last executing test programs: 37.768411581s ago: executing program 2 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 37.755112521s ago: executing program 2 (id=714): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f00000005c0)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 37.307837467s ago: executing program 2 (id=729): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fchmod(r0, 0x0) 37.305241197s ago: executing program 32 (id=729): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fchmod(r0, 0x0) 21.883244073s ago: executing program 4 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)=ANY=[]) 21.805397269s ago: executing program 4 (id=1120): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 21.246558083s ago: executing program 4 (id=1132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 21.197264957s ago: executing program 4 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) 21.16275374s ago: executing program 4 (id=1135): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2005, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 20.932638088s ago: executing program 4 (id=1139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000"], 0x70}, 0x1, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 20.932073388s ago: executing program 33 (id=1139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000"], 0x70}, 0x1, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 2.183618577s ago: executing program 5 (id=1527): open(&(0x7f00009e1000)='./file0\x00', 0x68840, 0x160) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.120901692s ago: executing program 5 (id=1528): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) syslog(0x2, &(0x7f00000000c0)=""/88, 0x58) 1.872501572s ago: executing program 3 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000abc0)=@delchain={0x2c, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.716066804s ago: executing program 1 (id=1536): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0x9cbc, 0x800, 0x3, 0x10a}) close_range(r0, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.680584867s ago: executing program 3 (id=1537): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.626761801s ago: executing program 6 (id=1538): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1, 0x0, 0x4}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 824.573664ms ago: executing program 1 (id=1540): open(&(0x7f00009e1000)='./file0\x00', 0x68840, 0x160) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 824.352834ms ago: executing program 5 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) setresuid(0x0, 0x0, 0x0) lstat(&(0x7f0000000e80)='./file0\x00', 0x0) 769.059539ms ago: executing program 0 (id=1543): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 763.46871ms ago: executing program 5 (id=1544): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) getrandom(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1000, 0x8, 0x1, 0x6}, {0x9, 0x4, 0x0, 0x6}, {0x0, 0x5a, 0x7, 0x9}, {0x2, 0x3, 0x9, 0x5}, {0x8, 0x9, 0x1, 0xc}, {0x6, 0x4, 0x2, 0xfcd}]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 720.971853ms ago: executing program 1 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 608.287922ms ago: executing program 6 (id=1547): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x143041, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0xb10, 0x7}, 0x0, 0x2, 0xfffff7f0, 0x9, 0x12, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2c020400) r1 = open(&(0x7f0000002240)='./file1\x00', 0x145142, 0x10) ftruncate(r1, 0x2007ffc) 593.271803ms ago: executing program 0 (id=1558): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 589.535843ms ago: executing program 1 (id=1549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 586.622324ms ago: executing program 3 (id=1550): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 496.494971ms ago: executing program 0 (id=1551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x3) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) 496.252431ms ago: executing program 3 (id=1552): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0x9, 0x7fff, 0x0, 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 495.465921ms ago: executing program 5 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0x122) r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x1, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 494.723911ms ago: executing program 1 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e01000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) 323.610155ms ago: executing program 6 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x10012) 192.692205ms ago: executing program 6 (id=1556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 192.285355ms ago: executing program 5 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 191.930145ms ago: executing program 1 (id=1559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c6f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 149.761498ms ago: executing program 6 (id=1560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 137.622959ms ago: executing program 3 (id=1561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200002, 0x0, 0x0, 0x0, 0xe0000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) 68.552785ms ago: executing program 6 (id=1562): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 68.271145ms ago: executing program 0 (id=1563): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 67.912615ms ago: executing program 3 (id=1564): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x10) 33.492497ms ago: executing program 0 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 0s ago: executing program 0 (id=1566): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) getrandom(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1000, 0x8, 0x1, 0x6}, {0x9, 0x4, 0x0, 0x6}, {0x0, 0x5a, 0x7, 0x9}, {0x2, 0x3, 0x9, 0x5}, {0x8, 0x9, 0x1, 0xc}, {0x6, 0x4, 0x2, 0xfcd}]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e197bebe9 code=0x7ffc0000 [ 41.993953][ T4472] SELinux: failed to load policy [ 42.009329][ T4480] loop2: detected capacity change from 0 to 1024 [ 42.009609][ T4482] futex_wake_op: syz.1.338 tries to shift op by -1; fix this program [ 42.159023][ T4480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.199315][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.394005][ C0] hrtimer: interrupt took 46822 ns [ 42.454153][ T4528] tipc: Started in network mode [ 42.459212][ T4528] tipc: Node identity 622a0852a7de, cluster identity 4711 [ 42.466581][ T4528] tipc: Enabled bearer , priority 0 [ 42.494100][ T4528] tipc: Disabling bearer [ 42.540131][ T4537] __nla_validate_parse: 9 callbacks suppressed [ 42.540146][ T4537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.362'. [ 42.690112][ T4561] loop2: detected capacity change from 0 to 2048 [ 42.727620][ T4560] macsec1: entered promiscuous mode [ 42.732942][ T4560] bridge0: entered promiscuous mode [ 42.738882][ T4560] bridge0: port 3(macsec1) entered blocking state [ 42.745406][ T4560] bridge0: port 3(macsec1) entered disabled state [ 42.765640][ T4560] macsec1: entered allmulticast mode [ 42.771096][ T4560] bridge0: entered allmulticast mode [ 42.781778][ T4560] macsec1: left allmulticast mode [ 42.786934][ T4560] bridge0: left allmulticast mode [ 42.795559][ T4560] bridge0: left promiscuous mode [ 42.849666][ T4581] serio: Serial port ptm0 [ 43.097988][ T4615] loop1: detected capacity change from 0 to 1024 [ 43.136923][ T4615] EXT4-fs: Ignoring removed oldalloc option [ 43.156757][ T4615] EXT4-fs: Ignoring removed orlov option [ 43.175132][ T4615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.183135][ T4621] tipc: Started in network mode [ 43.192397][ T4621] tipc: Node identity 3e9f6b579ff2, cluster identity 4711 [ 43.199906][ T4621] tipc: Enabled bearer , priority 0 [ 43.227032][ T4621] tipc: Disabling bearer [ 43.340163][ T4638] loop4: detected capacity change from 0 to 512 [ 43.394541][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.410024][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.416380][ T4638] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.444965][ T4638] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.399: Failed to acquire dquot type 0 [ 43.488195][ T4658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.405'. [ 43.535518][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.890073][ T4718] loop2: detected capacity change from 0 to 512 [ 43.907547][ T4718] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.949477][ T4718] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.962791][ T4718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.996061][ T4718] EXT4-fs (loop2): 1 truncate cleaned up [ 44.017934][ T4718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.132776][ T4740] loop1: detected capacity change from 0 to 1024 [ 44.187962][ T4740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.189626][ T4745] netlink: 92 bytes leftover after parsing attributes in process `syz.0.422'. [ 44.243055][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.337933][ T4755] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 44.338312][ T4754] IPVS: stopping master sync thread 4755 ... [ 44.428658][ T4761] loop1: detected capacity change from 0 to 1024 [ 44.455034][ T4761] EXT4-fs: Ignoring removed bh option [ 44.474379][ T4761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.508329][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.560430][ T4772] loop0: detected capacity change from 0 to 512 [ 44.618352][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.629174][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.769337][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.966596][ T4810] loop4: detected capacity change from 0 to 128 [ 45.090400][ T4824] loop4: detected capacity change from 0 to 512 [ 45.175525][ T4832] loop2: detected capacity change from 0 to 512 [ 45.197147][ T4832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.212218][ T4832] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.229899][ T4832] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.458: Failed to acquire dquot type 0 [ 45.263707][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.442399][ T4846] bridge0: entered promiscuous mode [ 45.451599][ T4846] macvtap1: entered allmulticast mode [ 45.457285][ T4846] bridge0: entered allmulticast mode [ 45.457631][ T4850] loop2: detected capacity change from 0 to 512 [ 45.465367][ T4846] bridge0: port 3(macvtap1) entered blocking state [ 45.475682][ T4846] bridge0: port 3(macvtap1) entered disabled state [ 45.493482][ T4846] bridge0: left allmulticast mode [ 45.498617][ T4846] bridge0: left promiscuous mode [ 45.513729][ T4850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.571649][ T4850] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.675418][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.685990][ T4871] loop0: detected capacity change from 0 to 2048 [ 45.733873][ T3294] loop0: p1 < > p4 [ 45.739207][ T3294] loop0: p4 size 8388608 extends beyond EOD, truncated [ 45.754575][ T4871] loop0: p1 < > p4 [ 45.763100][ T4871] loop0: p4 size 8388608 extends beyond EOD, truncated [ 45.832873][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 45.847962][ T4153] udevd[4153]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 45.877297][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 45.888167][ T4153] udevd[4153]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 45.925619][ T4896] loop2: detected capacity change from 0 to 512 [ 45.939044][ T4896] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 45.991924][ T4896] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 46.005663][ T4896] EXT4-fs (loop2): 1 truncate cleaned up [ 46.011958][ T4896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.031452][ T4896] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.054252][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.136249][ T4913] loop1: detected capacity change from 0 to 1024 [ 46.143771][ T4915] netlink: 96 bytes leftover after parsing attributes in process `syz.2.478'. [ 46.197356][ T4913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.228739][ T4929] netlink: 92 bytes leftover after parsing attributes in process `syz.4.480'. [ 46.367229][ T4913] EXT4-fs: Ignoring sb option on remount [ 46.373131][ T4913] EXT4-fs: Ignoring removed orlov option [ 46.393645][ T4913] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 46.421468][ T4913] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 46.474329][ T4966] loop3: detected capacity change from 0 to 1024 [ 46.488816][ T4966] EXT4-fs: Ignoring removed bh option [ 46.525059][ T4966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.539138][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.565608][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 46.569208][ T4975] bridge0: entered promiscuous mode [ 46.574489][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 46.579925][ T4975] macvtap1: entered allmulticast mode [ 46.594090][ T4975] bridge0: entered allmulticast mode [ 46.600692][ T4975] bridge0: port 3(macvtap1) entered blocking state [ 46.607353][ T4975] bridge0: port 3(macvtap1) entered disabled state [ 46.631351][ T4975] bridge0: left allmulticast mode [ 46.636541][ T4975] bridge0: left promiscuous mode [ 46.645661][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.646806][ T4982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.670309][ T4982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.695113][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 46.695129][ T29] audit: type=1326 audit(1756368304.418:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece31ebe9 code=0x7ffc0000 [ 46.737500][ T29] audit: type=1326 audit(1756368304.418:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbece31ebe9 code=0x7ffc0000 [ 46.760699][ T29] audit: type=1326 audit(1756368304.418:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece31ebe9 code=0x7ffc0000 [ 46.784277][ T29] audit: type=1326 audit(1756368304.418:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fbece31ebe9 code=0x7ffc0000 [ 46.807714][ T29] audit: type=1326 audit(1756368304.418:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece31ebe9 code=0x7ffc0000 [ 46.830987][ T29] audit: type=1326 audit(1756368304.418:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbece31ebe9 code=0x7ffc0000 [ 47.424422][ T4999] process 'syz.0.504' launched './file0' with NULL argv: empty string added [ 47.431318][ T5004] loop1: detected capacity change from 0 to 4096 [ 47.435567][ T5001] netlink: 76 bytes leftover after parsing attributes in process `syz.2.495'. [ 47.459268][ T29] audit: type=1400 audit(1756368305.178:730): avc: denied { execute_no_trans } for pid=4998 comm="syz.0.504" path="/92/file0" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.550558][ T5004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.581497][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 47.627669][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 47.628960][ T29] audit: type=1400 audit(1756368305.348:731): avc: denied { mounton } for pid=5003 comm="syz.1.497" path="/97/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.767255][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.794321][ T29] audit: type=1400 audit(1756368305.398:732): avc: denied { mount } for pid=5003 comm="syz.1.497" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.816300][ T29] audit: type=1400 audit(1756368305.428:733): avc: denied { read } for pid=5003 comm="syz.1.497" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.850486][ T5073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.898727][ T5073] team0: Port device bond1 added [ 47.905433][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 47.933713][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 48.033861][ T5090] atomic_op ffff88811aad7128 conn xmit_atomic 0000000000000000 [ 48.059642][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.086126][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.104098][ T5103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.510'. [ 48.159885][ T5110] loop2: detected capacity change from 0 to 1024 [ 48.188853][ T5110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.345282][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.403812][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 48.423430][ T5158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 48.461270][ T5169] loop4: detected capacity change from 0 to 512 [ 48.478292][ T5169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.491109][ T5169] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.510595][ T5174] loop3: detected capacity change from 0 to 1024 [ 48.524065][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.559494][ T5181] sd 0:0:1:0: device reset [ 48.585215][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.638917][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.674724][ T5189] vhci_hcd: invalid port number 96 [ 48.680007][ T5189] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 48.919333][ T5213] loop0: detected capacity change from 0 to 1024 [ 48.938181][ T5213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.968155][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 48.999781][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.034403][ T5227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 49.155469][ T5236] loop2: detected capacity change from 0 to 256 [ 49.429162][ T5263] loop2: detected capacity change from 0 to 128 [ 49.461775][ T5263] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.487020][ T5263] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.520613][ T5280] netlink: 'syz.0.576': attribute type 6 has an invalid length. [ 49.530917][ T5280] netlink: 'syz.0.576': attribute type 6 has an invalid length. [ 49.567965][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.629456][ T5291] loop4: detected capacity change from 0 to 1024 [ 49.647562][ T5291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.686987][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'. [ 49.698219][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.746240][ T5302] futex_wake_op: syz.1.585 tries to shift op by -1; fix this program [ 49.759167][ T5304] loop4: detected capacity change from 0 to 512 [ 49.773867][ T5304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.786726][ T5304] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.798397][ T5304] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.583: corrupted inode contents [ 49.810292][ T5304] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.583: mark_inode_dirty error [ 49.822245][ T5304] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.583: corrupted inode contents [ 49.835773][ T5304] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.583: corrupted inode contents [ 49.847893][ T5304] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.583: mark_inode_dirty error [ 49.859354][ T5304] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.583: corrupted inode contents [ 49.871259][ T5304] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.583: mark_inode_dirty error [ 49.883049][ T5304] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.583: corrupted inode contents [ 49.894963][ T5304] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.583: mark_inode_dirty error [ 49.919796][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.979055][ T5323] loop1: detected capacity change from 0 to 512 [ 49.989053][ T5321] loop4: detected capacity change from 0 to 128 [ 49.999136][ T5321] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.014941][ T5321] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.044782][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.062660][ T5323] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.090442][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.244012][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.861509][ T5376] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 50.999931][ T5400] netlink: 'syz.0.617': attribute type 4 has an invalid length. [ 51.669529][ T5462] netlink: 'syz.1.643': attribute type 3 has an invalid length. [ 51.721245][ T5471] loop1: detected capacity change from 0 to 128 [ 51.729671][ T5471] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.742698][ T5471] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.758410][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 51.758427][ T29] audit: type=1400 audit(1756368309.478:973): avc: denied { setattr } for pid=5470 comm="syz.1.647" path="/127/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.788262][ T29] audit: type=1400 audit(1756368309.498:974): avc: denied { write } for pid=5472 comm="syz.3.648" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.813339][ T5473] vhci_hcd: invalid port number 96 [ 51.818599][ T5473] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 51.839126][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881206f9e00: rx timeout, send abort [ 51.847491][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881206f9800: rx timeout, send abort [ 51.855872][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881206f9e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.870475][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881206f9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.902651][ T29] audit: type=1400 audit(1756368309.628:975): avc: denied { mount } for pid=5477 comm="syz.2.649" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 51.961806][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.971807][ T29] audit: type=1400 audit(1756368309.648:976): avc: denied { search } for pid=5477 comm="syz.2.649" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 51.993841][ T29] audit: type=1400 audit(1756368309.658:977): avc: denied { search } for pid=5477 comm="syz.2.649" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.015696][ T29] audit: type=1400 audit(1756368309.658:978): avc: denied { read open } for pid=5477 comm="syz.2.649" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 52.120573][ T5493] ip6gre1: entered allmulticast mode [ 52.198887][ T29] audit: type=1400 audit(1756368309.918:979): avc: denied { read write } for pid=5501 comm="syz.3.660" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.222456][ T29] audit: type=1400 audit(1756368309.918:980): avc: denied { open } for pid=5501 comm="syz.3.660" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.261876][ T5506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.279021][ T29] audit: type=1400 audit(1756368309.998:981): avc: denied { read } for pid=5508 comm="syz.3.663" path="socket:[10143]" dev="sockfs" ino=10143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.312173][ T29] audit: type=1400 audit(1756368310.028:982): avc: denied { read write } for pid=5510 comm="syz.0.664" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.319445][ T5511] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.345991][ T5511] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.356781][ T5506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.425772][ T5506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.468267][ T5524] loop4: detected capacity change from 0 to 512 [ 52.481949][ T5516] loop0: detected capacity change from 0 to 8192 [ 52.488984][ T5516] msdos: Unknown parameter 'A' [ 52.503559][ T5524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.519675][ T5524] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.519709][ T5506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.544814][ T5524] EXT4-fs (loop4): 1 truncate cleaned up [ 52.551400][ T5524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.577310][ T5532] wg2: entered promiscuous mode [ 52.582377][ T5532] wg2: entered allmulticast mode [ 52.627113][ T3742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.636856][ T5524] EXT4-fs (loop4): shut down requested (0) [ 52.662097][ T3742] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670468][ T3742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.684169][ T3742] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.695596][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.896898][ T5562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.015623][ T5562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.088612][ T5574] loop3: detected capacity change from 0 to 8192 [ 53.105337][ T5562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.154089][ T5589] loop2: detected capacity change from 0 to 512 [ 53.166135][ T5562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.183323][ T5589] ext4: Unknown parameter 'smackfsfloor' [ 53.230731][ T5594] loop1: detected capacity change from 0 to 256 [ 53.249141][ T4439] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.254818][ T5594] program syz.1.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.269801][ T4439] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.327614][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.334966][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.379791][ T5595] wg2: left promiscuous mode [ 53.385055][ T5595] wg2: left allmulticast mode [ 53.409434][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.420349][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.458222][ T4713] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.476657][ T5596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.514120][ T5598] netlink: 'syz.2.701': attribute type 30 has an invalid length. [ 53.517473][ T4713] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.590991][ T3742] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.607463][ T3742] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.616811][ T3742] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.651875][ T5608] loop4: detected capacity change from 0 to 128 [ 53.661335][ T5608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.673946][ T5608] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.779617][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.881496][ T5626] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.955592][ T5626] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.969318][ T5630] loop2: detected capacity change from 0 to 164 [ 53.987281][ T5630] syz.2.714: attempt to access beyond end of device [ 53.987281][ T5630] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 54.004856][ T5630] syz.2.714: attempt to access beyond end of device [ 54.004856][ T5630] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.040060][ T5626] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.087486][ T5626] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.311974][ T5659] loop3: detected capacity change from 0 to 1024 [ 54.319626][ T3742] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.391437][ T3742] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.433788][ T3742] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.493822][ T3742] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.623903][ T3742] bridge_slave_1: left allmulticast mode [ 54.629635][ T3742] bridge_slave_1: left promiscuous mode [ 54.635552][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.649991][ T3742] bridge_slave_0: left allmulticast mode [ 54.655724][ T3742] bridge_slave_0: left promiscuous mode [ 54.661584][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.715948][ T5696] loop3: detected capacity change from 0 to 2048 [ 54.726574][ T5697] loop1: detected capacity change from 0 to 128 [ 54.764126][ T3742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.772690][ T5696] loop3: p1 < > p4 [ 54.773749][ T5696] loop3: p4 size 8388608 extends beyond EOD, truncated [ 54.785990][ T3742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.796128][ T3742] bond0 (unregistering): Released all slaves [ 54.805499][ T5692] lo speed is unknown, defaulting to 1000 [ 54.812454][ T5692] lo speed is unknown, defaulting to 1000 [ 54.820674][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 54.833725][ T5692] lo speed is unknown, defaulting to 1000 [ 54.844098][ T5692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.851847][ T5692] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.868861][ T5692] lo speed is unknown, defaulting to 1000 [ 54.874202][ T3742] tipc: Left network mode [ 54.875258][ T5692] lo speed is unknown, defaulting to 1000 [ 54.891233][ T5692] lo speed is unknown, defaulting to 1000 [ 54.904722][ T5692] lo speed is unknown, defaulting to 1000 [ 54.910990][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.918181][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.925847][ T5664] bridge_slave_0: entered allmulticast mode [ 54.932448][ T5664] bridge_slave_0: entered promiscuous mode [ 54.939237][ T5692] lo speed is unknown, defaulting to 1000 [ 54.939516][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.952115][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.959428][ T5664] bridge_slave_1: entered allmulticast mode [ 54.966027][ T5664] bridge_slave_1: entered promiscuous mode [ 54.977744][ T5692] lo speed is unknown, defaulting to 1000 [ 54.993998][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.015513][ T3742] hsr_slave_0: left promiscuous mode [ 55.022748][ T3742] hsr_slave_1: left promiscuous mode [ 55.034917][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.042421][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.051553][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.059261][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.082598][ T3742] veth1_macvtap: left promiscuous mode [ 55.088520][ T3742] veth0_macvtap: left promiscuous mode [ 55.094290][ T3742] veth1_vlan: left promiscuous mode [ 55.100116][ T3742] veth0_vlan: left promiscuous mode [ 55.193634][ T3742] team0 (unregistering): Port device team_slave_1 removed [ 55.208609][ T3742] team0 (unregistering): Port device team_slave_0 removed [ 55.269047][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.296291][ T5664] team0: Port device team_slave_0 added [ 55.309267][ T5664] team0: Port device team_slave_1 added [ 55.327481][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.334619][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.360579][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.371950][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.379400][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.406182][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.456947][ T5664] hsr_slave_0: entered promiscuous mode [ 55.463425][ T5664] hsr_slave_1: entered promiscuous mode [ 55.469392][ T5664] debugfs: 'hsr0' already exists in 'hsr' [ 55.475170][ T5664] Cannot create hsr debugfs directory [ 55.565220][ T5664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.590262][ T5664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.643842][ T5664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.655736][ T5664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.725404][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.737590][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.747657][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.754917][ T3738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.767883][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.775080][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.791749][ T5664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.802325][ T5664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.865475][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.988234][ T5664] veth0_vlan: entered promiscuous mode [ 55.997921][ T5664] veth1_vlan: entered promiscuous mode [ 56.014417][ T5664] veth0_macvtap: entered promiscuous mode [ 56.021844][ T5664] veth1_macvtap: entered promiscuous mode [ 56.032631][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.043685][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.054265][ T3743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.063635][ T3743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.073970][ T3743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.083011][ T3743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.132436][ T5750] __nla_validate_parse: 3 callbacks suppressed [ 56.132454][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 56.208784][ T5756] loop1: detected capacity change from 0 to 2048 [ 56.244199][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.758'. [ 56.262233][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'. [ 56.316681][ T5652] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 56.324489][ T5652] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 56.342209][ T5652] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 56.350292][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 56.359562][ T5789] bridge_slave_1: left allmulticast mode [ 56.365355][ T5789] bridge_slave_1: left promiscuous mode [ 56.371203][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.379256][ T5652] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 56.391474][ T5789] bridge_slave_0: left allmulticast mode [ 56.397304][ T5789] bridge_slave_0: left promiscuous mode [ 56.403119][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.475783][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.482933][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.523399][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.534014][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.566201][ T5795] ip6gre1: left allmulticast mode [ 56.574246][ T5800] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.589391][ T3738] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.611216][ T3738] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.619911][ T3742] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.267061][ T4713] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.278216][ T4713] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.289424][ T3738] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.300523][ T3738] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.355180][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 57.355197][ T29] audit: type=1400 audit(1756368315.078:1194): avc: denied { getopt } for pid=5809 comm="syz.0.773" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.361713][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 57.389393][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.397121][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.398958][ T5814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.775'. [ 57.404749][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.421084][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.428612][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.436038][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.457127][ T3397] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 57.505424][ T29] audit: type=1400 audit(1756368315.228:1195): avc: denied { read write } for pid=5823 comm="syz.3.781" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.534163][ T29] audit: type=1400 audit(1756368315.228:1196): avc: denied { open } for pid=5823 comm="syz.3.781" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.560392][ T29] audit: type=1400 audit(1756368315.258:1197): avc: denied { ioctl } for pid=5823 comm="syz.3.781" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.590640][ T29] audit: type=1326 audit(1756368315.278:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.0.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 57.614234][ T29] audit: type=1326 audit(1756368315.278:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.0.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 57.637680][ T29] audit: type=1326 audit(1756368315.278:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.0.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 57.661427][ T29] audit: type=1326 audit(1756368315.278:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.0.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 57.685688][ T29] audit: type=1326 audit(1756368315.278:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.0.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 57.709094][ T29] audit: type=1326 audit(1756368315.278:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.0.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 57.735516][ T5835] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 58.085944][ T5863] syzkaller1: entered promiscuous mode [ 58.091492][ T5863] syzkaller1: entered allmulticast mode [ 58.141109][ T5869] rdma_op ffff888119332580 conn xmit_rdma 0000000000000000 [ 58.177448][ T5873] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.214769][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 58.215891][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 58.223917][ T5873] bridge_slave_1: left allmulticast mode [ 58.238381][ T5873] bridge_slave_1: left promiscuous mode [ 58.244087][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.252253][ T5873] bridge_slave_0: left allmulticast mode [ 58.257940][ T5873] bridge_slave_0: left promiscuous mode [ 58.263656][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.516395][ T5914] loop9: detected capacity change from 0 to 7 [ 58.522969][ T5914] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.528742][ T5917] loop3: detected capacity change from 0 to 512 [ 58.530952][ T5914] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.545390][ T5914] loop9: unable to read partition table [ 58.551406][ T5914] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 58.551406][ T5914] ) failed (rc=-5) [ 58.553835][ T5917] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.614702][ T5917] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.821: corrupted inode contents [ 58.627260][ T5917] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.821: mark_inode_dirty error [ 58.639393][ T5917] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.821: corrupted inode contents [ 58.651975][ T5917] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.821: mark_inode_dirty error [ 58.665086][ T5917] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.821: mark inode dirty (error -117) [ 58.678922][ T5917] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 58.827098][ T5942] loop5: detected capacity change from 0 to 512 [ 58.839260][ T5942] EXT4-fs: Ignoring removed oldalloc option [ 58.857878][ T5942] EXT4-fs (loop5): 1 truncate cleaned up [ 59.252974][ T5971] loop0: detected capacity change from 0 to 512 [ 59.263394][ T5971] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.279415][ T5971] EXT4-fs (loop0): mount failed [ 59.586368][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 59.605169][ T6003] netlink: 'syz.1.856': attribute type 39 has an invalid length. [ 59.611355][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.857'. [ 59.651176][ T6007] loop5: detected capacity change from 0 to 256 [ 59.700409][ T6011] loop0: detected capacity change from 0 to 512 [ 59.716100][ T6011] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.745922][ T6011] EXT4-fs (loop0): mount failed [ 59.754601][ T6017] loop5: detected capacity change from 0 to 512 [ 59.776725][ T6017] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.993403][ T6037] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.869'. [ 60.068130][ T6045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.101392][ T6045] vlan2: entered allmulticast mode [ 60.106665][ T6045] bond1: entered allmulticast mode [ 60.359065][ T6057] vhci_hcd: invalid port number 96 [ 60.364375][ T6057] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 60.511700][ T6061] 9pnet_fd: Insufficient options for proto=fd [ 60.925157][ T6089] pim6reg1: entered promiscuous mode [ 60.930534][ T6089] pim6reg1: entered allmulticast mode [ 60.969245][ T6094] vlan2: entered allmulticast mode [ 60.974541][ T6094] dummy0: entered allmulticast mode [ 61.016789][ T6097] bridge2: entered allmulticast mode [ 61.073666][ T6102] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 61.086332][ T6099] IPVS: stopping master sync thread 6102 ... [ 61.144233][ T6108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.155953][ T6111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.172621][ T6108] vlan2: entered allmulticast mode [ 61.177882][ T6108] bond1: entered allmulticast mode [ 61.207598][ T6111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.280764][ T6126] 9pnet_fd: Insufficient options for proto=fd [ 61.294401][ T6126] __nla_validate_parse: 7 callbacks suppressed [ 61.294418][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 61.314677][ T6111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.366995][ T6111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.422318][ T3742] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.440834][ T3742] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.462223][ T3738] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.474004][ T3738] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.523877][ T6141] bridge0: port 1(team0) entered blocking state [ 61.530186][ T6141] bridge0: port 1(team0) entered disabled state [ 61.538184][ T6141] team0: entered allmulticast mode [ 61.543417][ T6141] team_slave_0: entered allmulticast mode [ 61.549269][ T6141] team_slave_1: entered allmulticast mode [ 61.555216][ T6141] bond1: entered allmulticast mode [ 61.563184][ T6141] team0: entered promiscuous mode [ 61.568346][ T6141] team_slave_0: entered promiscuous mode [ 61.574100][ T6141] team_slave_1: entered promiscuous mode [ 61.579885][ T6141] bond1: entered promiscuous mode [ 61.604815][ T6150] netlink: 'syz.0.917': attribute type 39 has an invalid length. [ 61.675349][ T6160] netlink: 'syz.4.922': attribute type 2 has an invalid length. [ 61.683131][ T6160] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 61.690985][ T6160] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.922'. [ 61.691077][ T6162] loop5: detected capacity change from 0 to 256 [ 61.803827][ T6174] loop0: detected capacity change from 0 to 256 [ 61.816157][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.928'. [ 61.847131][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.874926][ T6177] vlan2: entered allmulticast mode [ 61.880105][ T6177] bond1: entered allmulticast mode [ 61.890305][ T6180] bridge0: port 3(team0) entered blocking state [ 61.896742][ T6180] bridge0: port 3(team0) entered disabled state [ 61.903345][ T6180] team0: entered allmulticast mode [ 61.908587][ T6180] team_slave_0: entered allmulticast mode [ 61.914551][ T6180] team_slave_1: entered allmulticast mode [ 61.921049][ T6180] team0: entered promiscuous mode [ 61.926139][ T6180] team_slave_0: entered promiscuous mode [ 61.931904][ T6180] team_slave_1: entered promiscuous mode [ 61.938014][ T6180] bridge0: port 3(team0) entered blocking state [ 61.944328][ T6180] bridge0: port 3(team0) entered forwarding state [ 62.123934][ T6200] loop5: detected capacity change from 0 to 128 [ 62.132713][ T6200] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 62.186382][ T5664] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 62.194369][ T5664] FAT-fs (loop5): Filesystem has been set read-only [ 62.208533][ T5664] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 62.227671][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 62.236961][ T6202] loop3: detected capacity change from 0 to 256 [ 62.271156][ T6207] loop4: detected capacity change from 0 to 256 [ 62.335096][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 62.393363][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 62.393400][ T29] audit: type=1400 audit(1756368320.118:1399): avc: denied { create } for pid=6215 comm="syz.3.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.430259][ T6216] vlan2: entered allmulticast mode [ 62.439700][ T29] audit: type=1400 audit(1756368320.118:1400): avc: denied { ioctl } for pid=6215 comm="syz.3.950" path="socket:[13064]" dev="sockfs" ino=13064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.445450][ T6216] dummy0: entered allmulticast mode [ 62.464922][ T29] audit: type=1400 audit(1756368320.148:1401): avc: denied { read write } for pid=6218 comm="syz.4.961" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 62.494107][ T29] audit: type=1400 audit(1756368320.148:1402): avc: denied { open } for pid=6218 comm="syz.4.961" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 62.520304][ T29] audit: type=1326 audit(1756368320.188:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 62.544107][ T29] audit: type=1326 audit(1756368320.188:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 62.567677][ T29] audit: type=1326 audit(1756368320.188:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 62.591250][ T29] audit: type=1326 audit(1756368320.188:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 62.614778][ T29] audit: type=1326 audit(1756368320.188:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 62.638302][ T29] audit: type=1326 audit(1756368320.188:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6223 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 62.689579][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 62.699350][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 62.741363][ T6239] loop1: detected capacity change from 0 to 256 [ 62.757889][ T6237] bridge0: port 1(team0) entered blocking state [ 62.764454][ T6237] bridge0: port 1(team0) entered disabled state [ 62.771244][ T6237] team0: entered allmulticast mode [ 62.776532][ T6237] team_slave_0: entered allmulticast mode [ 62.782387][ T6237] team_slave_1: entered allmulticast mode [ 62.793936][ T6237] team0: entered promiscuous mode [ 62.799052][ T6237] team_slave_0: entered promiscuous mode [ 62.804796][ T6237] team_slave_1: entered promiscuous mode [ 62.810633][ T6245] loop3: detected capacity change from 0 to 256 [ 62.817304][ T6237] bridge0: port 1(team0) entered blocking state [ 62.823658][ T6237] bridge0: port 1(team0) entered forwarding state [ 62.881318][ T6249] loop5: detected capacity change from 0 to 512 [ 62.900401][ T6249] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 4 in block_group 0 [ 62.916938][ T6249] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 62.917120][ T6251] pim6reg1: entered promiscuous mode [ 62.930816][ T6251] pim6reg1: entered allmulticast mode [ 62.968821][ T6256] lo speed is unknown, defaulting to 1000 [ 63.012208][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 63.040369][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 63.123093][ T6276] bridge0: port 3(team0) entered blocking state [ 63.129405][ T6276] bridge0: port 3(team0) entered disabled state [ 63.146494][ T6276] team0: entered allmulticast mode [ 63.151680][ T6276] team_slave_0: entered allmulticast mode [ 63.157637][ T6276] team_slave_1: entered allmulticast mode [ 63.191130][ T6276] team0: entered promiscuous mode [ 63.196659][ T6276] team_slave_0: entered promiscuous mode [ 63.202738][ T6276] team_slave_1: entered promiscuous mode [ 63.253678][ T6283] loop0: detected capacity change from 0 to 256 [ 63.273264][ T6282] loop3: detected capacity change from 0 to 128 [ 63.287160][ T6282] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.331606][ T6292] loop1: detected capacity change from 0 to 256 [ 63.342045][ T6291] loop4: detected capacity change from 0 to 256 [ 63.413839][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 63.467807][ T6298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.488502][ T6307] vlan2: entered allmulticast mode [ 63.493781][ T6307] bond2: entered allmulticast mode [ 63.511876][ T6302] pim6reg1: entered promiscuous mode [ 63.517423][ T6302] pim6reg1: entered allmulticast mode [ 63.674268][ T6323] lo speed is unknown, defaulting to 1000 [ 63.752936][ T6332] loop5: detected capacity change from 0 to 512 [ 63.800463][ T6332] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.835893][ T6332] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.993: corrupted inode contents [ 63.881528][ T6332] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.993: mark_inode_dirty error [ 63.903505][ T6332] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.993: corrupted inode contents [ 63.935591][ T6340] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.993: corrupted inode contents [ 63.962096][ T6340] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.993: mark_inode_dirty error [ 63.998098][ T6340] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.993: corrupted inode contents [ 64.016827][ T6340] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.993: mark_inode_dirty error [ 64.032663][ T6349] loop4: detected capacity change from 0 to 128 [ 64.039288][ T6340] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.993: corrupted inode contents [ 64.051697][ T6349] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 64.052368][ T6340] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.993: mark_inode_dirty error [ 64.122588][ T6355] loop1: detected capacity change from 0 to 512 [ 64.130835][ T3301] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 64.137331][ T6355] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 4 in block_group 0 [ 64.138914][ T3301] FAT-fs (loop4): Filesystem has been set read-only [ 64.158577][ T6355] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.167081][ T3301] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 64.199739][ T6361] loop4: detected capacity change from 0 to 512 [ 64.214373][ T6361] ext4 filesystem being mounted at /223/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.870760][ T6374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.888536][ T6374] vlan2: entered allmulticast mode [ 64.893910][ T6374] bond2: entered allmulticast mode [ 64.979900][ T6386] loop3: detected capacity change from 0 to 512 [ 65.005778][ T6386] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.019801][ T6386] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1010: corrupted inode contents [ 65.032465][ T6386] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1010: mark_inode_dirty error [ 65.044432][ T6386] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1010: corrupted inode contents [ 65.046506][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6d4e00: rx timeout, send abort [ 65.064498][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6d5400: rx timeout, send abort [ 65.072789][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6d4e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.074745][ T6395] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1010: corrupted inode contents [ 65.087174][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6d5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.100076][ T6395] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1010: mark_inode_dirty error [ 65.133276][ T6395] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1010: corrupted inode contents [ 65.149792][ T6395] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1010: mark_inode_dirty error [ 65.161328][ T6400] loop4: detected capacity change from 0 to 512 [ 65.167990][ T6395] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1010: corrupted inode contents [ 65.180975][ T6395] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1010: mark_inode_dirty error [ 65.193947][ T6400] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 4 in block_group 0 [ 65.209608][ T6400] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.306831][ T6416] loop3: detected capacity change from 0 to 256 [ 65.726076][ T6453] loop0: detected capacity change from 0 to 512 [ 65.791210][ T6453] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.108112][ T6504] vlan2: entered allmulticast mode [ 66.115854][ T6504] dummy0: entered allmulticast mode [ 66.287199][ T6524] netlink: 'syz.0.1056': attribute type 3 has an invalid length. [ 66.299542][ T6525] wg2: entered promiscuous mode [ 66.304644][ T6525] wg2: entered allmulticast mode [ 66.365688][ T6533] loop0: detected capacity change from 0 to 512 [ 66.384920][ T6533] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.411762][ T6529] lo speed is unknown, defaulting to 1000 [ 66.515306][ T6540] loop1: detected capacity change from 0 to 512 [ 66.564549][ T6540] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.585534][ T6540] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1061: corrupted inode contents [ 66.612238][ T6540] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1061: mark_inode_dirty error [ 66.632068][ T6540] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1061: corrupted inode contents [ 66.676877][ T6545] loop3: detected capacity change from 0 to 1024 [ 66.686090][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1061: corrupted inode contents [ 66.731596][ T6544] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1061: mark_inode_dirty error [ 66.762711][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1061: corrupted inode contents [ 66.808234][ T6544] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1061: mark_inode_dirty error [ 66.831030][ T6544] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1061: corrupted inode contents [ 66.856498][ T6544] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1061: mark_inode_dirty error [ 66.869924][ T6556] vlan2: entered allmulticast mode [ 66.877450][ T6556] dummy0: entered allmulticast mode [ 67.247122][ T3302] EXT4-fs unmount: 29 callbacks suppressed [ 67.247136][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.820941][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 67.820956][ T29] audit: type=1400 audit(1756368325.538:1579): avc: denied { read } for pid=6570 comm="syz.4.1076" path="socket:[15646]" dev="sockfs" ino=15646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.886323][ T6576] lo speed is unknown, defaulting to 1000 [ 67.963469][ T29] audit: type=1400 audit(1756368325.688:1580): avc: denied { mount } for pid=6577 comm="syz.0.1084" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.003001][ T29] audit: type=1400 audit(1756368325.718:1581): avc: denied { mounton } for pid=6577 comm="syz.0.1084" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 68.125157][ T29] audit: type=1400 audit(1756368325.848:1582): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.190759][ T29] audit: type=1400 audit(1756368325.868:1583): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.251388][ T29] audit: type=1400 audit(1756368325.968:1584): avc: denied { listen } for pid=6601 comm="syz.4.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.291714][ T29] audit: type=1400 audit(1756368325.968:1585): avc: denied { accept } for pid=6601 comm="syz.4.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.477008][ T29] audit: type=1400 audit(1756368326.198:1586): avc: denied { mounton } for pid=6621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.548961][ T6621] lo speed is unknown, defaulting to 1000 [ 68.597699][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 68.630646][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.637790][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.645231][ T6621] bridge_slave_0: entered allmulticast mode [ 68.651816][ T6621] bridge_slave_0: entered promiscuous mode [ 68.658842][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.665948][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.679532][ T29] audit: type=1400 audit(1756368326.398:1587): avc: denied { write } for pid=6637 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.699240][ T6621] bridge_slave_1: entered allmulticast mode [ 68.706262][ T6621] bridge_slave_1: entered promiscuous mode [ 68.734352][ T3742] team0: left allmulticast mode [ 68.739436][ T3742] team_slave_0: left allmulticast mode [ 68.745152][ T3742] team_slave_1: left allmulticast mode [ 68.750656][ T3742] bond1: left allmulticast mode [ 68.755664][ T3742] team0: left promiscuous mode [ 68.760542][ T3742] team_slave_0: left promiscuous mode [ 68.766300][ T3742] team_slave_1: left promiscuous mode [ 68.771847][ T3742] bond1: left promiscuous mode [ 68.776819][ T3742] bridge0: port 1(team0) entered disabled state [ 68.876078][ T3742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.893909][ T3742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.904254][ T3742] bond0 (unregistering): Released all slaves [ 68.914088][ T3742] team0: Port device bond1 removed [ 68.919932][ T3742] bond1 (unregistering): Released all slaves [ 68.931120][ T3742] bond2 (unregistering): Released all slaves [ 68.951873][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.964022][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.983646][ T6621] team0: Port device team_slave_0 added [ 68.990362][ T6621] team0: Port device team_slave_1 added [ 69.006522][ T3742] tipc: Left network mode [ 69.007008][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.018143][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.044315][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.055831][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.062844][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.089194][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.104647][ T3742] hsr_slave_0: left promiscuous mode [ 69.110271][ T3742] hsr_slave_1: left promiscuous mode [ 69.116246][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.123859][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.152808][ T3742] team0 (unregistering): Port device team_slave_1 removed [ 69.161880][ T3742] team0 (unregistering): Port device team_slave_0 removed [ 69.211251][ T6621] hsr_slave_0: entered promiscuous mode [ 69.226054][ T6621] hsr_slave_1: entered promiscuous mode [ 69.232391][ T6621] debugfs: 'hsr0' already exists in 'hsr' [ 69.238153][ T6621] Cannot create hsr debugfs directory [ 69.253458][ T6648] __nla_validate_parse: 1 callbacks suppressed [ 69.253476][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 69.338189][ T6657] loop0: detected capacity change from 0 to 164 [ 69.347731][ T29] audit: type=1400 audit(1756368327.068:1588): avc: denied { mount } for pid=6656 comm="syz.0.1103" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.348281][ T6657] syz.0.1103: attempt to access beyond end of device [ 69.348281][ T6657] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.386591][ T6657] syz.0.1103: attempt to access beyond end of device [ 69.386591][ T6657] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.677487][ T6621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.704019][ T6621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.725613][ T6683] lo speed is unknown, defaulting to 1000 [ 69.727249][ T6621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.754840][ T6683] lo speed is unknown, defaulting to 1000 [ 69.762259][ T6621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.781818][ T6683] lo speed is unknown, defaulting to 1000 [ 69.791893][ T6687] loop1: detected capacity change from 0 to 2048 [ 69.800334][ T6683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.840915][ T6683] lo speed is unknown, defaulting to 1000 [ 69.870420][ T6683] lo speed is unknown, defaulting to 1000 [ 69.872354][ T6687] loop1: p1 < > p4 [ 69.890986][ T6687] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.903175][ T6683] lo speed is unknown, defaulting to 1000 [ 69.925449][ T6683] lo speed is unknown, defaulting to 1000 [ 69.947236][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.963389][ T6699] lo speed is unknown, defaulting to 1000 [ 69.981174][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.998161][ T6703] loop0: detected capacity change from 0 to 1024 [ 70.006900][ T6683] lo speed is unknown, defaulting to 1000 [ 70.019044][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.026285][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.067527][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.074723][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.212601][ T6713] lo speed is unknown, defaulting to 1000 [ 70.297600][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.338499][ T6716] loop1: detected capacity change from 0 to 8192 [ 70.364599][ T6716] msdos: Unknown parameter 'A' [ 70.527100][ T6621] veth0_vlan: entered promiscuous mode [ 70.543139][ T6621] veth1_vlan: entered promiscuous mode [ 70.567618][ T6621] veth0_macvtap: entered promiscuous mode [ 70.575204][ T6621] veth1_macvtap: entered promiscuous mode [ 70.585582][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.613110][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.626660][ T3738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.635745][ T3738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.644864][ T3738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.655675][ T3738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.698658][ T6758] siw: device registration error -23 [ 70.717346][ T6758] loop0: detected capacity change from 0 to 2048 [ 70.739044][ T6763] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 70.762908][ T6758] loop0: p1 < > p4 [ 70.767542][ T6758] loop0: p4 size 8388608 extends beyond EOD, truncated [ 70.834022][ T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.853626][ T6764] lo speed is unknown, defaulting to 1000 [ 70.888061][ T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.913175][ T6764] chnl_net:caif_netlink_parms(): no params data found [ 70.935240][ T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.959654][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.966960][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.974295][ T6764] bridge_slave_0: entered allmulticast mode [ 70.980627][ T6764] bridge_slave_0: entered promiscuous mode [ 70.987999][ T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.999114][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.006299][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.013617][ T6764] bridge_slave_1: entered allmulticast mode [ 71.020040][ T6764] bridge_slave_1: entered promiscuous mode [ 71.037352][ T6764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.048024][ T6764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.067437][ T6764] team0: Port device team_slave_0 added [ 71.074240][ T6764] team0: Port device team_slave_1 added [ 71.094078][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.101035][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.126933][ T6764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.138279][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.145285][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.171530][ T6764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.190627][ T31] team0: left allmulticast mode [ 71.195547][ T31] team_slave_0: left allmulticast mode [ 71.201020][ T31] team_slave_1: left allmulticast mode [ 71.206520][ T31] team0: left promiscuous mode [ 71.211353][ T31] team_slave_0: left promiscuous mode [ 71.217065][ T31] team_slave_1: left promiscuous mode [ 71.222624][ T31] bridge0: port 3(team0) entered disabled state [ 71.229629][ T31] bridge_slave_1: left allmulticast mode [ 71.235500][ T31] bridge_slave_1: left promiscuous mode [ 71.241418][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.249245][ T31] bridge_slave_0: left allmulticast mode [ 71.254965][ T31] bridge_slave_0: left promiscuous mode [ 71.260709][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.269344][ T31] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 71.299767][ T31] batman_adv: batadv0: Removing interface: ip6gretap1 [ 71.434232][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.444284][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.454035][ T31] bond0 (unregistering): Released all slaves [ 71.462702][ T31] bond1 (unregistering): Released all slaves [ 71.487138][ T6764] hsr_slave_0: entered promiscuous mode [ 71.493359][ T6764] hsr_slave_1: entered promiscuous mode [ 71.499207][ T6764] debugfs: 'hsr0' already exists in 'hsr' [ 71.505053][ T6764] Cannot create hsr debugfs directory [ 71.518513][ T31] tipc: Left network mode [ 71.526946][ T31] hsr_slave_0: left promiscuous mode [ 71.532696][ T31] hsr_slave_1: left promiscuous mode [ 71.538348][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.545814][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.553386][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.560804][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.571430][ T31] veth1_macvtap: left promiscuous mode [ 71.577104][ T31] veth0_macvtap: left promiscuous mode [ 71.582859][ T31] veth1_vlan: left promiscuous mode [ 71.588091][ T31] veth0_vlan: left promiscuous mode [ 71.640882][ T31] team0 (unregistering): Port device team_slave_1 removed [ 71.652598][ T31] team0 (unregistering): Port device team_slave_0 removed [ 71.729599][ T6764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.738074][ T6764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.746618][ T6764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.754913][ T6764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.788358][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.804188][ T6764] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.814698][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.821828][ T3738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.835083][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.842292][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.899984][ T6764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.999046][ T6764] veth0_vlan: entered promiscuous mode [ 72.006734][ T6764] veth1_vlan: entered promiscuous mode [ 72.021334][ T6764] veth0_macvtap: entered promiscuous mode [ 72.029214][ T6764] veth1_macvtap: entered promiscuous mode [ 72.041851][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.053278][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.064056][ T4432] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.073326][ T4432] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.082519][ T4432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.091591][ T4432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.163333][ T6806] loop0: detected capacity change from 0 to 1024 [ 72.165666][ T6808] loop1: detected capacity change from 0 to 4096 [ 72.180929][ T6808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.197047][ T6808] EXT4-fs (loop1): shut down requested (0) [ 72.213413][ T6806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.233736][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.248787][ T6818] lo speed is unknown, defaulting to 1000 [ 72.285478][ T6806] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 72.321629][ T6825] loop3: detected capacity change from 0 to 512 [ 72.350436][ T6806] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 72.362900][ T6806] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.362900][ T6806] [ 72.372606][ T6806] EXT4-fs (loop0): Total free blocks count 0 [ 72.378803][ T6806] EXT4-fs (loop0): Free/Dirty block details [ 72.384766][ T6806] EXT4-fs (loop0): free_blocks=20480 [ 72.390249][ T6806] EXT4-fs (loop0): dirty_blocks=96 [ 72.395481][ T6806] EXT4-fs (loop0): Block reservation details [ 72.401573][ T6806] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 72.416701][ T6825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.429404][ T6825] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.450737][ T3738] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.822781][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 72.822797][ T29] audit: type=1326 audit(1756368330.548:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 72.862483][ T29] audit: type=1326 audit(1756368330.578:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 72.886407][ T29] audit: type=1326 audit(1756368330.578:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 72.910147][ T29] audit: type=1326 audit(1756368330.578:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 72.933994][ T29] audit: type=1326 audit(1756368330.578:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 72.957665][ T29] audit: type=1326 audit(1756368330.578:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 72.999199][ T29] audit: type=1400 audit(1756368330.718:1695): avc: denied { watch } for pid=6854 comm="syz.1.1171" path="/217/bus" dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.056020][ T29] audit: type=1400 audit(1756368330.778:1696): avc: denied { shutdown } for pid=6856 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.080545][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.087884][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.094010][ T29] audit: type=1400 audit(1756368330.798:1697): avc: denied { getopt } for pid=6856 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.114735][ T29] audit: type=1326 audit(1756368330.798:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 73.176095][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.185882][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.195224][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.265287][ T6858] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.288107][ T6919] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.300384][ T6919] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.310493][ T6882] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.956304][ T6927] siw: device registration error -23 [ 73.988144][ T6927] loop5: detected capacity change from 0 to 2048 [ 73.995891][ T6928] loop3: detected capacity change from 0 to 1024 [ 74.005732][ T6928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.026517][ T6927] loop5: p1 < > p4 [ 74.035674][ T6927] loop5: p4 size 8388608 extends beyond EOD, truncated [ 74.053334][ T6928] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 74.071696][ T6928] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 74.084616][ T6928] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.084616][ T6928] [ 74.094751][ T6928] EXT4-fs (loop3): Total free blocks count 0 [ 74.100866][ T6928] EXT4-fs (loop3): Free/Dirty block details [ 74.106834][ T6928] EXT4-fs (loop3): free_blocks=20480 [ 74.112386][ T6928] EXT4-fs (loop3): dirty_blocks=96 [ 74.117679][ T6928] EXT4-fs (loop3): Block reservation details [ 74.123796][ T6928] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 74.160553][ T6945] loop0: detected capacity change from 0 to 128 [ 74.190926][ T6948] loop5: detected capacity change from 0 to 512 [ 74.204600][ T6948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.217775][ T6948] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.253267][ T6913] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.478515][ T6960] lo speed is unknown, defaulting to 1000 [ 74.577325][ T6963] loop3: detected capacity change from 0 to 8192 [ 74.584359][ T6963] msdos: Unknown parameter 'A' [ 74.940986][ T6984] pim6reg1: entered promiscuous mode [ 74.946413][ T6984] pim6reg1: entered allmulticast mode [ 75.025106][ T6982] loop1: detected capacity change from 0 to 8192 [ 75.097614][ T6986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.145838][ T6986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.207560][ T5664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.223963][ T6986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.288175][ T6986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.309333][ T6992] loop5: detected capacity change from 0 to 1024 [ 75.326582][ T6992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.346405][ T6992] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 75.370086][ T6878] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370944][ T6992] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 75.391056][ T6992] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.391056][ T6992] [ 75.401034][ T6992] EXT4-fs (loop5): Total free blocks count 0 [ 75.407349][ T6992] EXT4-fs (loop5): Free/Dirty block details [ 75.413382][ T6992] EXT4-fs (loop5): free_blocks=20480 [ 75.418871][ T6992] EXT4-fs (loop5): dirty_blocks=96 [ 75.424186][ T6992] EXT4-fs (loop5): Block reservation details [ 75.430213][ T6992] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 75.441322][ T6878] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.451027][ T6878] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.459324][ T6878] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533150][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 75.543458][ T6913] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.615317][ T7010] loop5: detected capacity change from 0 to 164 [ 75.647424][ T7010] syz.5.1202: attempt to access beyond end of device [ 75.647424][ T7010] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 75.663454][ T7010] syz.5.1202: attempt to access beyond end of device [ 75.663454][ T7010] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 75.827114][ T3390] hid_parser_main: 27 callbacks suppressed [ 75.827132][ T3390] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 75.840852][ T3390] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 75.853723][ T3390] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 75.875845][ T3390] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 75.894169][ T7022] loop1: detected capacity change from 0 to 512 [ 75.921852][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'. [ 75.926155][ T7022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.944520][ T7022] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.250057][ T7046] loop6: detected capacity change from 0 to 1024 [ 76.274503][ T7046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.296680][ T7046] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.314521][ T7046] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 76.326949][ T7046] EXT4-fs (loop6): This should not happen!! Data will be lost [ 76.326949][ T7046] [ 76.336702][ T7046] EXT4-fs (loop6): Total free blocks count 0 [ 76.342739][ T7046] EXT4-fs (loop6): Free/Dirty block details [ 76.348663][ T7046] EXT4-fs (loop6): free_blocks=20480 [ 76.354030][ T7046] EXT4-fs (loop6): dirty_blocks=96 [ 76.359154][ T7046] EXT4-fs (loop6): Block reservation details [ 76.365197][ T7046] EXT4-fs (loop6): i_reserved_data_blocks=6 [ 76.432466][ T6913] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.495603][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 76.582826][ T7058] loop0: detected capacity change from 0 to 8192 [ 76.590245][ T3390] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 76.598209][ T3390] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 76.606759][ T3390] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 76.616355][ T3390] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 76.835027][ T7075] bridge0: port 1(team0) entered disabled state [ 76.857322][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 76.869833][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.920209][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.939149][ T7088] netlink: 'syz.1.1232': attribute type 1 has an invalid length. [ 76.955372][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.034761][ T7078] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.081390][ T7081] bridge_slave_1: left allmulticast mode [ 77.087139][ T7081] bridge_slave_1: left promiscuous mode [ 77.093222][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.101512][ T7081] bridge_slave_0: left allmulticast mode [ 77.107261][ T7081] bridge_slave_0: left promiscuous mode [ 77.113038][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.145900][ T6893] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.156991][ T6893] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.165646][ T6893] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.431728][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 77.454261][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 77.462229][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 77.470219][ T36] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 77.478571][ T36] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 77.493238][ T7092] bridge_slave_1: left allmulticast mode [ 77.499123][ T7092] bridge_slave_1: left promiscuous mode [ 77.504986][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.514694][ T7092] bridge_slave_0: left allmulticast mode [ 77.520374][ T7092] bridge_slave_0: left promiscuous mode [ 77.526270][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.827971][ T7118] loop6: detected capacity change from 0 to 8192 [ 77.896786][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 77.896804][ T29] audit: type=1400 audit(1756368335.618:1936): avc: denied { create } for pid=7119 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.897902][ T7121] rdma_op ffff88811c639d80 conn xmit_rdma 0000000000000000 [ 77.905206][ T29] audit: type=1400 audit(1756368335.618:1937): avc: denied { bind } for pid=7119 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.949321][ T29] audit: type=1400 audit(1756368335.618:1938): avc: denied { write } for pid=7119 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.080024][ T3390] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 78.091311][ T3390] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.113527][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 78.122949][ T7127] bridge_slave_1: left allmulticast mode [ 78.128741][ T7127] bridge_slave_1: left promiscuous mode [ 78.134777][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.148672][ T7127] bridge_slave_0: left allmulticast mode [ 78.154559][ T7127] bridge_slave_0: left promiscuous mode [ 78.161340][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.723943][ T7150] rdma_op ffff888123eebd80 conn xmit_rdma 0000000000000000 [ 78.744647][ T29] audit: type=1326 audit(1756368336.468:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.768476][ T29] audit: type=1326 audit(1756368336.468:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.802028][ T29] audit: type=1326 audit(1756368336.508:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.825531][ T29] audit: type=1326 audit(1756368336.508:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.849087][ T29] audit: type=1326 audit(1756368336.508:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.872769][ T29] audit: type=1326 audit(1756368336.508:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.896330][ T29] audit: type=1326 audit(1756368336.508:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.6.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a1f6ebe9 code=0x7ffc0000 [ 78.935797][ T4110] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 78.953541][ T7162] syzkaller1: entered promiscuous mode [ 78.959091][ T7162] syzkaller1: entered allmulticast mode [ 78.990682][ T7166] loop0: detected capacity change from 0 to 512 [ 79.014558][ T7166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.027507][ T7166] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.042865][ T7166] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #19: comm syz.0.1281: corrupted inode contents [ 79.055355][ T7166] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #19: comm syz.0.1281: mark_inode_dirty error [ 79.072707][ T7166] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #19: comm syz.0.1281: corrupted inode contents [ 79.091702][ T7166] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.1281: mark_inode_dirty error [ 79.104863][ T7166] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.1281: mark inode dirty (error -117) [ 79.118010][ T7166] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 79.131959][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1272'. [ 79.159592][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.178178][ T7179] loop0: detected capacity change from 0 to 512 [ 79.185203][ T7179] EXT4-fs: Ignoring removed oldalloc option [ 79.203266][ T7179] EXT4-fs (loop0): 1 truncate cleaned up [ 79.209523][ T7179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.357402][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.706259][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1290'. [ 79.738355][ T7186] loop5: detected capacity change from 0 to 8192 [ 79.774759][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 79.786462][ T7198] team0: left allmulticast mode [ 79.791550][ T7198] team_slave_0: left allmulticast mode [ 79.797276][ T7198] team_slave_1: left allmulticast mode [ 79.802867][ T7198] team0: left promiscuous mode [ 79.807674][ T7198] team_slave_0: left promiscuous mode [ 79.813257][ T7198] team_slave_1: left promiscuous mode [ 79.818956][ T7198] bridge0: port 3(team0) entered disabled state [ 79.842821][ T7198] bridge_slave_1: left allmulticast mode [ 79.848863][ T7198] bridge_slave_1: left promiscuous mode [ 79.855096][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.873553][ T5652] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 79.884422][ T7198] bridge_slave_0: left allmulticast mode [ 79.890202][ T7198] bridge_slave_0: left promiscuous mode [ 79.895886][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.042546][ T7216] loop3: detected capacity change from 0 to 512 [ 80.049505][ T7216] EXT4-fs: Ignoring removed oldalloc option [ 80.067706][ T7216] EXT4-fs (loop3): 1 truncate cleaned up [ 80.074103][ T7216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.133830][ T7225] loop6: detected capacity change from 0 to 512 [ 80.265965][ T7225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.318234][ T7225] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.337207][ T7225] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.1295: corrupted inode contents [ 80.441914][ T7225] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #19: comm syz.6.1295: mark_inode_dirty error [ 80.454109][ T7225] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.1295: corrupted inode contents [ 80.466769][ T7225] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.1295: mark_inode_dirty error [ 80.479685][ T7225] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.1295: mark inode dirty (error -117) [ 80.492631][ T7225] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 80.521750][ T6764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.601061][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.654791][ T3390] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 80.743552][ T7242] loop3: detected capacity change from 0 to 8192 [ 80.908011][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 81.055848][ T7274] loop1: detected capacity change from 0 to 512 [ 81.074134][ T7274] EXT4-fs: Ignoring removed oldalloc option [ 81.086665][ T7275] loop5: detected capacity change from 0 to 512 [ 81.136734][ T7274] EXT4-fs (loop1): 1 truncate cleaned up [ 81.144220][ T7274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.184124][ T7275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.196906][ T7275] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.217369][ T7275] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.1315: corrupted inode contents [ 81.229774][ T7275] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #19: comm syz.5.1315: mark_inode_dirty error [ 81.242925][ T7275] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #19: comm syz.5.1315: corrupted inode contents [ 81.255659][ T7275] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.1315: mark_inode_dirty error [ 81.268759][ T7275] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.1315: mark inode dirty (error -117) [ 81.282813][ T7275] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 81.304712][ T5664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.507176][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.567824][ T7293] netlink: 'syz.1.1322': attribute type 27 has an invalid length. [ 81.598556][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1323'. [ 81.616529][ T7293] wg2: left promiscuous mode [ 81.621283][ T7293] wg2: left allmulticast mode [ 81.661165][ T7297] team0: left allmulticast mode [ 81.666174][ T7297] team_slave_0: left allmulticast mode [ 81.671782][ T7297] team_slave_1: left allmulticast mode [ 81.677316][ T7297] team0: left promiscuous mode [ 81.682110][ T7297] team_slave_0: left promiscuous mode [ 81.687768][ T7297] team_slave_1: left promiscuous mode [ 81.693535][ T7297] bridge0: port 1(team0) entered disabled state [ 81.798665][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 81.849227][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1330'. [ 81.863888][ T7309] loop0: detected capacity change from 0 to 8192 [ 82.125907][ T7331] loop6: detected capacity change from 0 to 512 [ 82.157252][ T7331] EXT4-fs: Ignoring removed oldalloc option [ 82.177349][ T7340] loop1: detected capacity change from 0 to 512 [ 82.183054][ T7331] EXT4-fs (loop6): 1 truncate cleaned up [ 82.189993][ T7331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.203630][ T7340] EXT4-fs: Ignoring removed oldalloc option [ 82.214454][ T7340] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.233770][ T7340] EXT4-fs (loop1): 1 truncate cleaned up [ 82.240377][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.308627][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.318532][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1346'. [ 82.549734][ T6764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.964371][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 82.964388][ T29] audit: type=1326 audit(1756368340.688:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 82.994028][ T29] audit: type=1326 audit(1756368340.688:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.027110][ T29] audit: type=1326 audit(1756368340.688:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.051025][ T29] audit: type=1326 audit(1756368340.688:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.074723][ T29] audit: type=1326 audit(1756368340.688:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.098252][ T29] audit: type=1326 audit(1756368340.688:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.121841][ T29] audit: type=1326 audit(1756368340.688:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.145417][ T29] audit: type=1326 audit(1756368340.688:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4a7cebe9 code=0x7ffc0000 [ 83.178759][ T7394] loop0: detected capacity change from 0 to 512 [ 83.188570][ T7394] EXT4-fs: Ignoring removed oldalloc option [ 83.196622][ T7395] netlink: 'syz.1.1371': attribute type 5 has an invalid length. [ 83.199653][ T7394] EXT4-fs (loop0): 1 truncate cleaned up [ 83.211390][ T7394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.331283][ T7403] loop1: detected capacity change from 0 to 512 [ 83.385190][ T7403] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 83.422747][ T29] audit: type=1400 audit(1756368341.138:2027): avc: denied { connect } for pid=7408 comm="syz.6.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.447999][ T7403] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.477950][ T7403] EXT4-fs (loop1): mount failed [ 83.612913][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.673400][ T7418] loop6: detected capacity change from 0 to 8192 [ 83.718678][ T7431] loop3: detected capacity change from 0 to 1024 [ 83.727547][ T7431] EXT4-fs: Ignoring removed nobh option [ 83.733537][ T7431] EXT4-fs: Ignoring removed bh option [ 83.743848][ T7431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.761642][ T7431] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.776327][ T7441] sd 0:0:1:0: device reset [ 83.860746][ T7450] loop5: detected capacity change from 0 to 512 [ 83.888478][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.921803][ T7458] loop3: detected capacity change from 0 to 512 [ 83.928876][ T7458] EXT4-fs: Ignoring removed oldalloc option [ 83.930316][ T7450] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.936484][ T7458] EXT4-fs (loop3): 1 truncate cleaned up [ 83.963544][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.983986][ T7450] EXT4-fs (loop5): mount failed [ 84.310691][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.405492][ T7484] lo speed is unknown, defaulting to 1000 [ 84.451023][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 84.477100][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1406'. [ 84.536873][ T7491] loop3: detected capacity change from 0 to 512 [ 84.558769][ T7501] loop1: detected capacity change from 0 to 512 [ 84.572493][ T7501] EXT4-fs: Ignoring removed oldalloc option [ 84.581777][ T7507] loop6: detected capacity change from 0 to 512 [ 84.588662][ T7491] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.607901][ T7501] EXT4-fs (loop1): 1 truncate cleaned up [ 84.613630][ T7507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.624160][ T7491] EXT4-fs (loop3): mount failed [ 84.635105][ T7501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.654704][ T7507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.685805][ T7507] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.708750][ T7507] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 84.725449][ T7507] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 11 with error 28 [ 84.737791][ T7507] EXT4-fs (loop6): This should not happen!! Data will be lost [ 84.737791][ T7507] [ 84.747527][ T7507] EXT4-fs (loop6): Total free blocks count 0 [ 84.753639][ T7507] EXT4-fs (loop6): Free/Dirty block details [ 84.759708][ T7507] EXT4-fs (loop6): free_blocks=39626 [ 84.765403][ T7507] EXT4-fs (loop6): dirty_blocks=11 [ 84.770623][ T7507] EXT4-fs (loop6): Block reservation details [ 84.776786][ T7507] EXT4-fs (loop6): i_reserved_data_blocks=11 [ 84.799542][ T6764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.878360][ T7520] loop3: detected capacity change from 0 to 8192 [ 84.960396][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.971958][ T7541] pim6reg1: entered promiscuous mode [ 84.977339][ T7541] pim6reg1: entered allmulticast mode [ 85.149501][ T7555] loop6: detected capacity change from 0 to 512 [ 85.176818][ T7555] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.193430][ T7555] EXT4-fs (loop6): mount failed [ 85.200723][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 85.203203][ T7565] pimreg: entered allmulticast mode [ 85.209812][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 85.234514][ T7565] pimreg: left allmulticast mode [ 85.324957][ T7576] loop6: detected capacity change from 0 to 512 [ 85.360002][ T7576] EXT4-fs: Ignoring removed oldalloc option [ 85.367938][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1443'. [ 85.392931][ T7576] EXT4-fs (loop6): 1 truncate cleaned up [ 85.410424][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.457308][ T7589] loop1: detected capacity change from 0 to 1024 [ 85.465309][ T7589] EXT4-fs: Ignoring removed oldalloc option [ 85.471272][ T7589] EXT4-fs: Ignoring removed bh option [ 85.488201][ T7589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.525840][ T7595] loop0: detected capacity change from 0 to 512 [ 85.544882][ T7595] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.550290][ T7589] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 85.565791][ T7595] EXT4-fs (loop0): mount failed [ 85.635620][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.827554][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1457'. [ 85.839797][ T6764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.962757][ T7631] loop3: detected capacity change from 0 to 8192 [ 86.069108][ T7643] tipc: Started in network mode [ 86.074142][ T7643] tipc: Node identity 1e4b03348864, cluster identity 4711 [ 86.081640][ T7643] tipc: Enabled bearer , priority 0 [ 86.090801][ T7643] tipc: Disabling bearer [ 86.171121][ T7645] loop6: detected capacity change from 0 to 512 [ 86.178201][ T7645] EXT4-fs: Ignoring removed oldalloc option [ 86.188163][ T7645] EXT4-fs (loop6): 1 truncate cleaned up [ 86.218058][ T7645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.237956][ T7647] lo speed is unknown, defaulting to 1000 [ 86.621243][ T6764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.670138][ T7659] random: crng reseeded on system resumption [ 86.764338][ T7666] netlink: 'syz.0.1478': attribute type 30 has an invalid length. [ 86.899492][ T7681] loop3: detected capacity change from 0 to 512 [ 86.906190][ T7681] EXT4-fs: Ignoring removed oldalloc option [ 86.917205][ T7681] EXT4-fs (loop3): 1 truncate cleaned up [ 86.923672][ T7681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.002091][ T7696] netlink: 'syz.0.1492': attribute type 3 has an invalid length. [ 87.196210][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.216199][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.227971][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.712515][ T7722] syzkaller1: entered promiscuous mode [ 87.718144][ T7722] syzkaller1: entered allmulticast mode [ 87.718471][ T7721] loop1: detected capacity change from 0 to 1024 [ 87.752313][ T7721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.769742][ T7720] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 87.786163][ T7720] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 87.798761][ T7720] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.798761][ T7720] [ 87.808466][ T7720] EXT4-fs (loop1): Total free blocks count 0 [ 87.814538][ T7720] EXT4-fs (loop1): Free/Dirty block details [ 87.820536][ T7720] EXT4-fs (loop1): free_blocks=20480 [ 87.825902][ T7720] EXT4-fs (loop1): dirty_blocks=96 [ 87.831065][ T7720] EXT4-fs (loop1): Block reservation details [ 87.837149][ T7720] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 87.879758][ T6878] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.041617][ T7730] loop6: detected capacity change from 0 to 512 [ 88.068666][ T7730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.086767][ T7730] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.137297][ T7750] loop5: detected capacity change from 0 to 128 [ 88.187901][ T7754] loop3: detected capacity change from 0 to 512 [ 88.204957][ T7754] EXT4-fs: Ignoring removed oldalloc option [ 88.234682][ T7754] EXT4-fs (loop3): 1 truncate cleaned up [ 88.241375][ T7754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.565856][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.961561][ T6764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.019099][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 89.019173][ T29] audit: type=1326 audit(1756368346.738:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.048747][ T29] audit: type=1326 audit(1756368346.738:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.080778][ T7765] loop1: detected capacity change from 0 to 1024 [ 89.083216][ T7767] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 89.102894][ T29] audit: type=1326 audit(1756368346.798:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.126663][ T29] audit: type=1326 audit(1756368346.798:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.150146][ T29] audit: type=1326 audit(1756368346.798:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.173950][ T29] audit: type=1326 audit(1756368346.798:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.197444][ T29] audit: type=1326 audit(1756368346.798:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.220973][ T29] audit: type=1326 audit(1756368346.798:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.244678][ T29] audit: type=1326 audit(1756368346.798:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc75caeebe9 code=0x7ffc0000 [ 89.268290][ T29] audit: type=1326 audit(1756368346.798:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc75caeec23 code=0x7ffc0000 [ 89.302447][ T7765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.316323][ T7778] sd 0:0:1:0: device reset [ 89.329777][ T7765] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 89.358572][ T7782] netlink: 'syz.5.1522': attribute type 1 has an invalid length. [ 89.366479][ T7782] netlink: 'syz.5.1522': attribute type 4 has an invalid length. [ 89.368272][ T7765] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 89.374347][ T7782] __nla_validate_parse: 2 callbacks suppressed [ 89.374361][ T7782] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1522'. [ 89.386655][ T7765] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.386655][ T7765] [ 89.409498][ T7782] netlink: 'syz.5.1522': attribute type 1 has an invalid length. [ 89.411910][ T7765] EXT4-fs (loop1): Total free blocks count 0 [ 89.419705][ T7782] netlink: 'syz.5.1522': attribute type 4 has an invalid length. [ 89.425792][ T7765] EXT4-fs (loop1): Free/Dirty block details [ 89.433547][ T7782] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1522'. [ 89.439863][ T7765] EXT4-fs (loop1): free_blocks=20480 [ 89.454472][ T7765] EXT4-fs (loop1): dirty_blocks=96 [ 89.459786][ T7765] EXT4-fs (loop1): Block reservation details [ 89.465911][ T7765] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 89.479497][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1524'. [ 89.568830][ T7804] loop3: detected capacity change from 0 to 512 [ 89.577377][ T3742] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.616329][ T7810] loop6: detected capacity change from 0 to 512 [ 89.625561][ T7804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.627326][ T7813] loop1: detected capacity change from 0 to 512 [ 89.645493][ T7804] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.646348][ T7813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.668503][ T7810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.681245][ T7810] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.693877][ T7813] EXT4-fs (loop1): 1 truncate cleaned up [ 89.699970][ T7813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.755186][ T7810] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1534: corrupted inode contents [ 89.785532][ T6621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.810249][ T7810] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1534: mark_inode_dirty error [ 89.843773][ T7824] EXT4-fs (loop1): shut down requested (0) [ 89.844403][ T7810] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1534: corrupted inode contents [ 89.865387][ T7823] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1534: corrupted inode contents [ 89.892156][ T7823] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1534: mark_inode_dirty error [ 89.912880][ T7823] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1534: corrupted inode contents [ 89.941554][ T7823] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1534: mark_inode_dirty error [ 89.942381][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.964455][ T7823] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1534: corrupted inode contents [ 89.986316][ T7827] loop3: detected capacity change from 0 to 128 [ 89.992924][ T7823] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1534: mark_inode_dirty error [ 90.012906][ T7829] loop0: detected capacity change from 0 to 512 [ 90.019759][ T7829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.043057][ T7829] EXT4-fs (loop0): 1 truncate cleaned up [ 90.109253][ T7835] loop6: detected capacity change from 0 to 512 [ 90.129186][ T7829] EXT4-fs (loop0): shut down requested (0) [ 90.144273][ T7835] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.190851][ T7840] serio: Serial port ptm0 [ 90.944908][ T7852] loop5: detected capacity change from 0 to 1024 [ 90.997862][ T7852] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 91.041809][ T7852] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 91.054299][ T7852] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.054299][ T7852] [ 91.064356][ T7852] EXT4-fs (loop5): Total free blocks count 0 [ 91.070724][ T7852] EXT4-fs (loop5): Free/Dirty block details [ 91.076876][ T7852] EXT4-fs (loop5): free_blocks=20480 [ 91.082331][ T7852] EXT4-fs (loop5): dirty_blocks=96 [ 91.087464][ T7852] EXT4-fs (loop5): Block reservation details [ 91.093478][ T7852] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 91.102516][ T7859] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1558'. [ 91.121868][ T7864] loop6: detected capacity change from 0 to 512 [ 91.143472][ T7864] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.162869][ T3742] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.175212][ T3742] EXT4-fs (loop5): This should not happen!! Data will be lost [ 91.175212][ T3742] [ 91.175465][ T7867] loop0: detected capacity change from 0 to 512 [ 91.190511][ T7870] loop3: detected capacity change from 0 to 512 [ 91.211064][ T7870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.223700][ T7867] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.268011][ T7867] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1551: corrupted inode contents [ 91.282789][ T7870] EXT4-fs (loop3): 1 truncate cleaned up [ 91.309846][ T7867] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1551: mark_inode_dirty error [ 91.345736][ T7867] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1551: corrupted inode contents [ 91.380039][ T7880] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1551: corrupted inode contents [ 91.380955][ T7882] SELinux: ebitmap: truncated map [ 91.402646][ T7882] SELinux: failed to load policy [ 91.422409][ T7880] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1551: mark_inode_dirty error [ 91.431325][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1556'. [ 91.457949][ T7880] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1551: corrupted inode contents [ 91.470571][ T7870] EXT4-fs (loop3): shut down requested (0) [ 91.471336][ T7880] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1551: mark_inode_dirty error [ 91.492476][ T7880] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1551: corrupted inode contents [ 91.509564][ T7880] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1551: mark_inode_dirty error [ 91.551159][ T7897] loop6: detected capacity change from 0 to 128 [ 91.571809][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 91.583888][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 91.689965][ T7906] ================================================================== [ 91.698091][ T7906] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 91.706278][ T7906] [ 91.708614][ T7906] write to 0xffff88811a0b4728 of 4 bytes by task 7897 on cpu 0: [ 91.716255][ T7906] writeback_single_inode+0x14a/0x3e0 [ 91.721648][ T7906] sync_inode_metadata+0x5b/0x90 [ 91.726700][ T7906] __generic_file_fsync+0xf8/0x140 [ 91.731837][ T7906] fat_file_fsync+0x49/0x100 [ 91.736462][ T7906] vfs_fsync_range+0x10d/0x130 [ 91.741592][ T7906] generic_file_write_iter+0x1b8/0x2f0 [ 91.747074][ T7906] iter_file_splice_write+0x663/0xa60 [ 91.752465][ T7906] direct_splice_actor+0x153/0x2a0 [ 91.757594][ T7906] splice_direct_to_actor+0x30f/0x680 [ 91.763074][ T7906] do_splice_direct+0xda/0x150 [ 91.767948][ T7906] do_sendfile+0x380/0x650 [ 91.772397][ T7906] __x64_sys_sendfile64+0x105/0x150 [ 91.777623][ T7906] x64_sys_call+0x2bb0/0x2ff0 [ 91.782410][ T7906] do_syscall_64+0xd2/0x200 [ 91.786936][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.792838][ T7906] [ 91.795171][ T7906] read to 0xffff88811a0b4728 of 4 bytes by task 7906 on cpu 1: [ 91.802728][ T7906] vfs_fsync_range+0x9b/0x130 [ 91.807518][ T7906] generic_file_write_iter+0x1b8/0x2f0 [ 91.813113][ T7906] iter_file_splice_write+0x663/0xa60 [ 91.818535][ T7906] direct_splice_actor+0x153/0x2a0 [ 91.823659][ T7906] splice_direct_to_actor+0x30f/0x680 [ 91.829053][ T7906] do_splice_direct+0xda/0x150 [ 91.833843][ T7906] do_sendfile+0x380/0x650 [ 91.838294][ T7906] __x64_sys_sendfile64+0x105/0x150 [ 91.843636][ T7906] x64_sys_call+0x2bb0/0x2ff0 [ 91.848380][ T7906] do_syscall_64+0xd2/0x200 [ 91.852901][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.858812][ T7906] [ 91.861149][ T7906] value changed: 0x00000038 -> 0x00000022 [ 91.866967][ T7906] [ 91.869308][ T7906] Reported by Kernel Concurrency Sanitizer on: [ 91.875470][ T7906] CPU: 1 UID: 0 PID: 7906 Comm: syz.6.1562 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.885206][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.895380][ T7906] ================================================================== [ 91.906159][ T7908] loop0: detected capacity change from 0 to 1024 [ 92.028732][ T7908] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 92.090326][ T7908] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 92.102961][ T7908] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.102961][ T7908] [ 92.112644][ T7908] EXT4-fs (loop0): Total free blocks count 0 [ 92.118640][ T7908] EXT4-fs (loop0): Free/Dirty block details [ 92.124704][ T7908] EXT4-fs (loop0): free_blocks=20480 [ 92.130216][ T7908] EXT4-fs (loop0): dirty_blocks=96 [ 92.135379][ T7908] EXT4-fs (loop0): Block reservation details [ 92.141402][ T7908] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 92.221818][ T6878] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 92.234150][ T6878] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.234150][ T6878]