last executing test programs: 2.454278878s ago: executing program 2 (id=1142): r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000500)=""/130, 0x82, 0x0, &(0x7f0000000340)=""/104, 0x68}}, 0x10) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8098, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8000, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1ff}, r1, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000007c0)=""/196}, 0x94) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) 1.919243411s ago: executing program 2 (id=1147): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71, 0x2e, 0x2e]}}, 0x0, 0x39}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) 1.759893287s ago: executing program 2 (id=1150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.556991436s ago: executing program 2 (id=1153): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x36fa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0xce) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x83}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 1.476051664s ago: executing program 2 (id=1154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000)=0x0, &(0x7f0000000a00)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x2}, 0x64) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 1.474939944s ago: executing program 4 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x3, 0x7, 0x9, 0x2, 0x3, 0x8, 0x379, 0x38, 0x1f5, 0x0, 0x8001, 0x20, 0x1, 0x3ff, 0x3, 0x3}, [{0x6474e551, 0x1000, 0x4, 0x0, 0x7ff, 0x7b, 0x9, 0x3}], "9f95ec80ca8ede0852e649411498711214819e4e4ece0eb7b222adaf9ed28fc3d7f0c09bc7286f380db4efbd70cec325e2be52ea2212f32cc1668304204520135eba17cbd3561a45c3f797739d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x4, 0x3}}, 0x2e) write$char_usb(r2, &(0x7f0000002600)="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", 0x92e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1.432772089s ago: executing program 4 (id=1156): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480), 0x66) r4 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) dup(0xffffffffffffffff) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000040)=0x1, 0x4) 1.431932229s ago: executing program 0 (id=1157): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1.368838855s ago: executing program 1 (id=1159): socket(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0xff0f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r3, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) 1.350923617s ago: executing program 0 (id=1160): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.312237481s ago: executing program 1 (id=1161): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x1, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x80000004}) 1.311422441s ago: executing program 1 (id=1162): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 1.285908764s ago: executing program 0 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mlockall(0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 1.254258256s ago: executing program 1 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r2 = syz_io_uring_setup(0x2241, &(0x7f0000000100)={0x0, 0x2e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 944.670217ms ago: executing program 3 (id=1165): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f00000013c0)) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x20000004, 0x9}, 0x44, 0x0, 0xffffffffffffffff, 0x70f, 0x9800000000000000, 0xff, 0x3, 0x80000000003, 0x0, 0x185, 0x40, 0x3ff, 0x4, 0x400000100, 0xf, 0xcf, 0x405, 0x9}}, 0xa0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x72, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)=[0x7, 0x4], 0x0, 0x0, 0x2}}, 0x40) creat(0x0, 0xecf86c37d530487f) close(r4) 860.779725ms ago: executing program 1 (id=1166): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 853.350406ms ago: executing program 3 (id=1167): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) setregid(0xffffffffffffffff, r1) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x9, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 767.885594ms ago: executing program 0 (id=1168): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x121880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x22, 0x2, 0x3) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 751.936676ms ago: executing program 0 (id=1169): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x4fee, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200)=[0xba], 0x1}, 0x20) 736.405327ms ago: executing program 3 (id=1170): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a01"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 723.968419ms ago: executing program 0 (id=1171): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x7, 0x7, 0x34, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x1, 0x700, 0x5, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 702.535781ms ago: executing program 3 (id=1172): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) 636.529877ms ago: executing program 2 (id=1173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010104}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) 614.852429ms ago: executing program 3 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r5, 0x0, 0x80000001}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r2, 0xffffffffffffffff, 0x0) 593.541941ms ago: executing program 3 (id=1175): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x12) r0 = syz_io_uring_setup(0x6713, &(0x7f0000000140)={0x0, 0x98f7}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x6, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x2b57, 0xae04, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x7}, 0x18) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, 0x0) rename(0x0, 0x0) 543.712636ms ago: executing program 4 (id=1176): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x0, 0x7}}], 0x58, 0x8000}, 0x0) 501.245781ms ago: executing program 4 (id=1177): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) r3 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 384.747942ms ago: executing program 4 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$pptp(0x18, 0x1, 0x2) io_uring_setup(0x70d1, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) close_range(r2, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 352.205775ms ago: executing program 4 (id=1179): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)) 0s ago: executing program 1 (id=1180): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x26, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r3 = eventfd2(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) kernel console output (not intermixed with test programs): configfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.374776][ T29] audit: type=1326 audit(1760596870.880:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 55.398011][ T29] audit: type=1326 audit(1760596870.880:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 55.421255][ T29] audit: type=1326 audit(1760596870.880:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 55.444653][ T29] audit: type=1326 audit(1760596870.880:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 55.467883][ T29] audit: type=1326 audit(1760596870.880:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 55.491088][ T29] audit: type=1326 audit(1760596870.880:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 55.519840][ T2342] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.541333][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.569842][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.591999][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.707397][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 55.739243][ T5046] syz.2.246 (5046) used greatest stack depth: 10008 bytes left [ 55.773666][ T5051] loop3: detected capacity change from 0 to 128 [ 55.800478][ T5051] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 55.808466][ T5051] FAT-fs (loop3): Filesystem has been set read-only [ 55.815270][ T5051] syz.3.248: attempt to access beyond end of device [ 55.815270][ T5051] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.017234][ T5069] loop4: detected capacity change from 0 to 8192 [ 56.960357][ T5124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 56.985178][ T5124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5124 comm=syz.2.274 [ 57.134248][ T5134] loop4: detected capacity change from 0 to 8192 [ 57.467367][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 58.332818][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 58.346320][ T5157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.374679][ T5158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 58.497417][ T5157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.597869][ T5157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.720496][ T5157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.812151][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.835136][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.848621][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863373][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.880484][ T5180] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 58.897458][ T5180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.919380][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 58.953679][ T5180] bond1 (unregistering): Released all slaves [ 59.040540][ T5191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.067930][ T5191] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 59.102280][ T5189] loop4: detected capacity change from 0 to 8192 [ 59.117867][ T5195] loop3: detected capacity change from 0 to 2048 [ 59.170584][ T5201] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 59.179980][ T5195] GPT:first_usable_lbas don't match. [ 59.185372][ T5195] GPT:34 != 290 [ 59.188843][ T5195] GPT: Use GNU Parted to correct GPT errors. [ 59.195217][ T5195] loop3: p1 p2 p3 [ 59.665219][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 59.694517][ T5234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.726820][ T5234] vlan0: entered allmulticast mode [ 59.732030][ T5234] bond1: entered allmulticast mode [ 59.762297][ T5237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 59.915062][ T5251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 59.939347][ T5254] loop3: detected capacity change from 0 to 1024 [ 59.957103][ T5256] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 59.982226][ T5251] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5251 comm=syz.0.321 [ 59.986391][ T5256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.011997][ T5254] EXT4-fs: Ignoring removed bh option [ 60.051516][ T5261] macvlan2: entered promiscuous mode [ 60.056973][ T5261] macvlan2: entered allmulticast mode [ 60.080272][ T5261] bond1: (slave macvlan2): Opening slave failed [ 60.106977][ T5254] EXT4-fs: inline encryption not supported [ 60.132379][ T5266] netlink: 88 bytes leftover after parsing attributes in process `syz.0.325'. [ 60.170816][ T5254] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.589005][ T5254] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.318: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.614131][ T5254] __quota_error: 325 callbacks suppressed [ 60.614151][ T5254] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 60.628335][ T5254] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.318: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.642612][ T5254] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 60.651488][ T5254] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.318: Failed to acquire dquot type 0 [ 60.666294][ T5254] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 60.676164][ T5254] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.318: mark_inode_dirty error [ 60.708192][ T5254] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 60.764704][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 60.781919][ T5254] EXT4-fs (loop3): 1 orphan inode deleted [ 60.788199][ T5254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.807513][ T12] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.868759][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 60.872491][ T5290] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.330'. [ 60.877262][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 60.949240][ T29] audit: type=1326 audit(1760596876.450:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5291 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 60.972665][ T29] audit: type=1326 audit(1760596876.450:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5291 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 60.996160][ T29] audit: type=1326 audit(1760596876.450:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5291 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 61.023343][ T5290] loop4: detected capacity change from 0 to 8192 [ 61.140768][ T29] audit: type=1400 audit(1760596876.550:1015): avc: denied { mount } for pid=5289 comm="syz.4.330" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 61.162751][ T29] audit: type=1400 audit(1760596876.620:1016): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 61.238195][ T29] audit: type=1400 audit(1760596876.750:1017): avc: denied { mount } for pid=5307 comm="syz.2.338" name="/" dev="ramfs" ino=8549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.298142][ T5310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.328610][ T5312] xfrm0: entered promiscuous mode [ 61.333933][ T5312] xfrm0: entered allmulticast mode [ 61.377211][ T5310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.398996][ T29] audit: type=1326 audit(1760596876.910:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.0.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 61.474443][ T5310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.504820][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.512472][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.520673][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.528414][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.558004][ T5310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.623913][ T313] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.636198][ T313] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.658161][ T313] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.686156][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.738014][ T5322] vhci_hcd: invalid port number 96 [ 61.743311][ T5322] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 61.851568][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 61.859449][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 61.860680][ T5332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 61.869555][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 61.887629][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 61.943097][ T5340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.349'. [ 61.970217][ T5340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.977813][ T5340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.024838][ T5340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.032290][ T5340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.131496][ T5346] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 62.394237][ T5364] loop4: detected capacity change from 0 to 512 [ 62.467427][ T5364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.491970][ T5364] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.200250][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.209504][ T3323] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 63.222597][ T3323] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 63.232569][ T3323] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 63.245781][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.260061][ T5377] loop2: detected capacity change from 0 to 764 [ 63.310522][ T5383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.320921][ T5383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.353724][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 63.362813][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 63.363085][ T5389] netlink: 'syz.1.367': attribute type 4 has an invalid length. [ 63.384402][ T5391] SELinux: Context Ü is not valid (left unmapped). [ 63.410486][ T5383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.421045][ T5383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.422683][ T5389] netlink: 'syz.1.367': attribute type 4 has an invalid length. [ 63.458654][ T5393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.475628][ T5393] vlan0: entered allmulticast mode [ 63.480780][ T5393] bond3: entered allmulticast mode [ 63.493094][ T5383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.494706][ T5398] loop1: detected capacity change from 0 to 1024 [ 63.503791][ T5383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.510769][ T5398] EXT4-fs: inline encryption not supported [ 63.526488][ T5398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.533167][ T5398] EXT4-fs: Ignoring removed bh option [ 63.544595][ T5398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.566179][ T5383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.576777][ T5383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.589458][ T5398] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 63.602556][ T5398] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.371: Allocating blocks 497-513 which overlap fs metadata [ 63.618808][ T5398] EXT4-fs (loop1): pa ffff8881071bd0e0: logic 16, phys. 145, len 23 [ 63.626947][ T5398] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 63.644260][ T313] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.648250][ T5398] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 63.652637][ T313] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.664720][ T5398] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.664720][ T5398] [ 63.664738][ T5398] EXT4-fs (loop1): Total free blocks count 0 [ 63.664754][ T5398] EXT4-fs (loop1): Free/Dirty block details [ 63.694612][ T5398] EXT4-fs (loop1): free_blocks=16 [ 63.699675][ T5398] EXT4-fs (loop1): dirty_blocks=0 [ 63.704726][ T5398] EXT4-fs (loop1): Block reservation details [ 63.710931][ T31] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.719179][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.728095][ T31] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.736406][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.745092][ T313] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.753364][ T313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.863817][ T5398] syz.1.371 (5398) used greatest stack depth: 9464 bytes left [ 63.896081][ T5411] xfrm0: entered promiscuous mode [ 63.901260][ T5411] xfrm0: entered allmulticast mode [ 63.917330][ T5415] netlink: 'syz.3.376': attribute type 4 has an invalid length. [ 63.938789][ T5415] netlink: 'syz.3.376': attribute type 4 has an invalid length. [ 64.014180][ T5429] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 64.028791][ T5429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.042075][ T5431] hsr_slave_0: left promiscuous mode [ 64.047984][ T5431] hsr_slave_1: left promiscuous mode [ 64.059955][ T5429] macvlan2: entered promiscuous mode [ 64.065372][ T5429] macvlan2: entered allmulticast mode [ 64.071796][ T5429] bond1: (slave macvlan2): Opening slave failed [ 64.344450][ T5447] capability: warning: `syz.1.390' uses deprecated v2 capabilities in a way that may be insecure [ 64.389352][ T5451] xt_connbytes: Forcing CT accounting to be enabled [ 64.396236][ T5451] set match dimension is over the limit! [ 65.620832][ T5486] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 65.620832][ T5486] program syz.1.413 not setting count and/or reply_len properly [ 65.733679][ T5497] loop1: detected capacity change from 0 to 512 [ 65.751994][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 65.752011][ T29] audit: type=1400 audit(1760596881.260:1115): avc: denied { write } for pid=5498 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.753728][ T5497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.790214][ T5497] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.807048][ T29] audit: type=1400 audit(1760596881.320:1116): avc: denied { write open } for pid=5496 comm="syz.1.408" path="/81/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.877256][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.974077][ T5511] tipc: Started in network mode [ 65.979142][ T5511] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 65.992294][ T5511] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 66.000967][ T5511] tipc: Enabled bearer , priority 10 [ 66.067801][ T5514] infiniband !yz!: set active [ 66.072633][ T5514] infiniband !yz!: added team_slave_0 [ 66.094100][ T5514] RDS/IB: !yz!: added [ 66.099562][ T5521] tipc: Started in network mode [ 66.104579][ T5521] tipc: Node identity fe12457760c3, cluster identity 4711 [ 66.111769][ T5521] tipc: Enabled bearer , priority 0 [ 66.145604][ T5521] syzkaller0: entered promiscuous mode [ 66.151225][ T5521] syzkaller0: entered allmulticast mode [ 66.157441][ T5521] tipc: Resetting bearer [ 66.167117][ T5520] tipc: Resetting bearer [ 66.188524][ T5520] tipc: Disabling bearer [ 66.195858][ T5525] __nla_validate_parse: 6 callbacks suppressed [ 66.195876][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 66.211260][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 66.260476][ T5527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.282350][ T5531] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.292929][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 66.324160][ T5527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.384783][ T5531] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.424913][ T5527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.474796][ T5531] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.504573][ T5527] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.534708][ T5531] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.580843][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.592313][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.604363][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.618050][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.631042][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.645073][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.657153][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.665613][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.706339][ T29] audit: type=1326 audit(1760596882.220:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.750484][ T29] audit: type=1326 audit(1760596882.220:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.773913][ T29] audit: type=1326 audit(1760596882.250:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.797281][ T29] audit: type=1326 audit(1760596882.250:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.820616][ T29] audit: type=1326 audit(1760596882.250:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.844116][ T29] audit: type=1326 audit(1760596882.250:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.867614][ T29] audit: type=1326 audit(1760596882.250:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.891009][ T29] audit: type=1326 audit(1760596882.250:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 66.965572][ T5551] loop2: detected capacity change from 0 to 1024 [ 66.972577][ T5551] EXT4-fs: inline encryption not supported [ 66.978961][ T5551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.985733][ T5551] EXT4-fs: Ignoring removed bh option [ 66.995811][ T5551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.014141][ T5551] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.022887][ T5551] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.428: Allocating blocks 497-513 which overlap fs metadata [ 67.039386][ T5551] EXT4-fs (loop2): pa ffff88810728c1c0: logic 16, phys. 145, len 23 [ 67.047555][ T5551] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 67.060426][ T5551] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 67.072719][ T5551] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.072719][ T5551] [ 67.082463][ T5551] EXT4-fs (loop2): Total free blocks count 0 [ 67.088490][ T5551] EXT4-fs (loop2): Free/Dirty block details [ 67.094428][ T5551] EXT4-fs (loop2): free_blocks=16 [ 67.099495][ T5551] EXT4-fs (loop2): dirty_blocks=0 [ 67.104586][ T5551] EXT4-fs (loop2): Block reservation details [ 67.113164][ T3416] tipc: Node number set to 1 [ 67.244527][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 67.289368][ T5568] loop1: detected capacity change from 0 to 4096 [ 67.311082][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.498842][ T5583] netlink: 'syz.2.441': attribute type 83 has an invalid length. [ 67.540546][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.612962][ T5592] loop4: detected capacity change from 0 to 1024 [ 67.619934][ T5592] EXT4-fs: inline encryption not supported [ 67.625916][ T5592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.632547][ T5592] EXT4-fs: Ignoring removed bh option [ 67.646035][ T5592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.662083][ T5592] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.671213][ T5592] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.444: Allocating blocks 497-513 which overlap fs metadata [ 67.686905][ T5592] EXT4-fs (loop4): pa ffff88810728c230: logic 16, phys. 145, len 23 [ 67.694933][ T5592] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 67.705395][ T5592] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 67.717888][ T5592] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.717888][ T5592] [ 67.727672][ T5592] EXT4-fs (loop4): Total free blocks count 0 [ 67.733737][ T5592] EXT4-fs (loop4): Free/Dirty block details [ 67.739644][ T5592] EXT4-fs (loop4): free_blocks=16 [ 67.744706][ T5592] EXT4-fs (loop4): dirty_blocks=0 [ 67.749746][ T5592] EXT4-fs (loop4): Block reservation details [ 67.872453][ T5601] loop4: detected capacity change from 0 to 512 [ 67.880862][ T5601] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.903997][ T5601] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.929781][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 68.968948][ T5637] loop4: detected capacity change from 0 to 128 [ 68.994281][ T5637] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.018880][ T5637] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.046480][ T5637] netlink: 444 bytes leftover after parsing attributes in process `syz.4.457'. [ 69.056004][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 69.079611][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.119023][ T5639] loop2: detected capacity change from 0 to 1024 [ 69.126628][ T5639] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 69.154934][ T5639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.249200][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.289523][ T5645] loop2: detected capacity change from 0 to 1024 [ 69.399548][ T5655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.462'. [ 69.408618][ T5655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.462'. [ 69.457921][ T5655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.462'. [ 69.466911][ T5655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.462'. [ 69.560264][ T5673] loop4: detected capacity change from 0 to 1024 [ 69.568036][ T5673] EXT4-fs: Ignoring removed bh option [ 69.574221][ T5673] EXT4-fs: inline encryption not supported [ 69.603209][ T5673] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.620487][ T5673] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.467: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.634892][ T5673] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.467: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.649216][ T5673] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.467: Failed to acquire dquot type 0 [ 69.660614][ T5673] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 69.670279][ T5673] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.467: mark_inode_dirty error [ 69.681936][ T5673] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 69.692149][ T5673] EXT4-fs (loop4): 1 orphan inode deleted [ 69.698792][ T5673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.716175][ T313] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.741862][ T5674] 9p: Unknown access argument ÿÿÿÿ: -22 [ 69.840067][ T313] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 71.876484][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 71.876505][ T29] audit: type=1326 audit(1760596887.390:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 71.908307][ T29] audit: type=1326 audit(1760596887.420:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 71.931821][ T29] audit: type=1326 audit(1760596887.420:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 71.955446][ T29] audit: type=1326 audit(1760596887.420:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 71.978967][ T29] audit: type=1326 audit(1760596887.420:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 71.987474][ T5707] loop3: detected capacity change from 0 to 2048 [ 72.002301][ T29] audit: type=1326 audit(1760596887.420:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 72.032116][ T29] audit: type=1326 audit(1760596887.420:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 72.055469][ T29] audit: type=1326 audit(1760596887.420:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 72.069774][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.078872][ T29] audit: type=1326 audit(1760596887.420:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 72.114271][ T29] audit: type=1326 audit(1760596887.420:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 72.139326][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.149123][ T3317] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 72.164127][ T3317] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 72.174597][ T3317] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 72.190483][ T3323] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 72.205534][ T3323] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 72.212620][ T5716] syzkaller0: entered promiscuous mode [ 72.219787][ T5716] syzkaller0: entered allmulticast mode [ 72.228712][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.300386][ T5724] loop2: detected capacity change from 0 to 512 [ 72.307617][ T5724] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.320738][ T5724] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.329801][ T5724] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 72.337759][ T5722] infiniband syz0: set down [ 72.338914][ T5724] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 72.342493][ T5722] infiniband syz0: added bond_slave_0 [ 72.352231][ T5724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 72.367758][ T5722] RDS/IB: syz0: added [ 72.376193][ T5724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.397278][ T5724] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 72.421089][ T5724] team0: Port device dummy0 added [ 72.440431][ T5724] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 72.455708][ T5731] loop4: detected capacity change from 0 to 1024 [ 72.465000][ T5724] team0: Port device dummy0 removed [ 72.472751][ T5724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.559593][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.662663][ T5740] vlan2: entered allmulticast mode [ 72.727704][ T5735] loop1: detected capacity change from 0 to 1024 [ 72.868494][ T5753] loop2: detected capacity change from 0 to 128 [ 72.875156][ T5735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.921691][ T5753] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.964662][ T5753] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.106081][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.125185][ T5735] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.488: Allocating blocks 449-513 which overlap fs metadata [ 73.149441][ T5734] EXT4-fs (loop1): pa ffff8881071bd5b0: logic 48, phys. 177, len 21 [ 73.157493][ T5734] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 73.185552][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.255965][ T5774] loop2: detected capacity change from 0 to 1024 [ 73.270320][ T5774] EXT4-fs: Ignoring removed bh option [ 73.281296][ T5774] EXT4-fs: inline encryption not supported [ 73.294836][ T5774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.317686][ T5774] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.500: lblock 2 mapped to illegal pblock 2 (length 1) [ 73.345995][ T5774] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.500: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.360249][ T5774] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.500: Failed to acquire dquot type 0 [ 73.371790][ T5774] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 73.381392][ T5774] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.500: mark_inode_dirty error [ 73.392832][ T5774] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 73.403144][ T5774] EXT4-fs (loop2): 1 orphan inode deleted [ 73.409338][ T5774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.433234][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.447822][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 74.815144][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.826640][ T3312] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 74.840056][ T3312] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 74.851322][ T3312] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 74.914273][ T5779] bridge0: entered promiscuous mode [ 74.921543][ T5779] macvtap1: entered allmulticast mode [ 74.927836][ T5779] bridge0: entered allmulticast mode [ 74.953011][ T5779] batman_adv: batadv0: Adding interface: macvtap1 [ 74.959769][ T5779] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.986198][ T5779] batman_adv: batadv0: Interface activated: macvtap1 [ 75.095663][ T5795] loop3: detected capacity change from 0 to 164 [ 75.312050][ T5803] netlink: 'syz.4.509': attribute type 4 has an invalid length. [ 75.319765][ T5803] __nla_validate_parse: 5 callbacks suppressed [ 75.319830][ T5803] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.509'. [ 75.363689][ T5805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5805 comm=syz.1.510 [ 75.376163][ T5805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5805 comm=syz.1.510 [ 75.818958][ T5815] loop3: detected capacity change from 0 to 1024 [ 75.868862][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 75.905175][ T5815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.959314][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 76.001274][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.008519][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.042545][ T5829] loop4: detected capacity change from 0 to 1024 [ 76.136894][ T5815] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.515: Allocating blocks 449-513 which overlap fs metadata [ 76.168947][ T5814] EXT4-fs (loop3): pa ffff8881071bd620: logic 48, phys. 177, len 21 [ 76.177052][ T5814] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 76.235417][ T5835] netlink: 'syz.0.523': attribute type 4 has an invalid length. [ 76.243187][ T5835] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.523'. [ 76.274503][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.430025][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 76.438978][ T5847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'. [ 76.580297][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 76.781104][ T5855] loop1: detected capacity change from 0 to 512 [ 76.795833][ T5855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.816853][ T5855] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.865403][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.923250][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 76.923268][ T29] audit: type=1326 audit(1760596892.420:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 76.952907][ T29] audit: type=1326 audit(1760596892.420:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 76.976163][ T29] audit: type=1326 audit(1760596892.420:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 76.999502][ T29] audit: type=1326 audit(1760596892.420:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 77.022754][ T29] audit: type=1326 audit(1760596892.420:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 77.046142][ T29] audit: type=1326 audit(1760596892.420:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 77.069482][ T29] audit: type=1326 audit(1760596892.430:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 77.092772][ T29] audit: type=1326 audit(1760596892.430:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 77.116027][ T29] audit: type=1326 audit(1760596892.430:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 77.203323][ T29] audit: type=1326 audit(1760596892.540:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 77.244704][ T5861] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 77.278973][ T5861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.372545][ T5861] bond4: (slave ip6gretap0): making interface the new active one [ 77.405112][ T5861] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 77.425032][ T5898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5898 comm=syz.2.531 [ 77.554728][ T5939] netlink: 332 bytes leftover after parsing attributes in process `syz.2.537'. [ 77.572832][ T5938] bridge_slave_0: left promiscuous mode [ 77.578634][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.604978][ T5938] bridge_slave_1: left allmulticast mode [ 77.610698][ T5938] bridge_slave_1: left promiscuous mode [ 77.616757][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.643696][ T5938] bond0: (slave bond_slave_0): Releasing backup interface [ 77.678164][ T5938] bond0: (slave bond_slave_1): Releasing backup interface [ 77.716767][ T5938] team0: Port device team_slave_0 removed [ 77.756682][ T5938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.873916][ T5945] netlink: 'syz.2.540': attribute type 30 has an invalid length. [ 78.108334][ T5958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.543'. [ 78.117333][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 78.328160][ T5963] vlan1: entered promiscuous mode [ 78.333287][ T5963] bond0: entered promiscuous mode [ 78.338473][ T5963] vlan1: entered allmulticast mode [ 78.343631][ T5963] bond0: entered allmulticast mode [ 78.356704][ T5963] bond0: (slave geneve2): refused to change device type [ 78.566458][ T5984] loop4: detected capacity change from 0 to 512 [ 78.574343][ T5984] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 78.582357][ T5984] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 78.591045][ T5984] EXT4-fs (loop4): 1 truncate cleaned up [ 78.597252][ T5984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.575040][ T6016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6016 comm=syz.2.566 [ 79.683781][ T6016] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 80.323525][ T6053] loop2: detected capacity change from 0 to 512 [ 80.354604][ T6053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.367322][ T6053] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.482996][ T6059] ipvlan2: entered promiscuous mode [ 80.498209][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.523317][ T5986] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 80.921110][ T6086] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.996222][ T6086] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.011121][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.057765][ T6086] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.125789][ T6086] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.232388][ T5873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.256646][ T5873] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.279630][ T5873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.297997][ T5873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.500575][ T6105] Set syz1 is full, maxelem 65536 reached [ 81.548990][ T6120] __nla_validate_parse: 3 callbacks suppressed [ 81.549009][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 81.582010][ T6120] team0 (unregistering): Port device team_slave_0 removed [ 81.597233][ T6120] team0 (unregistering): Port device team_slave_1 removed [ 81.637257][ T6126] ipvlan2: entered promiscuous mode [ 81.709101][ T6133] netlink: 'syz.3.611': attribute type 30 has an invalid length. [ 81.934964][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 81.951155][ T6145] bridge_slave_1: left allmulticast mode [ 81.956929][ T6145] bridge_slave_1: left promiscuous mode [ 81.962953][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.985563][ T6145] bridge_slave_0: left allmulticast mode [ 81.991291][ T6145] bridge_slave_0: left promiscuous mode [ 81.997067][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.063790][ T29] kauditd_printk_skb: 764 callbacks suppressed [ 82.063806][ T29] audit: type=1326 audit(1760596897.580:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 82.106015][ T6159] loop3: detected capacity change from 0 to 512 [ 82.113361][ T6159] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.123861][ T29] audit: type=1326 audit(1760596897.610:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 82.147297][ T29] audit: type=1326 audit(1760596897.610:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff991d1ef03 code=0x7ffc0000 [ 82.170691][ T29] audit: type=1326 audit(1760596897.620:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff991d1d97f code=0x7ffc0000 [ 82.180845][ T6163] loop4: detected capacity change from 0 to 512 [ 82.193945][ T29] audit: type=1326 audit(1760596897.620:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff991d1ef57 code=0x7ffc0000 [ 82.223462][ T29] audit: type=1326 audit(1760596897.620:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff991d1d710 code=0x7ffc0000 [ 82.246889][ T29] audit: type=1326 audit(1760596897.620:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff991d1eacb code=0x7ffc0000 [ 82.270129][ T29] audit: type=1326 audit(1760596897.620:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff991d1db2a code=0x7ffc0000 [ 82.293308][ T29] audit: type=1326 audit(1760596897.620:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff991d1db2a code=0x7ffc0000 [ 82.297464][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 82.316924][ T29] audit: type=1326 audit(1760596897.620:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6158 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff991d1d617 code=0x7ffc0000 [ 82.326237][ T6166] IPVS: Unknown mcast interface: ipvlan1 [ 82.356049][ T6159] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.370065][ T6159] EXT4-fs (loop3): 1 truncate cleaned up [ 82.376766][ T6159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.414297][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.428262][ T6171] veth0: entered promiscuous mode [ 82.439773][ T6170] veth0: left promiscuous mode [ 82.481806][ T6178] ipvlan2: entered promiscuous mode [ 82.534625][ T6183] loop3: detected capacity change from 0 to 4096 [ 82.541606][ T6183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.542739][ T6181] loop2: detected capacity change from 0 to 128 [ 82.556863][ T6183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.574738][ T6181] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 82.582617][ T6181] FAT-fs (loop2): Filesystem has been set read-only [ 82.596673][ T6181] syz.2.626: attempt to access beyond end of device [ 82.596673][ T6181] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 82.634055][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 82.643070][ T6189] loop1: detected capacity change from 0 to 512 [ 82.649111][ T6191] team1: entered promiscuous mode [ 82.654641][ T6191] team1: entered allmulticast mode [ 82.664697][ T6191] 8021q: adding VLAN 0 to HW filter on device team1 [ 82.681129][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.709414][ T6189] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.839970][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.858519][ T6207] loop4: detected capacity change from 0 to 512 [ 82.879891][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.889476][ T6207] EXT4-fs (loop4): too many log groups per flexible block group [ 82.915382][ T6207] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 82.922376][ T6207] EXT4-fs (loop4): mount failed [ 83.043257][ T6228] loop2: detected capacity change from 0 to 512 [ 83.049916][ T6228] EXT4-fs: Ignoring removed bh option [ 83.060677][ T6228] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.092918][ T6228] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 83.113426][ T6228] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 83.132938][ T6239] loop4: detected capacity change from 0 to 512 [ 83.139434][ T6228] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.147511][ T6228] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.637: Failed to acquire dquot type 1 [ 83.160329][ T6239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.172220][ T6228] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.637: Invalid block bitmap block 0 in block_group 0 [ 83.201422][ T6239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 83.219878][ T6247] ALSA: seq fatal error: cannot create timer (-19) [ 83.236381][ T6239] EXT4-fs (loop4): 1 truncate cleaned up [ 83.242447][ T6239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.255932][ T6228] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.637: Invalid block bitmap block 0 in block_group 0 [ 83.276667][ T6228] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.637: Invalid block bitmap block 0 in block_group 0 [ 83.294527][ T6239] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.305926][ T6228] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.637: Failed to acquire dquot type 1 [ 83.326342][ T6228] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.637: Failed to acquire dquot type 1 [ 83.326775][ T6228] EXT4-fs (loop2): 1 orphan inode deleted [ 83.362141][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.373325][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.438387][ T6228] syz.2.637 (6228) used greatest stack depth: 8992 bytes left [ 83.464393][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.523919][ T6270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.634360][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 83.940133][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 84.233640][ T6344] loop4: detected capacity change from 0 to 1024 [ 84.253885][ T6344] EXT4-fs (loop4): filesystem is read-only [ 84.265638][ T6344] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.290893][ T6344] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.307889][ T6344] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.666: inode #1: comm syz.4.666: iget: illegal inode # [ 84.711907][ T6344] EXT4-fs (loop4): no journal found [ 84.717308][ T6344] EXT4-fs (loop4): can't get journal size [ 84.894623][ T6344] EXT4-fs (loop4): failed to initialize system zone (-22) [ 84.954069][ T6344] EXT4-fs (loop4): mount failed [ 84.963763][ T6329] loop3: detected capacity change from 0 to 32768 [ 85.363284][ T6329] loop3: p1 p3 < > [ 85.637295][ T6322] syz.3.650 (6322) used greatest stack depth: 7240 bytes left [ 86.136504][ T6381] syzkaller0: entered promiscuous mode [ 86.142001][ T6381] syzkaller0: entered allmulticast mode [ 86.570209][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 86.579229][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 86.810330][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.679'. [ 86.944460][ T6414] syzkaller0: entered promiscuous mode [ 86.950032][ T6414] syzkaller0: entered allmulticast mode [ 87.093440][ T6421] pim6reg1: entered promiscuous mode [ 87.098783][ T6421] pim6reg1: entered allmulticast mode [ 87.400671][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 87.435678][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 87.435761][ T29] audit: type=1326 audit(1760596902.950:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.478363][ T6430] loop1: detected capacity change from 0 to 512 [ 87.484892][ T29] audit: type=1326 audit(1760596902.980:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.508320][ T29] audit: type=1326 audit(1760596902.980:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.531604][ T29] audit: type=1326 audit(1760596902.980:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.554985][ T29] audit: type=1326 audit(1760596902.980:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.578430][ T29] audit: type=1326 audit(1760596902.980:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.601764][ T29] audit: type=1326 audit(1760596902.980:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.625105][ T29] audit: type=1326 audit(1760596902.980:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.648498][ T29] audit: type=1326 audit(1760596902.980:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.671952][ T29] audit: type=1326 audit(1760596902.980:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 87.703196][ T6430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.726411][ T6430] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.742127][ T6430] EXT4-fs (loop1): 1 truncate cleaned up [ 87.751863][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.765407][ T6436] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.800804][ T6430] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.819413][ T6438] loop3: detected capacity change from 0 to 512 [ 87.826554][ T6438] EXT4-fs: Ignoring removed bh option [ 87.832041][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.840750][ T6436] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.860917][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.870217][ T6438] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 87.890274][ T6438] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.899009][ T6438] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.905773][ T6438] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.691: Failed to acquire dquot type 1 [ 87.917448][ T6438] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.691: Invalid block bitmap block 0 in block_group 0 [ 87.932647][ T6436] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.944210][ T6438] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.691: Invalid block bitmap block 0 in block_group 0 [ 87.957945][ T6438] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.691: Invalid block bitmap block 0 in block_group 0 [ 87.972023][ T6438] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.691: Failed to acquire dquot type 1 [ 87.983600][ T6438] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.691: Failed to acquire dquot type 1 [ 87.996694][ T6436] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.008106][ T6438] EXT4-fs (loop3): 1 orphan inode deleted [ 88.014525][ T6438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.043617][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.065483][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.077000][ T5920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.080855][ T5920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.094794][ T5920] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.153531][ T6444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.441334][ T6462] syzkaller0: entered promiscuous mode [ 88.446899][ T6462] syzkaller0: entered allmulticast mode [ 88.503243][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'. [ 88.512315][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'. [ 88.681302][ T6478] loop1: detected capacity change from 0 to 1024 [ 88.697231][ T6476] loop4: detected capacity change from 0 to 512 [ 88.704638][ T6478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.720655][ T6476] EXT4-fs: Ignoring removed bh option [ 88.767391][ T6476] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.786375][ T6476] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 88.812738][ T6476] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 88.872152][ T6476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.885537][ T6485] sd 0:0:1:0: device reset [ 88.902836][ T6484] bridge_slave_1: left allmulticast mode [ 88.908573][ T6484] bridge_slave_1: left promiscuous mode [ 88.914470][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.925858][ T6476] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.704: Failed to acquire dquot type 1 [ 88.937907][ T6476] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.704: Invalid block bitmap block 0 in block_group 0 [ 88.960223][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.969113][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.976980][ T6476] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.704: Invalid block bitmap block 0 in block_group 0 [ 88.990670][ T6476] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.704: Invalid block bitmap block 0 in block_group 0 [ 88.993231][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.005117][ T6476] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.704: Failed to acquire dquot type 1 [ 89.023689][ T6476] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.704: Failed to acquire dquot type 1 [ 89.044524][ T6476] EXT4-fs (loop4): 1 orphan inode deleted [ 89.045388][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.057433][ T6476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.089797][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.121132][ T6484] batman_adv: batadv0: Interface deactivated: macvtap1 [ 89.128314][ T6484] bridge0: left allmulticast mode [ 89.134127][ T6484] batman_adv: batadv0: Removing interface: macvtap1 [ 89.142888][ T31] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.151318][ T31] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.167812][ T6492] loop4: detected capacity change from 0 to 1024 [ 89.177680][ T31] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.186098][ T31] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.195876][ T6492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.215885][ T31] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.224448][ T31] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.240841][ T31] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.249284][ T31] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.266020][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 89.297620][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.460878][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.524757][ T6508] loop1: detected capacity change from 0 to 4096 [ 89.531922][ T6508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.544220][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.742040][ T6516] loop3: detected capacity change from 0 to 1024 [ 89.749075][ T6516] EXT4-fs: Ignoring removed bh option [ 89.754605][ T6516] EXT4-fs: inline encryption not supported [ 89.853822][ T6516] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.867369][ T6516] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.715: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.881557][ T6516] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.715: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.895999][ T6516] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.715: Failed to acquire dquot type 0 [ 89.907432][ T6516] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 89.917096][ T6516] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.715: mark_inode_dirty error [ 89.928557][ T6516] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 89.938827][ T6516] EXT4-fs (loop3): 1 orphan inode deleted [ 89.945696][ T6516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.958358][ T5881] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.994635][ T5881] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:20: Failed to release dquot type 0 [ 91.084920][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.592331][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 91.717202][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.730392][ T3323] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 91.770125][ T6538] loop1: detected capacity change from 0 to 1024 [ 91.777149][ T6538] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.788959][ T3323] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 91.794570][ T6538] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.718: Invalid block bitmap block 0 in block_group 0 [ 91.813433][ T6538] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.718: Failed to acquire dquot type 0 [ 91.830099][ T3323] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 91.845630][ T6538] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.718: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.908154][ T6538] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.718: Invalid inode bitmap blk 0 in block_group 0 [ 91.926601][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 91.980472][ T6538] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 92.006103][ T6538] EXT4-fs (loop1): 1 orphan inode deleted [ 92.016314][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.040761][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 92.268986][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.493416][ T6576] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 92.510118][ T6574] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.515091][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 92.547517][ T6581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.739'. [ 92.557291][ T6576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.565925][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 92.566011][ T29] audit: type=1400 audit(1760596908.080:3495): avc: denied { name_bind } for pid=6580 comm="syz.0.739" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 92.609766][ T6585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.622994][ T6585] bond5: (slave geneve2): making interface the new active one [ 92.631452][ T6585] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 92.641638][ T6574] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.696223][ T5930] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 92.707969][ T5930] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 92.722730][ T5930] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 92.739939][ T5930] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 92.750037][ T6574] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.780796][ T6602] loop3: detected capacity change from 0 to 512 [ 92.789523][ T6574] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.827429][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.840256][ T6602] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.862996][ T6602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.747: bg 0: block 64: padding at end of block bitmap is not set [ 92.926041][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.934448][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.942663][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.977511][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.997391][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.006204][ T6618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.753'. [ 93.188885][ T6629] tipc: New replicast peer: 10.1.1.2 [ 93.194277][ T6629] tipc: Enabled bearer , priority 10 [ 93.286242][ T6637] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.436018][ T6637] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.490687][ T6639] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.760'. [ 93.505998][ T6637] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.585569][ T6637] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.650394][ T5914] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.662720][ T5914] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.688962][ T6645] loop4: detected capacity change from 0 to 512 [ 93.704931][ T6644] netlink: 3 bytes leftover after parsing attributes in process `syz.3.761'. [ 93.705054][ T5914] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722353][ T6644] 1ªX¹¦À: renamed from 60ªX¹¦À [ 93.728312][ T6645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.741264][ T6644] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 93.752390][ T6645] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.767459][ T5914] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.781948][ T6645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.762: bg 0: block 64: padding at end of block bitmap is not set [ 93.804353][ T29] audit: type=1400 audit(1760596909.320:3496): avc: denied { create } for pid=6648 comm="syz.0.763" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.826500][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.838975][ T29] audit: type=1400 audit(1760596909.350:3497): avc: denied { mounton } for pid=6648 comm="syz.0.763" path="/197/file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.884761][ T6651] netlink: 96 bytes leftover after parsing attributes in process `syz.4.764'. [ 94.206781][ T29] audit: type=1400 audit(1760596909.720:3498): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.241999][ T6666] loop1: detected capacity change from 0 to 512 [ 94.251607][ T6666] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.260719][ T29] audit: type=1400 audit(1760596909.770:3499): avc: denied { ioctl } for pid=6667 comm="syz.0.769" path="socket:[13935]" dev="sockfs" ino=13935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.287747][ T6666] EXT4-fs: test_dummy_encryption option not supported [ 94.309954][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 94.318908][ T3400] tipc: Node number set to 2780495126 [ 94.339767][ T6674] loop1: detected capacity change from 0 to 512 [ 94.357618][ T6674] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.772: error while reading EA inode 32 err=-116 [ 94.382299][ T6674] EXT4-fs (loop1): Remounting filesystem read-only [ 94.389602][ T6674] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 94.401783][ T6674] EXT4-fs (loop1): 1 orphan inode deleted [ 94.408492][ T6674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.437743][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.527945][ T6684] loop1: detected capacity change from 0 to 512 [ 94.567133][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.581257][ T6684] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.601768][ T6684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.775: bg 0: block 64: padding at end of block bitmap is not set [ 94.667273][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.808120][ T29] audit: type=1400 audit(1760596910.310:3500): avc: denied { connect } for pid=6693 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.854400][ T29] audit: type=1326 audit(1760596910.370:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x50000 [ 94.903244][ T29] audit: type=1326 audit(1760596910.370:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f88c8a5eec9 code=0x50000 [ 94.926376][ T29] audit: type=1326 audit(1760596910.370:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88c8a91785 code=0x50000 [ 94.949533][ T29] audit: type=1326 audit(1760596910.370:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6699 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f88c8a5eec9 code=0x50000 [ 95.567488][ T6713] loop1: detected capacity change from 0 to 128 [ 95.575151][ T6713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 95.613865][ T6713] System zones: 1-3, 19-19, 35-36 [ 95.637038][ T6713] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.678610][ T6713] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.805022][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.288251][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 96.367556][ T6738] bridge: RTM_NEWNEIGH with invalid ether address [ 96.684357][ T6722] syz.4.788 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 96.698509][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.4.788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.698639][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.698657][ T6722] Call Trace: [ 96.698665][ T6722] [ 96.698674][ T6722] __dump_stack+0x1d/0x30 [ 96.698697][ T6722] dump_stack_lvl+0xe8/0x140 [ 96.698771][ T6722] dump_stack+0x15/0x1b [ 96.698788][ T6722] dump_header+0x81/0x220 [ 96.698840][ T6722] oom_kill_process+0x342/0x400 [ 96.698930][ T6722] out_of_memory+0x979/0xb80 [ 96.699045][ T6722] try_charge_memcg+0x610/0xa10 [ 96.699078][ T6722] obj_cgroup_charge_pages+0xa6/0x150 [ 96.699121][ T6722] __memcg_kmem_charge_page+0x9f/0x170 [ 96.699247][ T6722] __alloc_frozen_pages_noprof+0x188/0x360 [ 96.699292][ T6722] alloc_pages_mpol+0xb3/0x260 [ 96.699315][ T6722] alloc_pages_noprof+0x90/0x130 [ 96.699371][ T6722] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 96.699447][ T6722] __kvmalloc_node_noprof+0x483/0x670 [ 96.699483][ T6722] ? ip_set_alloc+0x24/0x30 [ 96.699519][ T6722] ? ip_set_alloc+0x24/0x30 [ 96.699624][ T6722] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 96.699662][ T6722] ip_set_alloc+0x24/0x30 [ 96.699693][ T6722] hash_netiface_create+0x282/0x740 [ 96.699764][ T6722] ? __pfx_hash_netiface_create+0x10/0x10 [ 96.699790][ T6722] ip_set_create+0x3cc/0x970 [ 96.699911][ T6722] ? __nla_parse+0x40/0x60 [ 96.699936][ T6722] nfnetlink_rcv_msg+0x4c6/0x590 [ 96.700038][ T6722] netlink_rcv_skb+0x123/0x220 [ 96.700105][ T6722] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.700132][ T6722] nfnetlink_rcv+0x167/0x16c0 [ 96.700233][ T6722] ? kmem_cache_free+0xe4/0x3d0 [ 96.700287][ T6722] ? __kfree_skb+0x109/0x150 [ 96.700319][ T6722] ? nlmon_xmit+0x4f/0x60 [ 96.700350][ T6722] ? consume_skb+0x49/0x150 [ 96.700465][ T6722] ? nlmon_xmit+0x4f/0x60 [ 96.700487][ T6722] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 96.700540][ T6722] ? __dev_queue_xmit+0x1200/0x2000 [ 96.700568][ T6722] ? __dev_queue_xmit+0x182/0x2000 [ 96.700598][ T6722] ? ref_tracker_free+0x37d/0x3e0 [ 96.700659][ T6722] ? __netlink_deliver_tap+0x4dc/0x500 [ 96.700725][ T6722] netlink_unicast+0x5c0/0x690 [ 96.700787][ T6722] netlink_sendmsg+0x58b/0x6b0 [ 96.700825][ T6722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.700940][ T6722] __sock_sendmsg+0x145/0x180 [ 96.701037][ T6722] ____sys_sendmsg+0x31e/0x4e0 [ 96.701077][ T6722] ___sys_sendmsg+0x17b/0x1d0 [ 96.701170][ T6722] __x64_sys_sendmsg+0xd4/0x160 [ 96.701214][ T6722] x64_sys_call+0x191e/0x3000 [ 96.701242][ T6722] do_syscall_64+0xd2/0x200 [ 96.701322][ T6722] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.701354][ T6722] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.701381][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.701411][ T6722] RIP: 0033:0x7f06dee2eec9 [ 96.701426][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.701455][ T6722] RSP: 002b:00007f06dd88f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.701480][ T6722] RAX: ffffffffffffffda RBX: 00007f06df085fa0 RCX: 00007f06dee2eec9 [ 96.701528][ T6722] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 96.701544][ T6722] RBP: 00007f06deeb1f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.701560][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.701576][ T6722] R13: 00007f06df086038 R14: 00007f06df085fa0 R15: 00007ffe88d194c8 [ 96.701615][ T6722] [ 96.701659][ T6722] memory: usage 307200kB, limit 307200kB, failcnt 677 [ 97.049003][ T6722] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 97.056970][ T6722] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 97.064264][ T6722] Memory cgroup stats for /syz4: [ 97.064385][ T6722] cache 0 [ 97.072337][ T6722] rss 0 [ 97.075123][ T6722] shmem 0 [ 97.078112][ T6722] mapped_file 0 [ 97.081560][ T6722] dirty 0 [ 97.084635][ T6722] writeback 0 [ 97.087991][ T6722] workingset_refault_anon 80 [ 97.092573][ T6722] workingset_refault_file 313 [ 97.097273][ T6722] swap 188416 [ 97.100553][ T6722] swapcached 12288 [ 97.104298][ T6722] pgpgin 41279 [ 97.107713][ T6722] pgpgout 41276 [ 97.111219][ T6722] pgfault 59615 [ 97.114688][ T6722] pgmajfault 63 [ 97.118145][ T6722] inactive_anon 0 [ 97.121856][ T6722] active_anon 12288 [ 97.125686][ T6722] inactive_file 0 [ 97.129333][ T6722] active_file 0 [ 97.132811][ T6722] unevictable 0 [ 97.136299][ T6722] hierarchical_memory_limit 314572800 [ 97.141718][ T6722] hierarchical_memsw_limit 9223372036854771712 [ 97.147936][ T6722] total_cache 0 [ 97.151402][ T6722] total_rss 0 [ 97.154717][ T6722] total_shmem 0 [ 97.158191][ T6722] total_mapped_file 0 [ 97.162219][ T6722] total_dirty 0 [ 97.165739][ T6722] total_writeback 0 [ 97.169560][ T6722] total_workingset_refault_anon 80 [ 97.174724][ T6722] total_workingset_refault_file 313 [ 97.179939][ T6722] total_swap 188416 [ 97.183766][ T6722] total_swapcached 12288 [ 97.188001][ T6722] total_pgpgin 41279 [ 97.191895][ T6722] total_pgpgout 41276 [ 97.195904][ T6722] total_pgfault 59615 [ 97.199892][ T6722] total_pgmajfault 63 [ 97.203908][ T6722] total_inactive_anon 0 [ 97.208078][ T6722] total_active_anon 12288 [ 97.212442][ T6722] total_inactive_file 0 [ 97.216681][ T6722] total_active_file 0 [ 97.220668][ T6722] total_unevictable 0 [ 97.224729][ T6722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.788,pid=6721,uid=0 [ 97.239347][ T6722] Memory cgroup out of memory: Killed process 6721 (syz.4.788) total-vm:96004kB, anon-rss:1136kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 97.589367][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 97.608823][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 97.608841][ T29] audit: type=1400 audit(1760596913.110:3509): avc: denied { unmount } for pid=6761 comm="syz.4.802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.739490][ T29] audit: type=1326 audit(1760596913.240:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.762499][ T29] audit: type=1326 audit(1760596913.240:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.785491][ T29] audit: type=1326 audit(1760596913.240:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.808559][ T29] audit: type=1326 audit(1760596913.240:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.831589][ T29] audit: type=1326 audit(1760596913.240:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.854498][ T29] audit: type=1326 audit(1760596913.240:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.877705][ T29] audit: type=1326 audit(1760596913.240:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 97.900592][ T29] audit: type=1326 audit(1760596913.240:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff991d1ef03 code=0x7ffc0000 [ 97.929763][ T6775] loop3: detected capacity change from 0 to 2048 [ 98.000454][ T29] audit: type=1326 audit(1760596913.440:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff991d1d97f code=0x7ffc0000 [ 98.037730][ T6775] loop3: p2 p3 p7 [ 98.809596][ T6781] loop2: detected capacity change from 0 to 512 [ 98.837909][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.864689][ T6781] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.984383][ T6781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.807: bg 0: block 64: padding at end of block bitmap is not set [ 99.027024][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.059922][ T6798] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 99.123906][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.813'. [ 99.152530][ T6798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.264161][ T6798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.294079][ T6798] bond1: (slave geneve2): making interface the new active one [ 99.302403][ T6798] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 99.311213][ T5884] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.322646][ T5884] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.345912][ T5884] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.375396][ T5884] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.448965][ T6820] loop1: detected capacity change from 0 to 1024 [ 99.455926][ T6820] EXT4-fs: Ignoring removed bh option [ 99.461379][ T6820] EXT4-fs: inline encryption not supported [ 99.523876][ T6820] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.537830][ T6820] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.815: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.552205][ T6820] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.815: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.566619][ T6820] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.815: Failed to acquire dquot type 0 [ 99.577842][ T6820] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 99.587365][ T6820] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.815: mark_inode_dirty error [ 99.598800][ T6820] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 99.609035][ T6820] EXT4-fs (loop1): 1 orphan inode deleted [ 99.615509][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.628220][ T2342] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.687017][ T2342] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 100.424340][ T6822] netlink: 'syz.4.821': attribute type 12 has an invalid length. [ 101.091653][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.103512][ T3313] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 101.118353][ T3313] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 101.128144][ T3313] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 101.278580][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'. [ 101.371702][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 101.419670][ T6855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.443039][ T6863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.459453][ T6863] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.570539][ T6863] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 101.601050][ T6855] macvlan0: entered promiscuous mode [ 101.606584][ T6855] macvlan0: entered allmulticast mode [ 101.718008][ T6855] bond6: (slave macvlan0): Error -98 calling set_mac_address [ 101.911325][ T6882] delete_channel: no stack [ 102.208433][ T6904] netlink: 'syz.0.848': attribute type 13 has an invalid length. [ 102.616886][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 102.616904][ T29] audit: type=1326 audit(1760596918.130:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88c8a55d67 code=0x7ffc0000 [ 102.678309][ T5924] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.706185][ T5924] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.735337][ T29] audit: type=1326 audit(1760596918.160:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88c89faf79 code=0x7ffc0000 [ 102.758729][ T29] audit: type=1326 audit(1760596918.160:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88c8a55d67 code=0x7ffc0000 [ 102.775317][ T5924] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.782001][ T29] audit: type=1326 audit(1760596918.160:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88c89faf79 code=0x7ffc0000 [ 102.806201][ T5924] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.813484][ T29] audit: type=1326 audit(1760596918.160:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 102.845219][ T29] audit: type=1326 audit(1760596918.170:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88c8a55d67 code=0x7ffc0000 [ 102.868504][ T29] audit: type=1326 audit(1760596918.170:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88c89faf79 code=0x7ffc0000 [ 102.891817][ T29] audit: type=1326 audit(1760596918.170:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 102.915172][ T29] audit: type=1326 audit(1760596918.180:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88c8a55d67 code=0x7ffc0000 [ 102.938642][ T29] audit: type=1326 audit(1760596918.180:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88c89faf79 code=0x7ffc0000 [ 103.067462][ T6911] loop2: detected capacity change from 0 to 512 [ 103.182007][ T6918] loop1: detected capacity change from 0 to 1024 [ 103.192278][ T6920] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 103.218708][ T6911] loop2: detected capacity change from 0 to 512 [ 103.274066][ T6918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.274619][ T6911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.321553][ T6918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 103.336923][ T6911] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.379642][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.457827][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 103.593709][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.681320][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 103.744681][ T6949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.872730][ T6949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.880642][ T6949] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.897378][ T6949] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 103.917061][ T6955] macvlan2: entered promiscuous mode [ 103.922443][ T6955] macvlan2: entered allmulticast mode [ 103.928161][ T6955] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 103.946990][ T6961] loop2: detected capacity change from 0 to 128 [ 104.030472][ T6973] Bluetooth: hci0: Frame reassembly failed (-90) [ 104.038657][ T2342] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.321545][ T6981] netlink: 80 bytes leftover after parsing attributes in process `syz.3.874'. [ 104.397774][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 104.439863][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 104.457348][ T6989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.476568][ T6989] vlan2: entered allmulticast mode [ 104.481719][ T6989] bond2: entered allmulticast mode [ 104.747118][ T7002] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 104.754936][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.882'. [ 104.775940][ T7002] veth1_vlan: left promiscuous mode [ 104.781893][ T7002] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 104.871618][ T7008] loop2: detected capacity change from 0 to 1024 [ 104.875675][ T7010] ip6tnl1: entered promiscuous mode [ 104.878668][ T7008] EXT4-fs: Ignoring removed orlov option [ 104.883503][ T7010] ip6tnl1: entered allmulticast mode [ 104.904961][ T7008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.917192][ T7008] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.949877][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.008664][ T7017] ref_ctr increment failed for inode: 0x4b0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881043b0b80 [ 105.094230][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'. [ 105.306486][ T7036] loop2: detected capacity change from 0 to 4096 [ 105.315250][ T7036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.690003][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.851850][ T7045] loop2: detected capacity change from 0 to 128 [ 106.031009][ T7051] loop3: detected capacity change from 0 to 512 [ 106.038336][ T7051] ext4: Unknown parameter 'nouser_xattr' [ 106.054434][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.058700][ T3660] Bluetooth: hci0: command 0x1003 tx timeout [ 106.760794][ T7099] loop1: detected capacity change from 0 to 512 [ 106.779849][ T7099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.788688][ T7099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.914: bg 0: block 248: padding at end of block bitmap is not set [ 106.803174][ T7099] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.914: Failed to acquire dquot type 1 [ 106.815964][ T7099] EXT4-fs (loop1): 1 truncate cleaned up [ 106.825078][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.846062][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 106.887489][ T7106] netlink: 664 bytes leftover after parsing attributes in process `syz.2.917'. [ 106.899597][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.953169][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 106.994721][ T7116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.016646][ T7116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.024283][ T7116] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.035492][ T7116] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 107.064107][ T7121] macvlan2: entered promiscuous mode [ 107.069526][ T7121] macvlan2: entered allmulticast mode [ 107.078378][ T7121] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 107.218443][ T7133] pimreg: entered allmulticast mode [ 107.232038][ T7133] pimreg: left allmulticast mode [ 107.311627][ T7144] batadv_slave_1: entered promiscuous mode [ 107.327386][ T7144] batadv_slave_1 (unregistering): left promiscuous mode [ 107.343630][ T7145] syzkaller0: entered promiscuous mode [ 107.349122][ T7145] syzkaller0: entered allmulticast mode [ 107.386145][ T7147] loop1: detected capacity change from 0 to 512 [ 107.405391][ T7147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.418114][ T7147] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.638581][ T7158] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.648606][ T7158] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.683547][ T7160] loop3: detected capacity change from 0 to 512 [ 107.697024][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.744706][ T7158] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.754535][ T7158] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.797583][ T7165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.851138][ T7168] team0 (unregistering): Port device team_slave_0 removed [ 107.881042][ T7158] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.891003][ T7158] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 107.935488][ T7169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.958134][ T7169] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.972502][ T7169] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 108.001073][ T2965] !yz!: Port: 1 Link DOWN [ 108.007366][ T7158] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.017199][ T7158] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 108.049862][ T7165] macvlan2: entered promiscuous mode [ 108.055325][ T7165] macvlan2: entered allmulticast mode [ 108.060996][ T7165] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 108.101721][ T5884] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 108.110051][ T5884] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 108.121537][ T5884] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 108.130085][ T5884] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 108.170939][ T5884] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 108.179322][ T5884] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 108.184018][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 108.184035][ T29] audit: type=1326 audit(1760596923.690:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.217092][ T29] audit: type=1326 audit(1760596923.690:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.217131][ T5884] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 108.240507][ T29] audit: type=1326 audit(1760596923.690:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.248727][ T5884] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 108.272050][ T29] audit: type=1326 audit(1760596923.690:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.303587][ T29] audit: type=1326 audit(1760596923.690:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.326931][ T29] audit: type=1326 audit(1760596923.690:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.350277][ T29] audit: type=1326 audit(1760596923.690:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.373702][ T29] audit: type=1326 audit(1760596923.690:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.397048][ T29] audit: type=1326 audit(1760596923.690:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.420421][ T29] audit: type=1326 audit(1760596923.690:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.1.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f770eeec9 code=0x7ffc0000 [ 108.659060][ T7205] __nla_validate_parse: 7 callbacks suppressed [ 108.659079][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.957'. [ 108.914998][ T7225] loop2: detected capacity change from 0 to 2048 [ 108.925031][ T7225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 108.994169][ T7225] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.009199][ T7225] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1862 with error 28 [ 109.021671][ T7225] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.021671][ T7225] [ 109.031356][ T7225] EXT4-fs (loop2): Total free blocks count 0 [ 109.037377][ T7225] EXT4-fs (loop2): Free/Dirty block details [ 109.043312][ T7225] EXT4-fs (loop2): free_blocks=2415919104 [ 109.049057][ T7225] EXT4-fs (loop2): dirty_blocks=1872 [ 109.054393][ T7225] EXT4-fs (loop2): Block reservation details [ 109.060418][ T7225] EXT4-fs (loop2): i_reserved_data_blocks=117 [ 109.145271][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 109.347078][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 109.394015][ T7252] batadv_slave_1: entered promiscuous mode [ 109.400457][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 109.410016][ T7252] batadv_slave_1 (unregistering): left promiscuous mode [ 109.554369][ T7257] netlink: 'syz.2.976': attribute type 58 has an invalid length. [ 109.562168][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'. [ 109.636598][ T7264] wg2: entered promiscuous mode [ 109.641511][ T7264] wg2: entered allmulticast mode [ 109.663721][ T7266] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 110.000644][ T7295] netlink: 5420 bytes leftover after parsing attributes in process `syz.1.993'. [ 110.089953][ T7304] netlink: 'syz.1.997': attribute type 30 has an invalid length. [ 110.094528][ T7305] tipc: Enabled bearer , priority 0 [ 110.137838][ T7305] tipc: Disabling bearer [ 110.645333][ T7342] loop1: detected capacity change from 0 to 1024 [ 110.652161][ T7342] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 110.695354][ T7341] Process accounting resumed [ 110.937870][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 111.021356][ T7360] batadv_slave_1: entered promiscuous mode [ 111.053626][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 111.072858][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.097716][ T7360] batadv_slave_1 (unregistering): left promiscuous mode [ 111.104804][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.292367][ T7375] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1018'. [ 111.601697][ T7385] loop3: detected capacity change from 0 to 1024 [ 111.609616][ T7385] EXT4-fs: Ignoring removed orlov option [ 111.622761][ T7385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.648278][ T7388] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1026'. [ 111.659690][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 112.026791][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.117082][ T7403] batadv_slave_1: entered promiscuous mode [ 112.143704][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.188111][ T7403] batadv_slave_1 (unregistering): left promiscuous mode [ 112.195598][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.349665][ T7415] wireguard0: entered promiscuous mode [ 112.355312][ T7415] wireguard0: entered allmulticast mode [ 112.494019][ T7428] loop3: detected capacity change from 0 to 512 [ 112.505330][ T7429] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 112.513435][ T7428] msdos: Bad value for 'uid' [ 112.518082][ T7428] msdos: Bad value for 'uid' [ 112.562811][ T7429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.602383][ T7436] loop2: detected capacity change from 0 to 256 [ 112.662418][ T7436] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.672285][ T7436] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 112.746732][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.756742][ T7429] bond3: (slave batadv0): making interface the new active one [ 112.765732][ T7429] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 112.811477][ T7433] bond3 (unregistering): (slave batadv0): Releasing active interface [ 112.831399][ T7433] bond3 (unregistering): Released all slaves [ 112.868052][ T7436] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.878197][ T7436] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 112.994190][ T7436] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.004091][ T7436] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 113.118419][ T7436] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.128365][ T7436] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 113.240350][ T2781] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 113.248733][ T2781] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 113.304102][ T2781] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 113.312451][ T2781] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 113.343219][ T2781] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 113.351568][ T2781] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 113.408238][ T2781] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 113.416679][ T2781] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 113.555157][ T29] kauditd_printk_skb: 804 callbacks suppressed [ 113.555175][ T29] audit: type=1326 audit(1760596929.070:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.587615][ T7472] rdma_op ffff888135506180 conn xmit_rdma 0000000000000000 [ 113.639609][ T29] audit: type=1326 audit(1760596929.100:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.663236][ T29] audit: type=1326 audit(1760596929.100:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.686818][ T29] audit: type=1326 audit(1760596929.100:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.710172][ T29] audit: type=1326 audit(1760596929.100:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.733746][ T29] audit: type=1326 audit(1760596929.100:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.757259][ T29] audit: type=1326 audit(1760596929.100:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.780687][ T29] audit: type=1326 audit(1760596929.100:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.804173][ T29] audit: type=1326 audit(1760596929.100:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.827710][ T29] audit: type=1326 audit(1760596929.100:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7468 comm="syz.2.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88c8a5eec9 code=0x7ffc0000 [ 113.901823][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.909273][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.405681][ T7486] __nla_validate_parse: 4 callbacks suppressed [ 114.405699][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 114.475092][ T7486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.505271][ T7488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.528305][ T7488] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.539793][ T7488] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 114.559482][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 114.582217][ T7486] macvlan2: entered promiscuous mode [ 114.587586][ T7486] macvlan2: entered allmulticast mode [ 114.597740][ T7486] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 114.745395][ T7505] capability: warning: `syz.4.1064' uses 32-bit capabilities (legacy support in use) [ 114.776964][ T7509] loop1: detected capacity change from 0 to 512 [ 114.784076][ T7509] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.795398][ T7509] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 114.814008][ T7509] EXT4-fs (loop1): 1 truncate cleaned up [ 114.821720][ T7509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.884774][ T7521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1070'. [ 114.894214][ T7521] IPVS: Error connecting to the multicast addr [ 115.012791][ T7544] netlink: 'syz.3.1073': attribute type 12 has an invalid length. [ 116.057342][ T7681] tipc: Enabling of bearer rejected, failed to enable media [ 116.311461][ T7698] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1090'. [ 116.325613][ T7698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.336018][ T7698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.346408][ T7698] bond0 (unregistering): Released all slaves [ 116.485700][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.585789][ T7705] loop1: detected capacity change from 0 to 512 [ 116.592344][ T7705] msdos: Bad value for 'uid' [ 116.597005][ T7705] msdos: Bad value for 'uid' [ 116.627056][ T7707] syzkaller0: entered promiscuous mode [ 116.632581][ T7707] syzkaller0: entered allmulticast mode [ 116.741174][ T7709] wg2: left promiscuous mode [ 116.746121][ T7709] wg2: left allmulticast mode [ 117.063559][ T7721] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 117.286323][ T7745] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 118.094977][ T7767] netlink: 'syz.2.1119': attribute type 13 has an invalid length. [ 118.137206][ T7767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.213187][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 118.241571][ T7796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.295457][ T7796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.319852][ T7796] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 118.331837][ T7796] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 118.354777][ T7798] macvlan2: entered promiscuous mode [ 118.360121][ T7798] macvlan2: entered allmulticast mode [ 118.366249][ T7798] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 118.381062][ T7802] netlink: 'syz.0.1132': attribute type 10 has an invalid length. [ 118.389054][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1132'. [ 118.398338][ T7800] tipc: Started in network mode [ 118.403474][ T7800] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.411543][ T7800] tipc: Enabled bearer , priority 10 [ 118.417910][ T7802] vlan0: entered promiscuous mode [ 118.423154][ T7802] vlan0: entered allmulticast mode [ 118.428348][ T7802] veth0_vlan: entered allmulticast mode [ 118.434030][ T7802] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 118.477883][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1133'. [ 118.573189][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 118.573209][ T29] audit: type=1326 audit(1760596934.050:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 118.602878][ T29] audit: type=1326 audit(1760596934.050:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 118.626287][ T29] audit: type=1326 audit(1760596934.050:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 118.649749][ T29] audit: type=1326 audit(1760596934.050:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34c72eec9 code=0x7ffc0000 [ 118.673633][ T29] audit: type=1326 audit(1760596934.170:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 118.697139][ T29] audit: type=1326 audit(1760596934.170:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 118.720742][ T29] audit: type=1326 audit(1760596934.170:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 118.744254][ T29] audit: type=1326 audit(1760596934.180:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff991d15d67 code=0x7ffc0000 [ 118.767921][ T29] audit: type=1326 audit(1760596934.180:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff991cbaf79 code=0x7ffc0000 [ 118.791325][ T29] audit: type=1326 audit(1760596934.180:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff991d1eec9 code=0x7ffc0000 [ 119.306999][ T7830] netlink: 'syz.1.1144': attribute type 39 has an invalid length. [ 119.678445][ T6909] tipc: Node number set to 2886997162 [ 120.141215][ T7860] netlink: 'syz.2.1153': attribute type 6 has an invalid length. [ 120.338448][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 120.949406][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 121.088331][ T7917] loop3: detected capacity change from 0 to 1024 [ 121.095497][ T7917] EXT4-fs: Ignoring removed orlov option [ 121.105071][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.145307][ T7923] atomic_op ffff888119e1ed28 conn xmit_atomic 0000000000000000 [ 121.759300][ T7940] ================================================================== [ 121.767421][ T7940] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 121.774723][ T7940] [ 121.777043][ T7940] read-write to 0xffff888103911a10 of 4 bytes by task 7939 on cpu 1: [ 121.785098][ T7940] io_issue_sqe+0x1f9/0xa80 [ 121.789612][ T7940] io_wq_submit_work+0x3f7/0x5f0 [ 121.794554][ T7940] io_worker_handle_work+0x44e/0x9b0 [ 121.799846][ T7940] io_wq_worker+0x22e/0x860 [ 121.804352][ T7940] ret_from_fork+0x122/0x1b0 [ 121.808937][ T7940] ret_from_fork_asm+0x1a/0x30 [ 121.813697][ T7940] [ 121.816011][ T7940] read to 0xffff888103911a10 of 4 bytes by task 7940 on cpu 0: [ 121.823542][ T7940] io_flush_timeouts+0x56/0x1d0 [ 121.828401][ T7940] __io_commit_cqring_flush+0xeb/0x100 [ 121.833862][ T7940] io_issue_sqe+0x8ab/0xa80 [ 121.838369][ T7940] io_wq_submit_work+0x3f7/0x5f0 [ 121.843311][ T7940] io_worker_handle_work+0x44e/0x9b0 [ 121.848599][ T7940] io_wq_worker+0x22e/0x860 [ 121.853109][ T7940] ret_from_fork+0x122/0x1b0 [ 121.857705][ T7940] ret_from_fork_asm+0x1a/0x30 [ 121.862465][ T7940] [ 121.864788][ T7940] value changed: 0x0000159d -> 0x0000159e [ 121.870496][ T7940] [ 121.872810][ T7940] Reported by Kernel Concurrency Sanitizer on: [ 121.878961][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: iou-wrk-7926 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.888856][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.898910][ T7940] ================================================================== [ 121.958611][ T7945] infiniband syz2: set active [ 121.963424][ T7945] infiniband syz2: added bond0 [ 121.981769][ T7945] RDS/IB: syz2: added [ 122.046200][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.