last executing test programs: 4.365347818s ago: executing program 1 (id=953): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x5, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) mlockall(0x4) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x2, 0x2}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 4.0525424s ago: executing program 4 (id=961): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xce) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00), 0x3, 0x5ee, &(0x7f00000012c0)="$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") 3.998227961s ago: executing program 1 (id=962): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 3.469132287s ago: executing program 3 (id=966): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000000) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) 3.15809657s ago: executing program 4 (id=968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.10954736s ago: executing program 1 (id=969): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 3.022088121s ago: executing program 0 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x1000}]) 3.021104021s ago: executing program 3 (id=972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}}, 0x0) 3.020798241s ago: executing program 1 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) pipe(&(0x7f0000005880)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 2.897977272s ago: executing program 1 (id=974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x600, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f00000000c0)='/dev/vcsu#\x00', 0xb) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000370400000084fb82e942e58ef700", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100626f6e64000000002c00028005001d00000000000500010004000000050015"], 0x5c}}, 0x0) 2.897525682s ago: executing program 4 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r1) 2.778209403s ago: executing program 4 (id=976): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) r2 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.776120483s ago: executing program 0 (id=986): add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") unshare(0x2a020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000180)) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) 2.674002294s ago: executing program 3 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") 2.521730256s ago: executing program 0 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 2.494531686s ago: executing program 0 (id=979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000008181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 2.183789739s ago: executing program 2 (id=981): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f00000005c0)=""/78, 0x4e}, {0x0}, {0x0}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/128, 0x80}], 0x7}, 0x8001}, {{&(0x7f0000000a40)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000ac0)=""/82, 0x52}, {&(0x7f0000000b40)=""/11, 0xb}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000c40)=""/87, 0x57}, {&(0x7f0000000cc0)=""/224, 0xe0}, {0x0}, {&(0x7f0000000f80)=""/104, 0x68}, {&(0x7f0000001000)=""/41, 0x29}], 0x8, &(0x7f0000002100)=""/225, 0xe1}, 0x8}], 0x2, 0x107, &(0x7f0000002500)) unshare(0x22020600) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000089a000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000380001800c000100636f756e746572000400028008000340"], 0xc8}, 0x1, 0x0, 0x0, 0x40840}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00'}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.937404692s ago: executing program 2 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_clone3(&(0x7f0000000d80)={0xba0000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 948.613291ms ago: executing program 0 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 947.772711ms ago: executing program 4 (id=984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 947.057951ms ago: executing program 2 (id=985): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYBLOB="d89d52a8d91b0410ea9410aa30118aa453f4b6bbb36f73b9f92105ac918740da9166b2ec527ed78956f29bf1664149fe72244db0a46593b0276e0e0543777a62305fd4e47c9517c9c9c339732783f5395667689a7690d510ed977159fc92a7e68e8a107e354a9e1f0745918421cdcb7d33e98c4d33301530f038e0e0cc339e1a693ac64f471d456a34d85b3bf1557befc537e5f59843946dfdcefffb9cc7b0e7cbb747b1604fab004b56cc9dabcef7797436cf01825a3edb36567676635b1d2fc5d404a7bafa168b84842f6bfc74e64f92d350ae08bd7b76b09aeb179bd82abcc48047fd70d91c525349cc3227760e", @ANYBLOB="4929cc3c6a402d8ea1f1d0d4eedaf8ed282b7693bcc45e6e9321be88c40b467e59044edd07f0adbe701bdec62ee50f50576ba307e9b48b37d219f7eef291daf3a476a9f016f1bd70337687a1b9ac52f1151b00061a51577e6d4ee29d303c9a837fe78c3baa37edb3898cada99c556959c7b4250f1ce9a48899524dbb3e37d5411125176a8a7bd0e70a16649f60057366689bcdb2fde098b02ea36c3f421dbed573bdf56b6ac96c659462a617d12f206c3462119cb32c583393eee6dc1676374c1883fc37ec74654712", @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x48) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x38, 0x4a, 0x2, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x40}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@noblock_validity}, {@sysvgroups}]}, 0x21, 0x624, &(0x7f0000000d80)="$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") close(r0) 376.539467ms ago: executing program 0 (id=987): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c060000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) unshare(0x2a020400) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x21412ca, 0x0, 0x4, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x40000000015, 0x5, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) 373.778727ms ago: executing program 1 (id=988): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x101, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r1, 0x0, 0x9}, 0x18) r2 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 305.385888ms ago: executing program 3 (id=989): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0xe, r5, 0xe, r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x42, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0xca, 0x80000001}}) pipe2(&(0x7f0000000040), 0x8c8c0) 259.990258ms ago: executing program 2 (id=990): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x51d}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r2, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 113.957459ms ago: executing program 3 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 113.398519ms ago: executing program 2 (id=992): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg$unix(r1, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 92.68051ms ago: executing program 3 (id=993): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c060000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) unshare(0x2a020400) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x21412ca, 0x0, 0x4, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x40000000015, 0x5, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000"], 0x38}}, 0x0) 63.40115ms ago: executing program 4 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001200192340834b80040d8c560a067f0202ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 0s ago: executing program 2 (id=995): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 0-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.184299][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.204647][ T3616] syz.3.59 (3616) used greatest stack depth: 10528 bytes left [ 42.246725][ T3623] netlink: 96 bytes leftover after parsing attributes in process `syz.2.60'. [ 42.358379][ T3626] netlink: 'syz.2.62': attribute type 3 has an invalid length. [ 42.624805][ T3633] lo speed is unknown, defaulting to 1000 [ 42.629706][ T3635] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.666948][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 42.709219][ T3635] hsr_slave_0: left promiscuous mode [ 42.715419][ T3635] hsr_slave_1: left promiscuous mode [ 42.786163][ T3647] syz.4.70 (3647): attempted to duplicate a private mapping with mremap. This is not supported. [ 42.854934][ T3653] syz.0.68 uses obsolete (PF_INET,SOCK_PACKET) [ 42.989951][ T3670] loop2: detected capacity change from 0 to 1024 [ 43.005525][ T3670] EXT4-fs: Ignoring removed nobh option [ 43.044312][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.087154][ T3670] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.71: Allocating blocks 497-513 which overlap fs metadata [ 43.104817][ T3670] EXT4-fs (loop2): pa ffff888107783070: logic 256, phys. 385, len 8 [ 43.113045][ T3670] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 43.124988][ T3683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.156562][ T3680] bridge: RTM_NEWNEIGH with invalid ether address [ 43.232565][ T3683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.312657][ T3683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.361906][ T3683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.499084][ T3683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.512225][ T3683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.524711][ T3683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.537410][ T3683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.810504][ T3705] loop1: detected capacity change from 0 to 128 [ 43.818709][ T3705] EXT4-fs: Ignoring removed oldalloc option [ 43.832024][ T3703] syzkaller0: entered promiscuous mode [ 43.837565][ T3703] syzkaller0: entered allmulticast mode [ 43.861265][ T3704] lo speed is unknown, defaulting to 1000 [ 43.947223][ T3705] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.974879][ T3705] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.086495][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 44.086514][ T29] audit: type=1400 audit(1748067338.945:230): avc: denied { create } for pid=3710 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.116677][ T3714] tipc: Started in network mode [ 44.121889][ T3714] tipc: Node identity ac14140f, cluster identity 4711 [ 44.130525][ T3714] tipc: New replicast peer: 255.255.255.255 [ 44.136616][ T3714] tipc: Enabled bearer , priority 10 [ 44.183670][ T29] audit: type=1400 audit(1748067338.945:231): avc: denied { bind } for pid=3710 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.258724][ T3704] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.80: bg 0: bad block bitmap checksum [ 44.284996][ T29] audit: type=1400 audit(1748067339.105:232): avc: denied { create } for pid=3701 comm="syz.1.80" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 44.417858][ T29] audit: type=1400 audit(1748067339.215:233): avc: denied { connect } for pid=3710 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.532963][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.734882][ T29] audit: type=1400 audit(1748067339.335:234): avc: denied { execmem } for pid=3721 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.009453][ T3725] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.053158][ T3728] syzkaller0: entered promiscuous mode [ 45.058762][ T3728] syzkaller0: entered allmulticast mode [ 45.108656][ T29] audit: type=1400 audit(1748067339.965:235): avc: denied { tracepoint } for pid=3734 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.245259][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 45.248540][ T3391] tipc: Node number set to 2886997007 [ 45.259724][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 45.307353][ T29] audit: type=1400 audit(1748067340.155:236): avc: denied { shutdown } for pid=3744 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.326927][ T29] audit: type=1400 audit(1748067340.155:237): avc: denied { getopt } for pid=3744 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.346265][ T29] audit: type=1400 audit(1748067340.155:238): avc: denied { connect } for pid=3744 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.365651][ T29] audit: type=1400 audit(1748067340.155:239): avc: denied { name_connect } for pid=3744 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 45.392829][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 45.450504][ T3751] bridge_slave_0: left allmulticast mode [ 45.456296][ T3751] bridge_slave_0: left promiscuous mode [ 45.462196][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.481364][ T3751] bridge_slave_1: left allmulticast mode [ 45.487061][ T3751] bridge_slave_1: left promiscuous mode [ 45.492835][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.514936][ T3751] bond0: (slave bond_slave_0): Releasing backup interface [ 45.525851][ T3751] bond0: (slave bond_slave_1): Releasing backup interface [ 45.538001][ T3751] team0: Port device team_slave_0 removed [ 45.547353][ T3751] team0: Port device team_slave_1 removed [ 45.580868][ T3756] loop0: detected capacity change from 0 to 512 [ 45.589641][ T3756] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.593044][ T3754] lo speed is unknown, defaulting to 1000 [ 45.630360][ T3756] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.645064][ T3756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.668058][ T3756] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.713027][ T3756] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 45.736972][ T3756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.100: bg 0: block 40: padding at end of block bitmap is not set [ 45.792678][ T3756] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 45.815535][ T3756] EXT4-fs (loop0): 1 truncate cleaned up [ 45.827890][ T3756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.852978][ T3756] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.100: corrupted xattr block 31: invalid header [ 45.887545][ T3756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 45.911820][ T3756] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.100: corrupted xattr block 31: invalid header [ 45.947357][ T3756] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 45.961005][ T3756] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.100: bad symlink. [ 46.019915][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.028967][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.038358][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.061573][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.108665][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.117565][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.127570][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.171948][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 46.218866][ T3773] Driver unsupported XDP return value 0 on prog (id 111) dev N/A, expect packet loss! [ 46.426869][ T3785] hsr_slave_0: left promiscuous mode [ 46.456579][ T3785] hsr_slave_1: left promiscuous mode [ 46.468323][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.573355][ T3795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.651557][ T3795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.716640][ T3795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.750067][ T3804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.765714][ T3795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.796545][ T3806] bridge0: entered promiscuous mode [ 46.808198][ T3806] bridge0: port 3(macvlan2) entered blocking state [ 46.815189][ T3806] bridge0: port 3(macvlan2) entered disabled state [ 46.824691][ T3806] macvlan2: entered allmulticast mode [ 46.830944][ T3806] bridge0: entered allmulticast mode [ 46.840971][ T3806] macvlan2: left allmulticast mode [ 46.846481][ T3806] bridge0: left allmulticast mode [ 46.853551][ T3806] bridge0: left promiscuous mode [ 46.874910][ T3804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.893282][ T3795] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.904942][ T3795] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.916575][ T3795] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.928393][ T3795] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.963454][ T3804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.980228][ T3798] syz.3.115 (3798) used greatest stack depth: 10232 bytes left [ 47.032244][ T3804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.070017][ T3814] lo speed is unknown, defaulting to 1000 [ 47.089339][ T3816] pim6reg1: entered promiscuous mode [ 47.094736][ T3816] pim6reg1: entered allmulticast mode [ 47.110410][ T3804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.125844][ T3804] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.141903][ T3804] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.154562][ T3804] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.316149][ T3831] loop3: detected capacity change from 0 to 512 [ 47.421622][ T3831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.434475][ T3831] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.501852][ T3865] loop0: detected capacity change from 0 to 1024 [ 48.509404][ T3865] EXT4-fs: inline encryption not supported [ 48.515245][ T3865] EXT4-fs: Ignoring removed i_version option [ 48.526732][ T3865] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.553371][ T3865] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.141: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.581799][ T3865] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.141: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.581999][ T3865] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.141: Failed to acquire dquot type 0 [ 48.582079][ T3865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 48.582149][ T3865] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.141: mark_inode_dirty error [ 48.582242][ T3865] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 48.582277][ T3865] EXT4-fs (loop0): 1 orphan inode deleted [ 48.582770][ T3865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.595912][ T3872] loop2: detected capacity change from 0 to 764 [ 48.598755][ T12] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.598914][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 48.602047][ T3872] Symlink component flag not implemented [ 48.602417][ T3872] Symlink component flag not implemented (7) [ 48.621482][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.621735][ T3315] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.621927][ T3315] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 48.622060][ T3315] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 48.633448][ T3874] program syz.4.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.641522][ T3875] hub 9-0:1.0: USB hub found [ 48.641568][ T3875] hub 9-0:1.0: 8 ports detected [ 48.867741][ T3309] udevd[3309]: failed to send result of seq 7984 to main daemon: Connection refused [ 48.990690][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.009797][ T3888] loop0: detected capacity change from 0 to 512 [ 49.018511][ T3888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.056796][ T3888] EXT4-fs (loop0): 1 truncate cleaned up [ 49.065819][ T3888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.095138][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 49.095162][ T29] audit: type=1400 audit(1748067343.955:297): avc: denied { create } for pid=3887 comm="syz.0.143" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.286489][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.491612][ T29] audit: type=1400 audit(1748067344.355:298): avc: denied { write } for pid=3909 comm="syz.3.157" name="file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.545235][ T29] audit: type=1400 audit(1748067344.375:299): avc: denied { open } for pid=3909 comm="syz.3.157" path="/31/file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.567798][ T29] audit: type=1400 audit(1748067344.375:300): avc: denied { ioctl } for pid=3909 comm="syz.3.157" path="/31/file0" dev="tmpfs" ino=179 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.690812][ T3912] wg2: entered promiscuous mode [ 49.695753][ T3912] wg2: entered allmulticast mode [ 49.751932][ T3920] loop3: detected capacity change from 0 to 164 [ 49.767986][ T3920] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.780448][ T3920] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.789032][ T3920] Symlink component flag not implemented [ 49.794750][ T3920] Symlink component flag not implemented [ 49.800833][ T3920] Symlink component flag not implemented (7) [ 49.806889][ T3920] Symlink component flag not implemented (116) [ 49.874143][ T29] audit: type=1400 audit(1748067344.735:301): avc: denied { read write } for pid=3928 comm="syz.0.166" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.908594][ T29] audit: type=1400 audit(1748067344.765:302): avc: denied { open } for pid=3928 comm="syz.0.166" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.946338][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.954677][ T3391] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.975908][ T29] audit: type=1400 audit(1748067344.835:303): avc: denied { read } for pid=3928 comm="syz.0.166" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.999311][ T29] audit: type=1400 audit(1748067344.835:304): avc: denied { open } for pid=3928 comm="syz.0.166" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.026574][ T29] audit: type=1400 audit(1748067344.895:305): avc: denied { read write } for pid=3928 comm="syz.0.166" name="hidraw0" dev="devtmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.049754][ T29] audit: type=1400 audit(1748067344.895:306): avc: denied { open } for pid=3928 comm="syz.0.166" path="/dev/hidraw0" dev="devtmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.171588][ T3941] loop1: detected capacity change from 0 to 512 [ 50.209591][ T3941] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 50.237190][ T3941] EXT4-fs (loop1): failed to open journal device unknown-block(7,45) -6 [ 50.264095][ T3948] __nla_validate_parse: 8 callbacks suppressed [ 50.264111][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 50.306891][ T3950] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 50.373371][ T3955] loop2: detected capacity change from 0 to 1024 [ 50.381097][ T3955] EXT4-fs: Ignoring removed oldalloc option [ 50.389029][ T3955] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.434846][ T3955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.720647][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.738625][ T3966] xt_hashlimit: size too large, truncated to 1048576 [ 51.048155][ T3987] netlink: 232 bytes leftover after parsing attributes in process `syz.2.187'. [ 51.138271][ T3994] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 51.146139][ T3994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.190'. [ 51.206018][ T4003] ip6_vti0: mtu greater than device maximum [ 51.424799][ T4018] IPv4: Oversized IP packet from 127.202.26.0 [ 51.587432][ T4036] loop2: detected capacity change from 0 to 128 [ 51.595382][ T4036] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.609039][ T4036] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.663529][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.891816][ T4052] tipc: Started in network mode [ 51.896813][ T4052] tipc: Node identity ac14140f, cluster identity 4711 [ 51.904851][ T4052] tipc: New replicast peer: 255.255.255.255 [ 51.911068][ T4052] tipc: Enabled bearer , priority 10 [ 52.613680][ T4063] loop1: detected capacity change from 0 to 512 [ 52.621307][ T4063] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.630641][ T4063] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 52.665719][ T4068] program syz.2.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.686217][ T4063] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 52.696174][ T4063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 52.708529][ T4063] System zones: 0-2, 18-18, 34-35 [ 52.714521][ T4063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.762382][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.792926][ T4075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.840484][ T4075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.907288][ T4075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.959422][ T4075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.028507][ T3373] tipc: Node number set to 2886997007 [ 53.172134][ T4075] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.187298][ T4075] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.199776][ T4075] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.212802][ T4075] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.224042][ T4087] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 53.235220][ T4086] IPVS: stopping master sync thread 4087 ... [ 53.270510][ T4089] loop0: detected capacity change from 0 to 512 [ 53.290752][ T4089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.316148][ T4089] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.336309][ T4093] loop1: detected capacity change from 0 to 2048 [ 53.360648][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.449874][ T4093] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 53.462166][ T4093] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.462166][ T4093] [ 53.471830][ T4093] EXT4-fs (loop1): Total free blocks count 0 [ 53.477886][ T4093] EXT4-fs (loop1): Free/Dirty block details [ 53.483844][ T4093] EXT4-fs (loop1): free_blocks=0 [ 53.488820][ T4093] EXT4-fs (loop1): dirty_blocks=0 [ 53.493869][ T4093] EXT4-fs (loop1): Block reservation details [ 53.499965][ T4093] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 53.529279][ T4097] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.228: corrupted inode contents [ 53.541293][ T4097] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.228: mark_inode_dirty error [ 53.574980][ T4097] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.228: corrupted inode contents [ 53.587708][ T4097] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.228: mark_inode_dirty error [ 53.588998][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.601010][ T4097] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.228: mark inode dirty (error -117) [ 53.638218][ T4097] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 53.707299][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.972265][ T4127] loop0: detected capacity change from 0 to 8192 [ 53.995855][ T4127] FAT-fs (loop0): bogus logical sector size 65535 [ 54.002379][ T4127] FAT-fs (loop0): Can't find a valid FAT filesystem [ 54.054561][ T4130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 54.297447][ T4130] team0 (unregistering): Port device team_slave_0 removed [ 54.333144][ T4130] team0 (unregistering): Port device team_slave_1 removed [ 54.485794][ T4099] delete_channel: no stack [ 54.576933][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 54.576946][ T29] audit: type=1326 audit(1748067349.435:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.646479][ T29] audit: type=1326 audit(1748067349.475:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.669790][ T29] audit: type=1326 audit(1748067349.475:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.693042][ T29] audit: type=1326 audit(1748067349.475:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.716428][ T29] audit: type=1326 audit(1748067349.475:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.739688][ T29] audit: type=1326 audit(1748067349.475:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.763107][ T29] audit: type=1326 audit(1748067349.475:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.786475][ T29] audit: type=1326 audit(1748067349.475:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.809820][ T29] audit: type=1326 audit(1748067349.475:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 54.833392][ T29] audit: type=1326 audit(1748067349.475:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 54.936573][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 55.025652][ T4151] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.043215][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.051941][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.066962][ T4151] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.084536][ T4153] loop3: detected capacity change from 0 to 1024 [ 55.100751][ T4153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.116128][ T4153] EXT4-fs: Mount option(s) incompatible with ext2 [ 55.154853][ T4151] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.223822][ T4151] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.311255][ T4151] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.360806][ T4151] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.402779][ T4151] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.473361][ T4151] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.538519][ T4166] lo speed is unknown, defaulting to 1000 [ 55.735803][ T4183] bridge: RTM_NEWNEIGH with invalid ether address [ 56.028482][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 56.055677][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 56.076523][ T4200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 56.280466][ T4217] netlink: 80 bytes leftover after parsing attributes in process `syz.3.273'. [ 56.602182][ T4233] loop4: detected capacity change from 0 to 512 [ 56.633734][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.656892][ T4233] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.698935][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.786860][ T4251] loop2: detected capacity change from 0 to 512 [ 56.804975][ T4251] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.814265][ T4251] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 56.838673][ T4251] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 56.848692][ T4249] tipc: Enabled bearer , priority 0 [ 56.856232][ T4248] tipc: Resetting bearer [ 56.856302][ T4251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 56.879069][ T4251] System zones: 0-2, 18-18, 34-34 [ 56.888841][ T4251] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 56.904452][ T4251] EXT4-fs (loop2): 1 truncate cleaned up [ 56.910612][ T4251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.924946][ T4248] tipc: Disabling bearer [ 56.961771][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.037841][ T4259] lo speed is unknown, defaulting to 1000 [ 57.118882][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 57.279212][ T4291] loop3: detected capacity change from 0 to 512 [ 57.291828][ T4291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.304901][ T4291] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.321079][ T4291] EXT4-fs (loop3): 1 truncate cleaned up [ 57.332892][ T4291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.473060][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.494034][ T4297] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 57.500612][ T4297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.508348][ T4297] vhci_hcd vhci_hcd.0: Device attached [ 57.517742][ T4297] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.550181][ T4297] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 57.557015][ T4297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.564535][ T4297] vhci_hcd vhci_hcd.0: Device attached [ 57.576769][ T4300] vhci_hcd: connection closed [ 57.577118][ T35] vhci_hcd: stop threads [ 57.586475][ T35] vhci_hcd: release socket [ 57.591046][ T35] vhci_hcd: disconnect device [ 57.638945][ T4298] vhci_hcd: connection closed [ 57.639339][ T35] vhci_hcd: stop threads [ 57.648359][ T35] vhci_hcd: release socket [ 57.652844][ T35] vhci_hcd: disconnect device [ 57.698495][ T3900] vhci_hcd: vhci_device speed not set [ 57.926212][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 58.199710][ T4314] Zero length message leads to an empty skb [ 58.265245][ T4318] tipc: New replicast peer: 255.255.255.255 [ 58.271535][ T4318] tipc: Enabled bearer , priority 10 [ 58.520504][ T4335] lo speed is unknown, defaulting to 1000 [ 58.568218][ T4337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 58.721866][ T4345] loop0: detected capacity change from 0 to 512 [ 58.795593][ T4345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.808263][ T4345] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.879799][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.928953][ T4355] syzkaller0: create flow: hash 249256597 index 1 [ 58.994231][ T4352] syzkaller0: delete flow: hash 249256597 index 1 [ 59.000962][ T4359] loop1: detected capacity change from 0 to 512 [ 59.015207][ T4359] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 59.031722][ T4359] EXT4-fs (loop1): 1 truncate cleaned up [ 59.037851][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.085231][ T4364] loop9: detected capacity change from 0 to 7 [ 59.100962][ T4364] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.140326][ T4364] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.148231][ T4364] loop9: unable to read partition table [ 59.167978][ T4364] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 59.167978][ T4364] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 59.251027][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.260875][ T4367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 59.269570][ T4367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 59.461815][ T4399] loop0: detected capacity change from 0 to 4096 [ 59.471153][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.523383][ T4404] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 59.536085][ T4404] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 59.560184][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.587151][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.594580][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.609466][ T4408] bridge0: entered allmulticast mode [ 59.625336][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 59.625355][ T29] audit: type=1326 audit(1748067354.475:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.654960][ T29] audit: type=1326 audit(1748067354.475:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.678329][ T29] audit: type=1326 audit(1748067354.475:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.701611][ T29] audit: type=1326 audit(1748067354.485:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.724883][ T29] audit: type=1326 audit(1748067354.485:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.748344][ T29] audit: type=1400 audit(1748067354.485:524): avc: denied { bind } for pid=4413 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.767602][ T29] audit: type=1326 audit(1748067354.485:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.775660][ T4408] bridge_slave_1: left allmulticast mode [ 59.790903][ T29] audit: type=1326 audit(1748067354.485:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.790946][ T29] audit: type=1400 audit(1748067354.485:527): avc: denied { listen } for pid=4413 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.796678][ T4408] bridge_slave_1: left promiscuous mode [ 59.819811][ T29] audit: type=1326 audit(1748067354.485:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 59.839203][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.890302][ T4408] bridge_slave_0: left allmulticast mode [ 59.896036][ T4408] bridge_slave_0: left promiscuous mode [ 59.901862][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.938029][ T4420] loop2: detected capacity change from 0 to 128 [ 60.045318][ T4420] syz.2.351: attempt to access beyond end of device [ 60.045318][ T4420] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 60.063196][ T4420] syz.2.351: attempt to access beyond end of device [ 60.063196][ T4420] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 60.078498][ T4420] syz.2.351: attempt to access beyond end of device [ 60.078498][ T4420] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 60.096430][ T4420] syz.2.351: attempt to access beyond end of device [ 60.096430][ T4420] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 60.110623][ T4420] syz.2.351: attempt to access beyond end of device [ 60.110623][ T4420] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 60.134649][ T4420] syz.2.351: attempt to access beyond end of device [ 60.134649][ T4420] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 60.271074][ T4430] loop1: detected capacity change from 0 to 512 [ 60.291899][ T4430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.347824][ T4430] EXT4-fs (loop1): 1 truncate cleaned up [ 60.370575][ T4430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.426473][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.459447][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 60.468551][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 60.478396][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 60.723556][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 60.731334][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 60.741261][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.749020][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.756841][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.764679][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.772562][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.780456][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.788146][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.795924][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.803650][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.811472][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.819204][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.827028][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.834732][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.842432][ T10] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 60.865955][ T10] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 60.904686][ T4477] program syz.4.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.948010][ T4482] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.012778][ T4482] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.051794][ T4492] __nla_validate_parse: 1 callbacks suppressed [ 61.051829][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 61.066976][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 61.077315][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 61.090486][ T4482] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.127620][ T4494] SELinux: failed to load policy [ 61.160395][ T4482] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.224269][ T4482] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.236596][ T4482] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.249712][ T4482] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.263338][ T4482] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.298257][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 61.575576][ T4508] Set syz1 is full, maxelem 65536 reached [ 61.590266][ T4533] IPv4: Oversized IP packet from 127.202.26.0 [ 61.592381][ T4534] loop0: detected capacity change from 0 to 128 [ 61.660288][ T4539] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 61.668161][ T4539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.409'. [ 61.681109][ T4543] syz.0.407: attempt to access beyond end of device [ 61.681109][ T4543] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.712239][ T4543] syz.0.407: attempt to access beyond end of device [ 61.712239][ T4543] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.725878][ T4543] syz.0.407: attempt to access beyond end of device [ 61.725878][ T4543] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 61.740031][ T4543] syz.0.407: attempt to access beyond end of device [ 61.740031][ T4543] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 61.760881][ T4549] loop9: detected capacity change from 0 to 7 [ 61.772400][ T4549] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.782180][ T4548] bridge: RTM_NEWNEIGH with invalid ether address [ 61.797163][ T4549] Buffer I/O error on dev loop9, logical block 0, async page read [ 61.805216][ T4549] loop9: unable to read partition table [ 61.811350][ T4549] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 61.811350][ T4549] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 61.871224][ T4559] loop1: detected capacity change from 0 to 512 [ 61.913377][ T4563] loop3: detected capacity change from 0 to 512 [ 61.937069][ T4565] loop2: detected capacity change from 0 to 2048 [ 61.957094][ T4559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.970089][ T4559] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.982343][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 61.983085][ T4565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.991216][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 62.018298][ T4563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.035685][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.045049][ T4565] EXT4-fs (loop2): shut down requested (2) [ 62.052325][ T4563] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.063954][ T4565] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 62.064169][ T4555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 62.074432][ T4565] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 62.097366][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 62.129698][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.160027][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.182543][ T4583] loop3: detected capacity change from 0 to 128 [ 62.284289][ T4595] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 62.292119][ T4595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.422'. [ 62.413393][ T4608] l2tp_ppp: sess 2/0: no socket in recv [ 62.567947][ T4590] Set syz1 is full, maxelem 65536 reached [ 62.704360][ T4624] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 62.712817][ T4624] ref_ctr decrement failed for inode: 0x1f5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005e880 [ 62.725526][ T4624] uprobe: syz.4.431:4624 failed to unregister, leaking uprobe [ 63.040684][ T4638] ref_ctr_offset mismatch. inode: 0x1c2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x600000040 [ 63.054525][ T4638] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 63.062912][ T4638] ref_ctr decrement failed for inode: 0x1c2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104847900 [ 63.074616][ T4638] uprobe: syz.1.438:4638 failed to unregister, leaking uprobe [ 63.097759][ T4636] loop2: detected capacity change from 0 to 8192 [ 63.149703][ T4643] pim6reg1: entered promiscuous mode [ 63.155165][ T4643] pim6reg1: entered allmulticast mode [ 63.203714][ T4645] syzkaller0: entered promiscuous mode [ 63.209366][ T4645] syzkaller0: entered allmulticast mode [ 63.765705][ T4659] loop2: detected capacity change from 0 to 1024 [ 63.773602][ T4659] EXT4-fs: inline encryption not supported [ 63.779497][ T4659] EXT4-fs: Ignoring removed i_version option [ 63.786053][ T4659] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.821598][ T4659] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.447: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.835790][ T4659] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.447: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.864713][ T4659] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.447: Failed to acquire dquot type 0 [ 63.890976][ T4659] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 63.912111][ T4659] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.447: mark_inode_dirty error [ 63.975006][ T4659] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 64.002336][ T4659] EXT4-fs (loop2): 1 orphan inode deleted [ 64.009100][ T4659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.025722][ T35] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.045138][ T35] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 64.071638][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.083199][ T3324] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.096961][ T3324] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 64.116635][ T3324] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 64.202366][ T4675] lo speed is unknown, defaulting to 1000 [ 64.292049][ T4689] loop1: detected capacity change from 0 to 512 [ 64.310117][ T4689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.322882][ T4689] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.348377][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.367568][ T4695] loop1: detected capacity change from 0 to 128 [ 64.375776][ T4695] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 64.388936][ T4695] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.420614][ T3322] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.447965][ T4700] loop1: detected capacity change from 0 to 512 [ 64.455812][ T4700] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.470077][ T4700] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.478259][ T4700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.485134][ T4700] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.500637][ T4700] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 64.507782][ T4700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.459: bg 0: block 40: padding at end of block bitmap is not set [ 64.523450][ T4700] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.532598][ T4700] EXT4-fs (loop1): 1 truncate cleaned up [ 64.538678][ T4700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.554369][ T4700] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.459: corrupted xattr block 31: invalid header [ 64.567785][ T4700] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 64.576838][ T4700] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.459: corrupted xattr block 31: invalid header [ 64.590167][ T4700] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 64.599210][ T4700] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.459: bad symlink. [ 64.622348][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.128289][ T4706] loop4: detected capacity change from 0 to 1024 [ 65.136967][ T4706] EXT4-fs: inline encryption not supported [ 65.142889][ T4706] EXT4-fs: Ignoring removed i_version option [ 65.150067][ T4706] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.162834][ T4706] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.461: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.177071][ T4706] __quota_error: 90 callbacks suppressed [ 65.177089][ T4706] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 65.192092][ T4706] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.461: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.206717][ T4706] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 65.215573][ T4706] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.461: Failed to acquire dquot type 0 [ 65.237228][ T4706] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 65.247590][ T4706] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.461: mark_inode_dirty error [ 65.259588][ T4706] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 65.270392][ T4706] EXT4-fs (loop4): 1 orphan inode deleted [ 65.276579][ T4706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.289893][ T31] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.312857][ T31] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 65.321364][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 65.359625][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.369413][ T3321] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.383133][ T3321] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 65.401735][ T3321] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 65.440545][ T4715] lo speed is unknown, defaulting to 1000 [ 65.506335][ T4723] lo speed is unknown, defaulting to 1000 [ 65.653511][ T4731] lo speed is unknown, defaulting to 1000 [ 65.665924][ T4723] netlink: 'syz.2.476': attribute type 21 has an invalid length. [ 65.683838][ T4723] netlink: 'syz.2.476': attribute type 6 has an invalid length. [ 65.705058][ T4723] siw: device registration error -23 [ 65.924152][ T4741] tipc: Started in network mode [ 65.929180][ T4741] tipc: Node identity 0628d9ab5f58, cluster identity 4711 [ 65.936474][ T4741] tipc: Enabled bearer , priority 0 [ 65.945148][ T4740] tipc: Resetting bearer [ 65.960173][ T4740] tipc: Disabling bearer [ 66.006201][ T4747] syzkaller0: create flow: hash 249256597 index 1 [ 66.024042][ T12] syzkaller0: tun_net_xmit 76 [ 66.028957][ T12] syzkaller0: tun_net_xmit 48 [ 66.048611][ T3393] syzkaller0: tun_net_xmit 76 [ 66.069536][ T4745] syzkaller0: delete flow: hash 249256597 index 1 [ 66.080687][ T4751] loop2: detected capacity change from 0 to 512 [ 66.090637][ T4751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.103295][ T4751] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.129267][ T4751] block device autoloading is deprecated and will be removed. [ 66.136944][ T4751] bio_check_eod: 106 callbacks suppressed [ 66.136961][ T4751] syz.2.474: attempt to access beyond end of device [ 66.136961][ T4751] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 66.188156][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.392809][ T4770] loop3: detected capacity change from 0 to 4096 [ 66.434946][ T4770] __nla_validate_parse: 6 callbacks suppressed [ 66.434963][ T4770] netlink: 256 bytes leftover after parsing attributes in process `syz.3.484'. [ 66.504526][ T4760] lo speed is unknown, defaulting to 1000 [ 66.530478][ T4777] pim6reg1: entered promiscuous mode [ 66.535885][ T4777] pim6reg1: entered allmulticast mode [ 66.586258][ T4780] pim6reg1: entered promiscuous mode [ 66.591765][ T4780] pim6reg1: entered allmulticast mode [ 66.664831][ T4782] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.750282][ T29] audit: type=1400 audit(1748067361.615:615): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.776349][ T29] audit: type=1400 audit(1748067361.635:616): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.800333][ T29] audit: type=1400 audit(1748067361.635:617): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=580 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.828318][ T4782] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.910312][ T4782] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.912073][ T4792] loop4: detected capacity change from 0 to 2048 [ 66.989262][ T4792] loop4: p1 < > p4 [ 66.990334][ T4782] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.995904][ T4792] loop4: p4 size 8388608 extends beyond EOD, truncated [ 67.030708][ T29] audit: type=1400 audit(1748067361.895:618): avc: denied { create } for pid=4799 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.142828][ T4782] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.227294][ T4806] netlink: 256 bytes leftover after parsing attributes in process `syz.0.498'. [ 67.240308][ T4782] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.252384][ T4782] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.304837][ T4782] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.354996][ T4807] pim6reg1: entered promiscuous mode [ 67.360356][ T4807] pim6reg1: entered allmulticast mode [ 67.492996][ T4815] pim6reg1: entered promiscuous mode [ 67.498411][ T4815] pim6reg1: entered allmulticast mode [ 67.624947][ T4821] netlink: 96 bytes leftover after parsing attributes in process `syz.0.503'. [ 67.723286][ T4829] mmap: syz.1.515 (4829) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.735985][ T29] audit: type=1326 audit(1748067362.585:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 67.760017][ T29] audit: type=1326 audit(1748067362.585:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 67.783317][ T29] audit: type=1326 audit(1748067362.585:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 67.795262][ T4830] lo speed is unknown, defaulting to 1000 [ 67.829408][ T4834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 67.970355][ T4842] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.017609][ T4851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.031769][ T4842] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.081952][ T4851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.095712][ T4842] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.109045][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 68.144787][ T4851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.180166][ T4842] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.194111][ T4851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.249253][ T4842] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.262919][ T4842] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.282367][ T4851] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.295660][ T4851] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.307753][ T4851] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.320378][ T4851] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.331631][ T4842] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.371371][ T4842] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.661892][ T4870] loop4: detected capacity change from 0 to 1024 [ 68.689212][ T4870] EXT4-fs: Ignoring removed nobh option [ 68.756061][ T4870] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.518: Allocating blocks 497-513 which overlap fs metadata [ 68.837453][ T4870] EXT4-fs (loop4): pa ffff8881077c54d0: logic 256, phys. 385, len 8 [ 68.845703][ T4870] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 69.365699][ T4893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.439840][ T4893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.467622][ T4901] loop1: detected capacity change from 0 to 128 [ 69.508227][ T4893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.543038][ T4893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.572815][ T4907] netlink: 'syz.1.533': attribute type 16 has an invalid length. [ 69.581400][ T4907] netlink: 'syz.1.533': attribute type 17 has an invalid length. [ 69.620051][ T4893] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.653499][ T4907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.673651][ T4893] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.702706][ T4893] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.717879][ T4893] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.794163][ T4912] pim6reg1: entered promiscuous mode [ 69.800298][ T4912] pim6reg1: entered allmulticast mode [ 70.431399][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 70.431417][ T29] audit: type=1326 audit(1748067365.295:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecffede969 code=0x0 [ 71.042341][ T29] audit: type=1326 audit(1748067365.905:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.079975][ T29] audit: type=1326 audit(1748067365.905:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103324][ T29] audit: type=1326 audit(1748067365.905:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103434][ T29] audit: type=1326 audit(1748067365.905:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103461][ T29] audit: type=1326 audit(1748067365.905:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103496][ T29] audit: type=1326 audit(1748067365.905:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103575][ T29] audit: type=1326 audit(1748067365.905:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103616][ T29] audit: type=1326 audit(1748067365.905:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.103644][ T29] audit: type=1326 audit(1748067365.905:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.2.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 71.434769][ T3321] EXT4-fs unmount: 3 callbacks suppressed [ 71.434806][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.527886][ T4942] loop3: detected capacity change from 0 to 512 [ 71.535770][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 71.547495][ T4942] EXT4-fs: inline encryption not supported [ 71.557429][ T4942] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.548: corrupted in-inode xattr: invalid ea_ino [ 71.573371][ T4942] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.548: couldn't read orphan inode 15 (err -117) [ 71.591856][ T4942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000500000000 r/w without journal. Quota mode: writeback. [ 71.649675][ T4949] pim6reg1: entered promiscuous mode [ 71.655392][ T4949] pim6reg1: entered allmulticast mode [ 71.717792][ T4970] loop4: detected capacity change from 0 to 128 [ 71.881457][ T4995] loop1: detected capacity change from 0 to 1024 [ 71.888254][ T4995] EXT4-fs: Ignoring removed nobh option [ 71.971523][ T4995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.180738][ T4995] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.556: Allocating blocks 497-513 which overlap fs metadata [ 72.250903][ T4995] EXT4-fs (loop1): pa ffff8881077831c0: logic 256, phys. 385, len 8 [ 72.259356][ T4995] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 72.375453][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000500000000. [ 72.485655][ T5055] loop4: detected capacity change from 0 to 2048 [ 72.503979][ T5057] pim6reg1: entered promiscuous mode [ 72.509522][ T5057] pim6reg1: entered allmulticast mode [ 72.566401][ T5062] loop3: detected capacity change from 0 to 2048 [ 72.577002][ T5055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.621651][ T5062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.639272][ T5055] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 72.666212][ T5062] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.688618][ T5062] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 72.701108][ T5062] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.701108][ T5062] [ 72.711547][ T5062] EXT4-fs (loop3): Total free blocks count 0 [ 72.717566][ T5062] EXT4-fs (loop3): Free/Dirty block details [ 72.723562][ T5062] EXT4-fs (loop3): free_blocks=2415919104 [ 72.729435][ T5062] EXT4-fs (loop3): dirty_blocks=64 [ 72.734644][ T5062] EXT4-fs (loop3): Block reservation details [ 72.741470][ T5062] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 72.751201][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.812967][ T5062] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 72.844489][ T5062] syz.3.568 (5062) used greatest stack depth: 10184 bytes left [ 72.866034][ T5091] lo speed is unknown, defaulting to 1000 [ 73.462598][ T5097] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.540698][ T5097] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.630020][ T5097] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.670324][ T5097] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.703393][ T5100] loop3: detected capacity change from 0 to 512 [ 73.742592][ T5100] EXT4-fs (loop3): 1 orphan inode deleted [ 73.763350][ T54] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 73.780004][ T5097] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.789227][ T5100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.823087][ T5097] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.839614][ T5100] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.866241][ T5097] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.894999][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.908997][ T54] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 73.922697][ T5097] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.079274][ T5108] loop4: detected capacity change from 0 to 512 [ 74.096192][ T5108] EXT4-fs: inline encryption not supported [ 74.109883][ T5108] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.574: corrupted in-inode xattr: invalid ea_ino [ 74.135707][ T5108] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.574: couldn't read orphan inode 15 (err -117) [ 74.161449][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000500000000 r/w without journal. Quota mode: writeback. [ 74.184711][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.224228][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000500000000. [ 74.280283][ T5116] loop1: detected capacity change from 0 to 512 [ 74.298852][ T5116] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.310192][ T5116] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.325050][ T5118] netlink: 'syz.4.577': attribute type 16 has an invalid length. [ 74.332939][ T5118] netlink: 'syz.4.577': attribute type 17 has an invalid length. [ 74.343007][ T5116] EXT4-fs (loop1): 1 truncate cleaned up [ 74.358614][ T5116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.371658][ T5118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.388037][ T4859] lo speed is unknown, defaulting to 1000 [ 74.424690][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.613203][ T5137] loop3: detected capacity change from 0 to 512 [ 74.710397][ T5137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.723068][ T5137] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.964656][ T5177] lo speed is unknown, defaulting to 1000 [ 75.997092][ T5176] loop4: detected capacity change from 0 to 512 [ 76.016318][ T5179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 76.037511][ T5176] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.048160][ T5176] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 76.303473][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 76.303532][ T29] audit: type=1326 audit(1748067371.165:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.335487][ T29] audit: type=1326 audit(1748067371.195:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.361612][ T29] audit: type=1326 audit(1748067371.225:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.385576][ T29] audit: type=1326 audit(1748067371.225:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.409341][ T29] audit: type=1326 audit(1748067371.255:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fecffedd2d0 code=0x7ffc0000 [ 76.410629][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.432609][ T29] audit: type=1400 audit(1748067371.255:757): avc: denied { write } for pid=5190 comm="syz.1.600" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.432647][ T29] audit: type=1326 audit(1748067371.255:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.432683][ T29] audit: type=1326 audit(1748067371.255:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.432758][ T29] audit: type=1326 audit(1748067371.255:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.432793][ T29] audit: type=1326 audit(1748067371.255:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fecffede969 code=0x7ffc0000 [ 76.521504][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.569203][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.747775][ T5210] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 76.762473][ T5211] loop2: detected capacity change from 0 to 1024 [ 76.766936][ T5210] bond1: entered promiscuous mode [ 76.769499][ T5211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.774081][ T5210] bond1: entered allmulticast mode [ 76.791982][ T5211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.799347][ T5210] geneve2: entered allmulticast mode [ 76.811874][ T5210] bond1: (slave geneve2): making interface the new active one [ 76.819409][ T5210] geneve2: entered promiscuous mode [ 76.825857][ T5210] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.844951][ T5210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'. [ 76.855342][ T5210] bond1: left promiscuous mode [ 76.860216][ T5210] geneve2: left promiscuous mode [ 76.865525][ T5210] bond1: left allmulticast mode [ 76.871232][ T5210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.892351][ T5210] syz.3.606 (5210) used greatest stack depth: 10000 bytes left [ 76.934908][ T5223] lo speed is unknown, defaulting to 1000 [ 76.981235][ T5223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 77.017098][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.143206][ T5247] syzkaller0: entered promiscuous mode [ 77.148923][ T5247] syzkaller0: entered allmulticast mode [ 77.157777][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 77.185261][ T5251] ip6gre1: entered allmulticast mode [ 77.609035][ T5299] lo speed is unknown, defaulting to 1000 [ 78.616684][ T5321] lo speed is unknown, defaulting to 1000 [ 78.632993][ T5322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.624'. [ 78.770286][ T5324] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.790853][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.803220][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.852770][ T5324] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.921912][ T5324] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.980248][ T5324] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.039382][ T5332] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 79.052355][ T5331] IPv6: Can't replace route, no match found [ 79.078367][ T5332] bond1: entered promiscuous mode [ 79.083528][ T5332] bond1: entered allmulticast mode [ 79.096609][ T5332] geneve2: entered allmulticast mode [ 79.104691][ T5332] bond1: (slave geneve2): making interface the new active one [ 79.112324][ T5332] geneve2: entered promiscuous mode [ 79.119525][ T5332] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 79.132348][ T5324] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.141506][ T5332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'. [ 79.152522][ T5332] bond1: left promiscuous mode [ 79.157355][ T5332] geneve2: left promiscuous mode [ 79.163409][ T5332] bond1: left allmulticast mode [ 79.171836][ T5335] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 79.179603][ T5335] netlink: 224 bytes leftover after parsing attributes in process `syz.3.631'. [ 79.190712][ T5332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.201282][ T5324] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.227917][ T5324] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.259360][ T5324] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.539803][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.577297][ T5358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.631641][ T5365] loop2: detected capacity change from 0 to 512 [ 79.638205][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.650804][ T5365] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.665221][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.677660][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.689671][ T5365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.703200][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.720581][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.723604][ T5365] EXT4-fs (loop2): 1 truncate cleaned up [ 79.732905][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.750941][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.762878][ T5365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.764305][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.788290][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=+}[@ [ 79.834909][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.867397][ T5379] wg2: entered promiscuous mode [ 79.873146][ T5379] wg2: entered allmulticast mode [ 79.897794][ T5382] syz.0.643 (5382) used greatest stack depth: 9864 bytes left [ 79.957450][ T5388] syzkaller0: entered promiscuous mode [ 79.963103][ T5388] syzkaller0: entered allmulticast mode [ 79.972021][ T5389] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.003507][ T5391] pim6reg1: entered promiscuous mode [ 80.008898][ T5391] pim6reg1: entered allmulticast mode [ 80.024778][ T5389] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.026499][ T5385] infiniband syz!: set active [ 80.039577][ T5385] infiniband syz!: added team_slave_0 [ 80.051842][ T5385] RDS/IB: syz!: added [ 80.055907][ T5385] smc: adding ib device syz! with port count 1 [ 80.062313][ T5385] smc: ib device syz! port 1 has pnetid [ 80.081432][ T5394] $Hÿ: renamed from bond0 (while UP) [ 80.091102][ T5394] $Hÿ: entered promiscuous mode [ 80.096187][ T5394] bond_slave_0: entered promiscuous mode [ 80.102002][ T5394] bond_slave_1: entered promiscuous mode [ 80.111341][ T5389] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.145626][ T5396] IPv6: Can't replace route, no match found [ 80.213777][ T5389] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.277492][ T5389] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289604][ T5389] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.302926][ T5389] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.315259][ T5389] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.588621][ T5438] lo speed is unknown, defaulting to 1000 [ 80.685397][ T5440] pim6reg1: entered promiscuous mode [ 80.691627][ T5440] pim6reg1: entered allmulticast mode [ 80.713682][ T5444] loop3: detected capacity change from 0 to 512 [ 80.728833][ T5444] EXT4-fs: Ignoring removed nobh option [ 80.902037][ T5444] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.663: invalid indirect mapped block 256 (level 2) [ 80.970609][ T5444] EXT4-fs (loop3): 2 truncates cleaned up [ 81.010987][ T5444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.186873][ T5451] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.663: bg 0: block 5: invalid block bitmap [ 81.232949][ T5453] loop1: detected capacity change from 0 to 1024 [ 81.239938][ T5453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.250998][ T5451] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 56 with error 28 [ 81.263354][ T5451] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.263354][ T5451] [ 81.273060][ T5451] EXT4-fs (loop3): Total free blocks count 0 [ 81.279241][ T5451] EXT4-fs (loop3): Free/Dirty block details [ 81.285466][ T5451] EXT4-fs (loop3): free_blocks=0 [ 81.290708][ T5451] EXT4-fs (loop3): dirty_blocks=56 [ 81.295853][ T5451] EXT4-fs (loop3): Block reservation details [ 81.301981][ T5451] EXT4-fs (loop3): i_reserved_data_blocks=56 [ 81.313171][ T5453] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.361681][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.525275][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 81.699642][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 81.786075][ T5491] loop2: detected capacity change from 0 to 512 [ 81.802151][ T5491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.846186][ T5491] EXT4-fs (loop2): 1 truncate cleaned up [ 81.860408][ T5491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.061859][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.076680][ T5498] loop1: detected capacity change from 0 to 512 [ 82.099552][ T5500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.112260][ T5498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.125264][ T5498] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.175982][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 82.217048][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.342059][ T5506] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 82.526902][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 82.526921][ T29] audit: type=1400 audit(1748067377.355:809): avc: denied { setopt } for pid=5514 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.563301][ T5513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.680'. [ 82.937214][ T5535] loop2: detected capacity change from 0 to 512 [ 82.946570][ T5535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.960213][ T5535] EXT4-fs (loop2): 1 truncate cleaned up [ 82.968312][ T5535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.018566][ T29] audit: type=1400 audit(1748067377.465:810): avc: denied { mount } for pid=5522 comm="syz.2.683" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.041535][ T29] audit: type=1400 audit(1748067377.465:811): avc: denied { mounton } for pid=5522 comm="syz.2.683" path="/129/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 83.063629][ T29] audit: type=1400 audit(1748067377.475:812): avc: denied { mount } for pid=5522 comm="syz.2.683" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.086154][ T29] audit: type=1400 audit(1748067377.475:813): avc: denied { unmount } for pid=5522 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.105850][ T29] audit: type=1400 audit(1748067377.495:814): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.126564][ T29] audit: type=1326 audit(1748067377.585:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 83.150684][ T29] audit: type=1326 audit(1748067377.585:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 83.174110][ T29] audit: type=1326 audit(1748067377.585:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 83.197406][ T29] audit: type=1326 audit(1748067377.585:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 83.429541][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.566967][ T5552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.691'. [ 83.595780][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 83.625772][ T5550] lo speed is unknown, defaulting to 1000 [ 84.363781][ T5578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.695'. [ 84.373384][ T5578] netlink: zone id is out of range [ 84.378671][ T5578] netlink: zone id is out of range [ 84.383903][ T5578] netlink: del zone limit has 8 unknown bytes [ 84.534433][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.541163][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.547580][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.554539][ T5588] selinux_netlink_send: 79 callbacks suppressed [ 84.554555][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.587752][ T5606] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.601519][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.618018][ T5609] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 84.642376][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.654561][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.655252][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.666802][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.686836][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.702259][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.711376][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.716337][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.721566][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.738700][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.741435][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 84.751668][ T5588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5588 comm=+}[@ [ 84.758793][ T5606] dummy0 speed is unknown, defaulting to 1000 [ 85.026030][ T5627] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 85.201440][ T5655] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 85.212944][ T5653] IPVS: stopping master sync thread 5655 ... [ 85.253761][ T5657] loop4: detected capacity change from 0 to 512 [ 85.274428][ T5657] EXT4-fs: Ignoring removed nobh option [ 85.281068][ T5660] pim6reg1: entered promiscuous mode [ 85.286397][ T5660] pim6reg1: entered allmulticast mode [ 85.294839][ T5635] loop2: detected capacity change from 0 to 512 [ 85.315186][ T5657] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.718: invalid indirect mapped block 256 (level 2) [ 85.318754][ T5635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.350486][ T5657] EXT4-fs (loop4): 2 truncates cleaned up [ 85.356711][ T5657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.390263][ T5635] EXT4-fs (loop2): 1 truncate cleaned up [ 85.396401][ T5635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.399832][ T5669] team_slave_0: entered promiscuous mode [ 85.414191][ T5669] team_slave_1: entered promiscuous mode [ 85.433785][ T5671] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.718: bg 0: block 5: invalid block bitmap [ 85.434822][ T5669] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 85.455108][ T5669] team0: Device macvtap0 is already an upper device of the team interface [ 85.466466][ T5669] team_slave_0: left promiscuous mode [ 85.471942][ T5669] team_slave_1: left promiscuous mode [ 85.478282][ T5671] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1332 with error 28 [ 85.490884][ T5671] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.490884][ T5671] [ 85.501257][ T5671] EXT4-fs (loop4): Total free blocks count 0 [ 85.507371][ T5671] EXT4-fs (loop4): Free/Dirty block details [ 85.513314][ T5671] EXT4-fs (loop4): free_blocks=0 [ 85.518287][ T5671] EXT4-fs (loop4): dirty_blocks=1396 [ 85.519335][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.523592][ T5671] EXT4-fs (loop4): Block reservation details [ 85.539415][ T5671] EXT4-fs (loop4): i_reserved_data_blocks=1396 [ 85.551579][ T5674] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.650685][ T5674] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.662384][ T54] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1332 with max blocks 64 with error 28 [ 85.700717][ T5674] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.761494][ T5690] vlan2: entered promiscuous mode [ 85.766565][ T5690] hsr_slave_1: entered promiscuous mode [ 85.772354][ T5690] vlan2: entered allmulticast mode [ 85.777482][ T5690] hsr_slave_1: entered allmulticast mode [ 85.802609][ T5674] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.829811][ T5692] loop4: detected capacity change from 0 to 128 [ 85.837974][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 85.858765][ T5692] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.874353][ T5692] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.943107][ T5674] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.944105][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.956422][ T5674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.972844][ T5674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.985746][ T5674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.035543][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.054576][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.096515][ T5703] loop4: detected capacity change from 0 to 512 [ 86.124169][ T5703] loop4: detected capacity change from 0 to 512 [ 86.138184][ T5703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.171045][ T5703] EXT4-fs (loop4): 1 truncate cleaned up [ 86.177167][ T5703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.190154][ T5718] loop1: detected capacity change from 0 to 512 [ 86.208044][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 86.217174][ T5710] loop1: detected capacity change from 0 to 512 [ 86.224253][ T5710] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 86.389652][ T5735] x_tables: ip_tables: osf match: only valid for protocol 6 [ 86.730137][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.310045][ T5764] loop3: detected capacity change from 0 to 1024 [ 87.347455][ T5764] EXT4-fs: Ignoring removed bh option [ 87.367529][ T5764] EXT4-fs: inline encryption not supported [ 87.373465][ T5764] EXT4-fs: Ignoring removed i_version option [ 87.419837][ T5764] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.476577][ T5764] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.756: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.498944][ T5764] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.756: Failed to acquire dquot type 0 [ 87.511523][ T5764] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.756: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.525964][ T5764] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.756: Invalid inode bitmap blk 0 in block_group 0 [ 87.533166][ T5771] loop4: detected capacity change from 0 to 2048 [ 87.539503][ T5764] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 87.553378][ T31] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.553535][ T31] __quota_error: 137 callbacks suppressed [ 87.553546][ T31] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 87.553563][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 87.570282][ T5771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.606137][ T5764] EXT4-fs (loop3): 1 orphan inode deleted [ 87.621790][ T5764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.669374][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.784445][ T5775] pim6reg1: entered promiscuous mode [ 87.790653][ T5775] pim6reg1: entered allmulticast mode [ 87.817788][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.946437][ T29] audit: type=1400 audit(1748067382.805:954): avc: denied { create } for pid=5776 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 87.972981][ T29] audit: type=1400 audit(1748067382.835:955): avc: denied { sys_admin } for pid=5776 comm="syz.4.760" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.914786][ T29] audit: type=1400 audit(1748067383.775:956): avc: denied { name_bind } for pid=5802 comm="syz.4.768" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 89.137041][ T5807] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 89.202019][ T5818] IPv6: Can't replace route, no match found [ 89.320737][ T5827] netlink: 'syz.1.780': attribute type 21 has an invalid length. [ 89.328545][ T5827] netlink: 'syz.1.780': attribute type 20 has an invalid length. [ 89.336311][ T5827] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.377049][ T5831] serio: Serial port ptm0 [ 89.674917][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 89.941679][ T5842] SELinux: failed to load policy [ 90.144512][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 90.153899][ T29] audit: type=1326 audit(1748067385.025:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5840d9e969 code=0x7fc00000 [ 90.262183][ T5862] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.312006][ T5865] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 90.319972][ T5865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.793'. [ 90.333170][ T5865] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 90.354090][ T5862] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.400337][ T5862] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.491338][ T5862] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.574201][ T5862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.592434][ T5862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.609467][ T5862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.624822][ T5862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.801808][ T5870] SELinux: failed to load policy [ 90.935842][ T5879] lo speed is unknown, defaulting to 1000 [ 90.974457][ T5879] dummy0 speed is unknown, defaulting to 1000 [ 90.984477][ T5880] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 91.058693][ T5877] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 91.165089][ T29] audit: type=1400 audit(1748067385.995:958): avc: denied { name_bind } for pid=5889 comm="syz.1.803" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 91.186596][ T29] audit: type=1400 audit(1748067385.995:959): avc: denied { node_bind } for pid=5889 comm="syz.1.803" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 91.210055][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 91.298797][ T5903] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 91.315722][ T5908] netlink: 272 bytes leftover after parsing attributes in process `syz.4.811'. [ 91.357023][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.813'. [ 91.370335][ T29] audit: type=1326 audit(1748067386.235:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 91.394117][ T5917] loop2: detected capacity change from 0 to 1024 [ 91.401666][ T5917] EXT4-fs: Ignoring removed orlov option [ 91.407540][ T5917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.408262][ T29] audit: type=1326 audit(1748067386.235:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 91.438223][ T29] audit: type=1326 audit(1748067386.235:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 91.510994][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.545138][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.761479][ T5937] syz.0.820 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.100016][ T5946] loop3: detected capacity change from 0 to 512 [ 92.130707][ T5946] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 92.161049][ T5946] EXT4-fs (loop3): invalid journal inode [ 92.188582][ T5946] EXT4-fs (loop3): can't get journal size [ 92.229390][ T5946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 92.344540][ T5946] System zones: 1-12, 13-13 [ 92.350573][ T5946] EXT4-fs (loop3): 1 truncate cleaned up [ 92.356558][ T5946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.515066][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.828'. [ 92.844584][ T5966] loop2: detected capacity change from 0 to 512 [ 92.865069][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.877734][ T5966] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.544877][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.792500][ T5982] x_tables: ip_tables: osf match: only valid for protocol 6 [ 93.841417][ T5973] loop4: detected capacity change from 0 to 512 [ 93.851785][ T5985] netlink: 'syz.0.837': attribute type 4 has an invalid length. [ 93.860473][ T5973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.875550][ T5985] netlink: 'syz.0.837': attribute type 4 has an invalid length. [ 93.886905][ T5973] EXT4-fs (loop4): 1 truncate cleaned up [ 93.893225][ T5973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.917969][ T5973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.217366][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.253519][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 94.253534][ T29] audit: type=1326 audit(1748067389.115:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.301840][ T29] audit: type=1326 audit(1748067389.165:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.326033][ T29] audit: type=1326 audit(1748067389.165:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.350184][ T29] audit: type=1326 audit(1748067389.165:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.374012][ T29] audit: type=1326 audit(1748067389.165:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.397492][ T29] audit: type=1326 audit(1748067389.165:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.422427][ T29] audit: type=1326 audit(1748067389.185:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.445854][ T29] audit: type=1326 audit(1748067389.185:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.469893][ T29] audit: type=1326 audit(1748067389.185:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.494191][ T29] audit: type=1326 audit(1748067389.185:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f276547e969 code=0x7ffc0000 [ 94.552391][ T6006] SELinux: ebitmap: truncated map [ 94.559498][ T6006] SELinux: failed to load policy [ 94.666455][ T6014] netlink: 664 bytes leftover after parsing attributes in process `syz.3.847'. [ 95.644428][ T6033] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 95.790912][ T6042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.857'. [ 95.934540][ T6049] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.973563][ T6049] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 96.085556][ T6061] loop2: detected capacity change from 0 to 1024 [ 96.098488][ T6063] loop4: detected capacity change from 0 to 512 [ 96.105376][ T6061] EXT4-fs: Ignoring removed orlov option [ 96.112467][ T6063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.123152][ T6061] EXT4-fs (loop2): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 96.146253][ T6063] EXT4-fs (loop4): 1 truncate cleaned up [ 96.153248][ T6063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.166770][ T6061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.215986][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.303730][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.326932][ T6069] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.462289][ T6069] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.572287][ T6069] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.642606][ T6069] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.767229][ T6069] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.834358][ T6069] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.889504][ T6069] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919111][ T6081] SELinux: ebitmap: truncated map [ 96.953085][ T6069] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.965260][ T6081] SELinux: failed to load policy [ 97.116389][ T6091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.873'. [ 97.486783][ T6106] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 97.494592][ T6106] netlink: 'syz.4.879': attribute type 2 has an invalid length. [ 97.556847][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 97.619448][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.627962][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.649178][ T6107] loop2: detected capacity change from 0 to 512 [ 97.674167][ T6107] loop2: detected capacity change from 0 to 512 [ 97.682337][ T6107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.707753][ T6107] EXT4-fs (loop2): 1 truncate cleaned up [ 97.719945][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.208031][ T6102] syz.4.879 (6102) used greatest stack depth: 7000 bytes left [ 98.272303][ T6121] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.280129][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.370038][ T6124] SELinux: ebitmap: truncated map [ 98.375953][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 98.376772][ T6124] SELinux: failed to load policy [ 98.415037][ T6121] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.471121][ T6121] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.512239][ T6121] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.561504][ T6134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 98.610311][ T6121] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.613266][ T6140] hub 2-0:1.0: USB hub found [ 98.624106][ T6140] hub 2-0:1.0: 8 ports detected [ 98.635574][ T6121] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.655075][ T6138] syzkaller1: entered promiscuous mode [ 98.660656][ T6138] syzkaller1: entered allmulticast mode [ 98.672977][ T6121] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.699628][ T6121] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.764503][ T6146] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.894'. [ 98.777922][ T6146] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.894'. [ 98.897736][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 99.024727][ T6160] loop3: detected capacity change from 0 to 8192 [ 99.079729][ T6160] loop3: p2 p3 p4 [ 99.083743][ T6160] loop3: p2 start 452985600 is beyond EOD, truncated [ 99.090555][ T6160] loop3: p3 size 33554432 extends beyond EOD, truncated [ 99.100957][ T6160] loop3: p4 start 8388607 is beyond EOD, truncated [ 99.236542][ T6180] loop4: detected capacity change from 0 to 2048 [ 99.341218][ T6184] vlan2: entered promiscuous mode [ 99.346335][ T6184] hsr_slave_1: entered promiscuous mode [ 99.352017][ T6184] vlan2: entered allmulticast mode [ 99.357167][ T6184] hsr_slave_1: entered allmulticast mode [ 99.385367][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 99.867736][ T6195] netlink: 'syz.3.915': attribute type 4 has an invalid length. [ 99.898157][ T6193] hub 2-0:1.0: USB hub found [ 99.903619][ T6193] hub 2-0:1.0: 8 ports detected [ 99.917345][ T6195] netlink: 'syz.3.915': attribute type 4 has an invalid length. [ 99.970919][ T6197] loop3: detected capacity change from 0 to 2048 [ 99.990566][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.923187][ T6217] loop2: detected capacity change from 0 to 1024 [ 100.961635][ T6217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.997778][ T6217] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.043143][ T6220] lo speed is unknown, defaulting to 1000 [ 101.056530][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.090444][ T29] kauditd_printk_skb: 1324 callbacks suppressed [ 101.090508][ T29] audit: type=1400 audit(1748067395.955:2352): avc: denied { ioctl } for pid=6219 comm="syz.0.924" path="socket:[13950]" dev="sockfs" ino=13950 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.231019][ T6220] dummy0 speed is unknown, defaulting to 1000 [ 101.248172][ T6229] loop3: detected capacity change from 0 to 512 [ 101.336098][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.358511][ T6229] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.376695][ T29] audit: type=1326 audit(1748067396.235:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.408032][ T29] audit: type=1326 audit(1748067396.235:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.431603][ T29] audit: type=1326 audit(1748067396.235:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.455428][ T29] audit: type=1326 audit(1748067396.235:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.478783][ T29] audit: type=1326 audit(1748067396.235:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.502229][ T29] audit: type=1326 audit(1748067396.235:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.526111][ T29] audit: type=1326 audit(1748067396.235:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.549872][ T29] audit: type=1326 audit(1748067396.235:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.574458][ T29] audit: type=1326 audit(1748067396.235:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f185008e969 code=0x7ffc0000 [ 101.600823][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.047719][ T6261] netlink: 'syz.2.935': attribute type 4 has an invalid length. [ 102.056025][ T6261] netlink: 'syz.2.935': attribute type 4 has an invalid length. [ 102.094121][ T6264] loop3: detected capacity change from 0 to 128 [ 102.217861][ T6273] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.280630][ T6273] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.321618][ T6276] lo speed is unknown, defaulting to 1000 [ 102.341935][ T6273] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.372739][ T6276] dummy0 speed is unknown, defaulting to 1000 [ 102.373483][ T6266] loop2: detected capacity change from 0 to 8192 [ 102.419594][ T6266] loop2: p2 p3 p4 [ 102.424485][ T6273] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.426754][ T6266] loop2: p2 start 452985600 is beyond EOD, truncated [ 102.441103][ T6266] loop2: p3 size 33554432 extends beyond EOD, truncated [ 102.448795][ T6266] loop2: p4 start 8388607 is beyond EOD, truncated [ 102.492004][ T6273] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.505766][ T6273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.521267][ T6273] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.541345][ T6273] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.683113][ T6285] netlink: 196 bytes leftover after parsing attributes in process `syz.3.942'. [ 103.046253][ T6290] loop3: detected capacity change from 0 to 1024 [ 103.160998][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.279479][ T6290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.502048][ T6296] netlink: 'syz.2.944': attribute type 39 has an invalid length. [ 103.622748][ T6299] ±ÿ: renamed from team_slave_1 [ 103.673441][ T6304] loop3: detected capacity change from 0 to 2048 [ 103.695129][ T6307] netlink: 'syz.1.953': attribute type 39 has an invalid length. [ 103.881240][ T6311] SELinux: failed to load policy [ 103.904390][ T6319] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 103.920387][ T6319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.945521][ T6319] bond2: (slave gretap1): making interface the new active one [ 103.954022][ T6319] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 104.022520][ T6317] xt_CT: No such helper "pptp" [ 104.205874][ T6331] loop4: detected capacity change from 0 to 1024 [ 104.215914][ T6331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.232140][ T6331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.760424][ T6344] lo speed is unknown, defaulting to 1000 [ 104.824416][ T6344] dummy0 speed is unknown, defaulting to 1000 [ 104.848135][ T6348] loop2: detected capacity change from 0 to 2048 [ 105.091008][ T6363] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 105.111836][ T6363] SELinux: failed to load policy [ 105.181935][ T6372] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.270857][ T6372] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.290881][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.974'. [ 105.294873][ T6377] loop4: detected capacity change from 0 to 1024 [ 105.309008][ T6377] EXT4-fs: Ignoring removed nobh option [ 105.314620][ T6377] EXT4-fs: inline encryption not supported [ 105.320585][ T6377] EXT4-fs: Ignoring removed bh option [ 105.484803][ T6372] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.497307][ T6377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.561158][ T6372] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.594607][ T6392] loop3: detected capacity change from 0 to 512 [ 105.612704][ T6392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.625474][ T6392] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.799023][ T6372] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.816787][ T6372] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.838199][ T6372] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.940603][ T6372] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.570744][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.114290][ T6411] netlink: 'syz.2.985': attribute type 29 has an invalid length. [ 107.535383][ T6411] loop2: detected capacity change from 0 to 1024 [ 107.549297][ T6411] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 107.579298][ T6411] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 107.613900][ T6411] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.985: iget: special inode unallocated [ 107.657156][ T6411] EXT4-fs (loop2): no journal found [ 107.662459][ T6411] EXT4-fs (loop2): can't get journal size [ 107.730528][ T6411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.745321][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.757363][ T6417] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.771289][ T6422] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 107.790779][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.805943][ T6422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.813759][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 107.813776][ T29] audit: type=1400 audit(1748067402.685:2456): avc: denied { ioctl } for pid=6424 comm="syz.3.989" path="socket:[14226]" dev="sockfs" ino=14226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.865781][ T6417] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.903841][ T6422] bond2: (slave gretap1): making interface the new active one [ 107.914816][ T6422] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 107.926702][ T6417] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.103432][ T6437] loop2: detected capacity change from 0 to 2048 [ 108.111798][ T6417] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.130754][ T6437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.242850][ T6437] ================================================================== [ 108.250983][ T6437] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 108.258907][ T6437] [ 108.261248][ T6437] write to 0xffff88810759b374 of 4 bytes by task 6442 on cpu 0: [ 108.268889][ T6437] xas_set_mark+0x12b/0x140 [ 108.273411][ T6437] __folio_start_writeback+0x1dd/0x430 [ 108.278874][ T6437] ext4_bio_write_folio+0x590/0x9d0 [ 108.284100][ T6437] mpage_process_page_bufs+0x46c/0x5b0 [ 108.289674][ T6437] mpage_prepare_extent_to_map+0x775/0xb80 [ 108.295508][ T6437] ext4_do_writepages+0xa25/0x2270 [ 108.300628][ T6437] ext4_writepages+0x176/0x300 [ 108.305398][ T6437] do_writepages+0x1d2/0x480 [ 108.309990][ T6437] file_write_and_wait_range+0x156/0x2c0 [ 108.315662][ T6437] generic_buffers_fsync_noflush+0x45/0x120 [ 108.321562][ T6437] ext4_sync_file+0x1ab/0x690 [ 108.326268][ T6437] vfs_fsync_range+0x10a/0x130 [ 108.331068][ T6437] ext4_buffered_write_iter+0x34f/0x3c0 [ 108.336627][ T6437] ext4_file_write_iter+0x383/0xf00 [ 108.341845][ T6437] iter_file_splice_write+0x5ef/0x970 [ 108.347221][ T6437] direct_splice_actor+0x153/0x2a0 [ 108.352350][ T6437] splice_direct_to_actor+0x30f/0x680 [ 108.357741][ T6437] do_splice_direct+0xda/0x150 [ 108.362508][ T6437] do_sendfile+0x380/0x640 [ 108.366916][ T6437] __x64_sys_sendfile64+0x105/0x150 [ 108.372124][ T6437] x64_sys_call+0xb39/0x2fb0 [ 108.376738][ T6437] do_syscall_64+0xd0/0x1a0 [ 108.381249][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.387149][ T6437] [ 108.389473][ T6437] read to 0xffff88810759b374 of 4 bytes by task 6437 on cpu 1: [ 108.397021][ T6437] __writeback_single_inode+0x1f9/0x7c0 [ 108.402567][ T6437] writeback_single_inode+0x167/0x3e0 [ 108.407950][ T6437] sync_inode_metadata+0x5b/0x90 [ 108.412986][ T6437] generic_buffers_fsync_noflush+0xd9/0x120 [ 108.418889][ T6437] ext4_sync_file+0x1ab/0x690 [ 108.423600][ T6437] vfs_fsync_range+0x10a/0x130 [ 108.428367][ T6437] ext4_buffered_write_iter+0x34f/0x3c0 [ 108.433939][ T6437] ext4_file_write_iter+0x383/0xf00 [ 108.439150][ T6437] iter_file_splice_write+0x5ef/0x970 [ 108.444536][ T6437] direct_splice_actor+0x153/0x2a0 [ 108.449656][ T6437] splice_direct_to_actor+0x30f/0x680 [ 108.455041][ T6437] do_splice_direct+0xda/0x150 [ 108.459809][ T6437] do_sendfile+0x380/0x640 [ 108.464227][ T6437] __x64_sys_sendfile64+0x105/0x150 [ 108.469446][ T6437] x64_sys_call+0xb39/0x2fb0 [ 108.474048][ T6437] do_syscall_64+0xd0/0x1a0 [ 108.478554][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.484456][ T6437] [ 108.486774][ T6437] value changed: 0x0a000021 -> 0x04000021 [ 108.492485][ T6437] [ 108.494818][ T6437] Reported by Kernel Concurrency Sanitizer on: [ 108.500993][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.2.995 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 108.513357][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.523411][ T6437] ================================================================== [ 108.988026][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.094352][ T6417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.105389][ T6417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.116766][ T6417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.128833][ T6417] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0