last executing test programs: 37.928953084s ago: executing program 3 (id=2232): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x64, 0xf801}}}}}}, 0x0) 37.926290734s ago: executing program 3 (id=2233): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 37.873908341s ago: executing program 3 (id=2236): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, 0x0) getpgrp(0x0) 37.790737882s ago: executing program 3 (id=2238): syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="79057a2c1e9ae72898229ce6287c"], 0x1, 0x2cb, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000001c0)=0x0) ftruncate(r0, 0x81fe) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 37.6531289s ago: executing program 3 (id=2239): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) 37.596742976s ago: executing program 3 (id=2241): socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0xf, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008804}, 0x8000) 37.562572751s ago: executing program 32 (id=2241): socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0xf, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008804}, 0x8000) 1.549593571s ago: executing program 4 (id=3046): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c50bae528248d5552bff00", "7e25837b", "360000000002005f"}, 0x38) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfc4e) close_range(r0, r0, 0x0) 1.501578997s ago: executing program 4 (id=3049): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @remote, @void, {@llc={0x8847, {@snap={0x0, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 1.425787866s ago: executing program 4 (id=3054): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, &(0x7f00000041c0)=""/4111, 0x100f) 1.369063374s ago: executing program 4 (id=3055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c00000010000108ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a00200231c040008001b"], 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.116145407s ago: executing program 2 (id=3059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffff5fc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x5, 0x1, 0x3, 0x2, 0x3, 0x2, 0xb6, 0x7f, 0x3, 0x2d1c, 0x7, 0x2, 0xd2, 0x4, 0x8a0, 0x4, 0x1, 0x7, 0x0, 0x1, 0x2, 0x1, 0x7, 0x0, 0x4, 0xfffffff6, 0x80, 0x9, 0x9, 0x2, 0x2, 0x200, 0x8, 0x7, 0x2, 0x3, 0x2, 0x3, 0x8, 0xad, 0x1, 0x1000, 0x1, 0x400, 0x9, 0x8, 0x1, 0x100, 0x7, 0x1, 0x9, 0xfffffffe, 0x1, 0x6, 0xb, 0xfff, 0x8, 0x8, 0x4, 0x0, 0xe22f, 0x200, 0x5, 0xfffffffc, 0xcd, 0x200, 0x1, 0x88, 0x9, 0xd, 0xfffff001, 0x2, 0x3, 0x0, 0x4, 0x400, 0x3, 0x7ff, 0x1, 0x1, 0x0, 0x6, 0x51, 0x2a, 0x5, 0x361, 0xcd24, 0x3c, 0x8, 0xe, 0x80000000, 0x6, 0x40, 0x9, 0x1, 0xd, 0x9, 0x101, 0xff, 0x0, 0x1, 0x0, 0x4, 0x976, 0x2, 0x5, 0xa26, 0x7, 0xfffffe01, 0xfffffff8, 0x7f, 0x80, 0x3, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0x7c, 0x81, 0x2, 0x7fffffff, 0xd, 0x5, 0x0, 0x6, 0x71c, 0x7fffffff, 0x2, 0x6, 0xf0, 0x3, 0x706f0000, 0x8001, 0x6, 0xb3, 0x9, 0x8e, 0x5, 0x0, 0xb4, 0x4, 0x4, 0x1, 0x7, 0xdef, 0x7, 0x3, 0x4, 0x7de, 0x0, 0x70, 0xd4a, 0x1, 0x8, 0x2, 0xa0000, 0x0, 0x6, 0xd6, 0x4, 0xffffffff, 0xd, 0x40, 0xf1dc, 0x1, 0x3, 0x1607, 0xa, 0x800, 0x9, 0x2, 0x1, 0x0, 0x4, 0xffffffff, 0x39, 0x0, 0x4, 0x1, 0x826, 0x7ff, 0xe3ef, 0x1, 0x1ff, 0x84, 0x1, 0x8, 0x4, 0x69, 0x1, 0x0, 0x73d8b573, 0xfffffffc, 0x9, 0x3, 0xfffffffa, 0x9, 0x1, 0x1000, 0x2, 0x80f7, 0x8, 0x2, 0x8, 0xdd7, 0x5bca, 0x9, 0x7, 0x4216, 0x7fff, 0x9, 0x3, 0xa00, 0xffff472c, 0xf7a, 0x1, 0x6, 0x4, 0xff, 0x8, 0x80000001, 0x1, 0x8, 0x3, 0x9, 0x3, 0x4, 0x5, 0x4, 0x8, 0x3, 0x5, 0x7, 0x7, 0x7ff, 0x8a, 0x1, 0xfffffff1, 0xfffff800, 0x3, 0x2a, 0x7, 0x4, 0x4, 0x3ff, 0x1, 0x492, 0xb, 0x1, 0xd, 0x4, 0x800, 0x2, 0xc]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.115870296s ago: executing program 1 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="8de7ee0c7cdad9b4b47380c988ca2520a9d1769835aa9ceacc04d25983c69f6e0d", 0x21}, {&(0x7f0000000300)="f2278edfb9", 0x5}], 0x2) 1.021083579s ago: executing program 2 (id=3061): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.000728831s ago: executing program 2 (id=3062): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 972.586585ms ago: executing program 1 (id=3063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r4, 0x25, 0x2, @void}, 0x10) 920.749932ms ago: executing program 2 (id=3064): r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x80000000, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg$sock(r4, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @private=0xa010101}, 0x0, 0x3}}, 0x80, 0x0}}], 0x1, 0x50) listen(r4, 0x2) accept4(r4, 0x0, 0x0, 0x80800) shutdown(r3, 0x0) 619.19598ms ago: executing program 1 (id=3065): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 602.797753ms ago: executing program 1 (id=3066): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000002d80)='2', 0x1, 0x8080c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x100, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000001c0)=0x1caf) 549.707629ms ago: executing program 4 (id=3067): statx(0xffffffffffffff9c, 0x0, 0x6000, 0xfd0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000080)='./bus\x00', 0x154) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 497.100496ms ago: executing program 1 (id=3068): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 496.791127ms ago: executing program 4 (id=3069): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 496.621126ms ago: executing program 5 (id=3070): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 485.220218ms ago: executing program 0 (id=3072): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 435.151665ms ago: executing program 0 (id=3073): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) fallocate(r0, 0x0, 0x8, 0x1101f0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x10, 0x6, 0x10001) 384.96329ms ago: executing program 5 (id=3074): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, 0x0, 0x0, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) 377.096211ms ago: executing program 1 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008041}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(r2, 0x406, r2) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4096, 0x1000}) 354.155495ms ago: executing program 5 (id=3076): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x8a) fallocate(r2, 0x0, 0x9, 0x2000406) pwritev2(r1, 0x0, 0x0, 0x5405, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000c08d) close_range(r0, 0xffffffffffffffff, 0x0) 302.047791ms ago: executing program 0 (id=3077): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 301.600451ms ago: executing program 0 (id=3078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000811}, 0x20048850) 267.563176ms ago: executing program 5 (id=3079): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ac1414220c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 226.880271ms ago: executing program 5 (id=3080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa", 0xe9}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a8", 0x3f}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda7}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b", 0xf}], 0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 226.342911ms ago: executing program 0 (id=3081): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 226.155692ms ago: executing program 5 (id=3082): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 109.051086ms ago: executing program 0 (id=3083): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x24a0, 0x0, 0x1, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendfile(r1, r0, 0x0, 0x7ffff000) 68.992631ms ago: executing program 2 (id=3084): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0x1}}]}, 0x90}}, 0x0) 0s ago: executing program 2 (id=3085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f", 0xe0}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37", 0x21}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c", 0x64}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470", 0x55}], 0x5}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.2.1841'. [ 94.782721][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 94.782740][ T29] audit: type=1326 audit(1768753867.307:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.813042][ T29] audit: type=1326 audit(1768753867.307:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.837157][ T29] audit: type=1326 audit(1768753867.307:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.860646][ T29] audit: type=1326 audit(1768753867.307:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.884167][ T29] audit: type=1326 audit(1768753867.307:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.897891][ T7926] syzkaller1: entered promiscuous mode [ 94.907727][ T29] audit: type=1326 audit(1768753867.307:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.907820][ T29] audit: type=1326 audit(1768753867.307:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.913282][ T7926] syzkaller1: entered allmulticast mode [ 94.936747][ T29] audit: type=1326 audit(1768753867.317:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 94.988973][ T29] audit: type=1326 audit(1768753867.317:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7922 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d6500b58e code=0x7ffc0000 [ 95.012391][ T29] audit: type=1326 audit(1768753867.317:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.3.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6504acb9 code=0x7ffc0000 [ 95.055603][ T7930] loop0: detected capacity change from 0 to 512 [ 95.069493][ T7930] EXT4-fs: dax option not supported [ 95.078868][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'. [ 95.165153][ T7940] loop1: detected capacity change from 0 to 2048 [ 95.196867][ T7940] EXT4-fs: Ignoring removed bh option [ 95.218693][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.756583][ T7966] loop3: detected capacity change from 0 to 512 [ 95.772933][ T7966] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.786514][ T7966] EXT4-fs (loop3): 1 truncate cleaned up [ 95.792588][ T7966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.836315][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.848391][ T7966] EXT4-fs error (device loop3): ext4_lookup:1785: inode #16: comm syz.3.1862: iget: bad i_size value: 5497558147880 [ 95.868878][ T7966] EXT4-fs (loop3): Remounting filesystem read-only [ 95.920308][ T7973] team0: Device gtp0 is of different type [ 95.934392][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.951760][ T7977] batadv_slave_0: entered promiscuous mode [ 95.958243][ T7976] batadv_slave_0: left promiscuous mode [ 96.000998][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 96.198199][ T7999] loop0: detected capacity change from 0 to 512 [ 96.216463][ T7999] EXT4-fs: Ignoring removed orlov option [ 96.222198][ T7999] EXT4-fs: Ignoring removed i_version option [ 96.228353][ T7999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.246435][ T8001] loop1: detected capacity change from 0 to 136 [ 96.293223][ T7999] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 96.301247][ T7999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 96.342460][ T7999] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.349280][ T7999] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.363864][ T7999] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 96.370849][ T7999] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1879: bg 0: block 40: padding at end of block bitmap is not set [ 96.385137][ T8004] wg2: entered promiscuous mode [ 96.390028][ T8004] wg2: entered allmulticast mode [ 96.404149][ T7999] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 96.413206][ T7999] EXT4-fs (loop0): 1 truncate cleaned up [ 96.429587][ T7999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.445962][ T7999] EXT4-fs (loop0): shut down requested (2) [ 96.462194][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.488521][ T8008] loop2: detected capacity change from 0 to 512 [ 96.506918][ T8010] loop4: detected capacity change from 0 to 512 [ 96.542016][ T8010] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1886: dx entry: limit 1024 != root limit 124 [ 96.554210][ T8010] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1886: Corrupt directory, running e2fsck is recommended [ 96.568280][ T8010] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 96.589745][ T8018] bridge0: entered promiscuous mode [ 96.594338][ T8010] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1886: corrupted in-inode xattr: invalid ea_ino [ 96.612067][ T8010] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1886: couldn't read orphan inode 15 (err -117) [ 96.625553][ T8010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.639217][ T8018] macsec1: entered promiscuous mode [ 96.652672][ T8022] EXT4-fs: Ignoring removed i_version option [ 96.658729][ T8022] EXT4-fs: Ignoring removed nobh option [ 96.666603][ T8018] bridge0: port 3(macsec1) entered blocking state [ 96.673294][ T8018] bridge0: port 3(macsec1) entered disabled state [ 96.684390][ T8018] macsec1: entered allmulticast mode [ 96.689728][ T8018] bridge0: entered allmulticast mode [ 96.703317][ T8010] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1886: dx entry: limit 1024 != root limit 124 [ 96.715410][ T8010] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1886: Corrupt directory, running e2fsck is recommended [ 96.728674][ T8022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.744855][ T8018] macsec1: left allmulticast mode [ 96.749925][ T8018] bridge0: left allmulticast mode [ 96.766970][ T8022] EXT4-fs (loop3): 1 truncate cleaned up [ 96.773479][ T8010] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1886: dx entry: limit 1024 != root limit 124 [ 96.785581][ T8010] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1886: Corrupt directory, running e2fsck is recommended [ 96.799060][ T8018] bridge0: left promiscuous mode [ 96.807726][ T8022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.831787][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.841305][ T8010] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1886: dx entry: limit 1024 != root limit 124 [ 96.853528][ T8010] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1886: Corrupt directory, running e2fsck is recommended [ 96.902410][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.931497][ T8032] batadv_slave_0: entered promiscuous mode [ 96.945473][ T8026] batadv_slave_0: left promiscuous mode [ 96.964030][ T8029] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 97.011295][ T8029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.050433][ T8039] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.072254][ T8039] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 97.076282][ T8043] netlink: 664 bytes leftover after parsing attributes in process `syz.1.1898'. [ 97.092933][ T8039] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 97.127021][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 97.139525][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 97.833593][ T8074] net_ratelimit: 30843 callbacks suppressed [ 97.833615][ T8074] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 97.847715][ T3527] IPVS: starting estimator thread 0... [ 97.934176][ T8078] IPVS: using max 2736 ests per chain, 136800 per kthread [ 98.208918][ T8098] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 98.233743][ T8098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 98.244853][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 98.261464][ T8098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 98.270624][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 98.281081][ T8098] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.313863][ T8098] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 98.340592][ T8101] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 98.348382][ T8101] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 98.644799][ T8123] syz.1.1934 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 98.655921][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.1.1934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.655949][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.655961][ T8123] Call Trace: [ 98.655967][ T8123] [ 98.655974][ T8123] __dump_stack+0x1d/0x30 [ 98.656071][ T8123] dump_stack_lvl+0x95/0xd0 [ 98.656097][ T8123] dump_stack+0x15/0x1b [ 98.656197][ T8123] dump_header+0x80/0x240 [ 98.656220][ T8123] oom_kill_process+0x295/0x350 [ 98.656248][ T8123] out_of_memory+0x97d/0xb80 [ 98.656277][ T8123] try_charge_memcg+0x62e/0xa10 [ 98.656392][ T8123] charge_memcg+0x51/0xc0 [ 98.656426][ T8123] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 98.656460][ T8123] __read_swap_cache_async+0x17b/0x2d0 [ 98.656541][ T8123] swap_cluster_readahead+0x262/0x3c0 [ 98.656643][ T8123] swapin_readahead+0xde/0x840 [ 98.656676][ T8123] ? plist_check_list+0x199/0x1b0 [ 98.656776][ T8123] ? __rcu_read_unlock+0x4e/0x70 [ 98.656799][ T8123] ? swap_cache_get_folio+0x26f/0x280 [ 98.656832][ T8123] do_swap_page+0x2f4/0x2140 [ 98.656865][ T8123] ? hrtimer_try_to_cancel+0x1d6/0x1e0 [ 98.656914][ T8123] ? __pfx_default_wake_function+0x10/0x10 [ 98.656952][ T8123] handle_mm_fault+0xb40/0x3030 [ 98.657013][ T8123] ? vma_start_read+0x1c7/0x2c0 [ 98.657045][ T8123] do_user_addr_fault+0x62f/0x1050 [ 98.657080][ T8123] exc_page_fault+0x62/0xa0 [ 98.657180][ T8123] asm_exc_page_fault+0x26/0x30 [ 98.657201][ T8123] RIP: 0033:0x7fe3b950accb [ 98.657220][ T8123] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 2e 0f 1f [ 98.657238][ T8123] RSP: 002b:00007fffdec864c8 EFLAGS: 00010213 [ 98.657254][ T8123] RAX: 000000000000006e RBX: 00000000000180e2 RCX: ffffffffffffffe8 [ 98.657278][ T8123] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3b9785fac [ 98.657290][ T8123] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 0000000000000000 [ 98.657305][ T8123] R10: 00007fffdec865d0 R11: 0000000000000246 R12: 00007fffdec865f0 [ 98.657350][ T8123] R13: 00007fe3b9785fac R14: 0000000000018114 R15: 00007fffdec865d0 [ 98.657439][ T8123] [ 98.657448][ T8123] memory: usage 307200kB, limit 307200kB, failcnt 2522 [ 98.877458][ T8123] memory+swap: usage 142452kB, limit 9007199254740988kB, failcnt 0 [ 98.877482][ T8123] kmem: usage 141328kB, limit 9007199254740988kB, failcnt 0 [ 98.877497][ T8123] Memory cgroup stats for /syz1: [ 98.939584][ T8123] cache 0 [ 98.947702][ T8123] rss 24576 [ 98.950886][ T8123] shmem 0 [ 98.953861][ T8123] mapped_file 0 [ 98.957363][ T8123] dirty 0 [ 98.960307][ T8123] writeback 0 [ 98.963590][ T8123] workingset_refault_anon 339 [ 98.968306][ T8123] workingset_refault_file 3704 [ 98.973076][ T8123] swap 892928 [ 98.976416][ T8123] swapcached 12288 [ 98.980216][ T8123] pgpgin 194906 [ 98.983708][ T8123] pgpgout 194900 [ 98.987358][ T8123] pgfault 217337 [ 98.990912][ T8123] pgmajfault 241 [ 98.994475][ T8123] inactive_anon 0 [ 98.998462][ T8123] active_anon 24576 [ 99.002273][ T8123] inactive_file 0 [ 99.006124][ T8123] active_file 0 [ 99.009770][ T8123] unevictable 0 [ 99.013441][ T8123] hierarchical_memory_limit 314572800 [ 99.019198][ T8123] hierarchical_memsw_limit 9223372036854771712 [ 99.025742][ T8123] total_cache 0 [ 99.029220][ T8123] total_rss 24576 [ 99.032925][ T8123] total_shmem 0 [ 99.036455][ T8123] total_mapped_file 0 [ 99.040575][ T8123] total_dirty 0 [ 99.044205][ T8123] total_writeback 0 [ 99.048032][ T8123] total_workingset_refault_anon 339 [ 99.053321][ T8123] total_workingset_refault_file 3704 [ 99.058655][ T8123] total_swap 892928 [ 99.062485][ T8123] total_swapcached 12288 [ 99.066789][ T8123] total_pgpgin 194906 [ 99.070839][ T8123] total_pgpgout 194900 [ 99.074510][ T3527] IPVS: starting estimator thread 0... [ 99.074960][ T8123] total_pgfault 217337 [ 99.080935][ T8142] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 99.084514][ T8123] total_pgmajfault 241 [ 99.084527][ T8123] total_inactive_anon 0 [ 99.099718][ T8123] total_active_anon 24576 [ 99.104051][ T8123] total_inactive_file 0 [ 99.108329][ T8123] total_active_file 0 [ 99.112321][ T8123] total_unevictable 0 [ 99.116502][ T8123] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1934,pid=8123,uid=0 [ 99.131133][ T8123] Memory cgroup out of memory: Killed process 8123 (syz.1.1934) total-vm:94000kB, anon-rss:1204kB, file-rss:21900kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 99.194220][ T8148] IPVS: using max 2736 ests per chain, 136800 per kthread [ 99.200575][ T8153] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1944'. [ 99.293587][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 99.314635][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 99.527615][ T8176] set_capacity_and_notify: 1 callbacks suppressed [ 99.527633][ T8176] loop2: detected capacity change from 0 to 8192 [ 99.598444][ T8182] loop2: detected capacity change from 0 to 1024 [ 99.627828][ T8182] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.636341][ T8187] loop4: detected capacity change from 0 to 512 [ 99.670617][ T8182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.746063][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.782669][ T8195] loop2: detected capacity change from 0 to 1024 [ 99.796694][ T8195] EXT4-fs: Ignoring removed orlov option [ 99.802473][ T8195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.837881][ T8195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.867873][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.374874][ T8220] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1971'. [ 100.447354][ T8226] loop1: detected capacity change from 0 to 128 [ 100.567809][ T29] kauditd_printk_skb: 835 callbacks suppressed [ 100.567826][ T29] audit: type=1400 audit(1768753873.097:6008): avc: denied { setopt } for pid=8235 comm="syz.3.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.685988][ T8244] loop1: detected capacity change from 0 to 256 [ 100.704664][ T29] audit: type=1400 audit(1768753873.227:6009): avc: denied { mounton } for pid=8243 comm="syz.1.1983" path="/syzcgroup/cpu/syz1/cpuset.cpus" dev="cgroup" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 100.737538][ T8244] FAT-fs (loop1): bogus number of FAT sectors [ 100.743729][ T8244] FAT-fs (loop1): Can't find a valid FAT filesystem [ 100.743917][ T8248] loop3: detected capacity change from 0 to 512 [ 100.762933][ T8248] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 100.771201][ T8248] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.1984: iget: bad i_size value: 12154757448730 [ 100.785668][ T8248] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1984: couldn't read orphan inode 13 (err -117) [ 100.798574][ T8248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.812659][ T29] audit: type=1400 audit(1768753873.337:6010): avc: denied { remount } for pid=8245 comm="syz.3.1984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.846598][ T8248] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 100.865346][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.018439][ T8267] netlink: 'syz.3.1993': attribute type 1 has an invalid length. [ 101.057619][ T8267] 8021q: adding VLAN 0 to HW filter on device bond9 [ 101.089183][ T8270] 8021q: adding VLAN 0 to HW filter on device bond9 [ 101.099288][ T29] audit: type=1400 audit(1768753873.627:6011): avc: denied { override_creds } for pid=8269 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.123984][ T8250] loop2: detected capacity change from 0 to 512 [ 101.130154][ T8270] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.154896][ T8270] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 101.242689][ T8275] loop2: detected capacity change from 0 to 1024 [ 101.255370][ T8275] EXT4-fs: inline encryption not supported [ 101.300666][ T8275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.337624][ T29] audit: type=1400 audit(1768753873.867:6012): avc: denied { map } for pid=8274 comm="syz.2.1996" path="/409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.388999][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.389625][ T29] audit: type=1400 audit(1768753873.867:6013): avc: denied { execute } for pid=8274 comm="syz.2.1996" path="/409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.497315][ T29] audit: type=1326 audit(1768753874.027:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b0acb9 code=0x7ffc0000 [ 101.521900][ T29] audit: type=1326 audit(1768753874.047:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b0acb9 code=0x7ffc0000 [ 101.545433][ T29] audit: type=1326 audit(1768753874.047:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a6b0acb9 code=0x7ffc0000 [ 101.568884][ T29] audit: type=1326 audit(1768753874.047:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f03a6b0acb9 code=0x7ffc0000 [ 101.906478][ T8319] loop0: detected capacity change from 0 to 1024 [ 101.918112][ T8319] EXT4-fs: Ignoring removed nobh option [ 101.923703][ T8319] EXT4-fs: inline encryption not supported [ 101.949218][ T8319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.024415][ T8318] Process accounting resumed [ 102.038345][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.085714][ T8331] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 102.100824][ T8331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 102.121117][ T8331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 102.130654][ T8331] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 102.143348][ T8331] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 102.151332][ T8339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.165135][ T8339] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.177766][ T8339] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.2021: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.191380][ T8339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 102.203767][ T8339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.203767][ T8339] [ 102.235198][ T8339] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.2021: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.248675][ T8339] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 102.261070][ T8339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.261070][ T8339] [ 102.282651][ T2761] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:15: lblock 4 mapped to illegal pblock 4 (length 2) [ 102.298162][ T2761] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 102.310528][ T2761] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.310528][ T2761] [ 102.321339][ T6456] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.336016][ T6456] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.348416][ T6456] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.348416][ T6456] [ 102.371623][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.401595][ T8348] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2025'. [ 102.427966][ T8350] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.445973][ T8350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.471380][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.577201][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 102.764855][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2039'. [ 102.805427][ T8389] Dead loop on virtual device ip6_vti0, fix it urgently! [ 102.812641][ T8389] Dead loop on virtual device ip6_vti0, fix it urgently! [ 102.825378][ T8382] loop0: p1 < > p4 [ 102.826923][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.836747][ T8382] loop0: p4 size 8388608 extends beyond EOD, truncated [ 102.935719][ T8399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.956983][ T8409] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 102.977188][ T8399] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.100570][ T8409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.129335][ T8418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.144883][ T8418] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.184370][ T8418] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 103.277864][ T3331] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 103.288861][ T3331] CPU: 0 UID: 0 PID: 3331 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.288889][ T3331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.288970][ T3331] Call Trace: [ 103.288977][ T3331] [ 103.288985][ T3331] __dump_stack+0x1d/0x30 [ 103.289040][ T3331] dump_stack_lvl+0x95/0xd0 [ 103.289103][ T3331] dump_stack+0x15/0x1b [ 103.289203][ T3331] dump_header+0x80/0x240 [ 103.289223][ T3331] oom_kill_process+0x295/0x350 [ 103.289248][ T3331] out_of_memory+0x97d/0xb80 [ 103.289271][ T3331] try_charge_memcg+0x62e/0xa10 [ 103.289378][ T3331] charge_memcg+0x51/0xc0 [ 103.289407][ T3331] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 103.289451][ T3331] __read_swap_cache_async+0x17b/0x2d0 [ 103.289481][ T3331] swap_cluster_readahead+0x262/0x3c0 [ 103.289578][ T3331] swapin_readahead+0xde/0x840 [ 103.289608][ T3331] ? __perf_event_task_sched_in+0xa65/0xad0 [ 103.289632][ T3331] ? __rcu_read_unlock+0x4e/0x70 [ 103.289675][ T3331] ? swap_cache_get_folio+0x26f/0x280 [ 103.289702][ T3331] do_swap_page+0x2f4/0x2140 [ 103.289789][ T3331] ? _raw_spin_unlock+0x26/0x50 [ 103.289865][ T3331] ? finish_task_switch+0x79/0x280 [ 103.289895][ T3331] ? __schedule+0x82d/0xc90 [ 103.289920][ T3331] ? __pfx_default_wake_function+0x10/0x10 [ 103.289963][ T3331] handle_mm_fault+0xb40/0x3030 [ 103.290000][ T3331] ? vma_start_read+0x1c7/0x2c0 [ 103.290105][ T3331] do_user_addr_fault+0x62f/0x1050 [ 103.290135][ T3331] exc_page_fault+0x62/0xa0 [ 103.290164][ T3331] asm_exc_page_fault+0x26/0x30 [ 103.290254][ T3331] RIP: 0033:0x7f03a6ac5ed7 [ 103.290272][ T3331] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 103.290291][ T3331] RSP: 002b:00007fffe2c7b470 EFLAGS: 00010202 [ 103.290309][ T3331] RAX: 0000000000000000 RBX: 0000555577e07500 RCX: 00007f03a6ac5ed7 [ 103.290383][ T3331] RDX: 00007fffe2c7b4b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.290396][ T3331] RBP: 00007fffe2c7b51c R08: 0000000000000000 R09: 0000000000000000 [ 103.290459][ T3331] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 103.290513][ T3331] R13: 00000000000927c0 R14: 0000000000019295 R15: 00007fffe2c7b570 [ 103.290532][ T3331] [ 103.290539][ T3331] memory: usage 307200kB, limit 307200kB, failcnt 1768 [ 103.520258][ T3331] memory+swap: usage 195284kB, limit 9007199254740988kB, failcnt 0 [ 103.528294][ T3331] kmem: usage 183616kB, limit 9007199254740988kB, failcnt 0 [ 103.535623][ T3331] Memory cgroup stats for /syz2: [ 103.572059][ T3331] cache 540672 [ 103.580492][ T3331] rss 118784 [ 103.583707][ T3331] shmem 0 [ 103.586762][ T3331] mapped_file 32768 [ 103.590583][ T3331] dirty 32768 [ 103.593867][ T3331] writeback 0 [ 103.597196][ T3331] workingset_refault_anon 202 [ 103.601877][ T3331] workingset_refault_file 1639 [ 103.606670][ T3331] swap 1220608 [ 103.610051][ T3331] swapcached 106496 [ 103.613906][ T3331] pgpgin 107316 [ 103.617407][ T3331] pgpgout 107153 [ 103.621012][ T3331] pgfault 138958 [ 103.624580][ T3331] pgmajfault 135 [ 103.628129][ T3331] inactive_anon 4096 [ 103.632028][ T3331] active_anon 118784 [ 103.635933][ T3331] inactive_file 0 [ 103.639614][ T3331] active_file 544768 [ 103.643534][ T3331] unevictable 0 [ 103.647036][ T3331] hierarchical_memory_limit 314572800 [ 103.652507][ T3331] hierarchical_memsw_limit 9223372036854771712 [ 103.658735][ T3331] total_cache 540672 [ 103.662721][ T3331] total_rss 118784 [ 103.666461][ T3331] total_shmem 0 [ 103.669924][ T3331] total_mapped_file 32768 [ 103.674290][ T3331] total_dirty 32768 [ 103.678104][ T3331] total_writeback 0 [ 103.681915][ T3331] total_workingset_refault_anon 202 [ 103.687229][ T3331] total_workingset_refault_file 1639 [ 103.692518][ T3331] total_swap 1220608 [ 103.696434][ T3331] total_swapcached 106496 [ 103.700762][ T3331] total_pgpgin 107316 [ 103.704811][ T3331] total_pgpgout 107153 [ 103.708878][ T3331] total_pgfault 138958 [ 103.712947][ T3331] total_pgmajfault 135 [ 103.717033][ T3331] total_inactive_anon 4096 [ 103.721455][ T3331] total_active_anon 118784 [ 103.725967][ T3331] total_inactive_file 0 [ 103.730139][ T3331] total_active_file 544768 [ 103.734577][ T3331] total_unevictable 0 [ 103.738570][ T3331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2048,pid=8396,uid=0 [ 103.753286][ T3331] Memory cgroup out of memory: Killed process 8396 (syz.2.2048) total-vm:96048kB, anon-rss:1332kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 104.035821][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.262275][ T8459] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 104.294682][ T8459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.311368][ T8459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.318715][ T8459] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 104.330466][ T8459] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 105.044390][ T8523] netlink: 'syz.2.2099': attribute type 36 has an invalid length. [ 105.077007][ T8523] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.086999][ T8523] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.179432][ T8533] set_capacity_and_notify: 5 callbacks suppressed [ 105.179450][ T8533] loop2: detected capacity change from 0 to 164 [ 105.218848][ T8533] iso9660: Unknown parameter 'mapoveròiderockperm' [ 105.682923][ T8562] loop0: detected capacity change from 0 to 1024 [ 105.823013][ T8562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.857102][ T1703] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 105.888521][ T1703] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.900788][ T1703] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.900788][ T1703] [ 105.910514][ T1703] EXT4-fs (loop0): Total free blocks count 0 [ 105.916560][ T1703] EXT4-fs (loop0): Free/Dirty block details [ 105.922490][ T1703] EXT4-fs (loop0): free_blocks=20480 [ 105.927825][ T1703] EXT4-fs (loop0): dirty_blocks=80 [ 105.933191][ T1703] EXT4-fs (loop0): Block reservation details [ 105.939261][ T1703] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 105.962439][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 106.084119][ T8577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.219861][ T8587] syzkaller1: entered promiscuous mode [ 106.225492][ T8587] syzkaller1: entered allmulticast mode [ 106.318133][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 106.318153][ T29] audit: type=1326 audit(1768753878.847:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.349274][ T29] audit: type=1326 audit(1768753878.847:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.382181][ T29] audit: type=1326 audit(1768753878.907:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.405690][ T29] audit: type=1326 audit(1768753878.907:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.429109][ T29] audit: type=1326 audit(1768753878.907:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.452527][ T29] audit: type=1326 audit(1768753878.907:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.529276][ T29] audit: type=1326 audit(1768753878.907:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.552644][ T29] audit: type=1326 audit(1768753879.017:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.576089][ T29] audit: type=1326 audit(1768753879.017:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8598 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 106.599731][ T29] audit: type=1326 audit(1768753879.017:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.1.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3b94cb58e code=0x7ffc0000 [ 106.826507][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 106.952065][ T8651] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 106.969663][ T8651] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 107.061967][ T8662] loop4: detected capacity change from 0 to 1024 [ 107.074899][ T8662] EXT4-fs: inline encryption not supported [ 107.080767][ T8662] EXT4-fs: Ignoring removed orlov option [ 107.088185][ T8661] loop3: detected capacity change from 0 to 128 [ 107.105723][ T8662] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.116312][ T8661] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.2158: iget: checksum invalid [ 107.134667][ T8661] EXT4-fs (loop3): get root inode failed [ 107.140350][ T8661] EXT4-fs (loop3): mount failed [ 107.169720][ T8662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 107.201306][ T8662] System zones: 0-1, 3-12 [ 107.223775][ T8662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.296123][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.354154][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.361893][ T8683] batadv_slave_0: entered promiscuous mode [ 107.497692][ T8701] loop3: detected capacity change from 0 to 256 [ 107.524584][ T8701] vfat: Unknown parameter 'y¶ðâ߸2{RÜÒK¬e¯ö寳¡‰o¨–ÑV ¸-æ†iAvùë|‡CK3€„u ¹—E><È»µL®0xffffffffffffffff' [ 107.666082][ T8713] syzkaller1: entered promiscuous mode [ 107.671603][ T8713] syzkaller1: entered allmulticast mode [ 107.861314][ T8729] loop0: detected capacity change from 0 to 512 [ 107.889662][ T8729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.898461][ T8729] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.012090][ T8729] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2184: Allocating blocks 41-42 which overlap fs metadata [ 108.034940][ T8729] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2184: Failed to acquire dquot type 1 [ 108.058572][ T8729] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.115435][ T8729] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2184: corrupted inode contents [ 108.138021][ T8729] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2184: mark_inode_dirty error [ 108.154477][ T8729] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2184: corrupted inode contents [ 108.167734][ T8729] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2184: mark_inode_dirty error [ 108.179805][ T8729] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2184: corrupted inode contents [ 108.192143][ T8729] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 108.201437][ T8729] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2184: corrupted inode contents [ 108.214000][ T8729] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2184: mark_inode_dirty error [ 108.226620][ T8729] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 108.236514][ T8729] EXT4-fs (loop0): 1 truncate cleaned up [ 108.242627][ T8729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.347072][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.550672][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.559438][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.572221][ T8748] loop3: detected capacity change from 0 to 32768 [ 108.628021][ T8769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.120851][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 109.217043][ T8793] loop1: detected capacity change from 0 to 256 [ 109.405240][ T8816] loop0: detected capacity change from 0 to 128 [ 109.431542][ T8816] msdos: Unknown parameter '' [ 109.446639][ T8816] loop0: detected capacity change from 0 to 164 [ 109.463111][ T8816] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 109.577569][ T3315] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 109.582886][ T3315] loop3: partition table partially beyond EOD, truncated [ 109.609186][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2228'. [ 109.609836][ T3315] loop3: p1 start 4278190080 is beyond EOD, truncated [ 109.626056][ T3315] loop3: p3 start 4284289 is beyond EOD, truncated [ 109.628635][ T8834] vlan2: entered promiscuous mode [ 109.633363][ T3315] loop3: p5 start 4278190080 is beyond EOD, truncated [ 109.637745][ T8834] gretap0: entered promiscuous mode [ 109.658950][ T8827] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 109.664219][ T8827] loop3: partition table partially beyond EOD, truncated [ 109.671534][ T8827] loop3: p1 start 4278190080 is beyond EOD, truncated [ 109.679537][ T8827] loop3: p3 start 4284289 is beyond EOD, truncated [ 109.687423][ T8827] loop3: p5 start 4278190080 is beyond EOD, truncated [ 109.692068][ T8819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.725389][ T8827] batadv0: entered promiscuous mode [ 109.739339][ T8827] batadv0: left promiscuous mode [ 109.750124][ T3430] kernel write not supported for file bpf-prog (pid: 3430 comm: kworker/0:4) [ 109.874160][ T8849] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2233' sets config #1 [ 110.085344][ T3327] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 110.093047][ T3327] FAT-fs (loop3): Filesystem has been set read-only [ 110.100794][ T3327] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 110.168273][ T8868] gretap2: entered allmulticast mode [ 110.188317][ T982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.252666][ T982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.318103][ T982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.351899][ T982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.440407][ T982] bridge_slave_1: left allmulticast mode [ 110.446225][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.465332][ T982] bridge_slave_0: left allmulticast mode [ 110.471000][ T982] bridge_slave_0: left promiscuous mode [ 110.476837][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.486873][ T982] tipc: Resetting bearer [ 110.492254][ T8886] set_capacity_and_notify: 2 callbacks suppressed [ 110.492312][ T8886] loop2: detected capacity change from 0 to 512 [ 110.515825][ T8886] EXT4-fs: Ignoring removed i_version option [ 110.535880][ T8886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.565620][ T982] bond1 (unregistering): (slave gretap1): Releasing active interface [ 110.578223][ T982] tipc: Disabling bearer [ 110.613692][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.701960][ T982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.720415][ T982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.740597][ T982] bond0 (unregistering): Released all slaves [ 110.768321][ T982] bond1 (unregistering): Released all slaves [ 110.798561][ T982] bond2 (unregistering): Released all slaves [ 110.824912][ T982] bond3 (unregistering): Released all slaves [ 110.844689][ T982] bond4 (unregistering): Released all slaves [ 110.864444][ T982] bond5 (unregistering): Released all slaves [ 110.881511][ T982] bond6 (unregistering): Released all slaves [ 110.895489][ T982] bond7 (unregistering): Released all slaves [ 110.920146][ T982] bond8 (unregistering): Released all slaves [ 110.944361][ T982] bond9 (unregistering): Released all slaves [ 111.013139][ T982] tipc: Left network mode [ 111.101329][ T982] hsr_slave_0: left promiscuous mode [ 111.132257][ T982] hsr_slave_1: left promiscuous mode [ 111.139020][ T8909] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 111.151921][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.159387][ T982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.170989][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.178620][ T982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.199603][ T982] veth1_macvtap: left promiscuous mode [ 111.226865][ T982] veth0_macvtap: left promiscuous mode [ 111.239990][ T982] veth1_vlan: left promiscuous mode [ 111.246393][ T982] veth0_vlan: left promiscuous mode [ 111.325580][ T29] kauditd_printk_skb: 1132 callbacks suppressed [ 111.325600][ T29] audit: type=1326 audit(1768753883.857:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.356783][ T29] audit: type=1326 audit(1768753883.887:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.380338][ T29] audit: type=1326 audit(1768753883.887:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.385796][ T982] team0 (unregistering): Port device team_slave_1 removed [ 111.404293][ T29] audit: type=1326 audit(1768753883.887:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.434862][ T29] audit: type=1326 audit(1768753883.887:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.458489][ T29] audit: type=1326 audit(1768753883.887:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.482069][ T29] audit: type=1326 audit(1768753883.887:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.505604][ T29] audit: type=1326 audit(1768753883.887:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.529115][ T29] audit: type=1326 audit(1768753883.887:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.552627][ T29] audit: type=1326 audit(1768753883.887:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.0.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7fc00000 [ 111.576467][ T982] team0 (unregistering): Port device C removed [ 111.662237][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 111.769331][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.776484][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.791863][ T8872] bridge_slave_0: entered allmulticast mode [ 111.806183][ T8872] bridge_slave_0: entered promiscuous mode [ 111.819773][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.827039][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.838762][ T8872] bridge_slave_1: entered allmulticast mode [ 111.846111][ T8872] bridge_slave_1: entered promiscuous mode [ 111.868647][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.882177][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.894452][ T982] IPVS: stop unused estimator thread 0... [ 111.925577][ T8872] team0: Port device team_slave_0 added [ 111.939708][ T8872] team0: Port device team_slave_1 added [ 111.969023][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.976044][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.002106][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.025658][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.032723][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.058758][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.069990][ T8977] netlink: 'syz.4.2261': attribute type 22 has an invalid length. [ 112.077879][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2261'. [ 112.112413][ T8872] hsr_slave_0: entered promiscuous mode [ 112.118607][ T8872] hsr_slave_1: entered promiscuous mode [ 112.124909][ T8872] debugfs: 'hsr0' already exists in 'hsr' [ 112.130717][ T8872] Cannot create hsr debugfs directory [ 112.149381][ T31] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.149468][ T8977] netlink: 'syz.4.2261': attribute type 22 has an invalid length. [ 112.158523][ T31] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.166024][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2261'. [ 112.179224][ T31] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.202153][ T31] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.318710][ T8872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.327704][ T8872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.336295][ T8872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.346235][ T8872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.367649][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.374802][ T8872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.382193][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.389291][ T8872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.423882][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.437466][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.445338][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.457622][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.467601][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.474820][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.485251][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.492290][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.558487][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.658572][ T9029] loop1: detected capacity change from 0 to 128 [ 112.678408][ T9029] msdos: Unknown parameter '' [ 112.696847][ T9029] loop1: detected capacity change from 0 to 164 [ 112.711915][ T8872] veth0_vlan: entered promiscuous mode [ 112.720817][ T8872] veth1_vlan: entered promiscuous mode [ 112.726464][ T9029] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 112.743922][ T8872] veth0_macvtap: entered promiscuous mode [ 112.755300][ T8872] veth1_macvtap: entered promiscuous mode [ 112.774015][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.794958][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.806713][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.822406][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.834932][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.865004][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.065860][ T9056] loop0: detected capacity change from 0 to 128 [ 113.075064][ T9056] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.089273][ T9056] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.121311][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.299238][ T9073] loop4: detected capacity change from 0 to 128 [ 113.320225][ T9073] msdos: Unknown parameter '' [ 113.341618][ T9073] loop4: detected capacity change from 0 to 164 [ 113.363267][ T9073] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 113.471010][ T9089] loop1: detected capacity change from 0 to 128 [ 113.581639][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.581639][ T1703] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 113.595253][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.595253][ T1703] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 113.609267][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.609267][ T1703] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 113.622801][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.622801][ T1703] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 113.640556][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.640556][ T1703] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 113.654635][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.654635][ T1703] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 113.668393][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.668393][ T1703] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 113.681922][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.681922][ T1703] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 113.695690][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.695690][ T1703] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 113.709282][ T1703] kworker/u8:10: attempt to access beyond end of device [ 113.709282][ T1703] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 113.926264][ T9113] sctp: [Deprecated]: syz.2.2298 (pid 9113) Use of int in max_burst socket option deprecated. [ 113.926264][ T9113] Use struct sctp_assoc_value instead [ 114.297206][ T9131] loop2: detected capacity change from 0 to 8192 [ 114.344397][ T3311] loop2: p1 p2 p4 < > [ 114.348526][ T3311] loop2: partition table partially beyond EOD, truncated [ 114.356026][ T3311] loop2: p1 start 16777216 is beyond EOD, truncated [ 114.362646][ T3311] loop2: p2 size 515840 extends beyond EOD, truncated [ 114.397602][ T3311] loop2: p4 start 16777216 is beyond EOD, truncated [ 114.435255][ T9131] loop2: p1 p2 p4 < > [ 114.439420][ T9131] loop2: partition table partially beyond EOD, truncated [ 114.479476][ T9131] loop2: p1 start 16777216 is beyond EOD, truncated [ 114.486196][ T9131] loop2: p2 size 515840 extends beyond EOD, truncated [ 114.494636][ T9131] loop2: p4 start 16777216 is beyond EOD, truncated [ 114.565733][ T3502] kernel read not supported for file /vcs (pid: 3502 comm: kworker/1:8) [ 114.574504][ T3502] kernel write not supported for file bpf-prog (pid: 3502 comm: kworker/1:8) [ 114.613840][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 114.678842][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 114.696020][ T9149] loop2: detected capacity change from 0 to 2048 [ 114.722568][ T9149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.852070][ T9148] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.879680][ T9148] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2 with error 28 [ 114.892190][ T9148] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.892190][ T9148] [ 114.902154][ T9148] EXT4-fs (loop2): Total free blocks count 0 [ 114.908262][ T9148] EXT4-fs (loop2): Free/Dirty block details [ 114.914358][ T9148] EXT4-fs (loop2): free_blocks=2415919504 [ 114.920126][ T9148] EXT4-fs (loop2): dirty_blocks=16 [ 114.925310][ T9148] EXT4-fs (loop2): Block reservation details [ 114.931339][ T9148] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 114.953016][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.600290][ T9214] netlink: 'syz.2.2339': attribute type 4 has an invalid length. [ 115.631649][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 115.684291][ T9222] loop0: detected capacity change from 0 to 512 [ 115.696926][ T9222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.713969][ T9222] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.747828][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.263776][ T9270] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.421633][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 116.421651][ T29] audit: type=1400 audit(1768753888.937:7834): avc: denied { write } for pid=9285 comm="syz.0.2365" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 116.446681][ T9288] loop1: detected capacity change from 0 to 256 [ 116.464961][ T9291] netlink: 'syz.5.2368': attribute type 4 has an invalid length. [ 116.556645][ T9294] loop5: detected capacity change from 0 to 512 [ 116.571949][ T29] audit: type=1326 audit(1768753889.097:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 116.572631][ T9294] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.595444][ T29] audit: type=1326 audit(1768753889.097:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 116.595480][ T29] audit: type=1326 audit(1768753889.097:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 116.654385][ T29] audit: type=1326 audit(1768753889.097:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 116.731055][ T29] audit: type=1326 audit(1768753889.097:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 116.754498][ T29] audit: type=1400 audit(1768753889.097:7840): avc: denied { nlmsg_write } for pid=9292 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 116.775297][ T29] audit: type=1400 audit(1768753889.097:7841): avc: denied { audit_write } for pid=9292 comm="syz.1.2370" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.796552][ T29] audit: type=1107 audit(1768753889.097:7842): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 116.810047][ T29] audit: type=1326 audit(1768753889.097:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.1.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b950acb9 code=0x7ffc0000 [ 117.095597][ T9322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2381'. [ 117.131575][ T9327] netlink: 'syz.0.2382': attribute type 6 has an invalid length. [ 117.139438][ T9327] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2382'. [ 117.263011][ T9335] loop2: detected capacity change from 0 to 4096 [ 117.281888][ T9335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.461015][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.496650][ T9350] loop4: detected capacity change from 0 to 128 [ 117.707555][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'. [ 117.897489][ T9383] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 117.908476][ T9385] loop5: detected capacity change from 0 to 512 [ 117.935633][ T9385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.944412][ T9385] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.954928][ T9383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 118.004742][ T9387] bond6: (slave geneve3): making interface the new active one [ 118.014410][ T9387] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 118.036874][ T9385] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 118.077345][ T9385] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2407: Failed to acquire dquot type 1 [ 118.148512][ T9385] EXT4-fs (loop5): 1 truncate cleaned up [ 118.159322][ T9385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.205836][ T9385] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.218308][ T9385] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 118.275122][ T9385] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 118.316477][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.370719][ T9402] loop2: detected capacity change from 0 to 1764 [ 118.415117][ T9402] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 118.675809][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2425'. [ 118.684992][ T9434] netlink: 'syz.2.2425': attribute type 2 has an invalid length. [ 118.692731][ T9434] netlink: 'syz.2.2425': attribute type 3 has an invalid length. [ 118.700560][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'. [ 118.786093][ T9445] loop2: detected capacity change from 0 to 512 [ 118.811544][ T9445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.887793][ T9452] loop5: detected capacity change from 0 to 8192 [ 118.894185][ T9445] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.897081][ T9445] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2429: corrupted inode contents [ 118.971975][ T9445] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.2429: mark_inode_dirty error [ 118.994536][ T9445] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2429: corrupted inode contents [ 119.007127][ T9457] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2429: corrupted inode contents [ 119.019261][ T9457] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.2429: mark_inode_dirty error [ 119.034363][ T9457] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2429: corrupted inode contents [ 119.046833][ T9457] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2429: mark_inode_dirty error [ 119.059343][ T9457] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2429: corrupted inode contents [ 119.074236][ T9457] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.2429: mark_inode_dirty error [ 119.093987][ T9445] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.2429: corrupted inode contents [ 119.161324][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.227184][ T9462] cgroup: fork rejected by pids controller in /syz4 [ 119.241648][ T9470] loop2: detected capacity change from 0 to 512 [ 119.278902][ T9470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.316172][ T9470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.345300][ T9470] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.526460][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.736696][ T9777] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 119.775303][ T9777] EXT4-fs (loop2): 1 truncate cleaned up [ 119.807110][ T9777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.914458][ T9784] EXT4-fs: Ignoring removed nobh option [ 119.918707][ T9790] EXT4-fs: Ignoring removed oldalloc option [ 119.920109][ T9784] EXT4-fs: inline encryption not supported [ 119.939633][ T9790] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.2448: dx entry: limit 1024 != root limit 124 [ 119.951739][ T9790] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2448: Corrupt directory, running e2fsck is recommended [ 119.966059][ T9786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=9786 comm=syz.1.2447 [ 119.977664][ T9790] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 119.988206][ T9784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.995151][ T9790] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.2448: corrupted in-inode xattr: invalid ea_ino [ 120.016227][ T9790] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2448: couldn't read orphan inode 15 (err -117) [ 120.033047][ T9796] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.052821][ T9784] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2445: Allocating blocks 385-513 which overlap fs metadata [ 120.067165][ T9777] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2442: invalid indirect mapped block 4294901760 (level 0) [ 120.075039][ T9790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.100620][ T9777] EXT4-fs (loop2): Remounting filesystem read-only [ 120.107875][ T9796] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.109012][ T9784] EXT4-fs (loop4): pa ffff888107a821c0: logic 16, phys. 129, len 24 [ 120.125120][ T9784] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 120.136050][ T9784] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 120.148298][ T9784] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.148298][ T9784] [ 120.158078][ T9784] EXT4-fs (loop4): Total free blocks count 0 [ 120.164165][ T9784] EXT4-fs (loop4): Free/Dirty block details [ 120.170106][ T9784] EXT4-fs (loop4): free_blocks=128 [ 120.175293][ T9784] EXT4-fs (loop4): dirty_blocks=0 [ 120.180419][ T9784] EXT4-fs (loop4): Block reservation details [ 120.186478][ T9784] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 120.192478][ T2031] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.202211][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.484601][ T9823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.493408][ T9823] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.509080][ T9823] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 120.523775][ T9823] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2461: Failed to acquire dquot type 1 [ 120.536870][ T9823] EXT4-fs (loop0): 1 truncate cleaned up [ 120.543065][ T9823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.561148][ T9823] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.581926][ T9823] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 120.594681][ T9823] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 120.614672][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.631813][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.695208][ T9830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.729746][ T9830] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.746022][ T9830] EXT4-fs (loop0): Online defrag not supported for non-extent files [ 120.765299][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.923637][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2468'. [ 120.953336][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 121.090938][ T9856] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2474'. [ 121.284045][ T9876] set_capacity_and_notify: 6 callbacks suppressed [ 121.290738][ T9876] loop0: detected capacity change from 0 to 512 [ 121.322406][ T9876] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.375040][ T9876] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 121.409618][ T3322] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 121.430298][ T9884] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.864442][ T9907] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.932797][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 121.932815][ T29] audit: type=1400 audit(1768753894.457:8144): avc: denied { ioctl } for pid=9908 comm="syz.4.2496" path="socket:[24497]" dev="sockfs" ino=24497 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.964890][ T29] audit: type=1326 audit(1768753894.477:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 121.988389][ T29] audit: type=1326 audit(1768753894.477:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.011914][ T29] audit: type=1326 audit(1768753894.477:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.035437][ T29] audit: type=1326 audit(1768753894.477:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.060064][ T29] audit: type=1326 audit(1768753894.477:8149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.083485][ T29] audit: type=1326 audit(1768753894.487:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.106984][ T29] audit: type=1326 audit(1768753894.487:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9912 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4320cb58e code=0x7ffc0000 [ 122.130442][ T29] audit: type=1326 audit(1768753894.487:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.153855][ T29] audit: type=1326 audit(1768753894.487:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 122.215327][ T9923] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.558825][ T9961] netlink: 'syz.2.2512': attribute type 30 has an invalid length. [ 122.575207][ T9963] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.660181][ T9974] syzkaller1: entered promiscuous mode [ 122.665921][ T9974] syzkaller1: entered allmulticast mode [ 122.708481][ T9977] loop2: detected capacity change from 0 to 1024 [ 122.719371][ T9977] EXT4-fs: Ignoring removed nobh option [ 122.725020][ T9977] EXT4-fs: inline encryption not supported [ 122.746298][ T9977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.770289][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.848769][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 123.008659][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 123.071876][T10006] loop2: detected capacity change from 0 to 512 [ 123.091865][T10006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.114729][T10006] EXT4-fs (loop2): 1 truncate cleaned up [ 123.124658][T10006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.168247][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.226115][T10020] loop1: detected capacity change from 0 to 512 [ 123.238816][T10020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.286417][T10020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.302582][T10020] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.337533][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.484613][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 123.544440][ T3410] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.565462][ T3410] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.591919][T10068] batadv_slave_0: entered promiscuous mode [ 123.610022][T10068] batadv_slave_0: left promiscuous mode [ 123.815534][T10101] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 123.968204][T10121] loop1: detected capacity change from 0 to 1024 [ 123.983558][T10121] EXT4-fs: Ignoring removed orlov option [ 123.989449][T10121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.051603][T10121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.077387][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.201216][T10137] loop1: detected capacity change from 0 to 512 [ 124.210222][T10137] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.225432][T10137] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 124.248443][ T3329] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 124.557561][T10164] loop4: detected capacity change from 0 to 512 [ 124.566680][T10164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.579853][T10164] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.592069][T10164] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 201326609 (only 1 groups) [ 124.617145][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.629610][T10172] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2577'. [ 124.639406][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.646975][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.659929][T10172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10172 comm=syz.2.2577 [ 124.672569][T10172] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2577'. [ 124.837413][T10185] loop2: detected capacity change from 0 to 1024 [ 124.844627][T10185] EXT4-fs: Ignoring removed orlov option [ 124.850668][T10185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.867828][T10185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.897693][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.021416][T10207] loop2: detected capacity change from 0 to 512 [ 125.043501][T10207] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.149103][T10209] syzkaller1: entered promiscuous mode [ 125.154792][T10209] syzkaller1: entered allmulticast mode [ 125.385308][T10231] netlink: 'syz.0.2600': attribute type 29 has an invalid length. [ 125.397851][T10231] netlink: 'syz.0.2600': attribute type 29 has an invalid length. [ 125.409306][T10231] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2600'. [ 125.492603][T10242] loop0: detected capacity change from 0 to 128 [ 125.508559][T10242] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 125.531306][T10245] syzkaller1: entered promiscuous mode [ 125.536965][T10245] syzkaller1: entered allmulticast mode [ 125.615619][T10250] EXT4-fs: Ignoring removed nobh option [ 125.662484][T10253] EXT4-fs: Ignoring removed oldalloc option [ 125.668585][T10253] EXT4-fs: Ignoring removed bh option [ 125.689883][T10253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.707628][T10253] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 125.725052][T10250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.763514][T10250] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 125.823661][ T2031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.835962][ T2031] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.835962][ T2031] [ 125.845838][ T2031] EXT4-fs (loop1): Total free blocks count 0 [ 125.851844][ T2031] EXT4-fs (loop1): Free/Dirty block details [ 125.857812][ T2031] EXT4-fs (loop1): free_blocks=20480 [ 125.863104][ T2031] EXT4-fs (loop1): dirty_blocks=16 [ 125.868348][ T2031] EXT4-fs (loop1): Block reservation details [ 125.874431][ T2031] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 125.891001][ T3430] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.916480][ T3430] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.180079][T10288] syzkaller1: entered promiscuous mode [ 126.186757][T10288] syzkaller1: entered allmulticast mode [ 126.297461][T10296] set_capacity_and_notify: 2 callbacks suppressed [ 126.297479][T10296] loop1: detected capacity change from 0 to 512 [ 126.318648][T10296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.341063][T10296] EXT4-fs (loop1): 1 truncate cleaned up [ 126.502459][T10307] loop5: detected capacity change from 0 to 512 [ 126.510142][T10307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.526892][T10307] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.687349][T10320] loop5: detected capacity change from 0 to 512 [ 126.724791][T10320] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 126.747437][T10320] EXT4-fs (loop5): 1 truncate cleaned up [ 126.834751][T10333] loop4: detected capacity change from 0 to 8192 [ 126.989597][T10320] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2633: invalid indirect mapped block 4294901760 (level 0) [ 127.043546][T10320] EXT4-fs (loop5): Remounting filesystem read-only [ 127.391616][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 127.391635][ T29] audit: type=1400 audit(1768753899.917:8558): avc: denied { read } for pid=10346 comm="syz.1.2644" path="socket:[27041]" dev="sockfs" ino=27041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.443509][ T29] audit: type=1400 audit(1768753899.967:8559): avc: denied { ioctl } for pid=10346 comm="syz.1.2644" path="socket:[27041]" dev="sockfs" ino=27041 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.596478][ T29] audit: type=1400 audit(1768753900.127:8560): avc: denied { mount } for pid=10352 comm="syz.1.2646" name="/" dev="ramfs" ino=27056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 127.650131][ T29] audit: type=1400 audit(1768753900.147:8561): avc: denied { watch watch_reads } for pid=10352 comm="syz.1.2646" path="/" dev="ramfs" ino=27056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 127.940229][ T29] audit: type=1400 audit(1768753900.467:8562): avc: denied { map } for pid=10384 comm="syz.0.2660" path="socket:[27121]" dev="sockfs" ino=27121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 127.978710][ T29] audit: type=1400 audit(1768753900.507:8563): avc: denied { read } for pid=3527 comm="kworker/0:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26198 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.423106][T10405] loop0: detected capacity change from 0 to 512 [ 128.434560][T10405] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 3: comm syz.0.2667: lblock 0 mapped to illegal pblock 3 (length 1) [ 128.455344][T10405] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.2667: error -117 reading directory block [ 128.471986][T10405] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 128.525019][T10408] loop0: detected capacity change from 0 to 2048 [ 128.566864][ T60] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 128.582330][ T60] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 160 with error 28 [ 128.594765][ T60] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.594765][ T60] [ 128.604502][ T60] EXT4-fs (loop0): Total free blocks count 0 [ 128.610601][ T60] EXT4-fs (loop0): Free/Dirty block details [ 128.616536][ T60] EXT4-fs (loop0): free_blocks=66060288 [ 128.622199][ T60] EXT4-fs (loop0): dirty_blocks=160 [ 128.627451][ T60] EXT4-fs (loop0): Block reservation details [ 128.633599][ T60] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 128.704791][ T29] audit: type=1326 audit(1768753901.237:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 128.750749][ T29] audit: type=1326 audit(1768753901.237:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 128.774367][ T29] audit: type=1326 audit(1768753901.237:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 128.798019][ T29] audit: type=1326 audit(1768753901.237:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.0.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 128.880261][T10444] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2685'. [ 128.889408][T10444] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2685'. [ 128.928912][T10448] loop1: detected capacity change from 0 to 512 [ 128.951683][T10452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2688'. [ 128.960750][T10452] netlink: 'syz.2.2688': attribute type 7 has an invalid length. [ 128.968782][T10452] netlink: 'syz.2.2688': attribute type 8 has an invalid length. [ 128.969627][T10448] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.976569][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 129.043887][T10448] EXT4-fs (loop1): 1 orphan inode deleted [ 129.049750][T10448] EXT4-fs (loop1): 1 truncate cleaned up [ 129.068619][T10448] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.2686: path /454/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 129.138182][T10448] EXT4-fs (loop1): Remounting filesystem read-only [ 129.855378][T10543] loop0: detected capacity change from 0 to 128 [ 130.537952][T10630] netlink: 'syz.0.2717': attribute type 13 has an invalid length. [ 130.557289][T10637] loop2: detected capacity change from 0 to 128 [ 130.593024][T10637] EXT4-fs mount: 14 callbacks suppressed [ 130.593043][T10637] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.612497][T10637] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.668895][ T3331] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.000057][T10671] loop5: detected capacity change from 0 to 512 [ 131.012339][T10671] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.034868][T10671] EXT4-fs (loop5): 1 orphan inode deleted [ 131.040859][T10671] EXT4-fs (loop5): 1 truncate cleaned up [ 131.068337][T10671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.103085][T10671] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.2732: path /88/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 131.126185][T10671] EXT4-fs (loop5): Remounting filesystem read-only [ 131.143475][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.266213][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2739'. [ 131.282703][T10690] netlink: 'syz.4.2739': attribute type 2 has an invalid length. [ 131.345941][T10698] loop5: detected capacity change from 0 to 128 [ 131.371705][T10700] loop4: detected capacity change from 0 to 1024 [ 131.385577][T10700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.401708][T10700] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.416307][T10698] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.416625][T10700] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2744: bg 0: block 112: padding at end of block bitmap is not set [ 131.438956][T10698] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.456854][T10699] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 1: comm syz.4.2744: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.488631][T10700] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.2744: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.503225][T10700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 131.515538][T10700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.515538][T10700] [ 131.565383][T10700] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.2744: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.593326][T10700] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.2744: lblock 0 mapped to illegal pblock 0 (length 1) [ 131.633151][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.668355][T10710] loop0: detected capacity change from 0 to 512 [ 131.685600][T10710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.700045][T10709] loop4: detected capacity change from 0 to 512 [ 131.727399][T10709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.750453][T10710] EXT4-fs (loop0): 1 orphan inode deleted [ 131.756288][T10710] EXT4-fs (loop0): 1 truncate cleaned up [ 131.758498][T10709] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.774387][T10710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.791293][T10710] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.2748: path /560/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 131.842701][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.865710][T10717] loop5: detected capacity change from 0 to 128 [ 131.871519][T10710] EXT4-fs (loop0): Remounting filesystem read-only [ 131.881343][T10717] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.894642][T10717] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.926556][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.951275][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.230807][T10741] loop1: detected capacity change from 0 to 512 [ 132.240241][T10741] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.2759: corrupted in-inode xattr: invalid ea_ino [ 132.254580][T10741] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2759: couldn't read orphan inode 15 (err -117) [ 132.267527][T10741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.332573][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.387188][T10748] loop1: detected capacity change from 0 to 1024 [ 132.394182][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 132.394205][ T29] audit: type=1326 audit(1768753904.917:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f983accc0d9 code=0x7ffc0000 [ 132.420932][T10748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.424261][ T29] audit: type=1326 audit(1768753904.927:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 132.444748][T10748] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2762: missing EA_INODE flag [ 132.459362][ T29] audit: type=1326 audit(1768753904.927:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f983ad24ad7 code=0x7ffc0000 [ 132.474887][T10706] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 132.494266][ T29] audit: type=1326 audit(1768753904.927:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f983accc0d9 code=0x7ffc0000 [ 132.525653][ T29] audit: type=1326 audit(1768753904.927:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 132.526217][T10748] EXT4-fs (loop1): Remounting filesystem read-only [ 132.549015][ T29] audit: type=1326 audit(1768753904.937:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f983ad24ad7 code=0x7ffc0000 [ 132.549050][ T29] audit: type=1326 audit(1768753904.937:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f983accc0d9 code=0x7ffc0000 [ 132.549079][ T29] audit: type=1326 audit(1768753904.937:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 132.581374][ T29] audit: type=1326 audit(1768753904.967:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f983ad24ad7 code=0x7ffc0000 [ 132.649541][ T29] audit: type=1326 audit(1768753904.967:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f983accc0d9 code=0x7ffc0000 [ 132.691661][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.734128][T10755] SELinux: failed to load policy [ 132.766648][T10757] loop2: detected capacity change from 0 to 512 [ 132.773258][T10757] EXT4-fs: Ignoring removed bh option [ 132.795045][T10763] loop1: detected capacity change from 0 to 128 [ 132.802261][T10757] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.811474][T10757] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 132.827046][T10757] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 132.838494][T10757] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 132.842373][T10763] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.847029][T10757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.885052][T10763] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.912024][ T3329] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.934313][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.960853][T10775] loop2: detected capacity change from 0 to 1024 [ 132.972079][T10775] EXT4-fs: Ignoring removed nobh option [ 132.977771][T10775] EXT4-fs: inline encryption not supported [ 133.019164][T10775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.181762][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.481967][T10817] EXT4-fs: Ignoring removed nobh option [ 133.487647][T10817] EXT4-fs: inline encryption not supported [ 133.495634][T10819] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2787'. [ 133.516818][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.517372][T10817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.595292][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.174598][T10878] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 134.227370][T10878] SELinux: failed to load policy [ 134.233275][T10886] 9p: Bad value for 'rfdno' [ 134.266041][T10888] netlink: 'syz.1.2814': attribute type 12 has an invalid length. [ 134.564020][T10909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.573123][T10909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.613926][T10915] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2825: inode has both inline data and extents flags [ 134.627499][T10915] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2825: couldn't read orphan inode 15 (err -117) [ 134.641017][T10915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.968883][T10936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.981356][T10936] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.008187][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.107158][T10942] tipc: Started in network mode [ 135.112150][T10942] tipc: Node identity ac14140f, cluster identity 4711 [ 135.141673][T10942] tipc: New replicast peer: 255.255.255.255 [ 135.148060][T10942] tipc: Enabled bearer , priority 10 [ 135.208531][T10949] EXT4-fs: Ignoring removed bh option [ 135.233057][T10949] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 135.262537][T10949] EXT4-fs (loop0): 1 truncate cleaned up [ 135.272583][T10949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.309369][T10953] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2841'. [ 135.338272][T10953] netlink: zone id is out of range [ 135.343520][T10953] netlink: zone id is out of range [ 135.348687][T10953] netlink: zone id is out of range [ 135.366199][T10953] netlink: zone id is out of range [ 135.371377][T10953] netlink: zone id is out of range [ 135.391530][T10953] netlink: zone id is out of range [ 135.396708][T10953] netlink: zone id is out of range [ 135.401841][T10953] netlink: zone id is out of range [ 135.407009][T10953] netlink: zone id is out of range [ 135.412195][T10953] netlink: zone id is out of range [ 135.448520][T10964] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 135.496640][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.810981][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.414179][ T3430] tipc: Node number set to 2886997007 [ 136.918856][T11017] set_capacity_and_notify: 6 callbacks suppressed [ 136.918875][T11017] loop0: detected capacity change from 0 to 512 [ 136.940964][T11017] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2860: inode has both inline data and extents flags [ 136.954594][T11017] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2860: couldn't read orphan inode 15 (err -117) [ 136.968688][T11017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.981415][T11015] netlink: 'syz.5.2859': attribute type 4 has an invalid length. [ 137.017700][T11015] netlink: 'syz.5.2859': attribute type 4 has an invalid length. [ 137.067971][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.097683][T11032] loop0: detected capacity change from 0 to 128 [ 137.107975][T11032] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.132808][T11032] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.162794][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.195157][T11036] loop0: detected capacity change from 0 to 512 [ 137.203485][T11036] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.2867: corrupted in-inode xattr: invalid ea_ino [ 137.217583][T11036] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2867: couldn't read orphan inode 15 (err -117) [ 137.231116][T11036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.324860][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.601428][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 137.601447][ T29] audit: type=1400 audit(1768753910.127:9798): avc: denied { read } for pid=11047 comm="syz.1.2871" path="socket:[28099]" dev="sockfs" ino=28099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.872229][T11050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.986368][T11068] gtp0: entered promiscuous mode [ 138.256674][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 138.343050][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 138.358416][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 138.381580][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'. [ 138.391595][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 138.408040][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 138.438364][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 138.454048][T11117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 138.471830][T11121] loop1: detected capacity change from 0 to 512 [ 138.494331][T11121] EXT4-fs (loop1): 1 truncate cleaned up [ 138.494690][T11117] bond8 (unregistering): Released all slaves [ 138.504865][T11121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.523416][T11121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2899: bg 0: block 465: padding at end of block bitmap is not set [ 138.538315][T11121] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 138.550693][T11121] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.550693][T11121] [ 138.560438][T11121] EXT4-fs (loop1): Total free blocks count 0 [ 138.566522][T11121] EXT4-fs (loop1): Free/Dirty block details [ 138.572421][T11121] EXT4-fs (loop1): free_blocks=0 [ 138.577426][T11121] EXT4-fs (loop1): dirty_blocks=28 [ 138.582538][T11121] EXT4-fs (loop1): Block reservation details [ 138.588608][T11121] EXT4-fs (loop1): i_reserved_data_blocks=28 [ 138.609402][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.683211][T11131] syzkaller1: entered promiscuous mode [ 138.688766][T11131] syzkaller1: entered allmulticast mode [ 139.236963][ T29] audit: type=1326 audit(1768753911.767:9799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.267917][ T29] audit: type=1326 audit(1768753911.787:9800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.291625][ T29] audit: type=1326 audit(1768753911.787:9801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.315328][ T29] audit: type=1326 audit(1768753911.787:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.339062][ T29] audit: type=1326 audit(1768753911.787:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.362585][ T29] audit: type=1326 audit(1768753911.787:9804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.386217][ T29] audit: type=1326 audit(1768753911.787:9805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.409683][ T29] audit: type=1326 audit(1768753911.787:9806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43210acb9 code=0x7ffc0000 [ 139.433263][ T29] audit: type=1326 audit(1768753911.787:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd4320cb58e code=0x7ffc0000 [ 139.530759][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'. [ 139.629866][T11176] 9p: Unknown access argument 18446744073709551615: -34 [ 139.862745][T11193] bridge0: port 3(gretap0) entered blocking state [ 139.869353][T11193] bridge0: port 3(gretap0) entered disabled state [ 139.876771][T11193] gretap0: entered allmulticast mode [ 140.256434][T11207] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2932'. [ 140.302469][T11210] xt_hashlimit: size too large, truncated to 1048576 [ 140.686110][T11226] netlink: 'syz.5.2939': attribute type 1 has an invalid length. [ 140.707579][T11226] bond1: (slave geneve2): making interface the new active one [ 140.715524][T11226] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.724223][ T6936] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.733886][ T6936] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.742941][ T6936] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.751908][ T1703] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 142.240514][T11309] loop1: detected capacity change from 0 to 512 [ 142.259318][T11309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.282873][T11309] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.593914][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2972'. [ 142.711155][T11328] loop5: detected capacity change from 0 to 1024 [ 142.737031][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 142.737121][ T29] audit: type=1326 audit(1768753915.257:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 142.774708][T11328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.821345][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.845813][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.894552][ T3431] kernel write not supported for file [eventfd] (pid: 3431 comm: kworker/1:5) [ 142.959204][T11342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.966479][T11342] IPv6: NLM_F_CREATE should be set when creating new route [ 142.973687][T11342] IPv6: NLM_F_CREATE should be set when creating new route [ 143.012865][T11344] loop5: detected capacity change from 0 to 512 [ 143.039261][T11344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.054596][T11348] syzkaller0: entered promiscuous mode [ 143.060115][T11348] syzkaller0: entered allmulticast mode [ 143.073422][T11344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.086567][T11344] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.107452][ T29] audit: type=1400 audit(1768753915.637:9876): avc: denied { relabelfrom } for pid=11347 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 143.127480][ T29] audit: type=1400 audit(1768753915.637:9877): avc: denied { relabelto } for pid=11347 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 143.179475][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.604693][T11398] loop2: detected capacity change from 0 to 512 [ 143.607784][T11400] SELinux: failed to load policy [ 143.643639][T11398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.655669][T11398] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2996: bg 0: block 4: invalid block bitmap [ 143.668486][T11398] EXT4-fs (loop2): Remounting filesystem read-only [ 143.675220][T11398] EXT4-fs (loop2): 1 truncate cleaned up [ 143.681354][T11398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.708117][T11406] loop0: detected capacity change from 0 to 1024 [ 143.716938][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.724571][T11406] EXT4-fs: inline encryption not supported [ 143.738366][ T29] audit: type=1400 audit(1768753916.267:9878): avc: denied { bind } for pid=11408 comm="syz.5.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.759076][T11406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.791643][ T29] audit: type=1400 audit(1768753916.287:9879): avc: denied { write } for pid=11408 comm="syz.5.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.811684][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.842398][ T29] audit: type=1326 audit(1768753916.367:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 143.879774][ T29] audit: type=1326 audit(1768753916.397:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 143.903370][ T29] audit: type=1326 audit(1768753916.397:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 143.926986][ T29] audit: type=1326 audit(1768753916.397:9883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 143.950559][ T29] audit: type=1326 audit(1768753916.397:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983ad2acb9 code=0x7ffc0000 [ 143.982949][T11418] netlink: 'syz.2.3003': attribute type 5 has an invalid length. [ 144.012566][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 144.048460][T11422] 8021q: adding VLAN 0 to HW filter on device bond8 [ 144.077819][T11422] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 144.201089][T11428] bond8 (unregistering): (slave dummy0): Releasing backup interface [ 144.227791][T11428] bond8 (unregistering): Released all slaves [ 144.298282][T11431] loop1: detected capacity change from 0 to 512 [ 144.371973][T11434] xt_hashlimit: size too large, truncated to 1048576 [ 144.451500][T11431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.611041][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.650718][T11443] loop1: detected capacity change from 0 to 128 [ 144.666464][T11443] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 144.680920][T11443] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.693453][T11443] ext2 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.723460][ T3329] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.783992][T11447] loop0: detected capacity change from 0 to 512 [ 144.805663][T11447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.854805][T11447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.898663][T11447] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.943725][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.969340][T11458] loop1: detected capacity change from 0 to 1024 [ 145.000510][T11458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.025669][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.096738][T11462] loop0: detected capacity change from 0 to 512 [ 145.117385][T11462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.132963][T11462] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.185884][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.242013][T11466] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.277431][T11468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.318131][T11466] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.3019: Allocating blocks 41-42 which overlap fs metadata [ 145.332383][T11466] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.3019: Allocating blocks 41-42 which overlap fs metadata [ 145.346542][T11466] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3019: Failed to acquire dquot type 1 [ 145.355853][T11468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.358288][T11466] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 145.389780][T11468] ext4 filesystem being mounted at /604/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.396925][T11466] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3019: corrupted inode contents [ 145.412732][T11466] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.3019: mark_inode_dirty error [ 145.429980][T11466] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3019: corrupted inode contents [ 145.481577][T11466] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.3019: mark_inode_dirty error [ 145.506396][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.532782][T11466] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3019: corrupted inode contents [ 145.567576][T11466] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 145.578893][T11486] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.598078][T11466] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.3019: corrupted inode contents [ 145.610529][T11486] bridge0: entered allmulticast mode [ 145.619321][T11466] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.3019: mark_inode_dirty error [ 145.645089][T11466] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 145.656296][T11466] EXT4-fs (loop1): 1 truncate cleaned up [ 145.662743][T11466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.747320][T11495] EXT4-fs: Ignoring removed bh option [ 145.782656][T11495] EXT4-fs: inline encryption not supported [ 145.807972][T11495] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.824367][T11495] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 145.833555][T11495] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.3039: lblock 2 mapped to illegal pblock 2 (length 1) [ 145.848094][T11495] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.3039: lblock 0 mapped to illegal pblock 48 (length 1) [ 145.862752][T11495] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3039: Failed to acquire dquot type 0 [ 145.862879][T11466] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.3019: Allocating blocks 41-42 which overlap fs metadata [ 145.888671][T11495] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 145.898586][T11495] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.3039: mark_inode_dirty error [ 145.910521][T11495] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 145.910605][T11466] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3019: Failed to acquire dquot type 1 [ 145.921039][T11495] EXT4-fs (loop0): 1 orphan inode deleted [ 145.938048][T10619] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.938400][T11495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.965249][T10619] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 0 [ 146.048059][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.084680][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.097355][ T3322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 146.110472][ T3322] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 146.132842][ T3322] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 146.206587][T11524] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.3042'. [ 146.376823][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3055'. [ 146.431776][T11554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.470526][ T6936] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.479558][ T6936] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.489388][ T6936] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.498470][ T6936] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.519748][ T6936] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.528779][ T6936] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.539515][ T6936] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.548586][ T6936] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.678584][T11568] tipc: Started in network mode [ 146.683486][T11568] tipc: Node identity 9e33bc917026, cluster identity 4711 [ 146.690763][T11568] tipc: Enabled bearer , priority 0 [ 146.724445][T11568] syzkaller0: entered promiscuous mode [ 146.729987][T11568] syzkaller0: entered allmulticast mode [ 146.736228][T11568] tipc: Resetting bearer [ 146.744711][T11567] tipc: Resetting bearer [ 146.760734][T11567] tipc: Disabling bearer [ 146.822111][T11575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.841361][ T3430] kernel write not supported for file 1439/net/vlan/vlan1 (pid: 3430 comm: kworker/0:4) [ 146.907158][T11575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.967810][T11575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.014897][ C1] net_ratelimit: 1744 callbacks suppressed [ 147.014917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 147.036639][T11575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.090880][ T2031] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.101626][ T6843] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.113312][ T6843] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.124428][ T6843] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.192501][T11584] ext4 filesystem being mounted at /548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.226471][T11584] EXT4-fs (loop1): shut down requested (1) [ 147.278654][T11591] set_capacity_and_notify: 4 callbacks suppressed [ 147.278673][T11591] loop1: detected capacity change from 0 to 512 [ 147.302588][T11591] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.326392][T11591] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3068: invalid indirect mapped block 83886080 (level 1) [ 147.352462][T11591] EXT4-fs (loop1): Remounting filesystem read-only [ 147.363544][T11591] EXT4-fs (loop1): 1 orphan inode deleted [ 147.369379][T11591] EXT4-fs (loop1): 1 truncate cleaned up [ 147.369715][T11603] loop0: detected capacity change from 0 to 1024 [ 147.379283][T11591] EXT4-fs (loop1): shut down requested (1) [ 147.381988][T11603] EXT4-fs: Ignoring removed bh option [ 147.443182][T11611] loop5: detected capacity change from 0 to 1024 [ 147.450229][T11611] EXT4-fs: inline encryption not supported [ 147.474328][T11611] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.3076: Allocating blocks 497-513 which overlap fs metadata [ 147.492325][T11611] EXT4-fs (loop5): Remounting filesystem read-only [ 147.500404][T11611] EXT4-fs (loop5): pa ffff888107a82310: logic 256, phys. 369, len 9 [ 147.575133][T11626] loop0: detected capacity change from 0 to 512 [ 147.583710][T11626] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 147.594416][T11626] EXT4-fs (loop0): invalid journal inode [ 147.600148][T11626] EXT4-fs (loop0): can't get journal size [ 147.607567][T11626] EXT4-fs (loop0): 1 truncate cleaned up [ 147.615606][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'. [ 147.641168][T11631] loop0: detected capacity change from 0 to 128 [ 147.648156][T11631] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.660530][T11631] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.995018][T11634] ================================================================== [ 148.003135][T11634] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 148.010537][T11634] [ 148.012867][T11634] write to 0xffff88811bd77814 of 4 bytes by interrupt on cpu 0: [ 148.020514][T11634] __xa_clear_mark+0x1c6/0x1e0 [ 148.025311][T11634] __folio_end_writeback+0xf4/0x360 [ 148.030549][T11634] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 148.036822][T11634] folio_end_writeback+0x1c/0x70 [ 148.041826][T11634] end_buffer_async_write+0x156/0x1f0 [ 148.047223][T11634] end_bio_bh_io_sync+0x79/0xa0 [ 148.052110][T11634] bio_endio+0x37a/0x410 [ 148.056393][T11634] blk_update_request+0x338/0x730 [ 148.061454][T11634] blk_mq_end_request+0x26/0x50 [ 148.066346][T11634] lo_complete_rq+0x98/0x140 [ 148.070962][T11634] blk_done_softirq+0x77/0xb0 [ 148.075673][T11634] handle_softirqs+0xb9/0x280 [ 148.080383][T11634] run_ksoftirqd+0x1c/0x30 [ 148.084832][T11634] smpboot_thread_fn+0x32a/0x510 [ 148.089802][T11634] kthread+0x488/0x510 [ 148.093905][T11634] ret_from_fork+0x148/0x280 [ 148.098508][T11634] ret_from_fork_asm+0x1a/0x30 [ 148.103310][T11634] [ 148.105650][T11634] read to 0xffff88811bd77814 of 4 bytes by task 11634 on cpu 1: [ 148.113286][T11634] xas_find_marked+0x5d7/0x620 [ 148.118059][T11634] find_get_entry+0x5d/0x380 [ 148.122670][T11634] filemap_get_folios_tag+0xb6/0x230 [ 148.127988][T11634] file_write_and_wait_range+0x20c/0x2f0 [ 148.133645][T11634] __generic_file_fsync+0x46/0x160 [ 148.138770][T11634] fat_file_fsync+0x49/0x100 [ 148.143390][T11634] vfs_fsync_range+0x10d/0x130 [ 148.148176][T11634] generic_file_write_iter+0x1ba/0x310 [ 148.153661][T11634] iter_file_splice_write+0x6bc/0xa80 [ 148.159051][T11634] direct_splice_actor+0x156/0x2a0 [ 148.164189][T11634] splice_direct_to_actor+0x311/0x670 [ 148.169581][T11634] do_splice_direct+0x119/0x1a0 [ 148.174446][T11634] do_sendfile+0x380/0x650 [ 148.178891][T11634] __x64_sys_sendfile64+0x105/0x150 [ 148.184109][T11634] x64_sys_call+0x2db1/0x3000 [ 148.188803][T11634] do_syscall_64+0xc0/0x2a0 [ 148.193331][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.199246][T11634] [ 148.201572][T11634] value changed: 0x0e000021 -> 0x04000021 [ 148.207311][T11634] [ 148.209649][T11634] Reported by Kernel Concurrency Sanitizer on: [ 148.215814][T11634] CPU: 1 UID: 0 PID: 11634 Comm: syz.0.3083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.225635][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.235706][T11634] ================================================================== [ 148.277362][T11634] ================================================================== [ 148.285465][T11634] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 148.293354][T11634] [ 148.295666][T11634] write to 0xffff88811bd77814 of 4 bytes by task 11631 on cpu 1: [ 148.303370][T11634] xas_set_mark+0x12b/0x140 [ 148.307862][T11634] __folio_start_writeback+0x17b/0x370 [ 148.313317][T11634] __block_write_full_folio+0x53a/0x8f0 [ 148.318854][T11634] block_write_full_folio+0x2c1/0x2e0 [ 148.324222][T11634] mpage_writepages+0x710/0x1310 [ 148.329152][T11634] fat_writepages+0x24/0x30 [ 148.333643][T11634] do_writepages+0x1c6/0x310 [ 148.338227][T11634] file_write_and_wait_range+0x178/0x2f0 [ 148.343850][T11634] __generic_file_fsync+0x46/0x160 [ 148.348954][T11634] fat_file_fsync+0x49/0x100 [ 148.353533][T11634] vfs_fsync_range+0x10d/0x130 [ 148.358289][T11634] generic_file_write_iter+0x1ba/0x310 [ 148.363739][T11634] iter_file_splice_write+0x6bc/0xa80 [ 148.369185][T11634] direct_splice_actor+0x156/0x2a0 [ 148.374287][T11634] splice_direct_to_actor+0x311/0x670 [ 148.379649][T11634] do_splice_direct+0x119/0x1a0 [ 148.384496][T11634] do_sendfile+0x380/0x650 [ 148.388959][T11634] __x64_sys_sendfile64+0x105/0x150 [ 148.394201][T11634] x64_sys_call+0x2db1/0x3000 [ 148.398889][T11634] do_syscall_64+0xc0/0x2a0 [ 148.403406][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.409308][T11634] [ 148.411646][T11634] read to 0xffff88811bd77814 of 4 bytes by task 11634 on cpu 0: [ 148.419366][T11634] __writeback_single_inode+0x201/0x7b0 [ 148.424944][T11634] writeback_single_inode+0x16d/0x3f0 [ 148.430314][T11634] sync_inode_metadata+0x6e/0xa0 [ 148.435244][T11634] __generic_file_fsync+0x109/0x160 [ 148.440438][T11634] fat_file_fsync+0x49/0x100 [ 148.445052][T11634] vfs_fsync_range+0x10d/0x130 [ 148.449814][T11634] generic_file_write_iter+0x1ba/0x310 [ 148.455303][T11634] iter_file_splice_write+0x6bc/0xa80 [ 148.460664][T11634] direct_splice_actor+0x156/0x2a0 [ 148.465771][T11634] splice_direct_to_actor+0x311/0x670 [ 148.471139][T11634] do_splice_direct+0x119/0x1a0 [ 148.475980][T11634] do_sendfile+0x380/0x650 [ 148.480389][T11634] __x64_sys_sendfile64+0x105/0x150 [ 148.485597][T11634] x64_sys_call+0x2db1/0x3000 [ 148.490270][T11634] do_syscall_64+0xc0/0x2a0 [ 148.494779][T11634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.500670][T11634] [ 148.502985][T11634] value changed: 0x0a000021 -> 0x04000021 [ 148.508688][T11634] [ 148.511000][T11634] Reported by Kernel Concurrency Sanitizer on: [ 148.517135][T11634] CPU: 0 UID: 0 PID: 11634 Comm: syz.0.3083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.526927][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.536995][T11634] ================================================================== [ 148.592371][ T1703] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)