last executing test programs: 6.128210481s ago: executing program 1 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x11, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000ac0)={{r1}, r2, 0x4, @inherit={0x50, &(0x7f0000001ac0)={0x1, 0x1, 0x0, 0x9, {0x22, 0x4, 0x7, 0x0, 0x7a}, [0xb7]}}, @name="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"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0x40044583, 0x0) io_setup(0x20, &(0x7f0000001140)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) chmod(&(0x7f0000000100)='./file1\x00', 0x8) 5.831954255s ago: executing program 1 (id=2047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 5.228643525s ago: executing program 3 (id=2056): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f00000002c0)="9d4ca89d18e10a185b998cddf2869a9999c91d0b76d29c26ace266f526408d6171dcefa9c616191d2fc9a9eea040316aa02788d69ccedc85ebf2f2b47281171591f4499aeb68360bb5dad6b33bfaa89293635d95") unshare(0x22020600) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1d, @void}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) timer_delete(0x0) splice(r2, 0x0, r3, 0x0, 0xf3e, 0x0) 4.967496516s ago: executing program 0 (id=2062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000ff0000000000000000000001ff0000aafc010000000000000000000000000000ca1b19ce9ecb2273ed2791b559d0167c02295395b771fb655187558497ea5f6de200f380272f663d994f0448679eb27d063e52b23067b9130d7016f5745f9d8ff01d11575f5e83f513586667610c116835e009d3ad219395fd510657090959a8aec539701081ccdcdb4da3b95d3d29be8c98f2b9cd8114289dfc1f7d3b657a5f3c0f6111e221414c6c75a7533c2c602df68c38d25ea3"], 0x0) 4.277233412s ago: executing program 3 (id=2065): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x7bb2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x3, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$unix(0x1, 0x1, 0x0) 3.954596368s ago: executing program 0 (id=2067): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xc0002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) preadv(0xffffffffffffffff, &(0x7f0000001880), 0x0, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x0) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3.6867807s ago: executing program 3 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 3.140325965s ago: executing program 4 (id=2072): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000480)=0x7, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000340)=@keyring={'key_or_keyring:', r1}) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 3.025564454s ago: executing program 4 (id=2073): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.276200375s ago: executing program 2 (id=2075): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000003680)="$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") pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x2, @perf_config_ext={0x8, 0x4}, 0x8, 0x0, 0x800000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r1 = memfd_secret(0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/75) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.272783606s ago: executing program 0 (id=2076): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r4, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) 2.176359853s ago: executing program 0 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r2, r3, 0x0) 2.172729794s ago: executing program 4 (id=2078): socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8001}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.080965601s ago: executing program 0 (id=2079): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1c", 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) open(0x0, 0x14d5be, 0x21) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.772826026s ago: executing program 3 (id=2080): inotify_init1(0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.72140116s ago: executing program 4 (id=2081): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ppoll(&(0x7f00000005c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.540315025s ago: executing program 1 (id=2083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.539045215s ago: executing program 2 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.518329267s ago: executing program 3 (id=2085): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000006c0)={0x1, 0x1}) 1.097729021s ago: executing program 1 (id=2086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002dc0)) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c844, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1.092492822s ago: executing program 4 (id=2087): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) io_setup(0xf7, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.061931134s ago: executing program 1 (id=2088): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) 1.042196456s ago: executing program 1 (id=2089): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.026019697s ago: executing program 2 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0xce) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r6, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d40"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 883.960599ms ago: executing program 0 (id=2091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) 803.595585ms ago: executing program 4 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIONCLEX(r4, 0x5450) 675.796436ms ago: executing program 2 (id=2093): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 523.448168ms ago: executing program 3 (id=2094): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) unshare(0x400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000001d000000950000000000000082a074a859e1d12f79ac29f2ee5e708130f05f907cf0bbdb270de3fd85f00f99721c2d83ad784aa702e0b3041a48daf74ad6b2cd17b18fd8b70470e5e6d821"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x18) 488.470631ms ago: executing program 2 (id=2095): socket$packet(0x11, 0xa, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) 0s ago: executing program 2 (id=2096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x100001, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040040) kernel console output (not intermixed with test programs): ibutes in process `+}[@'. [ 51.082636][ T5043] SELinux: failed to load policy [ 51.216203][ T5072] Unsupported ieee802154 address type: 0 [ 51.338206][ T5082] loop0: detected capacity change from 0 to 764 [ 51.355693][ T5082] Symlink component flag not implemented [ 51.378732][ T5082] Symlink component flag not implemented (101) [ 51.669172][ T5105] blktrace: Concurrent blktraces are not allowed on sg0 [ 51.727088][ T5110] netlink: 156 bytes leftover after parsing attributes in process `syz.2.623'. [ 52.105324][ T5147] $H: renamed from bond0 (while UP) [ 52.119570][ T5147] $H: entered promiscuous mode [ 52.124706][ T5147] bond_slave_0: entered promiscuous mode [ 52.130571][ T5147] bond_slave_1: entered promiscuous mode [ 52.333548][ T5170] syz.0.657 (5170) used obsolete PPPIOCDETACH ioctl [ 52.473544][ T5198] bridge_slave_0: left allmulticast mode [ 52.479341][ T5198] bridge_slave_0: left promiscuous mode [ 52.485128][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.524252][ T5198] bridge_slave_1: left allmulticast mode [ 52.530045][ T5198] bridge_slave_1: left promiscuous mode [ 52.535912][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.558561][ T5198] bond0: (slave bond_slave_0): Releasing backup interface [ 52.581044][ T5198] bond0: (slave bond_slave_1): Releasing backup interface [ 52.623094][ T5198] team0: Port device team_slave_0 removed [ 52.644637][ T5198] team0: Port device team_slave_1 removed [ 52.663084][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.671036][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.693044][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.700513][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.807401][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.814605][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.830474][ T5222] $H: left promiscuous mode [ 52.835394][ T5222] bond_slave_0: left promiscuous mode [ 52.840974][ T5222] bond_slave_1: left promiscuous mode [ 52.911161][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.927892][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.994493][ T3323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.003699][ T3323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.012804][ T3323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.027974][ T3323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.208617][ T5257] loop0: detected capacity change from 0 to 8192 [ 53.249329][ T5257] syz.0.664: attempt to access beyond end of device [ 53.249329][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.262739][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.273682][ T5257] syz.0.664: attempt to access beyond end of device [ 53.273682][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.287354][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.315942][ T5257] syz.0.664: attempt to access beyond end of device [ 53.315942][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.329463][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.367820][ T5257] syz.0.664: attempt to access beyond end of device [ 53.367820][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.381232][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.392930][ T5257] syz.0.664: attempt to access beyond end of device [ 53.392930][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.406441][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.416245][ T5257] syz.0.664: attempt to access beyond end of device [ 53.416245][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.429798][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.459645][ T5257] syz.0.664: attempt to access beyond end of device [ 53.459645][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.473081][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.515995][ T5257] syz.0.664: attempt to access beyond end of device [ 53.515995][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.529543][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.541356][ T5257] syz.0.664: attempt to access beyond end of device [ 53.541356][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.554808][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.564170][ T5257] syz.0.664: attempt to access beyond end of device [ 53.564170][ T5257] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.578017][ T5257] Buffer I/O error on dev loop0, logical block 57847, async page read [ 53.651788][ T5278] netlink: 156 bytes leftover after parsing attributes in process `syz.2.672'. [ 53.743429][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 53.743446][ T29] audit: type=1400 audit(1755123418.727:750): avc: denied { getattr } for pid=5286 comm="syz.3.677" name="KEY" dev="sockfs" ino=9764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.070648][ T29] audit: type=1400 audit(1755123419.057:751): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.128258][ T29] audit: type=1400 audit(1755123419.117:752): avc: denied { bind } for pid=5306 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.147574][ T29] audit: type=1400 audit(1755123419.117:753): avc: denied { listen } for pid=5306 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.199388][ T29] audit: type=1400 audit(1755123419.157:754): avc: denied { write } for pid=5306 comm="syz.3.683" path="socket:[10415]" dev="sockfs" ino=10415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.222790][ T29] audit: type=1400 audit(1755123419.157:755): avc: denied { accept } for pid=5306 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.242435][ T29] audit: type=1400 audit(1755123419.157:756): avc: denied { read } for pid=5306 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.353080][ T29] audit: type=1400 audit(1755123419.337:757): avc: denied { execmod } for pid=5320 comm="syz.3.687" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 54.379523][ T29] audit: type=1400 audit(1755123419.337:758): avc: denied { execute } for pid=5320 comm="syz.3.687" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 54.483409][ T29] audit: type=1400 audit(1755123419.457:759): avc: denied { execute } for pid=5336 comm="syz.3.691" name="file1" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.866172][ T5371] netlink: 96 bytes leftover after parsing attributes in process `syz.0.703'. [ 55.058484][ T5385] netlink: 156 bytes leftover after parsing attributes in process `syz.4.705'. [ 55.438745][ T5392] netlink: 'syz.2.710': attribute type 27 has an invalid length. [ 55.552733][ T5406] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 55.560649][ T5406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.718'. [ 55.688393][ T5406] team0: Port device geneve1 added [ 55.698069][ T163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.725779][ T163] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.752542][ T163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.773562][ T163] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.829755][ T5420] loop0: detected capacity change from 0 to 512 [ 55.880398][ T5420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.910814][ T5420] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.106048][ T5433] netlink: 156 bytes leftover after parsing attributes in process `syz.1.725'. [ 56.161463][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.427692][ T5446] infiniband syz1: set down [ 56.432273][ T5446] infiniband syz1: added syz_tun [ 56.514230][ T5446] RDS/IB: syz1: added [ 56.521442][ T5446] smc: adding ib device syz1 with port count 1 [ 56.529376][ T5446] smc: ib device syz1 port 1 has pnetid [ 57.103254][ T5480] syzkaller1: entered promiscuous mode [ 57.109021][ T5480] syzkaller1: entered allmulticast mode [ 57.709978][ T5496] SELinux: failed to load policy [ 57.918517][ T5517] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 58.574979][ T5553] netlink: 'syz.1.772': attribute type 27 has an invalid length. [ 58.654324][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.661683][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.776649][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.798005][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.884268][ T3323] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.905788][ T3323] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.933830][ T5570] pim6reg1: entered promiscuous mode [ 58.939281][ T5570] pim6reg1: entered allmulticast mode [ 59.022089][ T3323] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.052929][ T3323] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.074683][ T5580] netlink: 'syz.4.779': attribute type 6 has an invalid length. [ 59.195789][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 59.195808][ T29] audit: type=1400 audit(1755123424.167:798): avc: denied { mount } for pid=5586 comm="syz.4.783" name="/" dev="configfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.282903][ T29] audit: type=1326 audit(1755123424.187:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.306360][ T29] audit: type=1326 audit(1755123424.187:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.329942][ T29] audit: type=1326 audit(1755123424.187:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.353293][ T29] audit: type=1326 audit(1755123424.187:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.376602][ T29] audit: type=1326 audit(1755123424.187:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.399939][ T29] audit: type=1326 audit(1755123424.187:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.423264][ T29] audit: type=1326 audit(1755123424.187:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.446545][ T29] audit: type=1326 audit(1755123424.187:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.469895][ T29] audit: type=1326 audit(1755123424.187:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 59.792342][ T5622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.791'. [ 59.836665][ T5624] loop0: detected capacity change from 0 to 512 [ 59.843718][ T5624] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.865822][ T5624] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.792: corrupted in-inode xattr: overlapping e_value [ 59.879883][ T5624] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.792: couldn't read orphan inode 15 (err -117) [ 59.892608][ T5624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.073149][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.136715][ T5633] netlink: 'syz.3.795': attribute type 13 has an invalid length. [ 60.144559][ T5633] netlink: 'syz.3.795': attribute type 17 has an invalid length. [ 60.161241][ T5636] loop0: detected capacity change from 0 to 2048 [ 60.210447][ T5636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.232079][ T5633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.259152][ T5636] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.797: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.357796][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.440080][ T5652] syzkaller0: entered promiscuous mode [ 60.445644][ T5652] syzkaller0: entered allmulticast mode [ 60.606979][ T5660] syzkaller1: entered promiscuous mode [ 60.612771][ T5660] syzkaller1: entered allmulticast mode [ 61.171254][ T5706] smc: net device bond0 applied user defined pnetid SYZ2 [ 61.180763][ T5706] smc: net device bond0 erased user defined pnetid SYZ2 [ 61.755374][ T5756] netlink: 'syz.2.848': attribute type 6 has an invalid length. [ 62.115070][ T5772] netlink: 'syz.2.854': attribute type 4 has an invalid length. [ 62.122920][ T5772] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.854'. [ 62.378719][ T5785] $H: renamed from bond0 (while UP) [ 62.396972][ T5785] $H: entered promiscuous mode [ 62.402063][ T5785] bond_slave_0: entered promiscuous mode [ 62.407861][ T5785] bond_slave_1: entered promiscuous mode [ 62.615700][ T5797] loop0: detected capacity change from 0 to 1024 [ 62.626803][ T5797] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.655143][ T5797] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.866: bg 0: block 10: padding at end of block bitmap is not set [ 62.673143][ T5797] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.866: Failed to acquire dquot type 0 [ 62.685167][ T5797] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.866: Failed to acquire dquot type 0 [ 62.697467][ T5797] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.866: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.711163][ T5797] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.866: Failed to acquire dquot type 0 [ 62.724109][ T5797] EXT4-fs (loop0): 1 orphan inode deleted [ 62.730442][ T5797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.756754][ T5797] syz.0.866 (5797) used greatest stack depth: 9304 bytes left [ 62.767904][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.811465][ T5801] loop0: detected capacity change from 0 to 1024 [ 62.821695][ T5801] EXT4-fs: Ignoring removed orlov option [ 62.834996][ T5801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.862920][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.910719][ T5804] loop0: detected capacity change from 0 to 1024 [ 62.934770][ T5804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.975111][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.207473][ T5820] SELinux: failed to load policy [ 63.218997][ T5822] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.238152][ T5822] SELinux: failed to load policy [ 63.452520][ T5837] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.468560][ T5838] loop0: detected capacity change from 0 to 512 [ 63.478610][ T5837] SELinux: failed to load policy [ 63.485456][ T5832] SELinux: ebitmap: truncated map [ 63.492999][ T5832] SELinux: failed to load policy [ 63.529018][ T5838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.551277][ T5838] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.570807][ T5838] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.655931][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.151714][ T5878] IPv6: Can't replace route, no match found [ 64.251415][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 64.251431][ T29] audit: type=1400 audit(1755123429.237:934): avc: denied { remount } for pid=5882 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.646007][ T5894] loop0: detected capacity change from 0 to 512 [ 64.657430][ T5894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.671437][ T5894] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.686599][ T5894] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.700724][ T5894] EXT4-fs (loop0): 1 truncate cleaned up [ 64.707094][ T5894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.744357][ T29] audit: type=1400 audit(1755123429.727:935): avc: denied { add_name } for pid=5893 comm="syz.0.907" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.785080][ T29] audit: type=1400 audit(1755123429.727:936): avc: denied { create } for pid=5893 comm="syz.0.907" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.805222][ T29] audit: type=1400 audit(1755123429.727:937): avc: denied { read write } for pid=5893 comm="syz.0.907" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.827707][ T29] audit: type=1400 audit(1755123429.727:938): avc: denied { open } for pid=5893 comm="syz.0.907" path="/184/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.854019][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.868214][ T29] audit: type=1400 audit(1755123429.857:939): avc: denied { read } for pid=5899 comm="syz.2.910" dev="nsfs" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.889202][ T29] audit: type=1400 audit(1755123429.857:940): avc: denied { open } for pid=5899 comm="syz.2.910" path="net:[4026532825]" dev="nsfs" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.912273][ T29] audit: type=1400 audit(1755123429.857:941): avc: denied { create } for pid=5899 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.931482][ T29] audit: type=1400 audit(1755123429.857:942): avc: denied { connect } for pid=5899 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.950786][ T29] audit: type=1400 audit(1755123429.857:943): avc: denied { bind } for pid=5899 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.978101][ T5906] $H: renamed from bond0 [ 64.986419][ T5906] $H: entered promiscuous mode [ 64.991467][ T5906] bond_slave_0: entered promiscuous mode [ 64.997385][ T5906] bond_slave_1: entered promiscuous mode [ 65.041759][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 65.081659][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.096778][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.105448][ T5922] pim6reg1: entered promiscuous mode [ 65.111052][ T5922] pim6reg1: entered allmulticast mode [ 65.397685][ T5953] geneve2: entered promiscuous mode [ 65.407999][ T5956] SELinux: failed to load policy [ 65.445043][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 65.985989][ T6011] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 65.994056][ T6011] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 66.025684][ T6017] batman_adv: batadv0: Adding interface: dummy0 [ 66.032027][ T6017] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.057662][ T6017] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 66.069975][ T6017] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 66.080089][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.088056][ T6017] $H: (slave batadv0): Enslaving as an active interface with an up link [ 66.156211][ T6026] Falling back ldisc for ttyS3. [ 66.233003][ T6037] tipc: Started in network mode [ 66.238076][ T6037] tipc: Node identity ac14140f, cluster identity 4711 [ 66.245999][ T6037] tipc: New replicast peer: 255.255.255.255 [ 66.252049][ T6037] tipc: Enabled bearer , priority 10 [ 66.496143][ T6058] pim6reg1: entered promiscuous mode [ 66.501552][ T6058] pim6reg1: entered allmulticast mode [ 67.158608][ T6081] vhci_hcd: invalid port number 96 [ 67.163864][ T6081] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 67.365837][ T5243] tipc: Node number set to 2886997007 [ 67.517899][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.518748][ T6098] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 67.518748][ T6098] program syz.1.1000 not setting count and/or reply_len properly [ 67.532479][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.346019][ T6153] macvlan1: entered promiscuous mode [ 68.360396][ T6153] ipvlan0: entered promiscuous mode [ 68.366669][ T6153] ipvlan0: left promiscuous mode [ 68.372260][ T6153] macvlan1: left promiscuous mode [ 69.280579][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 69.280596][ T29] audit: type=1400 audit(1755123434.267:1446): avc: denied { create } for pid=6211 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.298402][ T6208] SELinux: Context : is not valid (left unmapped). [ 69.332297][ T29] audit: type=1400 audit(1755123434.287:1447): avc: denied { mac_admin } for pid=6207 comm="syz.0.1038" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.353491][ T29] audit: type=1400 audit(1755123434.307:1448): avc: denied { relabelto } for pid=6207 comm="syz.0.1038" name="rdma.current" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 69.378063][ T29] audit: type=1400 audit(1755123434.307:1449): avc: denied { associate } for pid=6207 comm="syz.0.1038" name="rdma.current" dev="tmpfs" ino=1148 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 69.474369][ T29] audit: type=1400 audit(1755123434.447:1450): avc: denied { name_bind } for pid=6215 comm="syz.2.1043" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.496111][ T29] audit: type=1400 audit(1755123434.447:1451): avc: denied { node_bind } for pid=6215 comm="syz.2.1043" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.521662][ T29] audit: type=1400 audit(1755123434.497:1452): avc: denied { unlink } for pid=3305 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 69.563942][ T29] audit: type=1400 audit(1755123434.547:1453): avc: denied { execute_no_trans } for pid=6220 comm="syz.0.1054" path="/217/file1" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.596483][ T29] audit: type=1400 audit(1755123434.577:1454): avc: denied { create } for pid=6222 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.638073][ T29] audit: type=1400 audit(1755123434.607:1455): avc: denied { connect } for pid=6222 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.459709][ T6264] SELinux: failed to load policy [ 70.576756][ T6269] block device autoloading is deprecated and will be removed. [ 70.604618][ T6274] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 70.622912][ T6274] team0: Port device dummy0 added [ 70.637119][ T6274] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 70.647869][ T6274] team0: Port device dummy0 removed [ 70.663478][ T6274] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.090097][ T6303] loop4: detected capacity change from 0 to 512 [ 71.137508][ T6303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.181596][ T6303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.222688][ T6303] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.296110][ T6303] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1079: corrupted xattr block 19: overlapping e_value [ 71.312363][ T6303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.321448][ T6303] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1079: corrupted xattr block 19: overlapping e_value [ 71.365446][ T6303] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 71.375708][ T6303] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1079: corrupted xattr block 19: overlapping e_value [ 71.422880][ T6320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1084'. [ 71.445539][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.513128][ T6328] loop4: detected capacity change from 0 to 1024 [ 71.549301][ T6332] all: renamed from lo [ 71.554253][ T6328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.720029][ T6328] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1087: Allocating blocks 449-513 which overlap fs metadata [ 71.773940][ T6326] EXT4-fs (loop4): pa ffff888106b4a230: logic 48, phys. 177, len 21 [ 71.782139][ T6326] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 71.786787][ T6344] SELinux: failed to load policy [ 71.839295][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.041962][ T6363] block device autoloading is deprecated and will be removed. [ 73.041984][ T6407] wg2: entered promiscuous mode [ 73.047179][ T6407] wg2: entered allmulticast mode [ 73.093868][ T6412] pim6reg1: entered promiscuous mode [ 73.099225][ T6412] pim6reg1: entered allmulticast mode [ 73.165176][ T6420] loop4: detected capacity change from 0 to 512 [ 73.178712][ T6420] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1122: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 73.201160][ T6420] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1122: Bad quota inode: 3, type: 0 [ 73.212959][ T6420] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 73.234020][ T6420] EXT4-fs (loop4): mount failed [ 73.265037][ T6425] bridge0: entered promiscuous mode [ 73.287242][ T6425] macsec0: entered promiscuous mode [ 73.301269][ T6425] bridge0: port 1(macsec0) entered blocking state [ 73.307836][ T6425] bridge0: port 1(macsec0) entered disabled state [ 73.314598][ T6425] macsec0: entered allmulticast mode [ 73.319965][ T6425] bridge0: entered allmulticast mode [ 73.330747][ T6425] macsec0: left allmulticast mode [ 73.335865][ T6425] bridge0: left allmulticast mode [ 73.344723][ T6425] bridge0: left promiscuous mode [ 73.484867][ T6444] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1133'. [ 73.494019][ T6444] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1133'. [ 73.613004][ T6460] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 73.700108][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.829419][ T6476] netlink: 'syz.0.1143': attribute type 10 has an invalid length. [ 73.884928][ T6476] batman_adv: batadv0: Removing interface: dummy0 [ 73.901313][ T6481] loop9: detected capacity change from 0 to 7 [ 73.907287][ T6482] netlink: 'syz.0.1143': attribute type 10 has an invalid length. [ 73.915611][ T6481] loop9: [ 73.944226][ T6476] team0: Port device dummy0 added [ 73.957950][ T6484] loop4: detected capacity change from 0 to 1024 [ 73.996464][ T6482] team0: Port device dummy0 removed [ 74.023302][ T6482] $H: (slave dummy0): Enslaving as an active interface with an up link [ 74.046558][ T6484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.068219][ T6484] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.129731][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 13) [ 74.175101][ T37] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 74.185246][ T6484] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 74.197756][ T6484] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.197756][ T6484] [ 74.271429][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.295776][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 74.295799][ T29] audit: type=1400 audit(1755123439.277:1654): avc: denied { name_connect } for pid=6503 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 74.344166][ T6483] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.368250][ T29] audit: type=1400 audit(1755123439.297:1655): avc: denied { map } for pid=6483 comm="syz.4.1148" path="/222/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.391553][ T29] audit: type=1400 audit(1755123439.297:1656): avc: denied { execute } for pid=6483 comm="syz.4.1148" path="/222/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.392826][ T6500] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.414979][ T29] audit: type=1400 audit(1755123439.307:1657): avc: denied { listen } for pid=6503 comm="syz.2.1155" lport=35116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.415021][ T29] audit: type=1400 audit(1755123439.307:1658): avc: denied { accept } for pid=6503 comm="syz.2.1155" lport=35116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.475244][ T29] audit: type=1400 audit(1755123439.307:1659): avc: denied { write } for pid=6503 comm="syz.2.1155" lport=35116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.498738][ T29] audit: type=1400 audit(1755123439.307:1660): avc: denied { setopt } for pid=6503 comm="syz.2.1155" lport=35116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.522642][ T29] audit: type=1400 audit(1755123439.347:1661): avc: denied { name_bind } for pid=6508 comm="syz.2.1156" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.544480][ T29] audit: type=1400 audit(1755123439.347:1662): avc: denied { node_bind } for pid=6508 comm="syz.2.1156" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.567500][ T29] audit: type=1400 audit(1755123439.477:1663): avc: denied { create } for pid=6512 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.587130][ T6483] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.601675][ T6483] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.615993][ T6500] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.630501][ T6500] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.644820][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.659281][ T6500] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.1148: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.829424][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.915277][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 74.978588][ T6527] syzkaller0: entered promiscuous mode [ 74.984070][ T6527] syzkaller0: entered allmulticast mode [ 75.123960][ T6539] tipc: Started in network mode [ 75.128948][ T6539] tipc: Node identity faae3bc51c2b, cluster identity 4711 [ 75.136150][ T6539] tipc: Enabled bearer , priority 0 [ 75.143612][ T6537] tipc: Resetting bearer [ 75.159326][ T6537] tipc: Disabling bearer [ 75.232317][ T6547] loop2: detected capacity change from 0 to 512 [ 75.245619][ T6547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.263918][ T6551] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 75.273245][ T6547] EXT4-fs (loop2): 1 truncate cleaned up [ 75.275768][ T6551] bridge_slave_1: left allmulticast mode [ 75.283782][ T6547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.284842][ T6551] bridge_slave_1: left promiscuous mode [ 75.302980][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.310983][ T6551] bridge_slave_0: left allmulticast mode [ 75.316713][ T6551] bridge_slave_0: left promiscuous mode [ 75.322438][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.332720][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.551150][ T6569] loop4: detected capacity change from 0 to 128 [ 75.566918][ T6569] FAT-fs (loop4): Directory bread(block 32) failed [ 75.574282][ T6567] vhci_hcd: invalid port number 254 [ 75.584357][ T6569] FAT-fs (loop4): Directory bread(block 33) failed [ 75.591059][ T6569] FAT-fs (loop4): Directory bread(block 34) failed [ 75.601047][ T6569] FAT-fs (loop4): Directory bread(block 35) failed [ 75.608271][ T6569] FAT-fs (loop4): Directory bread(block 36) failed [ 75.615563][ T6569] FAT-fs (loop4): Directory bread(block 37) failed [ 75.633354][ T6569] FAT-fs (loop4): Directory bread(block 38) failed [ 75.640260][ T6569] FAT-fs (loop4): Directory bread(block 39) failed [ 75.646875][ T6569] FAT-fs (loop4): Directory bread(block 40) failed [ 75.656825][ T6569] FAT-fs (loop4): Directory bread(block 41) failed [ 75.693829][ T6569] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 75.702447][ T6569] FAT-fs (loop4): Filesystem has been set read-only [ 75.713334][ T6569] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 75.723712][ T6569] bio_check_eod: 8317 callbacks suppressed [ 75.723724][ T6569] syz.4.1180: attempt to access beyond end of device [ 75.723724][ T6569] loop4: rw=2049, sector=4180, nr_sectors = 24 limit=128 [ 75.743356][ T6569] syz.4.1180: attempt to access beyond end of device [ 75.743356][ T6569] loop4: rw=2049, sector=4212, nr_sectors = 4 limit=128 [ 75.756865][ T6569] buffer_io_error: 8317 callbacks suppressed [ 75.756883][ T6569] Buffer I/O error on dev loop4, logical block 1053, lost async page write [ 75.771523][ T6569] syz.4.1180: attempt to access beyond end of device [ 75.771523][ T6569] loop4: rw=2049, sector=4220, nr_sectors = 4 limit=128 [ 75.785115][ T6569] Buffer I/O error on dev loop4, logical block 1055, lost async page write [ 75.793843][ T6569] syz.4.1180: attempt to access beyond end of device [ 75.793843][ T6569] loop4: rw=2049, sector=4224, nr_sectors = 4 limit=128 [ 76.130842][ T6597] netlink: 'syz.4.1192': attribute type 10 has an invalid length. [ 76.142665][ T6597] team0: Port device dummy0 added [ 76.153833][ T6597] netlink: 'syz.4.1192': attribute type 10 has an invalid length. [ 76.166503][ T6597] team0: Port device dummy0 removed [ 76.173387][ T6597] dummy0: entered promiscuous mode [ 76.179206][ T6597] $H: (slave dummy0): Enslaving as an active interface with an up link [ 76.225706][ T6601] pim6reg1: entered promiscuous mode [ 76.231077][ T6601] pim6reg1: entered allmulticast mode [ 76.278178][ T3375] hid_parser_main: 44 callbacks suppressed [ 76.278199][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 76.291509][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.298984][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.306495][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.313940][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.321341][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.328766][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 76.336149][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.343570][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.351012][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.361200][ T3375] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz1] on syz0 [ 76.390590][ T6607] fido_id[6607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.431451][ T6611] smc: net device bond0 applied user defined pnetid SYZ2 [ 76.443237][ T6611] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 76.452740][ T6611] smc: net device bond0 erased user defined pnetid SYZ2 [ 76.460018][ T6611] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2 [ 76.528847][ T6624] IPv4: Oversized IP packet from 127.202.26.0 [ 76.713758][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 76.722873][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 76.738089][ T6637] bridge0: port 1(vlan0) entered blocking state [ 76.744472][ T6637] bridge0: port 1(vlan0) entered disabled state [ 76.760963][ T6637] vlan0: entered allmulticast mode [ 76.766109][ T6637] bridge0: entered allmulticast mode [ 76.772923][ T6637] vlan0: left allmulticast mode [ 76.777815][ T6637] bridge0: left allmulticast mode [ 77.982548][ T6669] openvswitch: netlink: Message has 6 unknown bytes. [ 78.043004][ T6671] syzkaller0: entered promiscuous mode [ 78.048567][ T6671] syzkaller0: entered allmulticast mode [ 78.301728][ T6683] syz_tun: entered promiscuous mode [ 78.307070][ T6683] vlan0: entered promiscuous mode [ 78.468426][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 78.557339][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 79.111748][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 79.218461][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.225934][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.425177][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.432836][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.703809][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 79.703825][ T29] audit: type=1400 audit(1755123444.348:1706): avc: denied { append } for pid=6755 comm="syz.2.1255" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.759248][ T29] audit: type=1400 audit(1755123444.404:1707): avc: denied { listen } for pid=6763 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.861469][ T29] audit: type=1400 audit(1755123444.505:1708): avc: denied { getopt } for pid=6767 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.901288][ T6777] usb usb5: usbfs: process 6777 (syz.3.1265) did not claim interface 0 before use [ 79.953152][ T29] audit: type=1400 audit(1755123444.588:1709): avc: denied { ioctl } for pid=6776 comm="syz.3.1265" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.496336][ T6805] vlan2: entered promiscuous mode [ 80.501536][ T6805] syz_tun: entered promiscuous mode [ 81.315871][ T29] audit: type=1400 audit(1755123445.844:1710): avc: denied { mount } for pid=6833 comm="syz.4.1288" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.338260][ T29] audit: type=1400 audit(1755123445.844:1711): avc: denied { mounton } for pid=6833 comm="syz.4.1288" path="/255/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 81.360515][ T29] audit: type=1400 audit(1755123445.844:1712): avc: denied { mount } for pid=6833 comm="syz.4.1288" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.404521][ T29] audit: type=1400 audit(1755123445.927:1713): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 81.540253][ T6844] syzkaller0: entered promiscuous mode [ 81.545795][ T6844] syzkaller0: entered allmulticast mode [ 81.577833][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 81.586551][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 81.622686][ T6846] hsr0: entered promiscuous mode [ 81.628464][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 81.637565][ T6846] hsr_slave_0: left promiscuous mode [ 81.643433][ T6846] hsr_slave_1: left promiscuous mode [ 81.657461][ T6846] hsr0 (unregistering): left promiscuous mode [ 81.793883][ T29] audit: type=1400 audit(1755123446.287:1714): avc: denied { kexec_image_load } for pid=6859 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 81.823295][ T6862] loop2: detected capacity change from 0 to 1024 [ 81.833502][ T29] audit: type=1400 audit(1755123446.324:1715): avc: denied { create } for pid=6864 comm="syz.3.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 81.863277][ T6862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.890622][ T6862] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1301: Allocating blocks 449-513 which overlap fs metadata [ 81.919174][ T6861] EXT4-fs (loop2): pa ffff8881057265b0: logic 48, phys. 177, len 21 [ 81.927289][ T6861] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 81.930626][ T6877] syz_tun: entered allmulticast mode [ 81.944678][ T6876] syz_tun: left allmulticast mode [ 81.984207][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.218441][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 82.233830][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.245905][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.266029][ T6904] $H: (slave batadv0): Releasing backup interface [ 82.463012][ T6919] loop2: detected capacity change from 0 to 1024 [ 82.483588][ T6919] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 82.494609][ T6919] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 82.513324][ T6919] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.536951][ T6919] EXT4-fs (loop2): invalid journal inode [ 82.543378][ T6919] EXT4-fs (loop2): can't get journal size [ 82.549622][ T6919] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.1322: blocks 2-2 from inode overlap system zone [ 82.563754][ T6919] EXT4-fs (loop2): failed to initialize system zone (-117) [ 82.571057][ T6919] EXT4-fs (loop2): mount failed [ 83.460135][ T6968] SELinux: Context @ is not valid (left unmapped). [ 83.727865][ T6974] syzkaller0: entered promiscuous mode [ 83.733462][ T6974] syzkaller0: entered allmulticast mode [ 84.345262][ T7023] loop4: detected capacity change from 0 to 1764 [ 84.364990][ T7023] ISOFS: Unable to identify CD-ROM format. [ 84.626992][ T7035] vhci_hcd: invalid port number 96 [ 84.632196][ T7035] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 85.023507][ T7043] loop2: detected capacity change from 0 to 1024 [ 85.030758][ T7043] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.045108][ T7043] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.1373: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.059469][ T7043] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1373: Failed to acquire dquot type 0 [ 85.070941][ T7043] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1373: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.084822][ T7043] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1373: Invalid inode bitmap blk 0 in block_group 0 [ 85.097794][ T7043] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 85.101409][ T6487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.106544][ T7043] EXT4-fs (loop2): 1 orphan inode deleted [ 85.120963][ T6487] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 85.127217][ T7043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.150522][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 85.150539][ T29] audit: type=1400 audit(1755123449.388:1840): avc: denied { mount } for pid=7042 comm="syz.2.1373" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.191354][ T29] audit: type=1400 audit(1755123449.425:1841): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.211989][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.236026][ T29] audit: type=1400 audit(1755123449.471:1842): avc: denied { read } for pid=7046 comm="syz.2.1374" dev="nsfs" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.257225][ T29] audit: type=1400 audit(1755123449.471:1843): avc: denied { open } for pid=7046 comm="syz.2.1374" path="net:[4026532825]" dev="nsfs" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.298837][ T29] audit: type=1400 audit(1755123449.508:1844): avc: denied { create } for pid=7046 comm="syz.2.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.318879][ T29] audit: type=1400 audit(1755123449.508:1845): avc: denied { bind } for pid=7046 comm="syz.2.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.338663][ T29] audit: type=1400 audit(1755123449.508:1846): avc: denied { setopt } for pid=7046 comm="syz.2.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.361390][ T29] audit: type=1400 audit(1755123449.573:1847): avc: denied { create } for pid=7051 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.381312][ T29] audit: type=1400 audit(1755123449.573:1848): avc: denied { create } for pid=7051 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.401844][ T29] audit: type=1400 audit(1755123449.573:1849): avc: denied { ioctl } for pid=7051 comm="syz.3.1377" path="socket:[15134]" dev="sockfs" ino=15134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.455461][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 85.470756][ T7056] hsr_slave_1 (unregistering): left promiscuous mode [ 85.476117][ T7058] loop2: detected capacity change from 0 to 512 [ 85.516697][ T7058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.529455][ T7058] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.548262][ T7058] EXT4-fs (loop2): shut down requested (0) [ 85.656431][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.690118][ T7066] loop4: detected capacity change from 0 to 1024 [ 85.701524][ T7066] EXT4-fs (loop4): bad geometry: block count 1125899906843136 exceeds size of device (512 blocks) [ 86.024978][ T7093] pim6reg1: entered promiscuous mode [ 86.030330][ T7093] pim6reg1: entered allmulticast mode [ 87.032820][ T7131] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1410'. [ 87.165406][ T7133] syzkaller0: entered promiscuous mode [ 87.170964][ T7133] syzkaller0: entered allmulticast mode [ 87.187133][ T7136] pim6reg1: entered promiscuous mode [ 87.192533][ T7136] pim6reg1: entered allmulticast mode [ 87.210138][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 87.330306][ T7150] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1415'. [ 87.641284][ T7164] loop4: detected capacity change from 0 to 512 [ 87.647997][ T7164] EXT4-fs: Ignoring removed nobh option [ 87.661385][ T7164] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1421: corrupted inode contents [ 87.690291][ T7164] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1421: mark_inode_dirty error [ 87.719414][ T7164] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1421: corrupted inode contents [ 87.752376][ T7164] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1421: mark_inode_dirty error [ 87.777496][ T7164] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1421: Failed to acquire dquot type 0 [ 87.817132][ T7164] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1421: corrupted inode contents [ 87.842864][ T7164] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1421: mark_inode_dirty error [ 87.874795][ T7184] tipc: Enabling of bearer rejected, already enabled [ 87.875082][ T7164] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1421: corrupted inode contents [ 87.929068][ T7164] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1421: mark_inode_dirty error [ 87.951192][ T7164] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1421: corrupted inode contents [ 87.985277][ T7164] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 88.016705][ T7164] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1421: corrupted inode contents [ 88.037795][ T7164] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1421: mark_inode_dirty error [ 88.079837][ T7206] syz_tun: entered allmulticast mode [ 88.088616][ T7164] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 88.101642][ T7206] dvmrp1: entered allmulticast mode [ 88.110694][ T7205] syz_tun: left allmulticast mode [ 88.125442][ T7164] EXT4-fs (loop4): 1 truncate cleaned up [ 88.135397][ T7164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.161787][ T7164] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.194763][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1430'. [ 88.264403][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.337477][ T7233] loop4: detected capacity change from 0 to 256 [ 88.456173][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 88.818651][ T7266] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 89.331801][ T7272] loop2: detected capacity change from 0 to 1024 [ 89.338746][ T7272] EXT4-fs: Ignoring removed oldalloc option [ 89.344773][ T7272] EXT4-fs: Ignoring removed bh option [ 89.382962][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.404363][ T7272] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1448: Allocating blocks 385-513 which overlap fs metadata [ 89.421076][ T7272] EXT4-fs (loop2): pa ffff888106b4a1c0: logic 16, phys. 129, len 24 [ 89.429136][ T7272] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 89.445963][ T7279] macsec0: entered promiscuous mode [ 89.451331][ T7279] macsec0: entered allmulticast mode [ 89.456659][ T7279] veth1_macvtap: entered allmulticast mode [ 89.462403][ T7272] syz.2.1448 (7272) used greatest stack depth: 9128 bytes left [ 89.471920][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.789367][ T7298] syzkaller0: entered allmulticast mode [ 89.797096][ T7298] syzkaller0: entered promiscuous mode [ 89.812842][ T7298] syzkaller0 (unregistering): left allmulticast mode [ 89.819765][ T7298] syzkaller0 (unregistering): left promiscuous mode [ 89.867020][ T7302] SELinux: failed to load policy [ 89.934779][ T7308] bridge: RTM_NEWNEIGH with invalid ether address [ 90.119395][ T7325] loop2: detected capacity change from 0 to 128 [ 90.129126][ T7325] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 90.136984][ T7325] FAT-fs (loop2): Filesystem has been set read-only [ 90.153205][ T7322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1467'. [ 90.162928][ T7325] syz.2.1469: attempt to access beyond end of device [ 90.162928][ T7325] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 90.186782][ T7325] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 90.194724][ T7325] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 90.204556][ T7325] syz.2.1469: attempt to access beyond end of device [ 90.204556][ T7325] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 90.232227][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.232227][ T7330] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 90.245515][ T7330] Buffer I/O error on dev loop2, logical block 2065, async page read [ 90.256286][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.256286][ T7330] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 90.269693][ T7330] Buffer I/O error on dev loop2, logical block 2066, async page read [ 90.292449][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.292449][ T7330] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 90.305740][ T7330] Buffer I/O error on dev loop2, logical block 2067, async page read [ 90.324912][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.324912][ T7330] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 90.338258][ T7330] Buffer I/O error on dev loop2, logical block 2068, async page read [ 90.383972][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.383972][ T7330] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 90.397449][ T7330] Buffer I/O error on dev loop2, logical block 2069, async page read [ 90.409425][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.409425][ T7330] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 90.422812][ T7330] Buffer I/O error on dev loop2, logical block 2070, async page read [ 90.447128][ T7334] loop4: detected capacity change from 0 to 128 [ 90.453674][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.453674][ T7330] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 90.466991][ T7330] Buffer I/O error on dev loop2, logical block 2071, async page read [ 90.497441][ T7330] syz.2.1469: attempt to access beyond end of device [ 90.497441][ T7330] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 90.510718][ T7330] Buffer I/O error on dev loop2, logical block 2072, async page read [ 90.520812][ T7334] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.541122][ T7325] Buffer I/O error on dev loop2, logical block 2065, async page read [ 90.552595][ T7334] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.572641][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 90.572654][ T29] audit: type=1400 audit(1755123454.391:2042): avc: denied { ioctl } for pid=7339 comm="syz.1.1474" path="socket:[16187]" dev="sockfs" ino=16187 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.574142][ T7325] Buffer I/O error on dev loop2, logical block 2066, async page read [ 91.045575][ T29] audit: type=1326 audit(1755123454.825:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.113567][ T29] audit: type=1326 audit(1755123454.852:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.137154][ T29] audit: type=1326 audit(1755123454.852:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.160722][ T29] audit: type=1326 audit(1755123454.852:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.184124][ T29] audit: type=1326 audit(1755123454.861:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.207632][ T29] audit: type=1326 audit(1755123454.861:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.231120][ T29] audit: type=1326 audit(1755123454.861:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.254919][ T29] audit: type=1326 audit(1755123454.861:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.278447][ T29] audit: type=1326 audit(1755123454.861:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 91.288265][ T7363] usb usb1: check_ctrlrecip: process 7363 (syz.2.1484) requesting ep 01 but needs 81 [ 91.311546][ T7363] usb usb1: usbfs: process 7363 (syz.2.1484) did not claim interface 0 before use [ 91.368082][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.563858][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 91.908868][ T7417] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1502'. [ 92.135407][ T7420] loop2: detected capacity change from 0 to 1024 [ 92.209946][ T7420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.222990][ T7420] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.291172][ T7423] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1504: lblock 0 mapped to illegal pblock 0 (length 4) [ 92.328109][ T7423] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 92.340449][ T7423] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.340449][ T7423] [ 92.495410][ T7435] loop4: detected capacity change from 0 to 1024 [ 92.525650][ T7435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.583753][ T7435] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1510: Allocating blocks 449-513 which overlap fs metadata [ 92.642101][ T7445] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1510'. [ 92.707106][ T7434] EXT4-fs (loop4): pa ffff888105726620: logic 48, phys. 177, len 21 [ 92.715194][ T7434] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 92.738229][ T52] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 2) [ 92.753535][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 92.765924][ T52] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.765924][ T52] [ 92.780256][ T52] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 92.808223][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 92.820569][ T52] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.820569][ T52] [ 92.843578][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.973123][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.463369][ T7485] IPv4: Oversized IP packet from 127.202.26.0 [ 93.522185][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 93.756133][ T7499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.870829][ T7499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.934691][ T7499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.150706][ T7499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.244995][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.259495][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.272308][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.292284][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.513227][ T3375] IPVS: starting estimator thread 0... [ 94.534379][ T7533] loop2: detected capacity change from 0 to 512 [ 94.547606][ T7533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1546: bg 0: block 131: padding at end of block bitmap is not set [ 94.570182][ T7533] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 94.580247][ T7533] EXT4-fs (loop2): 1 truncate cleaned up [ 94.587169][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.616870][ T7541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 94.646508][ T7531] IPVS: using max 2592 ests per chain, 129600 per kthread [ 94.948055][ T7549] loop4: detected capacity change from 0 to 512 [ 94.956150][ T7549] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1552: iget: bad i_size value: 38620345925642 [ 94.969070][ T7549] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1552: couldn't read orphan inode 15 (err -117) [ 94.982037][ T7549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.054863][ T7551] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1552: bg 0: block 5: invalid block bitmap [ 95.068010][ T7551] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 95.080545][ T7551] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.080545][ T7551] [ 95.090204][ T7551] EXT4-fs (loop4): Total free blocks count 0 [ 95.096235][ T7551] EXT4-fs (loop4): Free/Dirty block details [ 95.102159][ T7551] EXT4-fs (loop4): free_blocks=0 [ 95.107126][ T7551] EXT4-fs (loop4): dirty_blocks=2608 [ 95.112511][ T7551] EXT4-fs (loop4): Block reservation details [ 95.118497][ T7551] EXT4-fs (loop4): i_reserved_data_blocks=2608 [ 95.141800][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 556 with error 28 [ 95.175444][ T7553] loop4: detected capacity change from 0 to 128 [ 95.441904][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.475732][ T7562] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1556'. [ 95.496941][ T7562] hsr_slave_0: left promiscuous mode [ 95.502975][ T7562] hsr_slave_1: left promiscuous mode [ 95.631348][ T7571] loop2: detected capacity change from 0 to 1024 [ 95.651622][ T7571] EXT4-fs: Ignoring removed orlov option [ 95.657664][ T7571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.686013][ T7576] sctp: [Deprecated]: syz.1.1562 (pid 7576) Use of int in max_burst socket option deprecated. [ 95.686013][ T7576] Use struct sctp_assoc_value instead [ 95.702187][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 95.716173][ T7571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.908864][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.932368][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 95.941461][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 95.966023][ T7588] bridge0: port 3(vlan0) entered blocking state [ 95.972491][ T7588] bridge0: port 3(vlan0) entered disabled state [ 95.983830][ T7588] vlan0: entered allmulticast mode [ 95.989015][ T7588] bridge0: entered allmulticast mode [ 95.994988][ T7588] vlan0: left allmulticast mode [ 96.000080][ T7588] bridge0: left allmulticast mode [ 96.005446][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 96.005461][ T29] audit: type=1326 audit(1755123459.403:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.036538][ T29] audit: type=1326 audit(1755123459.421:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.060073][ T29] audit: type=1326 audit(1755123459.421:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.083666][ T29] audit: type=1326 audit(1755123459.440:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.107251][ T29] audit: type=1326 audit(1755123459.440:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.130906][ T29] audit: type=1326 audit(1755123459.458:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.154385][ T29] audit: type=1326 audit(1755123459.458:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.177926][ T29] audit: type=1326 audit(1755123459.458:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.201733][ T29] audit: type=1326 audit(1755123459.486:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 96.225273][ T29] audit: type=1326 audit(1755123459.486:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 97.409421][ T7624] netlink: 'syz.1.1578': attribute type 21 has an invalid length. [ 97.420235][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1578'. [ 97.429319][ T7624] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 97.504929][ T7626] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 97.513452][ T7626] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 97.692387][ T7637] can0: slcan on ttyS3. [ 97.756852][ T7637] can0 (unregistered): slcan off ttyS3. [ 98.085729][ T7650] usb usb1: check_ctrlrecip: process 7650 (syz.0.1585) requesting ep 01 but needs 81 [ 98.095386][ T7650] usb usb1: usbfs: process 7650 (syz.0.1585) did not claim interface 0 before use [ 98.399313][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 98.409926][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'. [ 98.694373][ T7693] hub 6-0:1.0: USB hub found [ 98.699269][ T7693] hub 6-0:1.0: 8 ports detected [ 98.809125][ T7702] wireguard0: entered promiscuous mode [ 98.814745][ T7702] wireguard0: entered allmulticast mode [ 98.880975][ T7696] loop9: detected capacity change from 0 to 7 [ 98.887743][ T7696] buffer_io_error: 34206 callbacks suppressed [ 98.887757][ T7696] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.902235][ T7696] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.910262][ T7696] loop9: unable to read partition table [ 98.916342][ T7696] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 98.916342][ T7696] ) failed (rc=-5) [ 98.917612][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.938397][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.946480][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.954593][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.962728][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 99.307486][ T7733] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.842165][ T7763] loop2: detected capacity change from 0 to 512 [ 99.859614][ T7763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.872490][ T7763] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.932271][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.992143][ T7775] loop2: detected capacity change from 0 to 1024 [ 100.000664][ T7775] EXT4-fs: Ignoring removed orlov option [ 100.006382][ T7775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.024823][ T7775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.054709][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.451067][ T7791] loop2: detected capacity change from 0 to 2048 [ 100.467689][ T7791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.501386][ T3306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 100.522124][ T3306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 100.543464][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.664655][ T7809] syz_tun: entered allmulticast mode [ 100.713812][ T7808] syz_tun: left allmulticast mode [ 100.855311][ T7818] __nla_validate_parse: 2 callbacks suppressed [ 100.855335][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 100.956507][ T7833] pim6reg1: entered promiscuous mode [ 100.961896][ T7833] pim6reg1: entered allmulticast mode [ 101.438316][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 101.438434][ T29] audit: type=1326 audit(1755123464.414:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.478942][ T29] audit: type=1326 audit(1755123464.451:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.504032][ T29] audit: type=1326 audit(1755123464.488:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.528143][ T29] audit: type=1326 audit(1755123464.507:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.563564][ T29] audit: type=1326 audit(1755123464.534:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.587222][ T29] audit: type=1326 audit(1755123464.534:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.611605][ T29] audit: type=1326 audit(1755123464.581:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.636275][ T29] audit: type=1326 audit(1755123464.608:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.683465][ T29] audit: type=1326 audit(1755123464.636:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.709012][ T29] audit: type=1326 audit(1755123464.673:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f49907febe9 code=0x7ffc0000 [ 101.864404][ T7859] loop2: detected capacity change from 0 to 1024 [ 101.884669][ T7861] loop4: detected capacity change from 0 to 1024 [ 101.891565][ T7861] EXT4-fs: Ignoring removed orlov option [ 101.960922][ T7859] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1651: Failed to acquire dquot type 0 [ 101.974311][ T7859] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 101.989417][ T7859] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1651: corrupted inode contents [ 102.003578][ T7861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.020758][ T7859] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1651: mark_inode_dirty error [ 102.054229][ T7859] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1651: corrupted inode contents [ 102.070071][ T7859] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1651: mark_inode_dirty error [ 102.088960][ T7859] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1651: corrupted inode contents [ 102.102001][ T7859] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 102.120481][ T7859] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1651: corrupted inode contents [ 102.154837][ T7859] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1651: mark_inode_dirty error [ 102.197975][ T7859] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 102.227496][ T7859] EXT4-fs (loop2): 1 truncate cleaned up [ 102.233674][ T7859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.268031][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.295851][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.329119][ T7870] loop2: detected capacity change from 0 to 2048 [ 102.387003][ T3290] loop2: p2 p3 p7 [ 102.409943][ T7870] loop2: p2 p3 p7 [ 102.495639][ T7879] loop2: detected capacity change from 0 to 512 [ 102.528347][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 102.532955][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 102.549376][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 102.562407][ T7879] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1659: iget: bad i_size value: 38620345925642 [ 102.595487][ T7879] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1659: couldn't read orphan inode 15 (err -117) [ 102.648559][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 102.648661][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 102.664775][ T7879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.686922][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 102.705971][ T7885] loop4: detected capacity change from 0 to 512 [ 102.774851][ T7885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.798951][ T7889] vhci_hcd: invalid port number 96 [ 102.804478][ T7885] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.804894][ T7889] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 102.827602][ T7892] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1659: bg 0: block 5: invalid block bitmap [ 102.866858][ T7892] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1296 with error 28 [ 102.879453][ T7892] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.879453][ T7892] [ 102.889150][ T7892] EXT4-fs (loop2): Total free blocks count 0 [ 102.895216][ T7892] EXT4-fs (loop2): Free/Dirty block details [ 102.901125][ T7892] EXT4-fs (loop2): free_blocks=0 [ 102.906142][ T7892] EXT4-fs (loop2): dirty_blocks=1296 [ 102.911448][ T7892] EXT4-fs (loop2): Block reservation details [ 102.917539][ T7892] EXT4-fs (loop2): i_reserved_data_blocks=1296 [ 103.001170][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.091220][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.375902][ T7912] Set syz1 is full, maxelem 65536 reached [ 103.391705][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 103.549035][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 104.405258][ T7954] team0 (unregistering): Port device team_slave_0 removed [ 104.428796][ T7954] team0 (unregistering): Port device team_slave_1 removed [ 104.442798][ T7954] team0 (unregistering): Port device geneve1 removed [ 104.518385][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 104.587273][ T7983] tipc: Started in network mode [ 104.592412][ T7983] tipc: Node identity ac14140f, cluster identity 4711 [ 104.604489][ T7983] tipc: New replicast peer: 255.255.255.255 [ 104.610634][ T7983] tipc: Enabled bearer , priority 10 [ 104.672798][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 104.765839][ T8011] bridge_slave_0: left allmulticast mode [ 104.771706][ T8011] bridge_slave_0: left promiscuous mode [ 104.777517][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.814376][ T8011] bridge_slave_1: left allmulticast mode [ 104.820139][ T8011] bridge_slave_1: left promiscuous mode [ 104.825845][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.840495][ T8017] loop2: detected capacity change from 0 to 256 [ 104.856900][ T8011] $H: (slave bond_slave_0): Releasing backup interface [ 104.880627][ T8011] bond_slave_0: left promiscuous mode [ 104.903194][ T8011] $H: (slave bond_slave_1): Releasing backup interface [ 104.920681][ T8011] bond_slave_1: left promiscuous mode [ 104.934869][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.953973][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.971788][ T8027] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.307531][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 105.417866][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 105.454867][ T8083] syzkaller0: entered promiscuous mode [ 105.460486][ T8083] syzkaller0: entered allmulticast mode [ 105.630530][ T8091] netlink: 'syz.1.1710': attribute type 10 has an invalid length. [ 105.640393][ T8091] bridge_slave_1: entered promiscuous mode [ 105.646820][ T8091] $H: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 105.681424][ T8097] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1714'. [ 105.718873][ T5244] tipc: Node number set to 2886997007 [ 105.879894][ T8117] syzkaller0: entered promiscuous mode [ 105.885557][ T8117] syzkaller0: entered allmulticast mode [ 106.601015][ T8199] loop4: detected capacity change from 0 to 512 [ 106.648233][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.729424][ T8199] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.770733][ T8199] EXT4-fs (loop4): shut down requested (0) [ 106.889454][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.294703][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.306644][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.318920][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.347340][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.363972][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.374271][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.439047][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.448462][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.476314][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1731'. [ 107.806356][ T8261] SELinux: failed to load policy [ 108.608865][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 108.625441][ T8284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.637295][ T8284] bond1 (unregistering): Released all slaves [ 108.778525][ T8291] loop4: detected capacity change from 0 to 1024 [ 108.785948][ T8291] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.804721][ T8291] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1751: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.820299][ T8291] __quota_error: 15 callbacks suppressed [ 108.820317][ T8291] Quota error (device loop4): write_blk: dquota write failed [ 108.833503][ T8291] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 108.843597][ T8291] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1751: Failed to acquire dquot type 0 [ 108.855083][ T8291] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1751: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.869333][ T8291] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1751: Invalid inode bitmap blk 0 in block_group 0 [ 108.882358][ T52] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.896630][ T8291] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 108.906160][ T8291] EXT4-fs (loop4): 1 orphan inode deleted [ 108.906237][ T52] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 108.912498][ T8291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.920412][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 108.959022][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.011608][ T8300] tipc: New replicast peer: 255.255.255.255 [ 109.017763][ T8300] tipc: Enabled bearer , priority 10 [ 109.233367][ T29] audit: type=1326 audit(1755123471.614:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.1.1758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f781c9debe9 code=0x0 [ 109.483777][ T29] audit: type=1326 audit(1755123471.845:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 109.518818][ T29] audit: type=1326 audit(1755123471.863:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 109.542369][ T29] audit: type=1326 audit(1755123471.863:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 109.565802][ T29] audit: type=1326 audit(1755123471.863:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 109.849679][ T8327] $H: (slave dummy0): Releasing backup interface [ 109.857828][ T8327] dummy0: left promiscuous mode [ 109.875477][ T8327] $H: (slave bond_slave_0): Releasing backup interface [ 109.886713][ T8327] bond_slave_0: left promiscuous mode [ 109.894618][ T8327] $H: (slave bond_slave_1): Releasing backup interface [ 109.902776][ T8327] bond_slave_1: left promiscuous mode [ 110.231339][ T29] audit: type=1326 audit(1755123472.537:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 110.254968][ T29] audit: type=1326 audit(1755123472.537:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.3.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f4652ebe9 code=0x7ffc0000 [ 110.290168][ T3409] tipc: Node number set to 3867491269 [ 110.304267][ T8347] wg2: entered promiscuous mode [ 110.309201][ T8347] wg2: entered allmulticast mode [ 111.375785][ T8372] can0: slcan on ttyS3. [ 111.442885][ T8371] SELinux: failed to load policy [ 111.450245][ T8372] can0 (unregistered): slcan off ttyS3. [ 112.621062][ T8541] serio: Serial port ptm0 [ 112.716752][ T8544] SELinux: failed to load policy [ 113.605630][ T8585] __nla_validate_parse: 2 callbacks suppressed [ 113.605685][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.622653][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.669255][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.723088][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.732667][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.751923][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.794046][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.803655][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.814860][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1811'. [ 113.856726][ T8603] loop2: detected capacity change from 0 to 1024 [ 113.918392][ T8603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.958750][ T8603] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.074689][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.489778][ T8626] can0: slcan on ttyS3. [ 114.513295][ T8625] tipc: Started in network mode [ 114.518276][ T8625] tipc: Node identity 26bb5fe5dac9, cluster identity 4711 [ 114.525478][ T8625] tipc: Enabled bearer , priority 0 [ 114.534882][ T8622] tipc: Resetting bearer [ 114.549089][ T8626] can0 (unregistered): slcan off ttyS3. [ 114.549877][ T8622] tipc: Disabling bearer [ 114.630278][ T8644] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1825'. [ 114.849750][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 114.849767][ T29] audit: type=1400 audit(1755123476.801:2615): avc: denied { mount } for pid=8672 comm="syz.0.1831" name="/" dev="ramfs" ino=20651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.879886][ T8673] lo speed is unknown, defaulting to 1000 [ 114.885870][ T8673] lo speed is unknown, defaulting to 1000 [ 114.891845][ T8673] lo speed is unknown, defaulting to 1000 [ 114.898005][ T8673] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.905757][ T8673] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.915359][ T29] audit: type=1400 audit(1755123476.829:2616): avc: denied { create } for pid=8672 comm="syz.0.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.935697][ T29] audit: type=1400 audit(1755123476.829:2617): avc: denied { write } for pid=8672 comm="syz.0.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.957156][ T8673] lo speed is unknown, defaulting to 1000 [ 114.963350][ T8673] lo speed is unknown, defaulting to 1000 [ 114.969572][ T8673] lo speed is unknown, defaulting to 1000 [ 114.975907][ T8673] lo speed is unknown, defaulting to 1000 [ 114.982143][ T8673] lo speed is unknown, defaulting to 1000 [ 115.312368][ T8687] 0X: renamed from caif0 [ 115.319249][ T8687] 0X: entered allmulticast mode [ 115.324556][ T8687] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 115.387275][ T8685] lo speed is unknown, defaulting to 1000 [ 115.471650][ T8694] vlan0: entered allmulticast mode [ 115.497731][ T8694] dummy0: entered allmulticast mode [ 115.582344][ T8700] loop2: detected capacity change from 0 to 512 [ 115.604717][ T8700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.717232][ T8700] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1842: corrupted in-inode xattr: overlapping e_value [ 115.731639][ T8700] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1842: couldn't read orphan inode 15 (err -117) [ 115.744674][ T8700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.901899][ T8717] loop4: detected capacity change from 0 to 1024 [ 115.924549][ T8714] tipc: Enabled bearer , priority 0 [ 115.964884][ T8713] tipc: Resetting bearer [ 115.989154][ T8717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.086267][ T8717] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.141042][ T8713] tipc: Disabling bearer [ 116.195976][ T29] audit: type=1326 audit(1755123478.010:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.219539][ T29] audit: type=1326 audit(1755123478.010:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.242966][ T29] audit: type=1326 audit(1755123478.010:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.267990][ T29] audit: type=1326 audit(1755123478.010:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.291841][ T29] audit: type=1326 audit(1755123478.010:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.315314][ T29] audit: type=1326 audit(1755123478.010:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.338922][ T29] audit: type=1326 audit(1755123478.010:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.1.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781c9debe9 code=0x7ffc0000 [ 116.423482][ T8728] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.1848: lblock 0 mapped to illegal pblock 0 (length 4) [ 116.440893][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.450500][ T8728] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 116.463341][ T8728] EXT4-fs (loop4): This should not happen!! Data will be lost [ 116.463341][ T8728] [ 116.507419][ T8734] loop2: detected capacity change from 0 to 512 [ 116.592382][ T8734] EXT4-fs: Ignoring removed nobh option [ 116.623950][ T8734] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1852: corrupted inode contents [ 116.639373][ T8742] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.649839][ T8734] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1852: mark_inode_dirty error [ 116.706736][ T8742] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.781936][ T8734] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1852: corrupted inode contents [ 116.794701][ T8742] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.818949][ T8734] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1852: mark_inode_dirty error [ 116.867819][ T8734] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1852: Failed to acquire dquot type 0 [ 116.880502][ T8742] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.891097][ T8734] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1852: corrupted inode contents [ 116.893060][ T37] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 116.917887][ T8734] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1852: mark_inode_dirty error [ 116.934410][ T8750] bond_slave_1: mtu less than device minimum [ 116.951109][ T8734] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1852: corrupted inode contents [ 116.953973][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 116.975245][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 116.975245][ T37] [ 116.985756][ T8734] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1852: mark_inode_dirty error [ 116.989376][ T37] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 117.014449][ T8734] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1852: corrupted inode contents [ 117.028558][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.037047][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 117.049406][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.049406][ T37] [ 117.066375][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.084002][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.092963][ T8734] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 117.105561][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.118687][ T8734] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1852: corrupted inode contents [ 117.133626][ T8734] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1852: mark_inode_dirty error [ 117.149535][ T8734] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 117.159176][ T8734] EXT4-fs (loop2): 1 truncate cleaned up [ 117.165702][ T8734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.178500][ T8734] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.210213][ T8734] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.248195][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.377455][ T8763] loop4: detected capacity change from 0 to 512 [ 117.413849][ T8763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.516744][ T8763] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1863: corrupted in-inode xattr: overlapping e_value [ 117.563817][ T8763] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1863: couldn't read orphan inode 15 (err -117) [ 117.614519][ T8763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.016421][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.495717][ T8798] wireguard0: entered promiscuous mode [ 118.501275][ T8798] wireguard0: entered allmulticast mode [ 119.321201][ T8840] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 119.452148][ T8853] __nla_validate_parse: 13 callbacks suppressed [ 119.452165][ T8853] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1895'. [ 119.710534][ T8865] syzkaller0: entered promiscuous mode [ 119.716134][ T8865] syzkaller0: entered allmulticast mode [ 119.988123][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1906'. [ 120.275510][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 120.275529][ T29] audit: type=1400 audit(1755123481.804:2676): avc: denied { create } for pid=8904 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.325643][ T29] audit: type=1400 audit(1755123481.850:2677): avc: denied { create } for pid=8906 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.345274][ T29] audit: type=1400 audit(1755123481.850:2678): avc: denied { bind } for pid=8906 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.364677][ T29] audit: type=1400 audit(1755123481.850:2679): avc: denied { setopt } for pid=8906 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.384276][ T29] audit: type=1400 audit(1755123481.850:2680): avc: denied { write } for pid=8906 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.405527][ T29] audit: type=1400 audit(1755123481.924:2681): avc: denied { create } for pid=8904 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.425140][ T29] audit: type=1400 audit(1755123481.924:2682): avc: denied { connect } for pid=8904 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.444834][ T29] audit: type=1400 audit(1755123481.924:2683): avc: denied { write } for pid=8904 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.523319][ T29] audit: type=1400 audit(1755123482.035:2684): avc: denied { listen } for pid=8910 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.597854][ T29] audit: type=1400 audit(1755123482.071:2685): avc: denied { accept } for pid=8910 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.630476][ T8917] team0: No ports can be present during mode change [ 121.438373][ T9009] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1931'. [ 121.881763][ T9071] tipc: Started in network mode [ 121.886801][ T9071] tipc: Node identity 2ac461ff8731, cluster identity 4711 [ 121.894022][ T9071] tipc: Enabled bearer , priority 0 [ 121.902341][ T9069] tipc: Resetting bearer [ 121.917960][ T9069] tipc: Disabling bearer [ 122.079749][ T8954] lo speed is unknown, defaulting to 1000 [ 122.433747][ T9099] pim6reg1: entered promiscuous mode [ 122.439159][ T9099] pim6reg1: entered allmulticast mode [ 122.930591][ T3409] hid_parser_main: 24 callbacks suppressed [ 122.930614][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.943976][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.951425][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.958872][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.966354][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.973807][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.981309][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.988751][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 122.996145][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 123.003585][ T3409] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 123.207250][ T3409] hid-generic 0008:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz1 [ 123.249906][ T9134] fido_id[9134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.515317][ T9140] loop4: detected capacity change from 0 to 1024 [ 123.558804][ T9140] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 123.963780][ T9150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1962'. [ 123.985761][ T9151] netlink: 'syz.1.1963': attribute type 13 has an invalid length. [ 123.993753][ T9151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 124.242244][ T9159] hub 9-0:1.0: USB hub found [ 124.247391][ T9159] hub 9-0:1.0: 8 ports detected [ 124.421551][ T9178] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1973'. [ 124.556094][ T9187] $H: (slave vxlan0): Enslaving as an active interface with an up link [ 124.564872][ T9033] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.649040][ T9189] netfs: Couldn't get user pages (rc=-14) [ 124.650552][ T9033] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.675882][ T9033] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.684817][ T9033] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.804716][ T9194] tipc: New replicast peer: 255.255.255.83 [ 124.810723][ T9194] tipc: Enabled bearer , priority 10 [ 124.888185][ T9200] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 124.896568][ T9200] netlink: 'syz.1.1984': attribute type 13 has an invalid length. [ 124.904472][ T9200] netlink: 'syz.1.1984': attribute type 17 has an invalid length. [ 124.937823][ T9204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1986'. [ 124.953043][ T9200] $H: left promiscuous mode [ 124.957868][ T9200] bridge_slave_1: left promiscuous mode [ 124.964658][ T9200] 8021q: adding VLAN 0 to HW filter on device $H [ 124.975293][ T9200] 0X: left allmulticast mode [ 124.980290][ T9200] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 125.066669][ T9182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.171256][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 125.220852][ T9227] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1991'. [ 125.221564][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 125.444857][ T9232] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.546879][ T9232] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.594758][ T9232] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.677656][ T9232] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.716984][ T9237] lo speed is unknown, defaulting to 1000 [ 125.733234][ T9242] loop2: detected capacity change from 0 to 8192 [ 125.744826][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 125.744873][ T29] audit: type=1400 audit(1755123486.853:2847): avc: denied { mount } for pid=9241 comm="syz.2.1999" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 125.803582][ T9033] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.816050][ T9033] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.847014][ T9035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.895368][ T29] audit: type=1326 audit(1755123486.991:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 125.903176][ T9035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.918901][ T29] audit: type=1326 audit(1755123486.991:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 125.950523][ T29] audit: type=1326 audit(1755123486.991:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 125.974291][ T29] audit: type=1326 audit(1755123486.991:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 125.997875][ T29] audit: type=1326 audit(1755123486.991:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 126.021326][ T29] audit: type=1326 audit(1755123486.991:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 126.045076][ T29] audit: type=1326 audit(1755123487.000:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 126.068698][ T29] audit: type=1326 audit(1755123487.000:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 126.092303][ T29] audit: type=1326 audit(1755123487.000:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05918ebe9 code=0x7ffc0000 [ 126.135923][ T9247] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 126.149136][ T9247] netlink: 'syz.4.2000': attribute type 13 has an invalid length. [ 126.157038][ T9247] netlink: 'syz.4.2000': attribute type 17 has an invalid length. [ 126.244670][ T9247] $H: left promiscuous mode [ 126.250248][ T9247] 8021q: adding VLAN 0 to HW filter on device $H [ 126.270855][ T9247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.452072][ T9259] lo speed is unknown, defaulting to 1000 [ 126.769685][ T9272] netfs: Couldn't get user pages (rc=-14) [ 127.026975][ T9276] macsec0: entered allmulticast mode [ 127.112430][ T9278] loop2: detected capacity change from 0 to 512 [ 127.135089][ T9278] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.232304][ T9278] loop2: detected capacity change from 0 to 512 [ 127.242391][ T9280] syzkaller0: entered promiscuous mode [ 127.248008][ T9280] syzkaller0: entered allmulticast mode [ 127.400802][ T9285] syz1: rxe_newlink: already configured on syz_tun [ 127.641688][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 127.776784][ T9300] syzkaller0: entered promiscuous mode [ 127.782366][ T9300] syzkaller0: entered allmulticast mode [ 127.982928][ T9312] lo speed is unknown, defaulting to 1000 [ 128.465778][ T9330] loop4: detected capacity change from 0 to 512 [ 128.497614][ T9330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.512910][ T9330] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.538805][ T9324] Set syz1 is full, maxelem 65536 reached [ 128.644820][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.727784][ T9343] ref_ctr increment failed for inode: 0x75d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a341700 [ 129.081527][ T9352] bond_slave_1: mtu less than device minimum [ 129.122991][ T9357] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 129.131221][ T9357] netlink: 'syz.2.2042': attribute type 13 has an invalid length. [ 129.139120][ T9357] netlink: 'syz.2.2042': attribute type 17 has an invalid length. [ 129.187026][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.197825][ T9357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.274517][ T9363] tipc: New replicast peer: 255.255.255.83 [ 129.280551][ T9363] tipc: Enabled bearer , priority 10 [ 129.312590][ T9365] hub 9-0:1.0: USB hub found [ 129.317506][ T9365] hub 9-0:1.0: 8 ports detected [ 129.344766][ T9367] loop2: detected capacity change from 0 to 512 [ 129.364766][ T9367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.384455][ T9367] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.488192][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.528531][ T9375] wg2: entered promiscuous mode [ 129.533853][ T9375] wg2: entered allmulticast mode [ 129.669509][ T9380] tipc: Enabled bearer , priority 0 [ 129.677550][ T9379] tipc: Resetting bearer [ 129.691366][ T9379] tipc: Disabling bearer [ 129.698641][ T9382] pim6reg1: entered promiscuous mode [ 129.704061][ T9382] pim6reg1: entered allmulticast mode [ 129.785892][ T9384] loop2: detected capacity change from 0 to 1024 [ 129.822666][ T9384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.188501][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.224824][ T9405] loop2: detected capacity change from 0 to 1024 [ 130.283130][ T9405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.313832][ T9405] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2060: Allocating blocks 449-513 which overlap fs metadata [ 130.335436][ T9405] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2060'. [ 130.367657][ T9404] EXT4-fs (loop2): pa ffff888105726540: logic 48, phys. 177, len 21 [ 130.375817][ T9404] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 130.435998][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.522930][ T9425] lo speed is unknown, defaulting to 1000 [ 130.790603][ T9] tipc: Node number set to 2918539775 [ 130.837938][ T9452] lo speed is unknown, defaulting to 1000 [ 131.064078][ T9452] loop2: detected capacity change from 0 to 512 [ 131.081599][ T9452] EXT4-fs: test_dummy_encryption option not supported [ 132.171799][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 132.350281][ T9544] loop4: detected capacity change from 0 to 1024 [ 132.634908][ T9544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.671338][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 132.671356][ T29] audit: type=1326 audit(1755123493.249:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 132.701206][ T29] audit: type=1326 audit(1755123493.249:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 132.724704][ T29] audit: type=1326 audit(1755123493.249:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 132.748245][ T29] audit: type=1326 audit(1755123493.249:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 132.771665][ T29] audit: type=1326 audit(1755123493.249:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 132.811731][ T9544] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.034535][ T9551] loop2: detected capacity change from 0 to 8192 [ 133.077496][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.176650][ T29] audit: type=1326 audit(1755123493.369:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 133.200174][ T29] audit: type=1326 audit(1755123493.369:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 133.223687][ T29] audit: type=1326 audit(1755123493.369:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 133.247065][ T29] audit: type=1326 audit(1755123493.369:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 133.270503][ T29] audit: type=1326 audit(1755123493.369:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81c250ebe9 code=0x7ffc0000 [ 133.586270][ T9564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.665312][ T9564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.732544][ T9572] loop2: detected capacity change from 0 to 512 [ 133.743593][ T9572] EXT4-fs: Ignoring removed nobh option [ 133.754752][ T9564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.766824][ T9572] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2084: iget: bad i_size value: 38620345925642 [ 133.780733][ T9572] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2084: couldn't read orphan inode 15 (err -117) [ 133.793878][ T9572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.863917][ T9564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.975344][ T8522] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.008693][ T8522] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.041762][ T8522] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.112821][ T8522] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.206874][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.252440][ T9586] veth0: entered promiscuous mode [ 134.269572][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 134.281669][ T9586] veth0 (unregistering): left promiscuous mode [ 134.330549][ T9588] ipvlan2: entered promiscuous mode [ 134.346186][ T9588] bridge0: port 1(ipvlan2) entered blocking state [ 134.352708][ T9588] bridge0: port 1(ipvlan2) entered disabled state [ 134.366897][ T9588] ipvlan2: entered allmulticast mode [ 134.368900][ T9591] 9pnet: p9_errstr2errno: server reported unknown error @ [ 134.372301][ T9588] bridge0: entered allmulticast mode [ 134.373684][ T9588] ipvlan2: left allmulticast mode [ 134.390076][ T9588] bridge0: left allmulticast mode [ 134.481539][ T9595] loop4: detected capacity change from 0 to 8192 [ 135.203657][ T9035] ================================================================== [ 135.211810][ T9035] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 135.220115][ T9035] [ 135.222456][ T9035] write to 0xffff8881272bc7b2 of 2 bytes by task 9595 on cpu 0: [ 135.230107][ T9035] fat16_ent_put+0x28/0x60 [ 135.234580][ T9035] fat_ent_write+0x69/0xe0 [ 135.239110][ T9035] fat_chain_add+0x15d/0x440 [ 135.243727][ T9035] fat_get_block+0x46c/0x5e0 [ 135.248336][ T9035] __block_write_begin_int+0x400/0xf90 [ 135.253818][ T9035] cont_write_begin+0x5fc/0x970 [ 135.258685][ T9035] fat_write_begin+0x4f/0xe0 [ 135.263293][ T9035] generic_perform_write+0x181/0x490 [ 135.268593][ T9035] __generic_file_write_iter+0x9e/0x120 [ 135.274148][ T9035] generic_file_write_iter+0x8d/0x2f0 [ 135.279530][ T9035] vfs_write+0x527/0x960 [ 135.283782][ T9035] ksys_write+0xda/0x1a0 [ 135.288047][ T9035] __x64_sys_write+0x40/0x50 [ 135.292658][ T9035] x64_sys_call+0x27fe/0x2ff0 [ 135.297343][ T9035] do_syscall_64+0xd2/0x200 [ 135.301946][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.308008][ T9035] [ 135.310349][ T9035] read to 0xffff8881272bc600 of 512 bytes by task 9035 on cpu 1: [ 135.318097][ T9035] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 135.324034][ T9035] generic_perform_write+0x2c2/0x490 [ 135.329337][ T9035] shmem_file_write_iter+0xc5/0xf0 [ 135.334458][ T9035] lo_rw_aio+0x69d/0x760 [ 135.338720][ T9035] loop_process_work+0x52d/0xa60 [ 135.343680][ T9035] loop_workfn+0x31/0x40 [ 135.347957][ T9035] process_scheduled_works+0x4cb/0x9d0 [ 135.353432][ T9035] worker_thread+0x582/0x770 [ 135.358041][ T9035] kthread+0x489/0x510 [ 135.362118][ T9035] ret_from_fork+0xda/0x150 [ 135.366629][ T9035] ret_from_fork_asm+0x1a/0x30 [ 135.371401][ T9035] [ 135.373728][ T9035] Reported by Kernel Concurrency Sanitizer on: [ 135.380007][ T9035] CPU: 1 UID: 0 PID: 9035 Comm: kworker/u8:14 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 135.392779][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.402851][ T9035] Workqueue: loop4 loop_workfn [ 135.407642][ T9035] ================================================================== [ 135.591263][ T9613] sch_fq: defrate 2 ignored.