] syz.5.4630: attempt to access beyond end of device [ 215.756536][T15384] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 215.772031][T15384] syz.5.4630: attempt to access beyond end of device [ 215.772031][T15384] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 215.790985][T15384] syz.5.4630: attempt to access beyond end of device [ 215.790985][T15384] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 215.826648][T15384] syz.5.4630: attempt to access beyond end of device [ 215.826648][T15384] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 215.841157][T15384] syz.5.4630: attempt to access beyond end of device [ 215.841157][T15384] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 215.855975][T15384] syz.5.4630: attempt to access beyond end of device [ 215.855975][T15384] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 215.870370][T15384] syz.5.4630: attempt to access beyond end of device [ 215.870370][T15384] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 215.884269][T15384] syz.5.4630: attempt to access beyond end of device [ 215.884269][T15384] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 215.897962][T15384] syz.5.4630: attempt to access beyond end of device [ 215.897962][T15384] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 215.912754][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4633'. [ 215.933485][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4633'. [ 216.280956][T15401] hsr_slave_0: left promiscuous mode [ 216.290626][T15401] hsr_slave_1: left promiscuous mode [ 216.413248][T15414] loop5: detected capacity change from 0 to 1024 [ 216.421043][T15414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.431288][T15414] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.434963][T15418] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 216.442271][T15414] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.443496][T15414] JBD2: no valid journal superblock found [ 216.464924][T15414] EXT4-fs (loop5): Could not load journal inode [ 216.580114][T15433] sd 0:0:1:0: device reset [ 216.644439][T15436] hsr_slave_0: left promiscuous mode [ 216.651168][T15436] hsr_slave_1: left promiscuous mode [ 217.401319][T15503] ip6gretap0: entered promiscuous mode [ 217.408450][T15503] ip6gretap0: left promiscuous mode [ 217.751059][T15511] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 217.775837][T15515] __nla_validate_parse: 5 callbacks suppressed [ 217.775887][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4683'. [ 217.983491][T15526] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4688'. [ 218.002708][T15526] hsr_slave_0: left promiscuous mode [ 218.016411][T15526] hsr_slave_1: left promiscuous mode [ 218.037674][T15530] loop5: detected capacity change from 0 to 256 [ 218.225802][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4708'. [ 218.777378][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 218.815458][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 218.839306][T15577] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4704'. [ 218.847021][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 218.938291][T15577] hsr_slave_0: left promiscuous mode [ 218.953016][T15577] hsr_slave_1: left promiscuous mode [ 218.980993][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 218.995277][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 219.699578][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4733'. [ 219.828397][T15643] netlink: 'syz.4.4737': attribute type 1 has an invalid length. [ 219.842837][T15644] loop5: detected capacity change from 0 to 2048 [ 219.901748][T15644] Alternate GPT is invalid, using primary GPT. [ 219.908123][T15644] loop5: p1 p2 p3 [ 219.912111][T15644] loop5: partition table partially beyond EOD, truncated [ 219.949810][T15654] bridge: RTM_NEWNEIGH with invalid ether address [ 220.559813][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 220.559828][ T29] audit: type=1326 audit(1768475579.012:10213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.599782][ T29] audit: type=1326 audit(1768475579.052:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.623398][ T29] audit: type=1326 audit(1768475579.052:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.669205][ T29] audit: type=1326 audit(1768475579.052:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.692994][ T29] audit: type=1326 audit(1768475579.052:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.716728][ T29] audit: type=1326 audit(1768475579.052:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.740301][ T29] audit: type=1326 audit(1768475579.052:10219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15682 comm="syz.2.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b954f749 code=0x7ffc0000 [ 220.810356][T15690] sd 0:0:1:0: device reset [ 221.175162][T15715] netlink: 'syz.6.4766': attribute type 10 has an invalid length. [ 222.150792][ T29] audit: type=1400 audit(1768475580.592:10220): avc: denied { read append } for pid=15737 comm="syz.7.4778" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 222.233581][ T29] audit: type=1326 audit(1768475580.632:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15740 comm="syz.6.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 222.257231][ T29] audit: type=1326 audit(1768475580.632:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15740 comm="syz.6.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0bd1f749 code=0x7ffc0000 [ 222.338040][T15753] macvtap1: entered promiscuous mode [ 222.343401][T15753] macvtap1: entered allmulticast mode [ 223.517126][T15814] __nla_validate_parse: 9 callbacks suppressed [ 223.517142][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4807'. [ 224.058386][T15816] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4807'. [ 224.144141][T15824] netlink: 'syz.7.4811': attribute type 30 has an invalid length. [ 224.207998][T15809] ================================================================== [ 224.216103][T15809] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 224.223049][T15809] [ 224.225373][T15809] read-write to 0xffff88811aee536c of 4 bytes by task 15812 on cpu 0: [ 224.233521][T15809] fifo_open+0x17f/0x5d0 [ 224.237772][T15809] do_dentry_open+0x54b/0xa60 [ 224.242459][T15809] vfs_open+0x37/0x1e0 [ 224.246541][T15809] path_openat+0x1ddd/0x23b0 [ 224.251148][T15809] do_filp_open+0x109/0x230 [ 224.255669][T15809] do_sys_openat2+0xa6/0x150 [ 224.260272][T15809] __se_sys_openat2+0x194/0x1f0 [ 224.265132][T15809] __x64_sys_openat2+0x55/0x70 [ 224.269992][T15809] x64_sys_call+0x2c04/0x3000 [ 224.274668][T15809] do_syscall_64+0xca/0x2b0 [ 224.279183][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.285081][T15809] [ 224.287398][T15809] read to 0xffff88811aee536c of 4 bytes by task 15809 on cpu 1: [ 224.295031][T15809] wait_for_partner+0xf7/0x1c0 [ 224.299804][T15809] fifo_open+0x4b1/0x5d0 [ 224.304050][T15809] do_dentry_open+0x54b/0xa60 [ 224.308727][T15809] vfs_open+0x37/0x1e0 [ 224.312801][T15809] path_openat+0x1ddd/0x23b0 [ 224.317399][T15809] do_filp_open+0x109/0x230 [ 224.321909][T15809] do_sys_openat2+0xa6/0x150 [ 224.326506][T15809] __x64_sys_open+0xe6/0x110 [ 224.331102][T15809] x64_sys_call+0x166f/0x3000 [ 224.335781][T15809] do_syscall_64+0xca/0x2b0 [ 224.340306][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.346199][T15809] [ 224.348513][T15809] value changed: 0x00000002 -> 0x00000001 [ 224.354220][T15809] [ 224.356535][T15809] Reported by Kernel Concurrency Sanitizer on: [ 224.362690][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.5.4803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.374057][T15809] Tainted: [W]=WARN [ 224.377848][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.387902][T15809] ==================================================================