last executing test programs: 47.89432898s ago: executing program 2 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 47.854557532s ago: executing program 2 (id=307): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 47.820528003s ago: executing program 2 (id=308): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24008444) semget$private(0x0, 0x1, 0x39e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x10094, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 47.794907065s ago: executing program 2 (id=309): socket(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 47.777194215s ago: executing program 2 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 47.67208197s ago: executing program 2 (id=313): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 32.496950826s ago: executing program 32 (id=313): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 25.519770258s ago: executing program 5 (id=599): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0xa8) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x4000000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 25.4587459s ago: executing program 5 (id=602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 25.371053254s ago: executing program 5 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0xd86, &(0x7f0000001b40)={@multicast, @random="7b3b8485d288", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xd50, 0x3a, 0xff, @remote, @mcast2, {[@hopopts={0x3a, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @ra]}, @srh={0x5e, 0xa, 0x4, 0x5, 0x82, 0x78, 0x1, [@remote, @rand_addr=' \x01\x00', @private0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x6, 0x40, 0x81, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, @mcast1, @private1]}, @dstopts={0x29, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x164}, @ra={0x5, 0x2, 0x4}]}, @dstopts={0x3a, 0x18c, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x6, 0xc56, "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"}]}], @ndisc_ra}}}}}, 0x0) 25.261042179s ago: executing program 5 (id=608): socket(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 25.216923991s ago: executing program 5 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 25.046792478s ago: executing program 5 (id=616): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 9.898512872s ago: executing program 33 (id=616): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 4.422681849s ago: executing program 0 (id=971): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x93a, 0x0, 0x2, 0x237}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) 4.16811406s ago: executing program 6 (id=960): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 4.093957074s ago: executing program 6 (id=962): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_cache\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x3, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 3.545297927s ago: executing program 0 (id=969): unshare(0x2000400) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x8001, 0x9}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 3.200525652s ago: executing program 6 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.067765468s ago: executing program 6 (id=983): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2.678914845s ago: executing program 0 (id=978): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24008444) semget$private(0x0, 0x1, 0x39e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x10094, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.596254349s ago: executing program 0 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.990444245s ago: executing program 0 (id=988): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.725019926s ago: executing program 3 (id=989): unshare(0x2000400) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x8001, 0x9}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 1.724736326s ago: executing program 4 (id=990): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.723024096s ago: executing program 0 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 1.554337503s ago: executing program 4 (id=993): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x00\x00\b\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 880.415623ms ago: executing program 3 (id=994): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x8000000) unshare(0xa001500) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 880.087073ms ago: executing program 4 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c) listen(r2, 0x2000) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 878.071513ms ago: executing program 1 (id=997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, 0x0) r1 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, r1, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 794.572396ms ago: executing program 4 (id=998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0, 0x66}, &(0x7f0000000240)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 791.029746ms ago: executing program 3 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 736.866139ms ago: executing program 1 (id=1001): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f0000001480)="$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") chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 646.317123ms ago: executing program 4 (id=1003): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) io_uring_enter(r0, 0x6c28, 0xaa86, 0x4, 0x0, 0x0) 628.744144ms ago: executing program 3 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 499.254649ms ago: executing program 1 (id=1005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) 360.255595ms ago: executing program 1 (id=1007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x6b) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 359.861815ms ago: executing program 3 (id=1008): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRES8], 0x50) r2 = open(&(0x7f0000000540)='./bus\x00', 0x101002, 0x183) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 208.798642ms ago: executing program 6 (id=1009): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x301, 0x20001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd17b, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x11014, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x5ff, &(0x7f0000000600)="$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") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210090, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x277, &(0x7f00000001c0)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x3) 208.235102ms ago: executing program 4 (id=1010): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @remote}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x80000, @loopback, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x200, 0x8, 0x0, 0xc}, {0x9, 0x5, 0x0, 0x2, 0x20, 0x4, 0x3, 0x4f}, {0x9, 0x5, 0x80, 0x3, 0x40, 0x2, 0x9, 0x3}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 182.501823ms ago: executing program 1 (id=1011): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x10}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r4 = dup2(r3, r3) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 153.180094ms ago: executing program 3 (id=1012): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}}, 0x0) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 19.82595ms ago: executing program 1 (id=1013): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c250000000000202c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000050) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 0s ago: executing program 6 (id=1014): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) kernel console output (not intermixed with test programs): ity change from 0 to 1024 [ 40.433108][ T4166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.487731][ T4173] bridge: RTM_NEWNEIGH with invalid ether address [ 40.599715][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 40.619977][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.620230][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 40.629705][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 40.657250][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 40.732907][ T4190] loop2: detected capacity change from 0 to 1024 [ 40.749258][ T4190] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.755933][ T4190] EXT4-fs: Ignoring removed nobh option [ 40.891958][ T4190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.931925][ T4196] loop1: detected capacity change from 0 to 512 [ 40.997107][ T4196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.005902][ T4196] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.081694][ T4196] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.218: Allocating blocks 41-42 which overlap fs metadata [ 41.101949][ T4196] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.218: Allocating blocks 41-42 which overlap fs metadata [ 41.129717][ T4196] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.218: Failed to acquire dquot type 1 [ 41.141378][ T4196] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 41.160337][ T4196] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.218: corrupted inode contents [ 41.206533][ T4196] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.218: mark_inode_dirty error [ 41.264311][ T4196] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.218: corrupted inode contents [ 41.314477][ T4196] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.218: mark_inode_dirty error [ 41.354404][ T4196] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.218: corrupted inode contents [ 41.368272][ T4188] Set syz1 is full, maxelem 65536 reached [ 41.380261][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 41.380309][ T29] audit: type=1326 audit(1765115213.455:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4d7df749 code=0x7ffc0000 [ 41.410725][ T4216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 41.419629][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.427054][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.463062][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.481830][ T29] audit: type=1326 audit(1765115213.485:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4215 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c4d7df749 code=0x7ffc0000 [ 41.505537][ T4196] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 41.516543][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.523981][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.545665][ T4196] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.218: corrupted inode contents [ 41.575729][ T4196] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.218: mark_inode_dirty error [ 41.593624][ T4196] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 41.611767][ T4196] EXT4-fs (loop1): 1 truncate cleaned up [ 41.617973][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.638953][ T4196] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.697027][ T4196] syz.1.218 (4196) used greatest stack depth: 9952 bytes left [ 41.714555][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.904862][ T4245] loop0: detected capacity change from 0 to 256 [ 41.913580][ T29] audit: type=1400 audit(1765115213.985:651): avc: denied { mount } for pid=4244 comm="syz.0.226" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.943749][ T29] audit: type=1400 audit(1765115214.015:652): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.037342][ T29] audit: type=1400 audit(1765115214.105:653): avc: denied { setopt } for pid=4248 comm="syz.0.228" lport=39572 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 42.098936][ T4255] loop0: detected capacity change from 0 to 1024 [ 42.105778][ T4255] EXT4-fs: Ignoring removed oldalloc option [ 42.112265][ T4255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.124660][ T4255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.147235][ T29] audit: type=1400 audit(1765115214.215:654): avc: denied { map } for pid=4254 comm="syz.0.231" path="/49/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.169995][ T29] audit: type=1400 audit(1765115214.215:655): avc: denied { execute } for pid=4254 comm="syz.0.231" path="/49/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.207942][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.241561][ T29] audit: type=1400 audit(1765115214.315:656): avc: denied { create } for pid=4260 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.265791][ T29] audit: type=1400 audit(1765115214.315:657): avc: denied { bind } for pid=4260 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.285362][ T29] audit: type=1400 audit(1765115214.315:658): avc: denied { setopt } for pid=4260 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.417797][ T4268] loop2: detected capacity change from 0 to 2048 [ 42.471161][ T4268] loop2: p1 < > p4 [ 42.475757][ T4268] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.555773][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 42.556480][ T4281] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 42.565289][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 42.610448][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.627278][ T4283] veth2: entered promiscuous mode [ 42.632424][ T4283] veth2: entered allmulticast mode [ 42.673628][ T4281] bond1: (slave veth3): Enslaving as an active interface with a down link [ 42.687062][ T4281] bond1: entered promiscuous mode [ 42.692215][ T4281] bond1: entered allmulticast mode [ 42.697753][ T4281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.736356][ T4293] loop3: detected capacity change from 0 to 1764 [ 42.784082][ T4291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'. [ 42.882804][ T4309] syz.3.254: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.897435][ T4309] CPU: 1 UID: 0 PID: 4309 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.897461][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.897472][ T4309] Call Trace: [ 42.897480][ T4309] [ 42.897486][ T4309] __dump_stack+0x1d/0x30 [ 42.897531][ T4309] dump_stack_lvl+0xe8/0x140 [ 42.897555][ T4309] dump_stack+0x15/0x1b [ 42.897625][ T4309] warn_alloc+0x12b/0x1a0 [ 42.897649][ T4309] ? __schedule+0x85f/0xcd0 [ 42.897720][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 42.897743][ T4309] __vmalloc_node_range_noprof+0xa0/0x1310 [ 42.897774][ T4309] ? __futex_wait+0x1fa/0x260 [ 42.897857][ T4309] ? __pfx_futex_wake_mark+0x10/0x10 [ 42.897879][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 42.897902][ T4309] ? avc_has_perm_noaudit+0xab/0x130 [ 42.898011][ T4309] ? should_fail_ex+0x30/0x280 [ 42.898034][ T4309] ? should_failslab+0x8c/0xb0 [ 42.898083][ T4309] vmalloc_user_noprof+0x7d/0xb0 [ 42.898118][ T4309] ? xskq_create+0x80/0xe0 [ 42.898153][ T4309] xskq_create+0x80/0xe0 [ 42.898181][ T4309] xsk_init_queue+0x95/0xf0 [ 42.898261][ T4309] xsk_setsockopt+0x477/0x640 [ 42.898288][ T4309] ? __pfx_xsk_setsockopt+0x10/0x10 [ 42.898315][ T4309] __sys_setsockopt+0x184/0x200 [ 42.898339][ T4309] __x64_sys_setsockopt+0x64/0x80 [ 42.898365][ T4309] x64_sys_call+0x21d5/0x3000 [ 42.898388][ T4309] do_syscall_64+0xd8/0x2a0 [ 42.898520][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.898544][ T4309] RIP: 0033:0x7fe8a01af749 [ 42.898629][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.898650][ T4309] RSP: 002b:00007fe89ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 42.898671][ T4309] RAX: ffffffffffffffda RBX: 00007fe8a0405fa0 RCX: 00007fe8a01af749 [ 42.898685][ T4309] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 42.898699][ T4309] RBP: 00007fe8a0233f91 R08: 0000000000000004 R09: 0000000000000000 [ 42.898713][ T4309] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 42.898726][ T4309] R13: 00007fe8a0406038 R14: 00007fe8a0405fa0 R15: 00007ffe01b784d8 [ 42.898748][ T4309] [ 42.898759][ T4309] Mem-Info: [ 43.119516][ T4309] active_anon:5813 inactive_anon:1 isolated_anon:0 [ 43.119516][ T4309] active_file:8193 inactive_file:2238 isolated_file:0 [ 43.119516][ T4309] unevictable:0 dirty:1502 writeback:0 [ 43.119516][ T4309] slab_reclaimable:3143 slab_unreclaimable:16561 [ 43.119516][ T4309] mapped:29157 shmem:200 pagetables:1204 [ 43.119516][ T4309] sec_pagetables:0 bounce:0 [ 43.119516][ T4309] kernel_misc_reclaimable:0 [ 43.119516][ T4309] free:1899676 free_pcp:7569 free_cma:0 [ 43.164321][ T4309] Node 0 active_anon:23252kB inactive_anon:4kB active_file:32772kB inactive_file:8952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116628kB dirty:6008kB writeback:0kB shmem:800kB kernel_stack:3504kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 43.191592][ T4309] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 43.221299][ T4309] lowmem_reserve[]: 0 2880 7859 7859 [ 43.226649][ T4309] Node 0 DMA32 free:2945868kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949500kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 43.258101][ T4309] lowmem_reserve[]: 0 0 4978 4978 [ 43.263248][ T4309] Node 0 Normal free:4639912kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25340kB inactive_anon:4kB active_file:32772kB inactive_file:8952kB unevictable:0kB writepending:6008kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:24544kB local_pcp:4068kB free_cma:0kB [ 43.296251][ T4309] lowmem_reserve[]: 0 0 0 0 [ 43.300863][ T4309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 43.313615][ T4309] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945868kB [ 43.329716][ T4309] Node 0 Normal: 268*4kB (UE) 33*8kB (UME) 10*16kB (UM) 8*32kB (UE) 4*64kB (UM) 24*128kB (UME) 22*256kB (UME) 16*512kB (UME) 11*1024kB (UM) 5*2048kB (UME) 1121*4096kB (M) = 4632024kB [ 43.348094][ T4309] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 43.357432][ T4309] 13499 total pagecache pages [ 43.362129][ T4309] 1 pages in swap cache [ 43.366280][ T4309] Free swap = 124992kB [ 43.370478][ T4309] Total swap = 124996kB [ 43.374638][ T4309] 2097051 pages RAM [ 43.378445][ T4309] 0 pages HighMem/MovableOnly [ 43.383155][ T4309] 81276 pages reserved [ 43.612815][ T4338] netlink: 96 bytes leftover after parsing attributes in process `syz.3.268'. [ 43.693786][ T4345] loop0: detected capacity change from 0 to 1024 [ 43.702453][ T4345] EXT4-fs: Ignoring removed orlov option [ 43.719675][ T4345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.867325][ T4358] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.275'. [ 43.876944][ T4358] netlink: zone id is out of range [ 43.882140][ T4358] netlink: zone id is out of range [ 43.888038][ T4358] netlink: zone id is out of range [ 43.893242][ T4358] netlink: zone id is out of range [ 43.898384][ T4358] netlink: zone id is out of range [ 43.904619][ T4358] netlink: zone id is out of range [ 43.909868][ T4358] netlink: zone id is out of range [ 43.915008][ T4358] netlink: zone id is out of range [ 43.920128][ T4358] netlink: zone id is out of range [ 43.956358][ T4361] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 44.174785][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 44.188210][ T4375] loop2: detected capacity change from 0 to 512 [ 44.198106][ T4375] ------------[ cut here ]------------ [ 44.203727][ T4375] EA inode 11 i_nlink=2 [ 44.203747][ T4375] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#1: syz.2.282/4375 [ 44.215714][ T4375] Modules linked in: [ 44.219634][ T4375] CPU: 1 UID: 0 PID: 4375 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.229627][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.239739][ T4375] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 44.246380][ T4375] Code: c1 d2 9c ff 4c 8d 2d 0a c0 20 05 49 8d 7e 40 e8 01 65 b8 ff 49 8b 6e 40 4c 89 e7 e8 15 60 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c df ba 03 66 66 66 2e 0f 1f 84 [ 44.266014][ T4375] RSP: 0018:ffffc90011f035a0 EFLAGS: 00010246 [ 44.272110][ T4375] RAX: ffff88811b6dbc10 RBX: ffff888107a664e8 RCX: ffffffff81bb4beb [ 44.280198][ T4375] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0be0 [ 44.288192][ T4375] RBP: 000000000000000b R08: 0001888107a6649b R09: 0000000000000000 [ 44.296196][ T4375] R10: ffffc90011f034d0 R11: 0001c90011f034d0 R12: ffff888107a66498 [ 44.304208][ T4375] R13: ffffffff86dc0be0 R14: ffff888107a66450 R15: 0000000000000001 [ 44.312289][ T4375] FS: 00007f7c316ff6c0(0000) GS:ffff8882aeec3000(0000) knlGS:0000000000000000 [ 44.321251][ T4375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.327845][ T4375] CR2: 0000001b33e20ff8 CR3: 000000011aecc000 CR4: 00000000003506f0 [ 44.335863][ T4375] Call Trace: [ 44.339152][ T4375] [ 44.342124][ T4375] ext4_xattr_set_entry+0x77f/0x1020 [ 44.347515][ T4375] ext4_xattr_ibody_set+0x184/0x3c0 [ 44.352796][ T4375] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 44.358655][ T4375] __ext4_expand_extra_isize+0x246/0x280 [ 44.364397][ T4375] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 44.369921][ T4375] ext4_evict_inode+0x7c4/0xd40 [ 44.374851][ T4375] ? __pfx_ext4_evict_inode+0x10/0x10 [ 44.381558][ T4375] evict+0x2af/0x510 [ 44.385516][ T4375] ? __dquot_initialize+0x146/0x7c0 [ 44.391528][ T4375] iput+0x4bd/0x650 [ 44.395361][ T4375] ext4_process_orphan+0x1a9/0x1c0 [ 44.400518][ T4375] ext4_orphan_cleanup+0x6a8/0xa00 [ 44.405706][ T4375] ext4_fill_super+0x3411/0x37a0 [ 44.410765][ T4375] ? set_blocksize+0x1a8/0x310 [ 44.415532][ T4375] ? sb_set_blocksize+0xfc/0x170 [ 44.420590][ T4375] ? setup_bdev_super+0x30e/0x370 [ 44.425630][ T4375] ? __pfx_ext4_fill_super+0x10/0x10 [ 44.430967][ T4375] get_tree_bdev_flags+0x291/0x300 [ 44.436086][ T4375] ? __pfx_ext4_fill_super+0x10/0x10 [ 44.441437][ T4375] get_tree_bdev+0x1f/0x30 [ 44.445863][ T4375] ext4_get_tree+0x1c/0x30 [ 44.450340][ T4375] vfs_get_tree+0x57/0x1d0 [ 44.454828][ T4375] do_new_mount+0x24d/0x6a0 [ 44.459357][ T4375] path_mount+0x4ab/0xb80 [ 44.463931][ T4375] ? user_path_at+0xbf/0x130 [ 44.468538][ T4375] __se_sys_mount+0x28c/0x2e0 [ 44.473251][ T4375] __x64_sys_mount+0x67/0x80 [ 44.477907][ T4375] x64_sys_call+0x2cca/0x3000 [ 44.482685][ T4375] do_syscall_64+0xd8/0x2a0 [ 44.487206][ T4375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.493144][ T4375] RIP: 0033:0x7f7c32ca0eea [ 44.497568][ T4375] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.517294][ T4375] RSP: 002b:00007f7c316fee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.525741][ T4375] RAX: ffffffffffffffda RBX: 00007f7c316feef0 RCX: 00007f7c32ca0eea [ 44.533782][ T4375] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7c316feeb0 [ 44.541782][ T4375] RBP: 0000200000000180 R08: 00007f7c316feef0 R09: 0000000000800700 [ 44.549759][ T4375] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 44.557836][ T4375] R13: 00007f7c316feeb0 R14: 000000000000046f R15: 000000000000002c [ 44.565910][ T4375] [ 44.568941][ T4375] ---[ end trace 0000000000000000 ]--- [ 44.578786][ T4375] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.282: iget: bad extra_isize 90 (inode size 256) [ 44.592795][ T4375] EXT4-fs (loop2): Remounting filesystem read-only [ 44.599406][ T4375] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 44.608425][ T4375] EXT4-fs (loop2): 1 orphan inode deleted [ 44.614591][ T4375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.645541][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.728090][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.802254][ T4390] loop0: detected capacity change from 0 to 512 [ 44.808982][ T4390] EXT4-fs: dax option not supported [ 45.169280][ T4420] bridge0: entered promiscuous mode [ 45.174809][ T4420] bridge0: left promiscuous mode [ 45.361797][ T4431] netlink: 'syz.2.302': attribute type 2 has an invalid length. [ 45.369467][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 45.391655][ T4431] bond1: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 45.405056][ T4431] bond1 (unregistering): Released all slaves [ 45.569520][ T4445] netlink: 'syz.2.308': attribute type 29 has an invalid length. [ 45.736270][ T4458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.809174][ T4458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.843412][ T4462] netlink: 124 bytes leftover after parsing attributes in process `syz.1.316'. [ 45.852428][ T4462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 45.866393][ T4458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.934458][ T4458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.997573][ T4467] set_capacity_and_notify: 1 callbacks suppressed [ 45.997645][ T4467] loop4: detected capacity change from 0 to 1024 [ 46.002243][ T64] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.024215][ T4467] EXT4-fs: Ignoring removed orlov option [ 46.038911][ T64] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.056149][ T64] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.060110][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.066597][ T64] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.075668][ T3695] Bluetooth: hci0: command 0x1003 tx timeout [ 46.086021][ T4467] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 46.342701][ T4485] loop4: detected capacity change from 0 to 128 [ 46.363201][ T4485] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.380262][ T4485] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.394545][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 46.394555][ T29] audit: type=1326 audit(1765115218.465:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.426208][ T29] audit: type=1326 audit(1765115218.495:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.457395][ T29] audit: type=1326 audit(1765115218.525:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.489071][ T29] audit: type=1326 audit(1765115218.555:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.512349][ T29] audit: type=1400 audit(1765115218.555:815): avc: denied { setattr } for pid=4484 comm="syz.4.325" path="/51/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.538043][ T29] audit: type=1326 audit(1765115218.605:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.562837][ T29] audit: type=1326 audit(1765115218.635:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.587373][ T29] audit: type=1326 audit(1765115218.655:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.680068][ T29] audit: type=1400 audit(1765115218.665:819): avc: denied { ioctl } for pid=4484 comm="syz.4.325" path="/51/file1/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.704014][ T29] audit: type=1326 audit(1765115218.685:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc4bbf4f749 code=0x7ffc0000 [ 46.740866][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.791647][ T4498] bridge_slave_1: left allmulticast mode [ 46.797312][ T4498] bridge_slave_1: left promiscuous mode [ 46.803159][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.831669][ T4498] bridge_slave_0: left allmulticast mode [ 46.837471][ T4498] bridge_slave_0: left promiscuous mode [ 46.843251][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.881621][ T4494] tipc: Started in network mode [ 46.886527][ T4494] tipc: Node identity de921b1680d1, cluster identity 4711 [ 46.893701][ T4494] tipc: Enabled bearer , priority 0 [ 46.907654][ T4493] tipc: Resetting bearer [ 46.920407][ T4493] tipc: Disabling bearer [ 47.008879][ T4510] loop0: detected capacity change from 0 to 2048 [ 47.090899][ T3303] loop0: p1 < > p4 [ 47.096750][ T3303] loop0: p4 size 8388608 extends beyond EOD, truncated [ 47.129594][ T4510] loop0: p1 < > p4 [ 47.221525][ T4510] loop0: p4 size 8388608 extends beyond EOD, truncated [ 47.243468][ T3004] loop0: p1 < > p4 [ 47.250710][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated [ 47.380616][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 47.384122][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.453832][ T4521] loop4: detected capacity change from 0 to 1024 [ 47.467330][ T4524] loop0: detected capacity change from 0 to 512 [ 47.489485][ T4521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.535566][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.548665][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 47.572567][ T4524] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 47.619164][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.638730][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 47.653949][ T4531] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.668218][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.678535][ T4524] __nla_validate_parse: 3 callbacks suppressed [ 47.678574][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 47.745303][ T4531] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.826693][ T4531] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.866456][ T4547] loop3: detected capacity change from 0 to 512 [ 47.882108][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 47.891594][ T4547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.918576][ T4531] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.952303][ T4547] EXT4-fs (loop3): 1 truncate cleaned up [ 47.958556][ T4547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.022233][ T38] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.037830][ T38] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.069405][ T38] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.077671][ T38] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.251799][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 48.270717][ T4565] veth1_macvtap: left promiscuous mode [ 48.278930][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.208569][ T4582] loop0: detected capacity change from 0 to 8192 [ 49.260448][ T4582] loop0: p1 p2 < > p3 p4 < p5 > [ 49.265646][ T4582] loop0: partition table partially beyond EOD, truncated [ 49.303592][ T4582] loop0: p1 size 100663296 extends beyond EOD, truncated [ 49.317957][ T4582] loop0: p2 start 591104 is beyond EOD, truncated [ 49.320202][ T4584] SET target dimension over the limit! [ 49.324430][ T4582] loop0: p3 start 33572980 is beyond EOD, truncated [ 49.337870][ T4582] loop0: p5 size 100663296 extends beyond EOD, truncated [ 49.464472][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.476329][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 49.487483][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.488461][ T4588] loop0: detected capacity change from 0 to 4096 [ 49.514597][ T4590] syz.3.368 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.540437][ T4588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.550964][ T4588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.243185][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.425386][ T4602] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 50.451017][ T4602] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 50.496748][ T4604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4604 comm=syz.0.373 [ 50.858174][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 51.444077][ T4623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 51.485073][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 51.485089][ T29] audit: type=1400 audit(1765115223.555:886): avc: denied { name_bind } for pid=4627 comm="syz.3.384" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.543290][ T4630] SET target dimension over the limit! [ 51.573509][ T4634] loop4: detected capacity change from 0 to 164 [ 51.582974][ T4634] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.597748][ T4634] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.606556][ T4634] Symlink component flag not implemented [ 51.612230][ T4634] Symlink component flag not implemented [ 51.618189][ T4634] Symlink component flag not implemented (7) [ 51.624208][ T4634] Symlink component flag not implemented (116) [ 51.701717][ T4639] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 51.713370][ T4639] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 52.417660][ T4660] loop4: detected capacity change from 0 to 512 [ 52.434761][ T4660] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.463065][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.484298][ T4660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.397: lblock 23 mapped to illegal pblock 18 (length 1) [ 52.555576][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.956698][ T4670] loop3: detected capacity change from 0 to 164 [ 52.996925][ T4670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.015943][ T4670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.037236][ T4670] Symlink component flag not implemented [ 53.042919][ T4670] Symlink component flag not implemented [ 53.050468][ T4670] Symlink component flag not implemented (7) [ 53.056498][ T4670] Symlink component flag not implemented (116) [ 53.060789][ T4676] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 53.095103][ T4676] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 53.734076][ T4697] loop3: detected capacity change from 0 to 512 [ 53.743960][ T4697] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.786470][ T4697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.822470][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 53.849361][ T4697] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.409: lblock 23 mapped to illegal pblock 18 (length 1) [ 53.897535][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.241489][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 54.475110][ T4727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4727 comm=syz.3.420 [ 54.635008][ T4736] IPv6: Can't replace route, no match found [ 55.192635][ T4742] loop0: detected capacity change from 0 to 512 [ 55.226042][ T4742] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.271677][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.294526][ T4746] loop3: detected capacity change from 0 to 8192 [ 55.316906][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 55.336087][ T4742] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.427: lblock 23 mapped to illegal pblock 18 (length 1) [ 55.337923][ T4746] net_ratelimit: 7 callbacks suppressed [ 55.337937][ T4746] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 55.396029][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.447933][ T4754] loop0: detected capacity change from 0 to 164 [ 55.464579][ T4754] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.503868][ T4754] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.540351][ T4754] Symlink component flag not implemented [ 55.546005][ T4754] Symlink component flag not implemented [ 55.564076][ T4754] Symlink component flag not implemented (7) [ 55.570110][ T4754] Symlink component flag not implemented (116) [ 56.130639][ T4772] loop4: detected capacity change from 0 to 512 [ 56.150799][ T4772] EXT4-fs: dax option not supported [ 57.282930][ T4794] loop1: detected capacity change from 0 to 8192 [ 57.295708][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 57.316398][ T4794] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 60.902184][ T29] audit: type=1326 audit(1765115232.975:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 60.983856][ T4806] loop1: detected capacity change from 0 to 512 [ 60.992602][ T29] audit: type=1326 audit(1765115233.005:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 61.015835][ T29] audit: type=1326 audit(1765115233.005:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 61.016380][ T4806] EXT4-fs: dax option not supported [ 61.039820][ T29] audit: type=1326 audit(1765115233.005:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 61.069872][ T4812] loop0: detected capacity change from 0 to 512 [ 61.094409][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.106271][ T4812] EXT4-fs: Ignoring removed nobh option [ 61.121370][ T4812] EXT4-fs (loop0): failed to initialize system zone (-117) [ 61.128777][ T4812] EXT4-fs (loop0): mount failed [ 61.170601][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.238372][ T4826] loop3: detected capacity change from 0 to 1024 [ 61.255272][ T4826] EXT4-fs: Ignoring removed orlov option [ 61.266180][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.283308][ T29] audit: type=1400 audit(1765115233.355:891): avc: denied { allowed } for pid=4827 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.304282][ T4826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.323182][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.347670][ T4808] chnl_net:caif_netlink_parms(): no params data found [ 61.366392][ T29] audit: type=1400 audit(1765115233.435:892): avc: denied { create } for pid=4825 comm="syz.3.453" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.386564][ T29] audit: type=1400 audit(1765115233.445:893): avc: denied { write } for pid=4825 comm="syz.3.453" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.400714][ T4826] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.408580][ T29] audit: type=1400 audit(1765115233.445:894): avc: denied { remove_name } for pid=4825 comm="syz.3.453" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.438992][ T29] audit: type=1400 audit(1765115233.445:895): avc: denied { rename } for pid=4825 comm="syz.3.453" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.460519][ T29] audit: type=1400 audit(1765115233.445:896): avc: denied { reparent } for pid=4825 comm="syz.3.453" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.496999][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 61.507993][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.570476][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.577673][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.598953][ T4808] bridge_slave_0: entered allmulticast mode [ 61.606115][ T4808] bridge_slave_0: entered promiscuous mode [ 61.612854][ T52] bridge_slave_1: left allmulticast mode [ 61.618532][ T52] bridge_slave_1: left promiscuous mode [ 61.624298][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.655669][ T52] bridge_slave_0: left allmulticast mode [ 61.662963][ T52] bridge_slave_0: left promiscuous mode [ 61.668718][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.828532][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.839419][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.849660][ T52] bond0 (unregistering): Released all slaves [ 61.867085][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.874261][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.881957][ T4808] bridge_slave_1: entered allmulticast mode [ 61.888818][ T4808] bridge_slave_1: entered promiscuous mode [ 61.890263][ T4889] loop3: detected capacity change from 0 to 512 [ 61.898120][ T4867] vlan2: entered allmulticast mode [ 61.906495][ T4867] dummy0: entered allmulticast mode [ 61.937462][ T4889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.966612][ T4889] EXT4-fs (loop3): 1 truncate cleaned up [ 61.969333][ T4808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.977484][ T4889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.995054][ T4808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.014664][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.022080][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.040555][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.048060][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.088890][ T52] veth1_macvtap: left promiscuous mode [ 62.096747][ T52] veth0_macvtap: left promiscuous mode [ 62.120620][ T52] veth1_vlan: left promiscuous mode [ 62.137976][ T52] veth0_vlan: left promiscuous mode [ 62.333080][ T52] team0 (unregistering): Port device team_slave_1 removed [ 62.345914][ T52] team0 (unregistering): Port device team_slave_0 removed [ 62.446621][ T4877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.477733][ T4962] loop1: detected capacity change from 0 to 512 [ 62.494696][ T4962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.519172][ T4808] team0: Port device team_slave_0 added [ 62.546960][ T4962] EXT4-fs (loop1): 1 truncate cleaned up [ 62.562296][ T4877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.582571][ T4962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.598629][ T4808] team0: Port device team_slave_1 added [ 62.627409][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.634517][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.660440][ T4808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.677872][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.684944][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.710880][ T4808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.787062][ T4877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.826665][ T4808] hsr_slave_0: entered promiscuous mode [ 62.834695][ T4808] hsr_slave_1: entered promiscuous mode [ 62.850103][ T4877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.932138][ T4928] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.954592][ T4928] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.971214][ T4877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.013376][ T4877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.037083][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.048142][ T4808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.057650][ T4808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.066525][ T4808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.075578][ T4808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.099046][ T4978] loop1: detected capacity change from 0 to 512 [ 63.116530][ T4978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.144470][ T4978] EXT4-fs (loop1): 1 truncate cleaned up [ 63.151131][ T4978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.166952][ T4808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.188977][ T4808] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.198573][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.205638][ T4928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.222577][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.229668][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.230185][ T4985] loop0: detected capacity change from 0 to 1024 [ 63.249429][ T4985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.260705][ T4985] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.271699][ T4985] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.283779][ T4985] JBD2: no valid journal superblock found [ 63.289524][ T4985] EXT4-fs (loop0): Could not load journal inode [ 63.327504][ T4989] netlink: 300 bytes leftover after parsing attributes in process `syz.0.481'. [ 63.385268][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.414632][ T4808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.490648][ T4997] loop1: detected capacity change from 0 to 8192 [ 63.548010][ T4808] veth0_vlan: entered promiscuous mode [ 63.556405][ T4808] veth1_vlan: entered promiscuous mode [ 63.574490][ T4808] veth0_macvtap: entered promiscuous mode [ 63.586838][ T4808] veth1_macvtap: entered promiscuous mode [ 63.599043][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.612395][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.629318][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.660466][ T4942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.677686][ T4942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.697229][ T4942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.742325][ T5021] loop5: detected capacity change from 0 to 164 [ 63.756492][ T5021] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.766812][ T5021] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.780405][ T5021] Symlink component flag not implemented [ 63.786072][ T5021] Symlink component flag not implemented [ 63.792145][ T5021] Symlink component flag not implemented (7) [ 63.798139][ T5021] Symlink component flag not implemented (116) [ 63.840729][ T5027] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 63.891928][ T5035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5035 comm=syz.0.494 [ 64.000623][ T133] Process accounting resumed [ 64.028034][ T5044] random: crng reseeded on system resumption [ 64.072131][ T5054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 64.081285][ T5049] vhci_hcd vhci_hcd.3: invalid port number 9 [ 64.091198][ T5054] gtp0: entered promiscuous mode [ 64.116137][ T5058] loop1: detected capacity change from 0 to 512 [ 64.155829][ T5058] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 64.173806][ T5058] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.504: iget: bad i_size value: 12154757448730 [ 64.189527][ T5058] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.504: couldn't read orphan inode 13 (err -117) [ 64.223046][ T5065] netlink: 96 bytes leftover after parsing attributes in process `syz.4.507'. [ 64.233603][ T5058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.267008][ T5058] ip6t_srh: unknown srh match flags 4000 [ 64.290719][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.358022][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'. [ 65.366886][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'. [ 65.404013][ T5124] loop5: detected capacity change from 0 to 2048 [ 65.421721][ T5124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.434603][ T5124] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.467596][ T4808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.486567][ T5132] loop1: detected capacity change from 0 to 128 [ 65.571754][ T5142] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 65.580502][ T5142] ref_ctr increment failed for inode: 0x47 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a42bcc0 [ 65.597357][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 65.632094][ T4925] bio_check_eod: 102 callbacks suppressed [ 65.632105][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.632105][ T4925] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 65.656210][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.656210][ T4925] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 65.672931][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.672931][ T4925] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 65.693104][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.693104][ T4925] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 65.706724][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.706724][ T4925] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 65.720821][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.720821][ T4925] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 65.725936][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 65.734464][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.734464][ T4925] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 65.748962][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 65.758670][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.758670][ T4925] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 65.785999][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.785999][ T4925] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 65.799524][ T4925] kworker/u8:50: attempt to access beyond end of device [ 65.799524][ T4925] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 65.844335][ T5157] veth1_to_batadv: entered promiscuous mode [ 65.872516][ T5157] veth1_to_batadv: left promiscuous mode [ 65.930974][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 65.930986][ T29] audit: type=1400 audit(1765115238.005:988): avc: denied { create } for pid=5168 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.959768][ T5169] lo speed is unknown, defaulting to 1000 [ 65.972342][ T5169] lo speed is unknown, defaulting to 1000 [ 65.978688][ T5169] lo speed is unknown, defaulting to 1000 [ 65.986078][ T5169] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.989949][ T29] audit: type=1400 audit(1765115238.035:989): avc: denied { write } for pid=5168 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.013087][ T29] audit: type=1400 audit(1765115238.035:990): avc: denied { execute } for pid=5170 comm="syz.1.551" path="/96/cpu.stat" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.013865][ T5169] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 66.070494][ T5169] lo speed is unknown, defaulting to 1000 [ 66.076573][ T5169] lo speed is unknown, defaulting to 1000 [ 66.089520][ T5169] lo speed is unknown, defaulting to 1000 [ 66.116742][ T29] audit: type=1400 audit(1765115238.185:991): avc: denied { read write } for pid=5168 comm="syz.4.550" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.118622][ T5169] lo speed is unknown, defaulting to 1000 [ 66.150249][ T5169] lo speed is unknown, defaulting to 1000 [ 66.156322][ T29] audit: type=1400 audit(1765115238.185:992): avc: denied { open } for pid=5168 comm="syz.4.550" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.179656][ T29] audit: type=1400 audit(1765115238.185:993): avc: denied { ioctl } for pid=5168 comm="syz.4.550" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.240944][ T29] audit: type=1326 audit(1765115238.315:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4d7df749 code=0x7ffc0000 [ 66.264452][ T29] audit: type=1326 audit(1765115238.315:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4d7df749 code=0x7ffc0000 [ 66.287698][ T29] audit: type=1326 audit(1765115238.315:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c4d7df749 code=0x7ffc0000 [ 66.310941][ T29] audit: type=1326 audit(1765115238.315:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.4.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4d7df749 code=0x7ffc0000 [ 66.389882][ T5199] netlink: 'syz.5.561': attribute type 7 has an invalid length. [ 66.397647][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 66.542329][ T5215] hub 9-0:1.0: USB hub found [ 66.547139][ T5215] hub 9-0:1.0: 8 ports detected [ 66.587707][ T5218] syzkaller0: entered promiscuous mode [ 66.593226][ T5218] syzkaller0: entered allmulticast mode [ 66.631100][ T5222] loop0: detected capacity change from 0 to 2048 [ 66.641758][ T5222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.655949][ T5222] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.571: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 66.684054][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.730404][ T5229] loop5: detected capacity change from 0 to 512 [ 66.740569][ T5229] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 66.757536][ T5229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 66.766506][ T5229] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.772958][ T5229] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.574: bad orphan inode 267 [ 66.783323][ T5229] EXT4-fs (loop5): Remounting filesystem read-only [ 66.790502][ T5229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 66.829439][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 66.839941][ T4808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 66.891806][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 67.009372][ T5252] netlink: 176 bytes leftover after parsing attributes in process `syz.4.582'. [ 67.091589][ T5260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.124125][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.163980][ T5271] veth0: entered promiscuous mode [ 67.169658][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.589'. [ 67.314656][ T5274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.590'. [ 67.324590][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.911304][ T5293] set_capacity_and_notify: 1 callbacks suppressed [ 67.911319][ T5293] loop0: detected capacity change from 0 to 2048 [ 67.960784][ T5293] loop0: p2 < > p4 [ 67.965719][ T5293] loop0: p4 size 262144 extends beyond EOD, truncated [ 68.046103][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 68.069340][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 68.083927][ T5312] syz_tun: entered promiscuous mode [ 68.092017][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 68.103191][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 68.118344][ T5312] syz_tun: left promiscuous mode [ 68.208591][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 68.222846][ T5326] loop4: detected capacity change from 0 to 512 [ 68.241792][ T5326] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.612: iget: bad extra_isize 90 (inode size 256) [ 68.265158][ T5326] EXT4-fs (loop4): Remounting filesystem read-only [ 68.278376][ T5326] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 68.311161][ T5326] EXT4-fs (loop4): 1 orphan inode deleted [ 68.317380][ T5326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.351791][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.420292][ T5339] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 68.461196][ T5339] lo speed is unknown, defaulting to 1000 [ 68.665532][ T5349] loop0: detected capacity change from 0 to 512 [ 68.683151][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.696030][ T5351] loop1: detected capacity change from 0 to 1024 [ 68.707028][ T5351] EXT4-fs: Ignoring removed orlov option [ 68.713206][ T5349] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.727511][ T5351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.733246][ T5349] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.624: corrupted inode contents [ 68.827757][ T5356] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 68.850772][ T5349] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.624: mark_inode_dirty error [ 68.942491][ T5349] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.624: corrupted inode contents [ 69.005044][ T5349] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.624: mark_inode_dirty error [ 69.058374][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.341819][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.351839][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.597741][ T5378] serio: Serial port ptm0 [ 69.738215][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.783254][ T5391] loop0: detected capacity change from 0 to 128 [ 69.821505][ T5391] pim6reg: entered allmulticast mode [ 69.831291][ T5391] pim6reg: left allmulticast mode [ 69.906742][ T5393] loop3: detected capacity change from 0 to 512 [ 69.929458][ T5393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.938295][ T5393] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.999327][ T5393] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.641: Allocating blocks 41-42 which overlap fs metadata [ 70.063331][ T5393] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.641: Failed to acquire dquot type 1 [ 70.100322][ T5393] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 70.140208][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.641: corrupted inode contents [ 70.182335][ T5399] loop4: detected capacity change from 0 to 1024 [ 70.190877][ T5399] EXT4-fs: Ignoring removed oldalloc option [ 70.196846][ T5399] EXT4-fs: Ignoring removed bh option [ 70.208186][ T5393] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.641: mark_inode_dirty error [ 70.231544][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.641: corrupted inode contents [ 70.239878][ T5399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.243524][ T5393] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.641: mark_inode_dirty error [ 70.286215][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.641: corrupted inode contents [ 70.310387][ T5393] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 70.347045][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.641: corrupted inode contents [ 70.376927][ T5393] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.641: mark_inode_dirty error [ 70.408967][ T5393] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 70.440170][ T5393] EXT4-fs (loop3): 1 truncate cleaned up [ 70.448053][ T5393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.570719][ T5393] EXT4-fs (loop3): shut down requested (2) [ 70.659416][ T5393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.902949][ T5420] loop1: detected capacity change from 0 to 8192 [ 70.967051][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 70.967065][ T29] audit: type=1400 audit(1765115243.035:1188): avc: denied { mounton } for pid=5419 comm="syz.1.651" path="/117/file0/bus" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 71.031029][ T5426] loop2: detected capacity change from 0 to 7 [ 71.295318][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.527584][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 71.529981][ T29] audit: type=1400 audit(1765115243.595:1189): avc: denied { module_load } for pid=5442 comm="syz.3.662" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 71.591536][ T5443] team0 (unregistering): Port device team_slave_0 removed [ 71.627495][ T5449] netlink: 72 bytes leftover after parsing attributes in process `syz.0.665'. [ 71.637122][ T5449] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 71.646602][ T5443] team0 (unregistering): Port device team_slave_1 removed [ 71.663238][ T5452] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 71.696495][ T5452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.722182][ T5452] veth5: entered promiscuous mode [ 71.740793][ T5452] bond2: (slave veth5): Enslaving as an active interface with a down link [ 71.793912][ T5457] bond2: entered allmulticast mode [ 71.841963][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 71.875004][ T5462] tipc: Started in network mode [ 71.879895][ T5462] tipc: Node identity ac14140f, cluster identity 4711 [ 71.908249][ T5464] netlink: 5 bytes leftover after parsing attributes in process `syz.0.671'. [ 71.917551][ T5462] tipc: New replicast peer: 255.255.255.83 [ 71.923442][ T5462] tipc: Enabled bearer , priority 10 [ 71.933469][ T5464] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 71.959805][ T5464] 0ªî{X¹¦: entered allmulticast mode [ 71.966761][ T5464] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 71.988526][ T5462] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.044625][ T5469] loop0: detected capacity change from 0 to 128 [ 72.167046][ T5469] bio_check_eod: 65 callbacks suppressed [ 72.167057][ T5469] syz.0.674: attempt to access beyond end of device [ 72.167057][ T5469] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 72.228297][ T5487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5487 comm=syz.1.680 [ 72.251781][ T5469] syz.0.674: attempt to access beyond end of device [ 72.251781][ T5469] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 72.285548][ T29] audit: type=1326 audit(1765115244.345:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.3.679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8a01af749 code=0x0 [ 72.311912][ T5469] syz.0.674: attempt to access beyond end of device [ 72.311912][ T5469] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 72.341630][ T5469] syz.0.674: attempt to access beyond end of device [ 72.341630][ T5469] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 72.376299][ T5494] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 72.392747][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 72.400105][ T5469] syz.0.674: attempt to access beyond end of device [ 72.400105][ T5469] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 72.440175][ T5469] syz.0.674: attempt to access beyond end of device [ 72.440175][ T5469] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 72.443271][ T5494] lo speed is unknown, defaulting to 1000 [ 72.473800][ T5469] syz.0.674: attempt to access beyond end of device [ 72.473800][ T5469] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 72.489373][ T5469] syz.0.674: attempt to access beyond end of device [ 72.489373][ T5469] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 72.505198][ T5469] syz.0.674: attempt to access beyond end of device [ 72.505198][ T5469] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 72.518727][ T5469] syz.0.674: attempt to access beyond end of device [ 72.518727][ T5469] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 72.740975][ T29] audit: type=1400 audit(1765115244.815:1191): avc: denied { create } for pid=5506 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.840272][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 72.941768][ T5516] lo speed is unknown, defaulting to 1000 [ 73.040091][ T36] tipc: Node number set to 2886997007 [ 73.040474][ T5520] set_capacity_and_notify: 1 callbacks suppressed [ 73.040492][ T5520] loop1: detected capacity change from 0 to 128 [ 73.096580][ T5511] bond0: entered promiscuous mode [ 73.101708][ T5511] bond_slave_0: entered promiscuous mode [ 73.107392][ T5511] bond_slave_1: entered promiscuous mode [ 73.144262][ T5511] dummy0: entered promiscuous mode [ 73.168181][ T5511] batadv0: entered promiscuous mode [ 73.189798][ T5511] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 73.301375][ T5533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5533 comm=wÞ£ÿ [ 73.313553][ T5533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5533 comm=wÞ£ÿ [ 73.346041][ T29] audit: type=1326 audit(1765115245.415:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 73.438302][ T29] audit: type=1326 audit(1765115245.415:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 73.461774][ T29] audit: type=1326 audit(1765115245.415:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 73.485168][ T29] audit: type=1326 audit(1765115245.415:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 73.508489][ T29] audit: type=1326 audit(1765115245.415:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 73.531711][ T29] audit: type=1326 audit(1765115245.415:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 73.561338][ T5540] loop4: detected capacity change from 0 to 128 [ 73.645283][ T5543] netlink: 19 bytes leftover after parsing attributes in process `syz.0.698'. [ 73.769316][ T5547] loop0: detected capacity change from 0 to 512 [ 73.809189][ T5547] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.817155][ T5547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 73.845476][ T5547] System zones: 0-1, 15-15, 18-18, 34-34 [ 73.860938][ T5547] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.874621][ T5547] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.889173][ T5547] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 73.934089][ T5547] EXT4-fs (loop0): 1 truncate cleaned up [ 73.959631][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.059079][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.081178][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.090557][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.103721][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.116348][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.146142][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.170715][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.189976][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.207635][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.260375][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.289838][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.299042][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.307744][ T5575] loop1: detected capacity change from 0 to 4096 [ 74.331255][ T5575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.344421][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.410736][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.440671][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.450617][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.459918][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.469278][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.478552][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.487930][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.497139][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.506375][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.515582][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.526746][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.540143][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.560566][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.590491][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.609088][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.618838][ T5579] loop1: detected capacity change from 0 to 256 [ 74.625496][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.640566][ T5579] FAT-fs (loop1): bogus number of FAT sectors [ 74.646047][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.646639][ T5579] FAT-fs (loop1): Can't find a valid FAT filesystem [ 74.690523][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.704218][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.720534][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.760659][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.782541][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.811679][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.852297][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.870638][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.903676][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 74.931084][ T5566] 9pnet_fd: p9_fd_create_tcp (5566): problem connecting socket to 127.0.0.1 [ 75.002609][ T5587] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 75.034988][ T5587] bond3: entered promiscuous mode [ 75.040077][ T5587] bond3: entered allmulticast mode [ 75.063475][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 75.094247][ T5587] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 75.111854][ T5590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 75.144775][ T5591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'. [ 75.154868][ T5587] bond3: (slave bridge4): making interface the new active one [ 75.162378][ T5587] bridge4: entered promiscuous mode [ 75.167710][ T5587] bridge4: entered allmulticast mode [ 75.191271][ T5587] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 75.233793][ T5591] bond3: left promiscuous mode [ 75.238581][ T5591] bridge4: left promiscuous mode [ 75.239198][ T5596] loop4: detected capacity change from 0 to 512 [ 75.243616][ T5591] bond3: left allmulticast mode [ 75.254696][ T5591] bridge4: left allmulticast mode [ 75.260838][ T5596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.311526][ T5596] EXT4-fs (loop4): 1 truncate cleaned up [ 75.320192][ T5591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.326171][ T5596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.385432][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 75.578622][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.621138][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 75.655303][ T5609] loop0: detected capacity change from 0 to 128 [ 75.665120][ T5609] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 75.681747][ T5609] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 75.702119][ T5606] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.721: checksumming directory block 0 [ 75.764574][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.826314][ T5612] loop4: detected capacity change from 0 to 8192 [ 75.913075][ T5614] syzkaller0: entered promiscuous mode [ 75.918589][ T5614] syzkaller0: entered allmulticast mode [ 75.947168][ T5616] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 75.964410][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.974421][ T5616] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.124834][ T5623] pim6reg1: entered promiscuous mode [ 76.130375][ T5623] pim6reg1: entered allmulticast mode [ 76.193922][ T5629] veth6: entered promiscuous mode [ 76.199049][ T5629] veth6: entered allmulticast mode [ 76.262261][ T5631] team0 (unregistering): Port device team_slave_0 removed [ 76.276978][ T5631] team0 (unregistering): Port device team_slave_1 removed [ 76.317622][ T5631] team0 (unregistering): Port device vlan2 removed [ 76.378781][ T5634] pim6reg: entered allmulticast mode [ 76.439838][ T5631] pim6reg: left allmulticast mode [ 76.769737][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 76.769752][ T29] audit: type=1400 audit(1765115248.835:1331): avc: denied { wake_alarm } for pid=5642 comm="syz.1.735" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.898730][ T5655] __nla_validate_parse: 2 callbacks suppressed [ 76.898747][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 76.953205][ T5655] netlink: 'syz.4.739': attribute type 5 has an invalid length. [ 76.960908][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 77.051057][ T5666] loop3: detected capacity change from 0 to 128 [ 77.103415][ T5671] geneve2: entered promiscuous mode [ 77.108762][ T5671] geneve2: entered allmulticast mode [ 77.119237][ T29] audit: type=1326 audit(1765115249.195:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.142568][ T29] audit: type=1326 audit(1765115249.195:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.165934][ T29] audit: type=1326 audit(1765115249.195:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.189180][ T29] audit: type=1326 audit(1765115249.195:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.219463][ T29] audit: type=1326 audit(1765115249.195:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.242789][ T29] audit: type=1326 audit(1765115249.195:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.266261][ T29] audit: type=1326 audit(1765115249.195:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.289496][ T29] audit: type=1326 audit(1765115249.195:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.312804][ T29] audit: type=1326 audit(1765115249.195:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 77.605562][ T5694] SELinux: failed to load policy [ 77.907872][ T5707] loop4: detected capacity change from 0 to 1024 [ 77.941605][ T5707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.971659][ T5707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 78.000131][ T5707] System zones: 0-1, 3-36 [ 78.034407][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.092543][ T5707] capability: warning: `syz.4.764' uses deprecated v2 capabilities in a way that may be insecure [ 78.109197][ T5715] loop0: detected capacity change from 0 to 128 [ 78.115894][ T5715] vfat: Unknown parameter '01777777777777777777777' [ 78.245461][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.345516][ T5724] lo speed is unknown, defaulting to 1000 [ 78.598470][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 78.661135][ T5731] bond0: (slave bond_slave_0): Releasing backup interface [ 78.670893][ T5731] bond0: (slave bond_slave_1): Releasing backup interface [ 78.692340][ T5731] team0: Port device team_slave_0 removed [ 78.700817][ T5731] team0: Port device team_slave_1 removed [ 78.707753][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.715170][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.736503][ T5731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.744076][ T5731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.753632][ T5731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.140669][ T5762] lo speed is unknown, defaulting to 1000 [ 79.249590][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 79.343778][ T5764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.646288][ T5771] bridge: RTM_NEWNEIGH with invalid ether address [ 79.669120][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 79.678656][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 79.699581][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 79.709865][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 79.831196][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 80.327489][ T5779] Set syz1 is full, maxelem 65536 reached [ 80.343561][ T5802] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.418104][ T5806] lo speed is unknown, defaulting to 1000 [ 80.433912][ T5802] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.492590][ T5802] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.582109][ T5802] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.691760][ T4919] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.704416][ T4919] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.723557][ T4919] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.746330][ T4919] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.103491][ T5884] loop4: detected capacity change from 0 to 1764 [ 81.329547][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 81.353384][ T5915] bond4: entered promiscuous mode [ 81.365963][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5919 comm=syz.4.819 [ 81.366587][ T5915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.400628][ T5922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.407759][ T5922] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 81.419599][ T5922] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 81.501856][ T5915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.509117][ T5915] IPv6: NLM_F_CREATE should be set when creating new route [ 81.516349][ T5915] IPv6: NLM_F_CREATE should be set when creating new route [ 81.547597][ T5915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.627681][ T5915] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 81.658269][ T5915] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 81.677363][ T5946] loop3: detected capacity change from 0 to 512 [ 81.719189][ T5946] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 81.750380][ T5946] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.829204][ T5957] gtp0: entered promiscuous mode [ 81.838463][ T5946] EXT4-fs (loop3): failed to initialize system zone (-117) [ 81.845916][ T5946] EXT4-fs (loop3): mount failed [ 81.887591][ T5946] loop3: detected capacity change from 0 to 512 [ 81.936225][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 81.936240][ T29] audit: type=1400 audit(1765115254.005:1418): avc: denied { remount } for pid=5935 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.183249][ T5992] __nla_validate_parse: 1 callbacks suppressed [ 82.183320][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 82.278966][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 82.298656][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 82.701939][ T5936] syz.3.822 (5936) used greatest stack depth: 7048 bytes left [ 82.779801][ T6032] loop0: detected capacity change from 0 to 1024 [ 82.794278][ T6032] EXT4-fs: Ignoring removed nobh option [ 82.854817][ T6038] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 82.856909][ T29] audit: type=1400 audit(1765115254.915:1419): avc: denied { read } for pid=6036 comm="syz.1.844" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.885026][ T29] audit: type=1400 audit(1765115254.915:1420): avc: denied { open } for pid=6036 comm="syz.1.844" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.904430][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 82.916356][ T6032] EXT4-fs: Ignoring removed orlov option [ 82.923412][ T6032] EXT4-fs: Ignoring removed i_version option [ 82.932524][ T6032] journal_path: Non-blockdev passed as './file1' [ 82.938935][ T6032] EXT4-fs: error: could not find journal device path [ 82.960582][ T6038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.040761][ T6038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6038 comm=syz.3.840 [ 83.042450][ T6042] bond1: (slave ip6gretap1): making interface the new active one [ 83.072168][ T6042] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 83.224389][ T6032] loop0: detected capacity change from 0 to 8192 [ 83.239506][ T6032] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.271323][ T29] audit: type=1326 audit(1765115255.345:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.302590][ T29] audit: type=1326 audit(1765115255.365:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.325912][ T29] audit: type=1326 audit(1765115255.365:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.349318][ T29] audit: type=1326 audit(1765115255.365:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.352492][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 83.372645][ T29] audit: type=1326 audit(1765115255.365:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.372676][ T29] audit: type=1326 audit(1765115255.365:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.412661][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 83.428253][ T29] audit: type=1326 audit(1765115255.365:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.3.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8a01af749 code=0x7ffc0000 [ 83.684443][ T6069] lo speed is unknown, defaulting to 1000 [ 83.703125][ T6087] loop4: detected capacity change from 0 to 512 [ 83.746536][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 83.755713][ T6087] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 83.775974][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.797306][ T6087] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.814943][ T6087] EXT4-fs (loop4): failed to initialize system zone (-117) [ 83.830418][ T6087] EXT4-fs (loop4): mount failed [ 83.839368][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.853845][ T6069] chnl_net:caif_netlink_parms(): no params data found [ 83.902842][ T6087] loop4: detected capacity change from 0 to 512 [ 83.925517][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.932648][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.944486][ T6102] loop3: detected capacity change from 0 to 2048 [ 83.957456][ T6069] bridge_slave_0: entered allmulticast mode [ 83.985057][ T6069] bridge_slave_0: entered promiscuous mode [ 84.002413][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.018555][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.080887][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.088063][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.095349][ T6102] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.137779][ T6069] bridge_slave_1: entered allmulticast mode [ 84.150612][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.160351][ T6069] bridge_slave_1: entered promiscuous mode [ 84.176770][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.202762][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.239610][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.268132][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 84.277085][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 84.321849][ T6125] syz_tun: entered allmulticast mode [ 84.329835][ T6069] team0: Port device team_slave_0 added [ 84.336998][ T6069] team0: Port device team_slave_1 added [ 84.343486][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 84.361326][ T6127] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 84.372090][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.379057][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.405072][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.417461][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.424471][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.450462][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.493195][ T6127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.503127][ T6125] syz_tun (unregistering): left allmulticast mode [ 84.539783][ T6127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6127 comm=syz.1.871 [ 84.573017][ T6067] syz.4.851 (6067) used greatest stack depth: 6120 bytes left [ 84.589822][ T6069] hsr_slave_0: entered promiscuous mode [ 84.596757][ T6069] hsr_slave_1: entered promiscuous mode [ 84.602708][ T6069] debugfs: 'hsr0' already exists in 'hsr' [ 84.608450][ T6069] Cannot create hsr debugfs directory [ 84.636209][ T12] bridge_slave_1: left allmulticast mode [ 84.641946][ T12] bridge_slave_1: left promiscuous mode [ 84.647635][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.704149][ T12] bridge_slave_0: left allmulticast mode [ 84.710295][ T12] bridge_slave_0: left promiscuous mode [ 84.716005][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.734075][ T36] Process accounting resumed [ 84.740800][ T6146] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 84.853255][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.862967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.873711][ T12] bond0 (unregistering): Released all slaves [ 84.887914][ T6144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.908532][ T6146] ipvlan2: entered promiscuous mode [ 84.925302][ T6146] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 84.933567][ T6146] bridge0: port 3(ipvlan2) entered blocking state [ 84.940092][ T6146] bridge0: port 3(ipvlan2) entered disabled state [ 84.946810][ T6146] ipvlan2: entered allmulticast mode [ 84.952270][ T6146] bond2: entered allmulticast mode [ 84.958141][ T6146] ipvlan2: left allmulticast mode [ 84.963211][ T6146] bond2: left allmulticast mode [ 84.970938][ T6154] binfmt_misc: register: failed to install interpreter file ./file0 [ 85.015112][ T12] hsr_slave_0: left promiscuous mode [ 85.021797][ T12] hsr_slave_1: left promiscuous mode [ 85.030265][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.037671][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.052835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.060329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.072044][ T12] veth1_macvtap: left promiscuous mode [ 85.077556][ T12] veth0_macvtap: left promiscuous mode [ 85.083161][ T12] veth1_vlan: left promiscuous mode [ 85.088377][ T12] veth0_vlan: left promiscuous mode [ 85.100633][ T6167] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 85.109326][ T6167] ref_ctr increment failed for inode: 0x3dd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a428d80 [ 85.168938][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.178964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.295508][ T6069] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.314011][ T6181] loop4: detected capacity change from 0 to 2048 [ 85.322896][ T6069] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.344439][ T6069] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.362970][ T6069] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.371366][ T6181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.402393][ T6181] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.898: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 85.423049][ T6185] loop1: detected capacity change from 0 to 1024 [ 85.423505][ T3407] Process accounting resumed [ 85.435937][ T6185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.455557][ T6185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 85.464377][ T6185] System zones: 0-1, 3-36 [ 85.476219][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.489769][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.501453][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.517657][ T6069] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.534210][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.541367][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.557317][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.564431][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.597628][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.643932][ T6201] loop1: detected capacity change from 0 to 512 [ 85.647881][ T6069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.660661][ T6069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.680879][ T6201] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.696518][ T6201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 85.705138][ T6201] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.711634][ T6201] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.890: bad orphan inode 267 [ 85.723711][ T6201] EXT4-fs (loop1): Remounting filesystem read-only [ 85.730956][ T6201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 85.778759][ T6206] netlink: 'syz.4.893': attribute type 4 has an invalid length. [ 85.826176][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.839156][ T6210] loop0: detected capacity change from 0 to 512 [ 85.849954][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 85.873344][ T6210] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.910813][ T6218] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 85.930599][ T6210] EXT4-fs (loop0): 1 truncate cleaned up [ 85.951857][ T6218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.958846][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.025972][ T6218] bond2: (slave ip6gretap1): making interface the new active one [ 86.037053][ T6218] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 86.124555][ T6218] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6218 comm=syz.4.896 [ 86.182910][ T6069] veth0_vlan: entered promiscuous mode [ 86.195341][ T6069] veth1_vlan: entered promiscuous mode [ 86.215058][ T6069] veth0_macvtap: entered promiscuous mode [ 86.222943][ T6069] veth1_macvtap: entered promiscuous mode [ 86.239344][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.263328][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.281878][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.316431][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.350837][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.377915][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413653][ T6254] syzkaller0: entered allmulticast mode [ 86.427150][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.438310][ T6254] syzkaller0: entered promiscuous mode [ 86.445875][ T6254] syzkaller0 (unregistering): left promiscuous mode [ 86.452555][ T6254] syzkaller0 (unregistering): left allmulticast mode [ 86.500639][ T6260] netlink: 'syz.3.906': attribute type 4 has an invalid length. [ 86.728244][ T6287] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.745447][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.769265][ T6287] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.787330][ T6298] loop6: detected capacity change from 0 to 512 [ 86.799251][ T6295] loop4: detected capacity change from 0 to 512 [ 86.808585][ T6298] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.816243][ T6295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.823745][ T6296] lo speed is unknown, defaulting to 1000 [ 86.848940][ T6298] EXT4-fs (loop6): 1 truncate cleaned up [ 86.855510][ T6295] EXT4-fs (loop4): 1 truncate cleaned up [ 86.855589][ T6298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.887880][ T6295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.900831][ T6305] random: crng reseeded on system resumption [ 86.931855][ T6287] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.028473][ T6311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.069155][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.094064][ T6320] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.119306][ T6318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.132370][ T6320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 87.152565][ T6318] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.921: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 87.159266][ T6320] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.175338][ T6320] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.922: bad orphan inode 267 [ 87.186666][ T6320] EXT4-fs (loop0): Remounting filesystem read-only [ 87.193909][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.194030][ T6320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 87.262163][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 87.323379][ T6329] __nla_validate_parse: 6 callbacks suppressed [ 87.323441][ T6329] netlink: 176 bytes leftover after parsing attributes in process `syz.3.926'. [ 87.398755][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.478874][ T6340] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.542876][ T6340] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.575085][ T6344] lo speed is unknown, defaulting to 1000 [ 87.593475][ T6350] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 87.611333][ T6351] random: crng reseeded on system resumption [ 87.624114][ T6350] bond3: (slave veth5): Enslaving as an active interface with a down link [ 87.638155][ T6340] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.649836][ T6350] bond3: entered promiscuous mode [ 87.655009][ T6350] bond3: entered allmulticast mode [ 87.661766][ T6350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.703047][ T6340] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.767283][ T4917] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.797920][ T4917] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.825910][ T4917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.843112][ T6287] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.855583][ T6364] EXT4-fs: Ignoring removed oldalloc option [ 87.867172][ T4917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.872776][ T6364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.903586][ T6364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.947678][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.981833][ T6366] loop0: p1 < > p4 [ 87.986267][ T6366] loop0: p4 size 8388608 extends beyond EOD, truncated [ 88.001245][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 88.001260][ T29] audit: type=1400 audit(1765115260.075:1569): avc: denied { read append } for pid=6365 comm="syz.0.941" name="loop0p4" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.030745][ T29] audit: type=1400 audit(1765115260.075:1570): avc: denied { open } for pid=6365 comm="syz.0.941" path="/dev/loop0p4" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.055247][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 88.068126][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 88.112382][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 88.112562][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 88.169902][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 88.225370][ T6371] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.953: iget: bad extra_isize 90 (inode size 256) [ 88.239697][ T6371] EXT4-fs (loop0): Remounting filesystem read-only [ 88.246481][ T6371] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 88.255647][ T6371] EXT4-fs (loop0): 1 orphan inode deleted [ 88.262061][ T6371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.286880][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.350733][ T6382] vhci_hcd vhci_hcd.3: invalid port number 9 [ 88.376339][ T6385] veth1_to_batadv: entered promiscuous mode [ 88.387501][ T6385] veth1_to_batadv: left promiscuous mode [ 88.397453][ T6388] lo speed is unknown, defaulting to 1000 [ 88.445042][ T6392] set_capacity_and_notify: 6 callbacks suppressed [ 88.445099][ T6392] loop4: detected capacity change from 0 to 512 [ 88.459185][ T6392] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 88.461465][ T6388] random: crng reseeded on system resumption [ 88.486145][ T6392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 88.494302][ T6392] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.500675][ T6392] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.950: bad orphan inode 267 [ 88.511394][ T6392] EXT4-fs (loop4): Remounting filesystem read-only [ 88.519448][ T6392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 88.562945][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 88.590522][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 88.612220][ T6399] syzkaller0: entered allmulticast mode [ 88.617973][ T6399] syzkaller0: entered promiscuous mode [ 88.626641][ T6399] syzkaller0 (unregistering): left promiscuous mode [ 88.629198][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 88.633267][ T6399] syzkaller0 (unregistering): left allmulticast mode [ 88.724918][ T29] audit: type=1400 audit(1765115260.795:1571): avc: denied { write } for pid=6404 comm="syz.3.955" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 88.780085][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.781403][ T3695] Bluetooth: hci0: command 0x1003 tx timeout [ 88.819896][ T6410] loop4: detected capacity change from 0 to 1024 [ 88.843466][ T6410] EXT4-fs: Ignoring removed oldalloc option [ 88.869191][ T6410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.902726][ T6410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.946637][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.962554][ T29] audit: type=1326 audit(1765115261.035:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 88.985922][ T29] audit: type=1326 audit(1765115261.035:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 89.009325][ T29] audit: type=1326 audit(1765115261.035:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5cc31f783 code=0x7ffc0000 [ 89.032633][ T29] audit: type=1326 audit(1765115261.035:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5cc31f783 code=0x7ffc0000 [ 89.055758][ T29] audit: type=1326 audit(1765115261.035:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 89.079503][ T29] audit: type=1326 audit(1765115261.155:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 89.102883][ T29] audit: type=1326 audit(1765115261.155:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cc31f749 code=0x7ffc0000 [ 89.150416][ T4919] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.174282][ T4919] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.186827][ T4919] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.195371][ T4919] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.206450][ T6069] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.246899][ T6424] netlink: 'syz.4.961': attribute type 29 has an invalid length. [ 89.321109][ T6427] loop4: detected capacity change from 0 to 1024 [ 89.335910][ T6427] EXT4-fs: Ignoring removed orlov option [ 89.342831][ T6430] loop1: detected capacity change from 0 to 2048 [ 89.360530][ T6427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.389358][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.404281][ T6430] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.964: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 89.447322][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.789287][ T6446] loop1: detected capacity change from 0 to 512 [ 89.866836][ T6446] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 89.962190][ T6446] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 89.991522][ T6446] EXT4-fs (loop1): failed to initialize system zone (-117) [ 90.052361][ T6446] EXT4-fs (loop1): mount failed [ 90.205946][ T6446] loop1: detected capacity change from 0 to 512 [ 90.314343][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.319718][ T6454] syz_tun: entered allmulticast mode [ 90.358649][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.983'. [ 90.371462][ T6454] syz_tun (unregistering): left allmulticast mode [ 90.389431][ T6456] syzkaller0: entered allmulticast mode [ 90.395394][ T6456] syzkaller0: entered promiscuous mode [ 90.403993][ T6456] syzkaller0 (unregistering): left promiscuous mode [ 90.410735][ T6456] syzkaller0 (unregistering): left allmulticast mode [ 90.514703][ T6461] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.560858][ T6463] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 90.569449][ T6464] loop4: detected capacity change from 0 to 512 [ 90.578290][ T6461] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.590290][ T6464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.618649][ T6464] EXT4-fs (loop4): 1 truncate cleaned up [ 90.634152][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.649883][ T6465] lo speed is unknown, defaulting to 1000 [ 90.730941][ T6471] netlink: 'syz.0.978': attribute type 29 has an invalid length. [ 90.764494][ T6461] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.777986][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 90.798776][ T6476] loop3: detected capacity change from 0 to 512 [ 90.812801][ T6477] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.823087][ T6473] loop1: detected capacity change from 0 to 512 [ 90.837808][ T6476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.856666][ T6476] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.861057][ T6473] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.979: iget: bad extra_isize 90 (inode size 256) [ 90.881363][ T6476] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.980: corrupted inode contents [ 90.889955][ T6473] EXT4-fs (loop1): Remounting filesystem read-only [ 90.896034][ T6476] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.980: mark_inode_dirty error [ 90.912593][ T6476] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.980: corrupted inode contents [ 90.916680][ T6473] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 90.926576][ T6476] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.980: mark_inode_dirty error [ 90.946748][ T6477] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.958165][ T6473] EXT4-fs (loop1): 1 orphan inode deleted [ 90.964351][ T6473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.981541][ T6461] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.002998][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.023430][ T6477] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.036148][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.058112][ T6477] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.075493][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.098887][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121460][ T4895] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.134491][ T4895] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.170971][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.236750][ T6493] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.258657][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.279712][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.288503][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296807][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.306596][ T6493] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.336944][ T6489] loop3: detected capacity change from 0 to 1024 [ 91.346420][ T6489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.359699][ T6493] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.378680][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.422890][ T6493] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.430630][ T4803] loop4: p1 < > p4 [ 91.436910][ T6501] syzkaller0: entered allmulticast mode [ 91.442750][ T4803] loop4: p4 size 8388608 extends beyond EOD, truncated [ 91.446881][ T6501] syzkaller0: entered promiscuous mode [ 91.457481][ T6499] loop4: p1 < > p4 [ 91.463109][ T6499] loop4: p4 size 8388608 extends beyond EOD, truncated [ 91.463416][ T6501] syzkaller0 (unregistering): left promiscuous mode [ 91.476768][ T6501] syzkaller0 (unregistering): left allmulticast mode [ 91.562046][ T4885] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.586701][ T4885] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600964][ T4885] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.613568][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.623357][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 91.623379][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 91.697636][ T6507] syzkaller0: entered promiscuous mode [ 91.703346][ T6507] syzkaller0: entered allmulticast mode [ 91.834411][ T6515] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.901094][ T4848] loop1: p1 < > p4 [ 91.905590][ T4848] loop1: p4 size 8388608 extends beyond EOD, truncated [ 91.915624][ T6517] loop1: p1 < > p4 [ 91.920195][ T6517] loop1: p4 size 8388608 extends beyond EOD, truncated [ 91.964913][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 91.965176][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 91.988300][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 91.988420][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 92.504392][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 92.525041][ T6520] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.994: iget: bad extra_isize 90 (inode size 256) [ 92.538681][ T6520] EXT4-fs (loop3): Remounting filesystem read-only [ 92.545542][ T6520] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 92.554688][ T6520] EXT4-fs (loop3): 1 orphan inode deleted [ 92.560907][ T6520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.586819][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.634291][ T4942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 92.642649][ T4942] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.674377][ T4942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 92.682801][ T4942] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.729902][ T4942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 92.738248][ T4942] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.746808][ T4942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 92.750579][ T12] bio_check_eod: 17 callbacks suppressed [ 92.750596][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.750596][ T12] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 92.755221][ T4942] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 92.783391][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.783391][ T12] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 92.796956][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.796956][ T12] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 92.797797][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.810656][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.810656][ T12] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 92.835911][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.835911][ T12] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 92.849513][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.849513][ T12] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 92.863063][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.863063][ T12] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 92.876476][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.876476][ T12] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 92.889852][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.889852][ T12] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 92.903234][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.903234][ T12] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 92.904240][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.050393][ T6548] syzkaller0: entered allmulticast mode [ 93.056543][ T6548] syzkaller0: entered promiscuous mode [ 93.064756][ T6548] syzkaller0 (unregistering): left promiscuous mode [ 93.071444][ T6548] syzkaller0 (unregistering): left allmulticast mode [ 93.113388][ T4848] loop3: p1 < > p4 [ 93.117820][ T4848] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.145099][ T6546] loop3: p1 < > p4 [ 93.156311][ T6546] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.238913][ T3004] loop3: p1 < > p4 [ 93.243169][ T4803] loop6: p2 < > p4 [ 93.243546][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.254590][ T4803] loop6: p4 size 262144 extends beyond EOD, truncated [ 93.269551][ T6552] loop6: p2 < > p4 [ 93.276663][ T6552] loop6: p4 size 262144 extends beyond EOD, truncated [ 93.311949][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 93.312067][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 93.348311][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 93.355469][ T4848] udevd[4848]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 93.378614][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.393245][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.400224][ T6560] EXT4-fs: Ignoring removed orlov option [ 93.419464][ T6560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.218814][ T6562] ================================================================== [ 94.226964][ T6562] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 94.234863][ T6562] [ 94.237172][ T6562] write to 0xffff88811a9e6164 of 4 bytes by task 6560 on cpu 1: [ 94.244783][ T6562] xas_set_mark+0x12b/0x140 [ 94.249281][ T6562] __folio_start_writeback+0x155/0x340 [ 94.254736][ T6562] ext4_bio_write_folio+0x5ad/0x9f0 [ 94.259931][ T6562] mpage_process_page_bufs+0x4a1/0x620 [ 94.265380][ T6562] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 94.271178][ T6562] ext4_do_writepages+0x9f6/0x27e0 [ 94.276303][ T6562] ext4_writepages+0x179/0x300 [ 94.281060][ T6562] do_writepages+0x1c6/0x310 [ 94.285658][ T6562] file_write_and_wait_range+0x156/0x2c0 [ 94.291280][ T6562] generic_buffers_fsync_noflush+0x45/0x130 [ 94.297173][ T6562] ext4_sync_file+0x1ab/0x690 [ 94.301837][ T6562] vfs_fsync_range+0x10d/0x130 [ 94.306599][ T6562] ext4_buffered_write_iter+0x34f/0x3c0 [ 94.312151][ T6562] ext4_file_write_iter+0x387/0xf60 [ 94.317364][ T6562] iter_file_splice_write+0x66b/0xa20 [ 94.322724][ T6562] direct_splice_actor+0x156/0x2a0 [ 94.327829][ T6562] splice_direct_to_actor+0x312/0x680 [ 94.333190][ T6562] do_splice_direct+0xda/0x150 [ 94.337948][ T6562] do_sendfile+0x380/0x650 [ 94.342356][ T6562] __x64_sys_sendfile64+0x105/0x150 [ 94.347551][ T6562] x64_sys_call+0x2db1/0x3000 [ 94.352223][ T6562] do_syscall_64+0xd8/0x2a0 [ 94.356735][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.362616][ T6562] [ 94.364949][ T6562] read to 0xffff88811a9e6164 of 4 bytes by task 6562 on cpu 0: [ 94.372481][ T6562] __writeback_single_inode+0x201/0x7c0 [ 94.378034][ T6562] writeback_single_inode+0x16d/0x3f0 [ 94.383402][ T6562] sync_inode_metadata+0x5b/0x90 [ 94.388338][ T6562] generic_buffers_fsync_noflush+0xee/0x130 [ 94.394225][ T6562] ext4_sync_file+0x1ab/0x690 [ 94.398887][ T6562] vfs_fsync_range+0x10d/0x130 [ 94.403638][ T6562] ext4_buffered_write_iter+0x34f/0x3c0 [ 94.409184][ T6562] ext4_file_write_iter+0x387/0xf60 [ 94.414384][ T6562] iter_file_splice_write+0x66b/0xa20 [ 94.419743][ T6562] direct_splice_actor+0x156/0x2a0 [ 94.424845][ T6562] splice_direct_to_actor+0x312/0x680 [ 94.430219][ T6562] do_splice_direct+0xda/0x150 [ 94.434974][ T6562] do_sendfile+0x380/0x650 [ 94.439393][ T6562] __x64_sys_sendfile64+0x105/0x150 [ 94.444582][ T6562] x64_sys_call+0x2db1/0x3000 [ 94.449258][ T6562] do_syscall_64+0xd8/0x2a0 [ 94.453758][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.459641][ T6562] [ 94.461953][ T6562] value changed: 0x0a000021 -> 0x04000021 [ 94.467660][ T6562] [ 94.469968][ T6562] Reported by Kernel Concurrency Sanitizer on: [ 94.476117][ T6562] CPU: 0 UID: 0 PID: 6562 Comm: syz.6.1014 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.487387][ T6562] Tainted: [W]=WARN [ 94.491175][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.501225][ T6562] ================================================================== [ 94.594045][ T6069] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.