last executing test programs: 1m49.173475118s ago: executing program 32 (id=881): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1702000070000000000063a1f4eb000000000000000000000000000001000080"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 1m43.191514648s ago: executing program 0 (id=1016): unshare(0x2a020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) 1m43.16143441s ago: executing program 0 (id=1017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r0, 0x4, r0}, 0x10) 1m43.103554003s ago: executing program 0 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1m43.040463676s ago: executing program 0 (id=1020): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 1m42.96622302s ago: executing program 0 (id=1022): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x7, 0x100}, 0x15108, 0x0, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) chown(0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1100) 1m42.321649262s ago: executing program 0 (id=1030): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m42.284705354s ago: executing program 33 (id=1030): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m9.377164707s ago: executing program 2 (id=1812): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2117, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0xd0001, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 1m9.169497037s ago: executing program 2 (id=1821): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4008090}, 0x20000895) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) 1m9.10604743s ago: executing program 2 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c0003000000000000006e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1m9.007017915s ago: executing program 2 (id=1829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m8.975555977s ago: executing program 2 (id=1831): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2000}, 0x1}}, 0x80, 0x0}, 0x0) 1m8.727915389s ago: executing program 2 (id=1834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, &(0x7f0000000000)=0x84) 1m8.646616644s ago: executing program 34 (id=1834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, &(0x7f0000000000)=0x84) 47.390004901s ago: executing program 6 (id=2364): syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setpriority(0x2, 0xff, 0x0) 46.743811613s ago: executing program 6 (id=2385): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 46.40439969s ago: executing program 6 (id=2394): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 46.330055314s ago: executing program 6 (id=2397): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 46.294271966s ago: executing program 6 (id=2398): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x1c) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 46.104030935s ago: executing program 6 (id=2404): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) 46.056275108s ago: executing program 35 (id=2404): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) 42.232716629s ago: executing program 8 (id=2480): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xfffffffe, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 42.149073224s ago: executing program 8 (id=2484): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 42.093128456s ago: executing program 4 (id=2485): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.087906587s ago: executing program 8 (id=2486): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x78c) 42.013464841s ago: executing program 8 (id=2487): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 41.83905808s ago: executing program 8 (id=2488): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 41.798213971s ago: executing program 8 (id=2489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 40.744641784s ago: executing program 4 (id=2501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2}, 0x8) 40.662692459s ago: executing program 4 (id=2503): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@nogrpid}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) unshare(0x40400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x5c, 0x0, 0xfffffffffe000001}) 40.400285842s ago: executing program 4 (id=2507): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 40.352738614s ago: executing program 4 (id=2509): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 40.028309161s ago: executing program 4 (id=2514): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x8}], 0x38) 40.028270121s ago: executing program 36 (id=2514): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x8}], 0x38) 26.736330838s ago: executing program 37 (id=2489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.179209431s ago: executing program 3 (id=3267): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x1c1202, 0x147) write(r1, &(0x7f00000001c0)="6b6b8e9fbceab4880a7bad620277319e475d5aeee489eef3046ddc54820e109a7712a2c8b65b7f568ae1", 0x2a) sendfile(r1, r0, 0x0, 0x3ffff) 2.088174856s ago: executing program 1 (id=3268): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.936019023s ago: executing program 1 (id=3271): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 1.721534884s ago: executing program 3 (id=3274): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 1.519985124s ago: executing program 3 (id=3279): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 1.474594547s ago: executing program 5 (id=3281): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) 1.461743328s ago: executing program 1 (id=3282): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) keyctl$search(0xa, 0x0, &(0x7f0000001100)='encrypted\x00', 0x0, 0x0) 1.353979353s ago: executing program 3 (id=3287): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.307859475s ago: executing program 7 (id=3288): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x31) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1.279890596s ago: executing program 1 (id=3289): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x3, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000080)="062ef31c85bf484f", 0x8, 0x4, 0x0, 0x2, r0}, 0x0, 0x0]) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 1.261912407s ago: executing program 3 (id=3290): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.256868358s ago: executing program 7 (id=3291): prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 1.219042429s ago: executing program 3 (id=3292): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) 1.2138864s ago: executing program 7 (id=3293): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 704.861875ms ago: executing program 9 (id=3296): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 631.409379ms ago: executing program 9 (id=3297): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 579.595671ms ago: executing program 9 (id=3298): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x0, 0x2b5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 484.590017ms ago: executing program 9 (id=3299): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x9, 0xabca, 0x85, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 435.286389ms ago: executing program 9 (id=3300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@remote, @remote, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x65, 0x0, 0x1, 0x32, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, "96c1bac5a1272f00d9"}}}}}, 0x33) 373.656312ms ago: executing program 1 (id=3301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 369.907752ms ago: executing program 9 (id=3302): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 349.232063ms ago: executing program 7 (id=3303): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r0 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 331.276004ms ago: executing program 5 (id=3304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 310.924085ms ago: executing program 1 (id=3305): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x10, r3, 0x0, 0x0, 0x0, 0x2100, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 290.223716ms ago: executing program 5 (id=3306): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r1, &(0x7f0000000040)="05", 0x1, 0x0, 0x0, 0x0) 212.8455ms ago: executing program 5 (id=3307): unshare(0x6020400) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) 149.826003ms ago: executing program 5 (id=3308): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0xa1d1}], 0x1, 0x0, 0x0) 81.549886ms ago: executing program 7 (id=3309): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) lchown(&(0x7f0000000000)='.\x00', 0x0, 0x0) 80.832137ms ago: executing program 5 (id=3310): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 0s ago: executing program 7 (id=3311): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x11, r0) kernel console output (not intermixed with test programs): mode [ 109.874297][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.944625][ T7978] bond0: (slave bond_slave_0): Releasing backup interface [ 109.973449][ T7978] bond0: (slave bond_slave_1): Releasing backup interface [ 110.016323][ T7978] team0: Port device team_slave_0 removed [ 110.032850][ T7978] team0: Port device team_slave_1 removed [ 110.040022][ T7988] loop2: detected capacity change from 0 to 1024 [ 110.049706][ T7978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.061767][ T7988] EXT4-fs: Ignoring removed oldalloc option [ 110.069127][ T7978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.081186][ T7988] EXT4-fs: Ignoring removed bh option [ 110.093950][ T7978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.109937][ T7988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.119332][ T7978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.134172][ T7978] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.211412][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.283237][ T7992] loop2: detected capacity change from 0 to 1024 [ 110.294665][ T7992] EXT4-fs: Ignoring removed orlov option [ 110.301397][ T7995] loop4: detected capacity change from 0 to 512 [ 110.318008][ T7995] ext4: Unknown parameter 'uid<00000000000000060929' [ 110.346609][ T7992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.361046][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1723'. [ 110.427202][ T8004] loop4: detected capacity change from 0 to 256 [ 110.448918][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.511225][ T8008] loop5: detected capacity change from 0 to 7 [ 110.630357][ T8013] loop4: detected capacity change from 0 to 1024 [ 110.637572][ T8013] EXT4-fs: Ignoring removed bh option [ 110.643457][ T8013] EXT4-fs: Ignoring removed oldalloc option [ 110.649725][ T8013] EXT4-fs: Ignoring removed nobh option [ 110.691267][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 110.701377][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 110.732277][ T8013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.777017][ T8013] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1731: Allocating blocks 497-513 which overlap fs metadata [ 110.812007][ T8021] loop5: detected capacity change from 0 to 512 [ 110.820683][ T8013] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1731: Allocating blocks 497-513 which overlap fs metadata [ 110.836173][ T8013] EXT4-fs (loop4): pa ffff888107e8fc40: logic 16, phys. 129, len 24 [ 110.844439][ T8013] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 110.870480][ T8021] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1733: bad orphan inode 11862016 [ 110.881300][ T8021] loop5: lost filesystem error report for type 5 error -117 [ 110.881991][ T8021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.902286][ T8021] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.933043][ T8021] Invalid ELF header magic: != ELF [ 110.939438][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.013261][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.380187][ T8048] ip6tnl0: Caught tx_queue_len zero misconfig [ 111.564731][ T8052] bond_slave_0: entered promiscuous mode [ 111.570502][ T8052] bond_slave_1: entered promiscuous mode [ 111.580533][ T8054] loop5: detected capacity change from 0 to 512 [ 111.589721][ T8054] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1747: bg 0: block 5: invalid block bitmap [ 111.602433][ T8052] macvlan2: entered promiscuous mode [ 111.608064][ T8054] loop5: lost filesystem error report for type 5 error -117 [ 111.608269][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 111.622085][ C1] EXT4-fs (loop5): initial error at time 1774577234: ext4_validate_block_bitmap:432 [ 111.628764][ T8052] bond0: entered promiscuous mode [ 111.631637][ C1] EXT4-fs (loop5): last error at time 1774577234: ext4_validate_block_bitmap:432 [ 111.640048][ T8054] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 111.690978][ T8052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.720902][ T8054] loop5: lost filesystem error report for type 5 error -117 [ 111.721221][ T8054] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1747: invalid indirect mapped block 3 (level 2) [ 111.743766][ T8052] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 111.764126][ T8052] bond0: left promiscuous mode [ 111.769314][ T8054] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.769564][ T8054] EXT4-fs (loop5): 1 orphan inode deleted [ 111.779529][ T8052] bond_slave_0: left promiscuous mode [ 111.790389][ T8052] bond_slave_1: left promiscuous mode [ 111.809185][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1751'. [ 111.818700][ T8054] EXT4-fs (loop5): 1 truncate cleaned up [ 111.824821][ T8054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.859737][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.967153][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 111.967195][ T28] audit: type=1400 audit(1774577235.203:708): avc: denied { accept } for pid=8071 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.037437][ T28] audit: type=1400 audit(1774577235.273:709): avc: denied { getopt } for pid=8078 comm="syz.5.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.155453][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1764'. [ 112.205884][ T8095] pimreg: entered allmulticast mode [ 112.222602][ T8095] pimreg: left allmulticast mode [ 112.559647][ T8119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1775'. [ 112.924555][ T28] audit: type=1400 audit(1774577236.163:710): avc: denied { create } for pid=8129 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.947529][ T8131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.092292][ T28] audit: type=1400 audit(1774577236.243:711): avc: denied { bind } for pid=8129 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.114184][ T28] audit: type=1400 audit(1774577236.243:712): avc: denied { connect } for pid=8129 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.137550][ T28] audit: type=1400 audit(1774577236.243:713): avc: denied { setopt } for pid=8129 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.159060][ T8131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.311751][ T8131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.428074][ T8131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.545576][ T8148] loop5: detected capacity change from 0 to 512 [ 113.567940][ T8148] EXT4-fs: Ignoring removed bh option [ 113.594523][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.605864][ T8148] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.624288][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.637853][ T8148] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 113.666115][ T8148] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 113.688957][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.691054][ T8148] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.707695][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.722876][ T8154] loop4: detected capacity change from 0 to 1024 [ 113.739319][ T8148] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 113.762319][ T8154] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 113.769457][ T8148] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 113.790434][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 113.808603][ T8154] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1788'. [ 113.817891][ T8154] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1788'. [ 113.837389][ T8148] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1789: Failed to acquire dquot type 1 [ 113.858404][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 113.873650][ T8148] loop5: lost filesystem error report for type 5 error -5 [ 113.874419][ T8148] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1789: Invalid block bitmap block 0 in block_group 0 [ 113.881643][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 113.881673][ C0] EXT4-fs (loop5): last error at time 1774577237: ext4_acquire_dquot:7001 [ 113.920839][ T8148] loop5: lost filesystem error report for type 5 error -117 [ 113.921174][ T8148] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1789: Invalid block bitmap block 0 in block_group 0 [ 113.945732][ T8148] loop5: lost filesystem error report for type 5 error -117 [ 113.946015][ T8148] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1789: Invalid block bitmap block 0 in block_group 0 [ 113.967553][ T8148] loop5: lost filesystem error report for type 5 error -117 [ 113.967882][ T8148] Quota error (device loop5): write_blk: dquota write failed [ 113.993003][ T8148] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 114.003212][ T8148] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1789: Failed to acquire dquot type 1 [ 114.066664][ T8148] loop5: lost filesystem error report for type 5 error -28 [ 114.067041][ T8148] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1789: Failed to acquire dquot type 1 [ 114.188376][ T8148] loop5: lost filesystem error report for type 5 error -28 [ 114.258932][ T8148] EXT4-fs (loop5): 1 orphan inode deleted [ 114.273642][ T8148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.431430][ T8181] loop2: detected capacity change from 0 to 512 [ 114.442662][ T8183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1800'. [ 114.452514][ T8148] syz.5.1789 (8148) used greatest stack depth: 9032 bytes left [ 114.461167][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.499772][ T8181] EXT4-fs (loop2): 1 orphan inode deleted [ 114.516134][ T8181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.526360][ T3411] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 114.536482][ T8181] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.541952][ T3411] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.557186][ T309] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1 [ 114.614942][ T8181] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.749047][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.601526][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.698620][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.722015][ T8280] netlink: 'syz.4.1839': attribute type 13 has an invalid length. [ 115.731426][ T8280] gretap0: refused to change device tx_queue_len [ 115.737854][ T8280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 115.784186][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.849787][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.080728][ T36] bond0 (unregistering): Released all slaves [ 116.098926][ T8276] ip6_vti0 speed is unknown, defaulting to 1000 [ 116.145276][ T8320] netlink: 'syz.4.1848': attribute type 8 has an invalid length. [ 116.167576][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 116.269349][ T36] hsr_slave_0: left promiscuous mode [ 116.281427][ T36] hsr_slave_1: left promiscuous mode [ 116.306821][ T36] veth1_vlan: left allmulticast mode [ 116.318603][ T36] dummy0: left allmulticast mode [ 116.325743][ T36] veth1_macvtap: left promiscuous mode [ 116.335925][ T36] veth0_macvtap: left promiscuous mode [ 116.345261][ T36] veth1_vlan: left promiscuous mode [ 116.358572][ T36] veth0_vlan: left promiscuous mode [ 116.562152][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 116.630716][ T8356] loop4: detected capacity change from 0 to 512 [ 116.637804][ T8356] EXT4-fs: Ignoring removed i_version option [ 116.646175][ T8356] EXT4-fs: Ignoring removed bh option [ 116.673203][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.681438][ T8356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.695259][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.702692][ T8276] bridge_slave_0: entered allmulticast mode [ 116.708922][ T8356] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.713954][ T8276] bridge_slave_0: entered promiscuous mode [ 116.727296][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.734795][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.742307][ T8276] bridge_slave_1: entered allmulticast mode [ 116.748952][ T8276] bridge_slave_1: entered promiscuous mode [ 116.773485][ T36] IPVS: stop unused estimator thread 0... [ 116.781390][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.797152][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.841150][ T8276] team0: Port device team_slave_0 added [ 116.848564][ T8276] team0: Port device team_slave_1 added [ 116.867609][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.874834][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.901682][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.919802][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.944263][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.979315][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.988702][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.039882][ T8276] hsr_slave_0: entered promiscuous mode [ 117.058662][ T8276] hsr_slave_1: entered promiscuous mode [ 117.099314][ T8385] syzkaller1: entered promiscuous mode [ 117.103622][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 117.103666][ T28] audit: type=1400 audit(1774577240.343:727): avc: denied { setopt } for pid=8378 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.108498][ T8385] syzkaller1: entered allmulticast mode [ 117.293846][ T8397] loop5: detected capacity change from 0 to 512 [ 117.294106][ T8276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.502662][ T8276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.510942][ T8397] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #12: comm syz.5.1865: corrupted in-inode xattr: bad e_name length [ 117.534472][ T8397] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 117.534747][ T8397] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1865: couldn't read orphan inode 12 (err -117) [ 117.544013][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 117.544033][ C1] EXT4-fs (loop5): initial error at time 1774577240: ext4_iget_extra_inode:5025: inode 12 [ 117.544072][ C1] EXT4-fs (loop5): last error at time 1774577240: ext4_iget_extra_inode:5025: inode 12 [ 117.583251][ T8276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.598423][ T8397] loop5: lost filesystem error report for type 5 error -117 [ 117.599334][ T8397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.633897][ T8276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.651362][ T8425] loop6: detected capacity change from 0 to 512 [ 117.668206][ T8425] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.679386][ T8425] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 117.754007][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.782541][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.790317][ T8425] EXT4-fs (loop6): group descriptors corrupted! [ 117.810649][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.817801][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.856665][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.863886][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.947678][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1870'. [ 117.994465][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.081422][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.099950][ T8443] loop5: detected capacity change from 0 to 512 [ 118.131906][ T8443] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 118.178795][ T8443] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 118.193583][ T8443] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #11: comm syz.5.1874: corrupted inode contents [ 118.205721][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 118.205751][ C1] EXT4-fs (loop5): initial error at time 1774577241: mb_free_blocks:2047: inode 11: block 64 [ 118.205801][ C1] EXT4-fs (loop5): last error at time 1774577241: mb_free_blocks:2047: inode 11: block 64 [ 118.233248][ T8443] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.233516][ T8443] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #11: comm syz.5.1874: mark_inode_dirty error [ 118.254392][ T8443] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.256164][ T8443] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1874: invalid indirect mapped block 1 (level 1) [ 118.278874][ T8443] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.287738][ T8443] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #11: comm syz.5.1874: corrupted inode contents [ 118.309533][ T8443] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.311699][ T8443] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 118.388414][ T8443] loop5: lost filesystem error report for type 5 error -117 [ 118.388678][ T8443] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #11: comm syz.5.1874: corrupted inode contents [ 118.419056][ T8460] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.444417][ T8443] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.450051][ T8443] EXT4-fs error (device loop5): ext4_truncate:4587: inode #11: comm syz.5.1874: mark_inode_dirty error [ 118.478767][ T8443] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.479030][ T8443] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 118.507796][ T8443] loop5: lost filesystem error report for type 5 error -117 [ 118.508119][ T8443] EXT4-fs (loop5): 1 truncate cleaned up [ 118.526236][ T8443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.588616][ T8469] loop6: detected capacity change from 0 to 128 [ 118.599270][ T8276] veth0_vlan: entered promiscuous mode [ 118.602372][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.613193][ T8276] veth1_vlan: entered promiscuous mode [ 118.628600][ T28] audit: type=1400 audit(1774577241.863:728): avc: denied { getopt } for pid=8468 comm="syz.6.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.697940][ T8475] loop5: detected capacity change from 0 to 1024 [ 118.716722][ T8276] veth0_macvtap: entered promiscuous mode [ 118.727622][ T8276] veth1_macvtap: entered promiscuous mode [ 118.763812][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.766944][ T8479] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 118.779851][ T8479] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1885'. [ 118.789714][ T8479] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 118.797680][ T8479] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1885'. [ 118.799116][ T8475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.819700][ T8475] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.832923][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.854802][ T8475] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1881: bg 0: block 112: padding at end of block bitmap is not set [ 118.882114][ T8475] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 118.884843][ T83] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.895096][ T8475] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.895096][ T8475] [ 118.913866][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.934061][ T8485] loop4: detected capacity change from 0 to 1024 [ 118.941671][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.961168][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.979205][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.011670][ T8485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.043558][ T8485] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.072232][ T8485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1884: bg 0: block 3: invalid block bitmap [ 119.087989][ T8485] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 119.106649][ T8485] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.106649][ T8485] [ 119.161841][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.270367][ T28] audit: type=1326 audit(1774577242.513:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2388cac799 code=0x7ffc0000 [ 119.326975][ T28] audit: type=1326 audit(1774577242.513:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2388cac799 code=0x7ffc0000 [ 119.350516][ T28] audit: type=1326 audit(1774577242.513:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2388c6cfce code=0x7ffc0000 [ 119.380957][ T8515] loop7: detected capacity change from 0 to 512 [ 119.417833][ T8511] random: crng reseeded on system resumption [ 119.423893][ T28] audit: type=1326 audit(1774577242.513:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2388cada97 code=0x7ffc0000 [ 119.423934][ T28] audit: type=1326 audit(1774577242.513:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2388cac799 code=0x7ffc0000 [ 119.423966][ T28] audit: type=1326 audit(1774577242.513:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2388cada97 code=0x7ffc0000 [ 119.479611][ T8515] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1896: invalid indirect mapped block 256 (level 2) [ 119.494942][ T28] audit: type=1326 audit(1774577242.513:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2388c6cfce code=0x7ffc0000 [ 119.531276][ T28] audit: type=1326 audit(1774577242.513:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2388cac799 code=0x7ffc0000 [ 119.554912][ T8515] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.558315][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 119.573971][ C0] EXT4-fs (loop7): initial error at time 1774577242: ext4_free_branches:1023: inode 11 [ 119.583700][ C0] EXT4-fs (loop7): last error at time 1774577242: ext4_free_branches:1023: inode 11 [ 119.593928][ T8515] EXT4-fs (loop7): 2 truncates cleaned up [ 119.608828][ T8515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.685882][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.477570][ T8597] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.598170][ T8611] loop7: detected capacity change from 0 to 512 [ 120.697248][ T8619] hsr0: entered promiscuous mode [ 120.715780][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 120.743574][ T8619] hsr_slave_0: left promiscuous mode [ 120.767858][ T8619] hsr_slave_1: left promiscuous mode [ 120.776718][ T8619] hsr0 (unregistering): left promiscuous mode [ 120.954267][ T8643] netlink: 'syz.7.1953': attribute type 21 has an invalid length. [ 120.964689][ T8645] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.032896][ T8651] loop7: detected capacity change from 0 to 512 [ 121.060219][ T8651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.073023][ T8651] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.117857][ T8651] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #18: comm syz.7.1956: corrupted inode contents [ 121.145006][ T8651] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 121.145239][ T8651] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #18: comm syz.7.1956: mark_inode_dirty error [ 121.166905][ T8651] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 121.176567][ T8651] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #18: comm syz.7.1956: corrupted inode contents [ 121.232103][ T8651] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #18: comm syz.7.1956: mark_inode_dirty error [ 121.246166][ T8651] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #18: comm syz.7.1956: mark inode dirty (error -117) [ 121.268506][ T8651] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 121.329991][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.413759][ T8682] ip6_vti0 speed is unknown, defaulting to 1000 [ 121.457795][ T8689] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.470852][ T8686] EXT4-fs: Ignoring removed orlov option [ 121.494460][ T8689] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1972: invalid indirect mapped block 9 (level 0) [ 121.508857][ T8689] EXT4-fs (loop6): 1 truncate cleaned up [ 121.511237][ T8686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.518339][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 121.533717][ C0] EXT4-fs (loop6): initial error at time 1774577244: ext4_free_branches:1023: inode 11 [ 121.543414][ C0] EXT4-fs (loop6): last error at time 1774577244: ext4_free_branches:1023: inode 11 [ 121.591601][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.601539][ T8690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.618804][ T8690] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.629488][ T8689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.662327][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.720881][ T6162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.912459][ T8718] set_capacity_and_notify: 3 callbacks suppressed [ 121.912480][ T8718] loop4: detected capacity change from 0 to 128 [ 121.950916][ T8718] syz.4.1981: attempt to access beyond end of device [ 121.950916][ T8718] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 121.965562][ T8718] syz.4.1981: attempt to access beyond end of device [ 121.965562][ T8718] loop4: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 121.990073][ T8718] syz.4.1981: attempt to access beyond end of device [ 121.990073][ T8718] loop4: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 122.005966][ T8718] syz.4.1981: attempt to access beyond end of device [ 122.005966][ T8718] loop4: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 122.049494][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 122.084619][ T12] kworker/u8:0: attempt to access beyond end of device [ 122.084619][ T12] loop4: rw=1, sector=138, nr_sectors = 2 limit=128 [ 122.147442][ T8735] loop4: detected capacity change from 0 to 164 [ 122.197503][ T8729] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.290046][ T3396] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 122.298700][ T3396] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.312056][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 122.312141][ T28] audit: type=1400 audit(1774577245.553:749): avc: denied { bind } for pid=8744 comm="syz.3.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.905412][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.916419][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.800144][ T8830] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2029'. [ 123.883562][ T8835] loop5: detected capacity change from 0 to 1024 [ 123.901518][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 123.909300][ T8835] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.943240][ T8835] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 123.976140][ T8835] EXT4-fs (loop5): orphan cleanup on readonly fs [ 123.985390][ T8835] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.2031: Invalid inode table block 0 in block_group 0 [ 124.008382][ T8835] loop5: lost filesystem error report for type 5 error -117 [ 124.008597][ T8835] EXT4-fs (loop5): Remounting filesystem read-only [ 124.022642][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 124.022681][ C1] EXT4-fs (loop5): initial error at time 1774577503: __ext4_get_inode_loc:4782 [ 124.022724][ C1] EXT4-fs (loop5): last error at time 1774577503: __ext4_get_inode_loc:4782 [ 124.047764][ T8835] Quota error (device loop5): write_blk: dquota write failed [ 124.081166][ T8845] program syz.4.2035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.096511][ T8835] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 124.106800][ T8835] EXT4-fs (loop5): 1 truncate cleaned up [ 124.113798][ T8835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.175066][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.215405][ T8849] bpf: Bad value for 'gid' [ 124.224063][ T28] audit: type=1400 audit(1774577503.458:750): avc: denied { getopt } for pid=8848 comm="syz.6.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 124.308226][ T28] audit: type=1400 audit(1774577503.548:751): avc: denied { create } for pid=8854 comm="syz.5.2040" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.388109][ T28] audit: type=1400 audit(1774577503.548:752): avc: denied { rename } for pid=8854 comm="syz.5.2040" name="file0" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.446819][ T28] audit: type=1400 audit(1774577503.578:753): avc: denied { mounton } for pid=8854 comm="syz.5.2040" path="/234/file7" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.481676][ T8869] loop4: detected capacity change from 0 to 128 [ 124.485160][ T28] audit: type=1400 audit(1774577503.618:754): avc: denied { ioctl } for pid=8861 comm="syz.5.2043" path="socket:[23611]" dev="sockfs" ino=23611 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.581693][ T8869] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.599521][ T8869] ext4 filesystem being mounted at /388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.635489][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.712765][ T8884] macvlan0: entered promiscuous mode [ 124.727809][ T8884] dummy0: entered promiscuous mode [ 124.733945][ T8884] hsr1: entered promiscuous mode [ 124.739240][ T8884] hsr1: entered allmulticast mode [ 124.744518][ T8884] macvlan0: entered allmulticast mode [ 124.750036][ T8884] veth1_vlan: entered allmulticast mode [ 124.755787][ T8884] dummy0: entered allmulticast mode [ 124.781593][ T28] audit: type=1400 audit(1774577504.028:755): avc: denied { create } for pid=8885 comm="syz.3.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 124.836105][ T28] audit: type=1400 audit(1774577504.058:756): avc: denied { ioctl } for pid=8885 comm="syz.3.2052" path="socket:[23222]" dev="sockfs" ino=23222 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 124.999362][ T8900] loop7: detected capacity change from 0 to 512 [ 125.026786][ T8900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.060778][ T8900] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.079662][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 125.109942][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.126643][ T8909] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.800004][ T8940] ip6_vti0 speed is unknown, defaulting to 1000 [ 126.115641][ T8961] loop4: detected capacity change from 0 to 512 [ 126.123268][ T8961] EXT4-fs: Ignoring removed bh option [ 126.132871][ T8961] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 126.147322][ T8961] EXT4-fs (loop4): 1 truncate cleaned up [ 126.155189][ T8961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.236882][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.375545][ T8973] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 126.386193][ T8977] serio: Serial port ttyS3 [ 126.386190][ T8973] netlink: 'syz.5.2089': attribute type 2 has an invalid length. [ 126.386341][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2089'. [ 126.669893][ T9000] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.713001][ T9000] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.774155][ T9000] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.834815][ T9000] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.907057][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.925254][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.948395][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.972176][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.007286][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2110'. [ 127.331958][ T9082] loop6: detected capacity change from 0 to 512 [ 127.351559][ T9082] EXT4-fs: inline encryption not supported [ 127.365608][ T9082] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.379646][ T9082] EXT4-fs (loop6): 1 truncate cleaned up [ 127.392396][ T9082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.435917][ T6162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.577185][ T9103] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.628364][ T9103] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.722416][ T9103] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.762562][ T9103] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.849502][ T9103] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.879458][ T9103] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.961907][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 127.961975][ T28] audit: type=1400 audit(1774577507.208:767): avc: denied { mounton } for pid=9160 comm="syz.5.2129" path="/proc/560/cgroup" dev="proc" ino=24130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 127.992603][ T9103] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.028411][ T9103] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.127806][ T9130] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.151674][ T9130] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.173064][ T9130] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.181749][ T9130] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.198002][ T9175] tipc: Started in network mode [ 128.210269][ T9175] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.237074][ T9175] tipc: Enabled bearer , priority 10 [ 128.261644][ T83] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.277597][ T83] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.340383][ T83] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.373408][ T83] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.478886][ T9194] netlink: 'syz.7.2143': attribute type 1 has an invalid length. [ 128.491339][ T9194] netlink: 'syz.7.2143': attribute type 2 has an invalid length. [ 128.508568][ T9194] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2143'. [ 128.634810][ T9200] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.855680][ T9238] syzkaller1: entered promiscuous mode [ 128.866697][ T9238] syzkaller1: entered allmulticast mode [ 129.296689][ T9249] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2155'. [ 129.348320][ T10] tipc: Node number set to 2886997162 [ 129.425680][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 129.462972][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 129.905082][ T28] audit: type=1400 audit(1774577509.148:768): avc: denied { mount } for pid=9309 comm="syz.4.2176" name="/" dev="ramfs" ino=25002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.195375][ T28] audit: type=1400 audit(1774577509.438:769): avc: denied { name_bind } for pid=9338 comm="syz.4.2187" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 130.241265][ T9343] loop5: detected capacity change from 0 to 128 [ 130.287877][ T9345] sctp: [Deprecated]: syz.4.2190 (pid 9345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.287877][ T9345] Use struct sctp_sack_info instead [ 130.362354][ T28] audit: type=1400 audit(1774577509.598:770): avc: denied { read } for pid=9346 comm="syz.3.2192" path="socket:[25073]" dev="sockfs" ino=25073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.597604][ T9366] loop7: detected capacity change from 0 to 1024 [ 130.648646][ T9366] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 130.701487][ T9366] System zones: 0-1, 3-36 [ 130.727101][ T9366] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2200: bad orphan inode 134217728 [ 130.743058][ T9366] loop7: lost filesystem error report for type 5 error -117 [ 130.743809][ T9366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.877216][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.035631][ T4924] IPVS: starting estimator thread 0... [ 131.148396][ T9409] IPVS: using max 2208 ests per chain, 110400 per kthread [ 131.209420][ T9418] loop7: detected capacity change from 0 to 6 [ 131.218842][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 1 [ 131.570360][ T28] audit: type=1400 audit(1774577510.818:771): avc: denied { load_policy } for pid=9441 comm="syz.5.2229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.595755][ T9442] SELinux: failed to load policy [ 131.722973][ T28] audit: type=1400 audit(1774577510.968:772): avc: denied { accept } for pid=9451 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.917215][ T9463] loop4: detected capacity change from 0 to 4096 [ 131.940066][ T9463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.016866][ T9468] lo: entered allmulticast mode [ 132.056977][ T9468] lo: left allmulticast mode [ 132.085795][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.330894][ T9494] ip6erspan0: entered allmulticast mode [ 132.442825][ T9498] loop7: detected capacity change from 0 to 4096 [ 132.468427][ T9498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.526982][ T9505] syzkaller1: entered promiscuous mode [ 132.550254][ T9505] syzkaller1: entered allmulticast mode [ 132.574181][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.686427][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2266'. [ 132.704046][ T9520] netlink: 'syz.5.2266': attribute type 30 has an invalid length. [ 132.729523][ T83] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.745263][ T83] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.790261][ T83] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.827258][ T83] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.858133][ T9534] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 132.914203][ T9534] bond1 (unregistering): Released all slaves [ 132.926751][ T9541] netlink: 'syz.4.2276': attribute type 29 has an invalid length. [ 133.104791][ T9551] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2279'. [ 133.136000][ T28] audit: type=1400 audit(1774577512.378:773): avc: denied { unmount } for pid=9554 comm="syz.3.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.256069][ T28] audit: type=1326 audit(1774577512.498:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.282492][ T28] audit: type=1326 audit(1774577512.498:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.307061][ T28] audit: type=1326 audit(1774577512.498:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.340537][ T28] audit: type=1326 audit(1774577512.498:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.364482][ T28] audit: type=1326 audit(1774577512.528:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.388865][ T28] audit: type=1326 audit(1774577512.528:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.453868][ T28] audit: type=1326 audit(1774577512.528:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.539384][ T28] audit: type=1326 audit(1774577512.528:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.647218][ T28] audit: type=1326 audit(1774577512.528:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 133.707892][ T9591] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2299'. [ 133.717801][ T9591] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2299'. [ 133.789617][ T9593] program syz.6.2297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.822181][ T9604] SELinux: failed to load policy [ 134.865080][ T9614] io-wq is not configured for unbound workers [ 134.889106][ T9617] loop7: detected capacity change from 0 to 128 [ 134.918951][ T9617] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.933493][ T9617] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.034481][ T8276] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.058879][ T9625] syzkaller1: entered promiscuous mode [ 135.079104][ T9625] syzkaller1: entered allmulticast mode [ 135.206153][ T9641] loop7: detected capacity change from 0 to 2048 [ 135.246438][ T9637] SELinux: failed to load policy [ 135.606206][ T9671] loop6: detected capacity change from 0 to 128 [ 135.624768][ T9671] EXT4-fs: Ignoring removed i_version option [ 135.638528][ T9671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 135.646818][ T9671] System zones: 1-3, 19-19, 35-36 [ 135.660697][ T9671] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.673860][ T9671] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.686740][ T9671] EXT4-fs (loop6): shut down requested (2) [ 135.716736][ T6162] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.137000][ T9677] SELinux: failed to load policy [ 136.291272][ T9704] loop4: detected capacity change from 0 to 1024 [ 136.302624][ T9704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 136.316556][ T9704] System zones: 0-1, 3-36 [ 136.322761][ T9704] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2347: bad orphan inode 134217728 [ 136.334347][ T9704] loop4: lost filesystem error report for type 5 error -117 [ 136.335102][ T9704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.409085][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.928851][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.975381][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.005512][ T9747] loop4: detected capacity change from 0 to 8192 [ 137.120613][ T9759] program syz.3.2371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.256287][ T9775] loop7: detected capacity change from 0 to 128 [ 137.466611][ T9785] loop4: detected capacity change from 0 to 128 [ 137.485344][ T9785] syz.4.2383: attempt to access beyond end of device [ 137.485344][ T9785] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 137.500378][ T9785] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 137.509031][ T9785] syz.4.2383: attempt to access beyond end of device [ 137.509031][ T9785] loop4: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 137.547872][ T9785] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 137.557144][ T9785] syz.4.2383: attempt to access beyond end of device [ 137.557144][ T9785] loop4: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 137.577177][ T9785] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 138.174320][ T9130] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.221480][ T9130] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.324967][ T9130] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.350192][ T9841] loop4: detected capacity change from 0 to 512 [ 138.352829][ T9130] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.418816][ T9841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.443103][ T9851] program syz.3.2412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.443597][ T3403] IPVS: starting estimator thread 0... [ 138.469684][ T9130] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.537895][ T9130] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.549474][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.603721][ T9863] ip6_vti0 speed is unknown, defaulting to 1000 [ 138.610380][ T9854] IPVS: using max 2208 ests per chain, 110400 per kthread [ 138.751053][ T9844] ip6_vti0 speed is unknown, defaulting to 1000 [ 138.870581][ T9130] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.890320][ T9130] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.924191][ T9878] loop5: detected capacity change from 0 to 1024 [ 138.949781][ T9878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.998749][ T9878] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 139.018811][ T9878] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 139.045129][ T9878] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.045129][ T9878] [ 139.055085][ T9878] EXT4-fs (loop5): Total free blocks count 0 [ 139.061165][ T9878] EXT4-fs (loop5): Free/Dirty block details [ 139.067192][ T9878] EXT4-fs (loop5): free_blocks=20480 [ 139.072831][ T9878] EXT4-fs (loop5): dirty_blocks=32 [ 139.078141][ T9878] EXT4-fs (loop5): Block reservation details [ 139.084279][ T9878] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 139.131349][ T9115] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 139.292681][ T9130] bond0 (unregistering): Released all slaves [ 139.326448][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 139.397190][ T9130] hsr_slave_0: left promiscuous mode [ 139.431170][ T9130] hsr_slave_1: left promiscuous mode [ 139.442643][ T9130] veth1_macvtap: left promiscuous mode [ 139.457481][ T9130] veth0_macvtap: left promiscuous mode [ 139.465205][ T9130] veth1_vlan: left promiscuous mode [ 139.471260][ T9130] veth0_vlan: left promiscuous mode [ 139.710412][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 139.741922][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2427'. [ 139.796626][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.819790][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.827442][ T9844] bridge_slave_0: entered allmulticast mode [ 139.834606][ T9844] bridge_slave_0: entered promiscuous mode [ 139.841737][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.849482][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.856723][ T9844] bridge_slave_1: entered allmulticast mode [ 139.863473][ T9844] bridge_slave_1: entered promiscuous mode [ 139.914399][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.929220][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.967091][ T9844] team0: Port device team_slave_0 added [ 139.974839][ T9844] team0: Port device team_slave_1 added [ 139.993062][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.000289][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.026525][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.050201][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 140.050222][ T28] audit: type=1400 audit(1774577519.298:825): avc: denied { read write } for pid=9942 comm="syz.3.2432" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 140.085070][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.089754][ T28] audit: type=1400 audit(1774577519.328:826): avc: denied { open } for pid=9942 comm="syz.3.2432" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 140.108100][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.117638][ T28] audit: type=1400 audit(1774577519.328:827): avc: denied { ioctl } for pid=9942 comm="syz.3.2432" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 140.170980][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.197178][ T9130] IPVS: stop unused estimator thread 0... [ 140.235761][ T9844] hsr_slave_0: entered promiscuous mode [ 140.258192][ T9844] hsr_slave_1: entered promiscuous mode [ 140.266073][ T9844] debugfs: 'hsr0' already exists in 'hsr' [ 140.273152][ T9844] Cannot create hsr debugfs directory [ 140.538540][ T28] audit: type=1400 audit(1774577519.778:828): avc: denied { search } for pid=9977 comm="syz.5.2439" name="/" dev="configfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.576262][ T9844] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 140.584868][ T9983] openvswitch: netlink: Missing key (keys=40, expected=100) [ 140.588853][ T28] audit: type=1400 audit(1774577519.778:829): avc: denied { search } for pid=9977 comm="syz.5.2439" name="/" dev="configfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.620110][ T9844] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 140.640261][ T9844] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 140.651336][ T9844] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 140.709571][ T28] audit: type=1400 audit(1774577519.948:830): avc: denied { mount } for pid=9993 comm="syz.5.2444" name="/" dev="mqueue" ino=12465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.758414][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.787817][ T9844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.804038][ T9844] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.822632][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.829819][ T9130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.860961][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.868119][ T9130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.897297][ T3396] Process accounting resumed [ 140.907754][ T9844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.930829][ T9844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.989566][T10020] loop4: detected capacity change from 0 to 128 [ 141.119815][T10032] loop4: detected capacity change from 0 to 1024 [ 141.133132][ T9844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.170247][ T28] audit: type=1326 audit(1774577520.408:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10039 comm="syz.5.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 141.226228][T10045] ªªªªªª: renamed from dummy0 (while UP) [ 141.237768][ T28] audit: type=1326 audit(1774577520.408:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10039 comm="syz.5.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 141.266571][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.310490][ T28] audit: type=1326 audit(1774577520.418:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10039 comm="syz.5.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 141.334829][ T28] audit: type=1326 audit(1774577520.418:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10039 comm="syz.5.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 141.462361][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.572301][ T9844] veth0_vlan: entered promiscuous mode [ 141.623735][ T9844] veth1_vlan: entered promiscuous mode [ 141.652270][ T9844] veth0_macvtap: entered promiscuous mode [ 141.661087][ T9844] veth1_macvtap: entered promiscuous mode [ 141.684156][ T9844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.697440][T10089] loop4: detected capacity change from 0 to 512 [ 141.699825][ T9844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.724432][ T9122] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.757591][ T9122] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.777872][T10089] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2470: bg 0: block 5: invalid block bitmap [ 141.808363][ T9122] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.847428][T10089] loop4: lost filesystem error report for type 5 error -117 [ 141.847625][T10089] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 141.855093][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 141.855115][ C0] EXT4-fs (loop4): initial error at time 1774577521: ext4_validate_block_bitmap:432 [ 141.855158][ C0] EXT4-fs (loop4): last error at time 1774577521: ext4_validate_block_bitmap:432 [ 141.878440][T10095] ip6_vti0 speed is unknown, defaulting to 1000 [ 141.885728][ T9134] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.918754][T10089] loop4: lost filesystem error report for type 5 error -117 [ 141.942266][T10089] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2470: invalid indirect mapped block 3 (level 2) [ 142.029247][T10089] fserror_report: 4 callbacks suppressed [ 142.029271][T10089] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.035598][T10089] EXT4-fs (loop4): 1 orphan inode deleted [ 142.055564][T10089] EXT4-fs (loop4): 1 truncate cleaned up [ 142.116262][T10089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.201208][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.680301][T10171] loop4: detected capacity change from 0 to 512 [ 143.689023][T10171] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.700902][T10171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.738016][T10171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.768450][T10171] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.845679][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.230564][ T9124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.321513][ T9124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.384313][ T9124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.443179][ T9124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.467532][T10195] ip6_vti0 speed is unknown, defaulting to 1000 [ 144.559368][ T9124] bridge_slave_1: left allmulticast mode [ 144.575245][ T9124] bridge_slave_1: left promiscuous mode [ 144.588404][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.627496][ T9124] bridge_slave_0: left allmulticast mode [ 144.637837][ T9124] bridge_slave_0: left promiscuous mode [ 144.652464][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.700556][ T309] smc: removing ib device syz2 [ 144.846046][ T9124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.872799][ T9124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.905067][ T9124] bond0 (unregistering): Released all slaves [ 144.924913][ T9124] bond1 (unregistering): Released all slaves [ 144.941348][ T9124] bond2 (unregistering): Released all slaves [ 145.118240][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2526'. [ 145.188284][ T9124] tipc: Disabling bearer [ 145.218535][ T9124] tipc: Left network mode [ 145.228682][T10195] chnl_net:caif_netlink_parms(): no params data found [ 145.253459][ T9124] macvlan0: left promiscuous mode [ 145.263927][ T9124] dummy0: left promiscuous mode [ 145.283226][ T9124] hsr_slave_0: left promiscuous mode [ 145.331676][ T9124] hsr_slave_1: left promiscuous mode [ 145.353231][ T9124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.375721][ T9124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.384375][ T9124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.392074][ T9124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.406132][ T9124] veth1_macvtap: left promiscuous mode [ 145.413340][ T9124] veth0_macvtap: left promiscuous mode [ 145.420221][ T9124] veth1_vlan: left allmulticast mode [ 145.425590][ T9124] veth1_vlan: left promiscuous mode [ 145.431843][ T9124] veth0_vlan: left promiscuous mode [ 145.564188][ T9124] team0 (unregistering): Port device team_slave_1 removed [ 145.574922][ T9124] team0 (unregistering): Port device team_slave_0 removed [ 145.764146][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.793368][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.822288][T10195] bridge_slave_0: entered allmulticast mode [ 145.839156][T10195] bridge_slave_0: entered promiscuous mode [ 145.861605][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.882058][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.896079][T10195] bridge_slave_1: entered allmulticast mode [ 145.999839][T10195] bridge_slave_1: entered promiscuous mode [ 146.033555][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.062266][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.134592][T10195] team0: Port device team_slave_0 added [ 146.145191][T10195] team0: Port device team_slave_1 added [ 146.230398][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.247674][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.298142][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.319603][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.326608][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.353483][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.470557][T10195] hsr_slave_0: entered promiscuous mode [ 146.494866][T10195] hsr_slave_1: entered promiscuous mode [ 146.522186][T10195] debugfs: 'hsr0' already exists in 'hsr' [ 146.543362][T10195] Cannot create hsr debugfs directory [ 146.747889][T10327] loop7: detected capacity change from 0 to 512 [ 146.786000][T10327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.829294][T10327] EXT4-fs (loop7): orphan cleanup on readonly fs [ 146.846112][T10327] EXT4-fs error (device loop7): ext4_quota_enable:7188: comm syz.7.2543: Bad quota inum: 2, type: 2 [ 146.868337][T10327] loop7: lost filesystem error report for type 5 error -117 [ 146.868696][T10327] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 146.890730][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 146.890756][ C0] EXT4-fs (loop7): last error at time 1774577526: ext4_quota_enable:7188 [ 146.908359][T10327] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 146.918060][T10327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.022783][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.190717][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 147.190735][ T28] audit: type=1326 audit(1774577526.438:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 147.202468][T10195] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 147.235478][T10350] loop5: detected capacity change from 0 to 1024 [ 147.251133][T10195] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 147.257071][T10350] EXT4-fs: Ignoring removed bh option [ 147.278575][T10195] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 147.286073][T10350] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.296872][ T28] audit: type=1326 audit(1774577526.468:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 147.322418][T10195] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 147.341337][T10350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 147.360602][T10350] System zones: 0-1, 3-36 [ 147.594318][T10350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.738360][ T28] audit: type=1326 audit(1774577526.478:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 147.778376][ T28] audit: type=1326 audit(1774577526.478:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 147.828418][ T28] audit: type=1326 audit(1774577526.478:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 147.868356][ T28] audit: type=1326 audit(1774577526.478:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6c3b5c502 code=0x7ffc0000 [ 147.908287][ T28] audit: type=1326 audit(1774577526.478:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 147.948287][ T28] audit: type=1326 audit(1774577526.478:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc6c3b1cfce code=0x7ffc0000 [ 147.990534][ T28] audit: type=1326 audit(1774577526.478:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc6c3b5c5c7 code=0x7ffc0000 [ 148.038655][ T28] audit: type=1326 audit(1774577526.478:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10349 comm="syz.5.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6c3b1cfce code=0x7ffc0000 [ 148.188481][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.365048][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.378879][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.389168][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.396439][ T9130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.432656][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.439826][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.552333][T10393] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.624878][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.743815][ T9124] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.885551][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 148.910814][T10195] veth0_vlan: entered promiscuous mode [ 148.946273][T10195] veth1_vlan: entered promiscuous mode [ 148.967854][T10195] veth0_macvtap: entered promiscuous mode [ 148.979423][T10195] veth1_macvtap: entered promiscuous mode [ 148.995202][T10439] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 149.010354][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.033115][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.052682][ T83] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.066729][ T83] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.095603][ T83] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.112312][ T83] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.310665][T10465] loop5: detected capacity change from 0 to 256 [ 149.597071][T10478] netlink: 'syz.3.2590': attribute type 6 has an invalid length. [ 150.692019][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2600'. [ 150.701310][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2600'. [ 150.758437][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 150.764544][ T6878] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.065283][T10536] loop5: detected capacity change from 0 to 512 [ 151.090086][T10536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.197192][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.228687][ T3411] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 151.270438][ T3411] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.301773][T10553] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.676066][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2624'. [ 151.931818][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2632'. [ 152.042457][T10599] syzkaller1: entered promiscuous mode [ 152.048017][T10599] syzkaller1: entered allmulticast mode [ 152.337229][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 152.337253][ T28] audit: type=1326 audit(1774577531.578:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.424104][ T28] audit: type=1326 audit(1774577531.578:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.468509][ T28] audit: type=1326 audit(1774577531.578:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.498341][ T28] audit: type=1326 audit(1774577531.618:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.538343][ T28] audit: type=1326 audit(1774577531.628:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.655829][ T28] audit: type=1326 audit(1774577531.628:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.701439][ T28] audit: type=1326 audit(1774577531.628:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.749894][ T28] audit: type=1326 audit(1774577531.628:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.802031][ T28] audit: type=1326 audit(1774577531.628:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 152.881936][ T28] audit: type=1326 audit(1774577531.628:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 153.047777][T10656] loop7: detected capacity change from 0 to 1024 [ 153.062075][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2654'. [ 153.108758][T10656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.134690][T10656] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.188451][T10666] macvlan0: entered allmulticast mode [ 153.216037][T10666] macvlan0 (unregistering): left allmulticast mode [ 153.226958][T10656] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2656: bg 0: block 112: padding at end of block bitmap is not set [ 153.277756][T10674] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2656: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.335951][T10674] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 153.440280][T10674] EXT4-fs (loop7): This should not happen!! Data will be lost [ 153.440280][T10674] [ 153.496565][T10651] EXT4-fs error (device loop7): ext4_ext_remove_space:2954: inode #15: comm syz.7.2656: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 153.554723][T10651] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.558316][T10651] EXT4-fs error (device loop7): ext4_evict_inode:266: comm syz.7.2656: couldn't truncate inode 15 (err -117) [ 153.611525][T10703] loop9: detected capacity change from 0 to 128 [ 153.628893][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.757494][T10711] loop9: detected capacity change from 0 to 128 [ 153.889862][T10195] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 153.914207][T10195] FAT-fs (loop9): Filesystem has been set read-only [ 154.034890][T10726] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2673'. [ 154.616071][T10777] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2688'. [ 156.028769][T10864] netlink: 'syz.5.2722': attribute type 83 has an invalid length. [ 156.169628][T10877] loop5: detected capacity change from 0 to 1024 [ 156.178939][T10876] syzkaller1: entered promiscuous mode [ 156.184477][T10876] syzkaller1: entered allmulticast mode [ 156.198538][T10877] EXT4-fs: inline encryption not supported [ 156.270588][T10877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.293558][T10882] loop7: detected capacity change from 0 to 512 [ 156.357010][T10882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.392525][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.402661][T10882] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.416868][T10882] netlink: 111804 bytes leftover after parsing attributes in process `syz.7.2725'. [ 156.426721][T10882] netlink: zone id is out of range [ 156.432040][T10882] netlink: del zone limit has 4 unknown bytes [ 156.501710][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.002105][T10914] xt_hashlimit: size too large, truncated to 1048576 [ 157.756719][T10939] loop5: detected capacity change from 0 to 128 [ 157.873588][T10945] chnl_net:caif_netlink_parms(): no params data found [ 157.987819][T10945] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.005863][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.018633][T10945] bridge_slave_0: entered allmulticast mode [ 158.031769][T10945] bridge_slave_0: entered promiscuous mode [ 158.048737][T10945] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.057010][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.065506][T10945] bridge_slave_1: entered allmulticast mode [ 158.077232][T10945] bridge_slave_1: entered promiscuous mode [ 158.164646][T10945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.182984][T10945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.211015][ T309] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.234807][T10945] team0: Port device team_slave_0 added [ 158.248460][T10945] team0: Port device team_slave_1 added [ 158.275315][ T309] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.302423][T10945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.318891][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.346127][T10945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.360147][ T309] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.371566][T10983] netem: incorrect gi model size [ 158.376905][T10983] netem: change failed [ 158.381569][T10945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.388594][T10945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.415059][T10945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.442814][ T309] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.474818][T10987] loop7: detected capacity change from 0 to 1024 [ 158.489626][T10945] hsr_slave_0: entered promiscuous mode [ 158.495239][T10987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.496498][T10945] hsr_slave_1: entered promiscuous mode [ 158.524824][T10945] debugfs: 'hsr0' already exists in 'hsr' [ 158.526573][T10987] IPVS: persistence engine module ip_vs_pe_€ not found [ 158.541699][T10945] Cannot create hsr debugfs directory [ 158.583455][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.620202][ T309] bridge_slave_1: left allmulticast mode [ 158.625937][ T309] bridge_slave_1: left promiscuous mode [ 158.631975][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.657797][ T309] bridge_slave_0: left allmulticast mode [ 158.670702][ T309] bridge_slave_0: left promiscuous mode [ 158.679389][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.791294][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.801588][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.811499][ T309] bond0 (unregistering): Released all slaves [ 158.854953][ T309] hsr_slave_0: left promiscuous mode [ 158.860981][ T309] hsr_slave_1: left promiscuous mode [ 158.866640][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.874687][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.882510][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.890193][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.901006][ T309] veth1_macvtap: left promiscuous mode [ 158.906560][ T309] veth0_macvtap: left promiscuous mode [ 158.912163][ T309] veth1_vlan: left promiscuous mode [ 158.917421][ T309] veth0_vlan: left promiscuous mode [ 159.016883][ T309] team0 (unregistering): Port device team_slave_1 removed [ 159.040445][ T309] team0 (unregistering): Port device team_slave_0 removed [ 159.470464][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2770'. [ 159.493013][T11069] netlink: 'syz.9.2770': attribute type 18 has an invalid length. [ 159.512277][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2770'. [ 159.570236][T11077] pim6reg: entered allmulticast mode [ 159.588341][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2772'. [ 159.609211][T11083] loop9: detected capacity change from 0 to 2048 [ 159.617508][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2772'. [ 159.627580][T11077] pim6reg: left allmulticast mode [ 159.651219][T11083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.666829][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2772'. [ 159.676518][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2772'. [ 159.698769][T10385] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 159.743560][T10385] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.779448][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.899108][T11107] loop9: detected capacity change from 0 to 1024 [ 159.905959][T11107] EXT4-fs: Ignoring removed oldalloc option [ 159.927051][T11107] EXT4-fs: Ignoring removed bh option [ 159.987177][T11107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.054789][T11114] loop5: detected capacity change from 0 to 512 [ 160.089774][T11114] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 160.199269][T10945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.208485][ T9115] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 160.241284][T10945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.274871][T10945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.307649][T11107] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.2780: Allocating blocks 497-513 which overlap fs metadata [ 160.324987][T10945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.489085][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.521048][T10945] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.561603][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.568780][ T9124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.610541][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.621125][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 160.643698][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.650929][ T9115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.887828][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.994380][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2797'. [ 161.053554][T10945] veth0_vlan: entered promiscuous mode [ 161.063603][T10945] veth1_vlan: entered promiscuous mode [ 161.116370][T10945] veth0_macvtap: entered promiscuous mode [ 161.125730][T10945] veth1_macvtap: entered promiscuous mode [ 161.137815][T10945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.150656][T10945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.173731][ T9124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.219561][ T9124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.230658][ T9124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.280873][ T9124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.623689][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 161.623709][ T28] audit: type=1326 audit(1774577540.868:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5948c799 code=0x7ffc0000 [ 161.673367][ T28] audit: type=1326 audit(1774577540.868:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5948c799 code=0x7ffc0000 [ 161.752260][ T28] audit: type=1326 audit(1774577540.868:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5948c799 code=0x7ffc0000 [ 161.812552][ T28] audit: type=1326 audit(1774577540.868:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d5948c799 code=0x7ffc0000 [ 161.898382][ T28] audit: type=1326 audit(1774577540.868:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5948c799 code=0x7ffc0000 [ 161.966294][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2819'. [ 161.980172][T11286] loop1: detected capacity change from 0 to 256 [ 161.988828][ T28] audit: type=1326 audit(1774577540.948:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5948c799 code=0x7ffc0000 [ 162.014717][ T28] audit: type=1326 audit(1774577540.948:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d5948c502 code=0x7ffc0000 [ 162.039237][ T28] audit: type=1326 audit(1774577540.948:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7d5948c597 code=0x7ffc0000 [ 162.066088][T11286] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.082285][ T28] audit: type=1326 audit(1774577540.948:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d59449491 code=0x7ffc0000 [ 162.172627][ T28] audit: type=1326 audit(1774577540.948:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.3.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7d5948d589 code=0x7ffc0000 [ 162.493163][T11330] loop7: detected capacity change from 0 to 128 [ 162.570468][T11333] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.580815][ T3408] IPVS: starting estimator thread 0... [ 162.678481][T11340] IPVS: using max 2208 ests per chain, 110400 per kthread [ 163.155746][T11390] loop9: detected capacity change from 0 to 164 [ 163.166425][T11390] ISOFS: Bad logical zone size 2816 [ 163.209571][ T9115] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.308868][T11408] netlink: 'syz.5.2851': attribute type 5 has an invalid length. [ 163.523519][T11434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=11434 comm=syz.1.2858 [ 163.816801][T11471] dvmrp1: entered allmulticast mode [ 164.496250][T11542] loop5: detected capacity change from 0 to 512 [ 164.531743][T11542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.548840][T11542] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.592912][T11542] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.2871: corrupted inode contents [ 164.630125][T11542] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.2871: mark_inode_dirty error [ 164.652642][T11542] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.2871: corrupted inode contents [ 164.678435][T11542] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2871: mark_inode_dirty error [ 164.720088][T11554] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.2871: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 164.720088][T11554] [ 164.746503][T11542] EXT4-fs error (device loop5): ext4_get_first_dir_block:3538: inode #18: comm syz.5.2871: directory missing '.' [ 164.767717][T11558] syzkaller1: entered promiscuous mode [ 164.773955][T11558] syzkaller1: entered allmulticast mode [ 164.799581][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.894208][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2882'. [ 164.914565][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2882'. [ 165.096671][T11581] loop5: detected capacity change from 0 to 8192 [ 165.110596][T11581] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.164888][T11584] Process accounting resumed [ 165.186583][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2890'. [ 165.199023][T11589] erspan0: entered promiscuous mode [ 165.206444][T11589] erspan0: left promiscuous mode [ 165.238547][ T6878] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.275195][T11593] loop7: detected capacity change from 0 to 128 [ 165.285294][T11591] syzkaller1: entered promiscuous mode [ 165.291344][T11591] syzkaller1: entered allmulticast mode [ 165.299846][T11593] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.333152][T11593] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.367135][ T8276] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.410139][T11602] batadv_slave_1: entered promiscuous mode [ 165.426952][T11600] batadv_slave_1: left promiscuous mode [ 166.007890][T11636] netlink: 'syz.7.2908': attribute type 2 has an invalid length. [ 166.127638][T11646] GUP no longer grows the stack in syz.1.2913 (11646): 200000004000-20000000a000 (200000002000) [ 166.155802][T11646] CPU: 1 UID: 0 PID: 11646 Comm: syz.1.2913 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.155848][T11646] Tainted: [W]=WARN [ 166.155858][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.156010][T11646] Call Trace: [ 166.156044][T11646] [ 166.156054][T11646] __dump_stack+0x1d/0x30 [ 166.156088][T11646] dump_stack_lvl+0x95/0xd0 [ 166.156135][T11646] dump_stack+0x15/0x1b [ 166.156166][T11646] __get_user_pages+0x195b/0x1ea0 [ 166.156206][T11646] ? xfd_validate_state+0x45/0xf0 [ 166.156272][T11646] ? __rcu_read_unlock+0x4e/0x70 [ 166.156304][T11646] get_user_pages_remote+0x1d5/0x6b0 [ 166.156354][T11646] __access_remote_vm+0x15c/0x580 [ 166.156413][T11646] access_remote_vm+0x32/0x40 [ 166.156487][T11646] proc_pid_cmdline_read+0x32b/0x6b0 [ 166.156530][T11646] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 166.156579][T11646] vfs_readv+0x432/0x6e0 [ 166.156624][T11646] __x64_sys_preadv+0xfd/0x1c0 [ 166.156701][T11646] x64_sys_call+0x2915/0x3020 [ 166.156731][T11646] do_syscall_64+0x12c/0x370 [ 166.156807][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.156836][T11646] RIP: 0033:0x7fa18b36c799 [ 166.156855][T11646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.156877][T11646] RSP: 002b:00007fa189dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 166.156937][T11646] RAX: ffffffffffffffda RBX: 00007fa18b5e5fa0 RCX: 00007fa18b36c799 [ 166.156955][T11646] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 166.156972][T11646] RBP: 00007fa18b402c99 R08: 00000000fffffff9 R09: 0000000000000000 [ 166.156990][T11646] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 166.157008][T11646] R13: 00007fa18b5e6038 R14: 00007fa18b5e5fa0 R15: 00007ffc85efb4b8 [ 166.157037][T11646] [ 166.402950][T11652] netlink: 'syz.5.2915': attribute type 15 has an invalid length. [ 166.440244][T11654] loop1: detected capacity change from 0 to 4096 [ 166.477969][T11654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.543332][T11662] loop7: detected capacity change from 0 to 512 [ 166.550518][T11662] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.564372][T11662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.580983][T11654] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2916: corrupted inode contents [ 166.598092][T11654] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.2916: mark_inode_dirty error [ 166.620580][T11654] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2916: corrupted inode contents [ 166.633714][T11654] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.2916: mark_inode_dirty error [ 166.649600][T11662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.671975][T11662] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.682580][T11654] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2916: corrupted inode contents [ 166.700216][T11654] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.2916: mark_inode_dirty error [ 166.711941][T11670] loop5: detected capacity change from 0 to 512 [ 166.725718][T11654] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2916: corrupted inode contents [ 166.739810][T11654] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.2916: mark_inode_dirty error [ 166.747590][T11670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.765862][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.766874][T11654] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem [ 166.776960][T11670] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.812985][T11664] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2916: corrupted inode contents [ 166.845980][T10945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.892406][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 166.892423][ T28] audit: type=1326 audit(1774577546.138:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.7.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 166.947135][T11681] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2925'. [ 166.949298][ T28] audit: type=1326 audit(1774577546.168:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.7.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 166.981368][T11681] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2925'. [ 167.003258][ T28] audit: type=1326 audit(1774577546.178:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.7.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 167.027127][ T28] audit: type=1326 audit(1774577546.178:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.7.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 167.040887][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.084257][ T28] audit: type=1326 audit(1774577546.178:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.7.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 167.249288][ T28] audit: type=1400 audit(1774577546.488:1022): avc: denied { read } for pid=11698 comm="syz.3.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.349016][ T9124] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.375685][T11701] dvmrp0: entered allmulticast mode [ 167.515057][ T83] dvmrp0 (unregistering): left allmulticast mode [ 167.573552][T11721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=11721 comm=syz.9.2944 [ 168.208451][ T28] audit: type=1326 audit(1774577547.448:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.7.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 168.238008][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2962'. [ 168.247110][ T28] audit: type=1326 audit(1774577547.448:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.7.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 168.271940][ T28] audit: type=1326 audit(1774577547.478:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.7.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 168.297828][ T28] audit: type=1326 audit(1774577547.478:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.7.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bda5fc799 code=0x7ffc0000 [ 168.339258][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 168.355082][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2964'. [ 168.450886][T11772] veth1_to_bond: entered allmulticast mode [ 168.469172][T11771] veth1_to_bond: left allmulticast mode [ 168.727019][T11807] loop5: detected capacity change from 0 to 512 [ 168.736489][T11805] sctp: [Deprecated]: syz.3.2978 (pid 11805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.736489][T11805] Use struct sctp_sack_info instead [ 168.756584][T11807] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.774876][T11807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.790334][T11807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.803213][T11807] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.831282][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.894797][T11820] loop5: detected capacity change from 0 to 512 [ 168.911007][T11820] EXT4-fs: Ignoring removed bh option [ 168.922357][T11820] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 168.950466][T11820] EXT4-fs (loop5): 1 truncate cleaned up [ 168.956635][T11820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.999087][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.077339][T11829] xt_hashlimit: size too large, truncated to 1048576 [ 169.398472][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 169.400944][ T6878] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.620542][T11877] loop1: detected capacity change from 0 to 1024 [ 169.648957][T11877] EXT4-fs: inline encryption not supported [ 169.657872][T11877] EXT4-fs: Ignoring removed bh option [ 169.681403][T11877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.847605][T10945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.886449][T11887] loop7: detected capacity change from 0 to 512 [ 169.914420][T11887] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 169.956155][T11887] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 170.223115][T11904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.455146][T11854] syz.5.2997 (11854) used greatest stack depth: 8968 bytes left [ 170.571707][T11920] loop9: detected capacity change from 0 to 512 [ 170.580071][T11920] EXT4-fs: Mount option(s) incompatible with ext2 [ 170.654125][T11924] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3022'. [ 171.056096][T11940] dvmrp0: entered allmulticast mode [ 171.142415][ T83] dvmrp0 (unregistering): left allmulticast mode [ 171.360198][T11969] loop1: detected capacity change from 0 to 8192 [ 171.368072][T11969] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.586995][T11987] loop7: detected capacity change from 0 to 128 [ 171.597504][T11987] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.610068][T11987] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.690751][ T8276] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.858945][T12008] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3056'. [ 171.983115][T12011] batadv_slave_1: entered promiscuous mode [ 171.999834][T12010] batadv_slave_1: left promiscuous mode [ 172.442566][T12030] loop9: detected capacity change from 0 to 512 [ 172.521888][T12030] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3065: bg 0: block 248: padding at end of block bitmap is not set [ 172.539025][T12030] loop9: lost filesystem error report for type 5 error -117 [ 172.546512][T12030] __quota_error: 45 callbacks suppressed [ 172.546533][T12030] Quota error (device loop9): write_blk: dquota write failed [ 172.553919][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 172.553947][ C1] EXT4-fs (loop9): last error at time 1774577551: ext4_validate_block_bitmap:441 [ 172.583718][T12030] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 172.594033][T12030] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.3065: Failed to acquire dquot type 1 [ 172.607458][T12030] loop9: lost filesystem error report for type 5 error -117 [ 172.608982][T12030] EXT4-fs (loop9): 1 truncate cleaned up [ 172.639899][T12030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.652917][T12030] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.734760][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.787837][T12043] loop9: detected capacity change from 0 to 256 [ 173.232591][T12059] loop7: detected capacity change from 0 to 512 [ 173.378936][T12063] SELinux: failed to load policy [ 173.663912][T12077] netlink: 'syz.1.3083': attribute type 12 has an invalid length. [ 173.672138][T12077] netlink: 'syz.1.3083': attribute type 29 has an invalid length. [ 173.680343][T12077] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3083'. [ 173.824535][T12086] loop9: detected capacity change from 0 to 4096 [ 173.852333][T12086] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.917669][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.205340][T12125] netlink: 'syz.7.3105': attribute type 13 has an invalid length. [ 174.213709][T12125] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.3105'. [ 174.256986][T12128] loop7: detected capacity change from 0 to 512 [ 174.302930][T12128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 174.337334][T12128] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.364658][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 174.438818][T12136] loop7: detected capacity change from 0 to 8192 [ 174.451209][T12136] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.886248][T12157] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.106386][T12163] loop9: detected capacity change from 0 to 136 [ 175.130030][T12163] Attempt to read inode for relocated directory [ 175.166219][T12162] syz.9.3117: attempt to access beyond end of device [ 175.166219][T12162] loop9: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 175.183874][T12162] syz.9.3117: attempt to access beyond end of device [ 175.183874][T12162] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 175.198818][T12162] syz.9.3117: attempt to access beyond end of device [ 175.198818][T12162] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 175.213584][T12163] syz.9.3117: attempt to access beyond end of device [ 175.213584][T12163] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 175.228592][T12163] syz.9.3117: attempt to access beyond end of device [ 175.228592][T12163] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 175.243253][T12163] syz.9.3117: attempt to access beyond end of device [ 175.243253][T12163] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 175.258729][T12163] syz.9.3117: attempt to access beyond end of device [ 175.258729][T12163] loop9: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 175.327781][T12174] loop9: detected capacity change from 0 to 128 [ 175.394753][T12171] loop5: detected capacity change from 0 to 4096 [ 175.425897][T12171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.520950][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.915166][T12230] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3142'. [ 175.945084][T12174] syz.9.3122: attempt to access beyond end of device [ 175.945084][T12174] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 175.997771][T12174] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 176.287514][T12266] loop1: detected capacity change from 0 to 512 [ 176.314065][T12266] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3151: inode has both inline data and extents flags [ 176.349612][T12266] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.350041][T12266] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3151: couldn't read orphan inode 15 (err -117) [ 176.363328][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 176.363361][ C1] EXT4-fs (loop1): initial error at time 1774577555: ext4_orphan_get:1391: inode 15 [ 176.363397][ C1] EXT4-fs (loop1): last error at time 1774577555: ext4_orphan_get:1391: inode 15 [ 176.377075][T12267] loop9: detected capacity change from 0 to 512 [ 176.438332][T12266] loop1: lost filesystem error report for type 5 error -117 [ 176.460148][T12266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 176.496370][T12267] EXT4-fs (loop9): 1 truncate cleaned up [ 176.505104][T12267] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.557458][T10945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 176.683229][T12291] loop7: detected capacity change from 0 to 256 [ 176.700818][T12291] FAT-fs (loop7): bogus number of FAT sectors [ 176.714966][T12291] FAT-fs (loop7): Can't find a valid FAT filesystem [ 177.253296][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.550935][T12330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12330 comm=syz.5.3167 [ 177.575281][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3167'. [ 177.758276][ T28] audit: type=1326 audit(1774577556.998:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.5.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 177.788318][ T28] audit: type=1326 audit(1774577556.998:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.5.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 177.849009][ T28] audit: type=1326 audit(1774577557.028:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.5.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 177.893123][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 177.918004][ T28] audit: type=1326 audit(1774577557.028:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.5.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 177.953308][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 178.007726][ T28] audit: type=1326 audit(1774577557.028:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12331 comm="syz.5.3169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c3b5c799 code=0x7ffc0000 [ 178.068386][ T28] audit: type=1400 audit(1774577557.088:1077): avc: denied { read } for pid=12343 comm="syz.7.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.178457][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3189'. [ 178.218083][T12377] Invalid argument reading file caps for ./file0 [ 178.248877][T12380] loop9: detected capacity change from 0 to 128 [ 178.255736][T12380] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.277233][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3193'. [ 178.292742][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3193'. [ 178.331038][T12380] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.391416][ T28] audit: type=1326 audit(1774577557.638:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12390 comm="syz.5.3197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6c3b5c799 code=0x0 [ 178.582196][ T28] audit: type=1400 audit(1774577557.828:1079): avc: denied { map } for pid=12405 comm="syz.7.3203" path="/249/file0" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 179.169992][T12431] loop9: detected capacity change from 0 to 8192 [ 179.743628][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 179.832760][T12451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 180.493745][ T28] audit: type=1400 audit(1774577559.738:1080): avc: denied { append } for pid=12473 comm="syz.1.3232" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.646783][T12485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.966724][T12500] loop5: detected capacity change from 0 to 128 [ 181.255263][T12500] syz.5.3243: attempt to access beyond end of device [ 181.255263][T12500] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 181.259150][T12513] loop9: detected capacity change from 0 to 2048 [ 181.269509][T12500] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 181.354453][T12513] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.413389][T12515] loop7: detected capacity change from 0 to 256 [ 181.420881][T12515] msdos: Bad value for 'uid' [ 181.428909][T12515] msdos: Bad value for 'uid' [ 181.437835][T12513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.500347][ T28] audit: type=1400 audit(1774577560.738:1081): avc: denied { lock } for pid=12512 comm="syz.9.3248" path="/136/file1/cpuset.effective_cpus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.640727][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.775878][T12538] netlink: 'syz.9.3252': attribute type 16 has an invalid length. [ 181.794207][T12538] netlink: 'syz.9.3252': attribute type 17 has an invalid length. [ 181.879783][T12546] netlink: 'syz.7.3262': attribute type 3 has an invalid length. [ 181.887748][T12546] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.3262'. [ 181.939306][T12538] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.946624][T12538] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.990690][T12552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.002755][T12552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.034484][T12538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.045541][T12538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.097084][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.106961][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.119481][T12543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.146249][ T309] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.165733][ T309] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.206233][ T309] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.233430][ T309] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.266379][T12561] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3268'. [ 182.276199][T12564] loop7: detected capacity change from 0 to 512 [ 182.292951][T12564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.293683][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3268'. [ 182.314795][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3268'. [ 182.324062][T12564] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.442967][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.481723][T12571] loop7: detected capacity change from 0 to 512 [ 182.496879][T12571] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 182.549171][T12571] EXT4-fs (loop7): 1 truncate cleaned up [ 182.578819][T12571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.614909][T12577] loop5: detected capacity change from 0 to 2048 [ 182.637405][ T3403] kernel read not supported for file / (pid: 3403 comm: kworker/1:5) [ 182.656573][T12577] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 182.669205][ T8276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.729921][T12577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.833484][ T5714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.861555][T12597] openvswitch: netlink: Missing key (keys=40, expected=100) [ 183.087308][ T9122] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.381262][T12624] program syz.9.3294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.594167][T12629] loop9: detected capacity change from 0 to 1024 [ 183.611414][T12629] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.653598][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.715422][T12635] loop9: detected capacity change from 0 to 1024 [ 183.740113][T12635] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.752561][T12635] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.790247][T10195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.038247][T12654] ieee802154 phy1 wpan1: encryption failed: -22 [ 184.212794][ T28] audit: type=1400 audit(1774577563.458:1082): avc: denied { setattr } for pid=12659 comm="syz.7.3309" name="/" dev="configfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.312102][T12662] loop5: detected capacity change from 0 to 8192 [ 184.336804][ T28] audit: type=1326 audit(1774577563.578:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12663 comm="syz.7.3311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bda5fc799 code=0x0 [ 184.442447][ T9124] ================================================================== [ 184.450608][ T9124] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 184.458953][ T9124] [ 184.461306][ T9124] write to 0xffff88814203637a of 2 bytes by task 12667 on cpu 1: [ 184.469141][ T9124] fat16_ent_put+0x28/0x60 [ 184.473603][ T9124] fat_ent_write+0x6c/0xe0 [ 184.478225][ T9124] fat_chain_add+0x16c/0x490 [ 184.482872][ T9124] fat_get_block+0x46c/0x5e0 [ 184.487507][ T9124] __block_write_begin_int+0x400/0xf90 [ 184.493003][ T9124] cont_write_begin+0x5fe/0x970 [ 184.498357][ T9124] fat_write_begin+0x4f/0xe0 [ 184.502988][ T9124] generic_perform_write+0x183/0x490 [ 184.508313][ T9124] __generic_file_write_iter+0x9e/0x120 [ 184.513905][ T9124] generic_file_write_iter+0x8d/0x310 [ 184.519322][ T9124] vfs_write+0x5a6/0x9f0 [ 184.523588][ T9124] ksys_write+0xdc/0x1a0 [ 184.527946][ T9124] __x64_sys_write+0x40/0x50 [ 184.532646][ T9124] x64_sys_call+0x27e1/0x3020 [ 184.537371][ T9124] do_syscall_64+0x12c/0x370 [ 184.542091][ T9124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.548107][ T9124] [ 184.550600][ T9124] read to 0xffff888142036200 of 512 bytes by task 9124 on cpu 0: [ 184.558350][ T9124] copy_folio_from_iter_atomic+0x75f/0x1170 [ 184.564313][ T9124] generic_perform_write+0x2c1/0x490 [ 184.569647][ T9124] shmem_file_write_iter+0xc5/0xf0 [ 184.574810][ T9124] lo_rw_aio+0x67d/0x730 [ 184.579114][ T9124] loop_process_work+0x56c/0xac0 [ 184.584103][ T9124] loop_workfn+0x31/0x40 [ 184.588398][ T9124] process_scheduled_works+0x513/0xa10 [ 184.593903][ T9124] worker_thread+0x58a/0x780 [ 184.598540][ T9124] kthread+0x22a/0x280 [ 184.602643][ T9124] ret_from_fork+0x150/0x360 [ 184.607298][ T9124] ret_from_fork_asm+0x1a/0x30 [ 184.612096][ T9124] [ 184.614439][ T9124] Reported by Kernel Concurrency Sanitizer on: [ 184.620757][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: kworker/u8:15 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.631993][ T9124] Tainted: [W]=WARN [ 184.635820][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.645905][ T9124] Workqueue: loop5 loop_workfn [ 184.650746][ T9124] ================================================================== [ 184.695510][T12662] ================================================================== [ 184.703750][T12662] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 184.710916][T12662] [ 184.713310][T12662] write to 0xffff888142036412 of 2 bytes by task 12667 on cpu 1: [ 184.721053][T12662] fat16_ent_put+0x28/0x60 [ 184.725515][T12662] fat_alloc_clusters+0x57b/0xc50 [ 184.730603][T12662] fat_get_block+0x258/0x5e0 [ 184.735668][T12662] __block_write_begin_int+0x400/0xf90 [ 184.741181][T12662] cont_write_begin+0x5fe/0x970 [ 184.746187][T12662] fat_write_begin+0x4f/0xe0 [ 184.750828][T12662] generic_perform_write+0x183/0x490 [ 184.756218][T12662] __generic_file_write_iter+0x9e/0x120 [ 184.761817][T12662] generic_file_write_iter+0x8d/0x310 [ 184.767296][T12662] vfs_write+0x5a6/0x9f0 [ 184.771569][T12662] ksys_write+0xdc/0x1a0 [ 184.775865][T12662] __x64_sys_write+0x40/0x50 [ 184.780595][T12662] x64_sys_call+0x27e1/0x3020 [ 184.785312][T12662] do_syscall_64+0x12c/0x370 [ 184.789941][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.795901][T12662] [ 184.798293][T12662] read to 0xffff888142036400 of 512 bytes by task 12662 on cpu 0: [ 184.806130][T12662] fat_mirror_bhs+0x1df/0x320 [ 184.810853][T12662] fat_ent_write+0xd0/0xe0 [ 184.815393][T12662] fat_chain_add+0x16c/0x490 [ 184.820027][T12662] fat_get_block+0x46c/0x5e0 [ 184.824645][T12662] __block_write_begin_int+0x400/0xf90 [ 184.830150][T12662] cont_write_begin+0x5fe/0x970 [ 184.835060][T12662] fat_write_begin+0x4f/0xe0 [ 184.839783][T12662] generic_perform_write+0x183/0x490 [ 184.845116][T12662] __generic_file_write_iter+0x9e/0x120 [ 184.850697][T12662] generic_file_write_iter+0x8d/0x310 [ 184.856103][T12662] vfs_write+0x5a6/0x9f0 [ 184.860373][T12662] ksys_write+0xdc/0x1a0 [ 184.864642][T12662] __x64_sys_write+0x40/0x50 [ 184.869271][T12662] x64_sys_call+0x27e1/0x3020 [ 184.874002][T12662] do_syscall_64+0x12c/0x370 [ 184.878631][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.884562][T12662] [ 184.886998][T12662] Reported by Kernel Concurrency Sanitizer on: [ 184.893189][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.5.3310 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.904186][T12662] Tainted: [W]=WARN [ 184.908024][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.918115][T12662] ================================================================== [ 185.158332][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 185.158919][ T6878] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.075061][T12617] Bluetooth: hci0: Opcode 0x0c1a failed: -4