last executing test programs: 2m40.037460884s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = syz_open_dev$loop(&(0x7f0000003d00), 0x9, 0x4880) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 2m39.377439803s ago: executing program 0 (id=7): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffff79f7}, 0x40, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0xffffffff}, 0x3400, 0x5dd8, 0x3a65, 0x5, 0x1, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffeffffffffffff, r5, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mkdirat$cgroup(r6, &(0x7f0000000300)='syz1\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b1707892056ac3cecf7c5845aefd6ade05f26f8a1f95dd91877c2bd9f9ba3c321f15a682a235ad9d1ed065ed44043f40213f00bc6a7d0fafe3a92421c01dca728f899973387a6a7f71dc61865a71753a2b2b793071f17a89371bb83f307bcc91816f5e600ed3e2c835883385b335d37cec62d1db7f2207d266f31c13a93cbddc8e4603bae7111724bb6c8fa98f0fcec15cfd139ffd4347f1110b7d1abdb45416d956916ce341f0072912d191271b66ce9f118881d1706bb307d6b5c6f6ae21"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9, 0x0, 0x7}, 0x18) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000140000000000000f7ffffff0000", @ANYRES32], 0x20}}, 0x4084) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2m38.152958869s ago: executing program 0 (id=13): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) mq_unlink(0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, 0x0, 0x0) 2m38.133059929s ago: executing program 32 (id=13): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) mq_unlink(0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, 0x0, 0x0) 3.170685968s ago: executing program 3 (id=2992): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) syz_io_uring_setup(0x7c9d, &(0x7f0000000bc0)={0x0, 0x67b7, 0x100, 0x8003, 0x3fb}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000580)=0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2.604246386s ago: executing program 3 (id=3000): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000000)="4c5779a27c8d55", 0x7}], 0x2, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010106}}}], 0x20}, 0x24008004) 2.543088007s ago: executing program 3 (id=3002): r0 = io_uring_setup(0x4f8f, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xc, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3, 0x0, 0x1000}, 0x18) exit(0x7) 2.31283395s ago: executing program 1 (id=3007): mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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") socket$nl_route(0x10, 0x3, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 2.238494831s ago: executing program 2 (id=3011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 2.212403021s ago: executing program 2 (id=3012): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) syz_io_uring_setup(0x7c9d, &(0x7f0000000bc0)={0x0, 0x67b7, 0x100, 0x8003, 0x3fb}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000580)=0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2.198281101s ago: executing program 1 (id=3013): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}, {@mmap}, {@posixacl}, {@afid={'afid', 0x3d, 0x6}}, {@posixacl}, {@ignoreqv}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x65, 0x65, 0x65, 0x39, 0x0, 0x37], 0x2d, [0x64, 0x62, 0x66, 0x39], 0x2d, [0x61, 0x62, 0x38, 0x66], 0x2d, [0x35, 0x62, 0x66, 0x32], 0x2d, [0x31, 0x5c, 0x34, 0x66, 0x66, 0x39, 0x63, 0x61]}}}, {@appraise_type}, {@uid_eq}, {@fowner_gt={'fowner>', r2}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x35, 0x50, 0x31, 0x33, 0x39], 0x2d, [0x61, 0x66, 0x39, 0x66], 0x2d, [0x62, 0x31, 0x6, 0x63], 0x2d, [0x66, 0x2c, 0x37, 0x39], 0x2d, [0x61, 0x33, 0x0, 0x32, 0x63, 0x64, 0x64, 0x37]}}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='spi_message_done\x00', r4}, 0x18) unshare(0x66000080) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x0, 0x207, &(0x7f0000000a40)="$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") r7 = socket$inet(0x2, 0x6, 0x0) listen(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno', @ANYRESHEX=r7, @ANYBLOB="2c006f5875932420f8fc72dbfd50b83b3595dd42717268ab2eb7f1e269eaf782f957f550523e0958abf852c34659c736503c3866c966f8c39d117de19665959e992a74fb2ce9b2fc8ef72859a4c72364a52ad2a996b804eaee87b0b0c5f7799d692af99c9aa2d3ef39d7346f9d6bf6fa22"]) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @private2, 0x47c070f5}, {0xa, 0x4e24, 0x7, @private0, 0x62337cfb}, r6, 0x8}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_hwaddr=@remote}) 1.929789075s ago: executing program 2 (id=3018): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/14], 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4030}]) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 1.797635736s ago: executing program 5 (id=3021): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}, {@mmap}, {@posixacl}, {@afid={'afid', 0x3d, 0x6}}, {@ignoreqv}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x65, 0x65, 0x65, 0x39, 0x0, 0x37], 0x2d, [0x64, 0x62, 0x66, 0x39], 0x2d, [0x61, 0x62, 0x38, 0x66], 0x2d, [0x35, 0x62, 0x66, 0x32], 0x2d, [0x31, 0x5c, 0x34, 0x66, 0x66, 0x39, 0x63, 0x61]}}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r2}}, {@fowner_gt={'fowner>', r4}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x35, 0x50, 0x31, 0x33, 0x39], 0x2d, [0x61, 0x66, 0x39, 0x66], 0x2d, [0x62, 0x31, 0x6, 0x63], 0x2d, [0x66, 0x2c, 0x37, 0x39], 0x2d, [0x61, 0x33, 0x0, 0x32, 0x63, 0x64, 0x64, 0x37]}}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='spi_message_done\x00'}, 0x18) unshare(0x66000080) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x0, 0x207, &(0x7f0000000a40)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @private2, 0x47c070f5}, {0xa, 0x4e24, 0x7, @private0, 0x62337cfb}, r6, 0x8}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_hwaddr=@remote}) 1.792792956s ago: executing program 1 (id=3022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 1.762382267s ago: executing program 1 (id=3023): mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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") socket$nl_route(0x10, 0x3, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 1.664960568s ago: executing program 3 (id=3024): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.641892318s ago: executing program 3 (id=3025): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x1) socket(0x10, 0x803, 0xffffffff) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x20, 0xc, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), 0x0}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x200000000000019d, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES64=r2, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6379900b0060dc9d009f7c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1.49678391s ago: executing program 4 (id=3027): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 1.333749242s ago: executing program 4 (id=3028): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0xb, 0x8509) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x5000000, r3, 0x0, 0x0, 0xfba2, 0x8}) 1.166700775s ago: executing program 5 (id=3029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r1, 0x0, 0x800000000000000}, 0x18) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.117714645s ago: executing program 4 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) 1.057836636s ago: executing program 4 (id=3031): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.024808486s ago: executing program 5 (id=3032): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}, {@mmap}, {@posixacl}, {@afid={'afid', 0x3d, 0x6}}, {@posixacl}, {@ignoreqv}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x65, 0x65, 0x65, 0x39, 0x0, 0x37], 0x2d, [0x64, 0x62, 0x66, 0x39], 0x2d, [0x61, 0x62, 0x38, 0x66], 0x2d, [0x35, 0x62, 0x66, 0x32], 0x2d, [0x31, 0x5c, 0x34, 0x66, 0x66, 0x39, 0x63, 0x61]}}}, {@appraise_type}, {@uid_eq}, {@fowner_gt={'fowner>', r2}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x35, 0x50, 0x31, 0x33, 0x39], 0x2d, [0x61, 0x66, 0x39, 0x66], 0x2d, [0x62, 0x31, 0x6, 0x63], 0x2d, [0x66, 0x2c, 0x37, 0x39], 0x2d, [0x61, 0x33, 0x0, 0x32, 0x63, 0x64, 0x64, 0x37]}}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='spi_message_done\x00', r4}, 0x18) unshare(0x66000080) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x0, 0x207, &(0x7f0000000a40)="$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") r7 = socket$inet(0x2, 0x6, 0x0) listen(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno', @ANYRESHEX=r7, @ANYBLOB="2c006f5875932420f8fc72dbfd50b83b3595dd42717268ab2eb7f1e269eaf782f957f550523e0958abf852c34659c736503c3866c966f8c39d117de19665959e992a74fb2ce9b2fc8ef72859a4c72364a52ad2a996b804eaee87b0b0c5f7799d692af99c9aa2d3ef39d7346f9d6bf6fa22"]) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @private2, 0x47c070f5}, {0xa, 0x4e24, 0x7, @private0, 0x62337cfb}, r6, 0x8}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_hwaddr=@remote}) 867.650779ms ago: executing program 1 (id=3033): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x2c0402) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4357, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x241}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0) 867.247689ms ago: executing program 1 (id=3034): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007"], 0x108}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) recvfrom$l2tp6(r6, 0x0, 0x0, 0x40008063, 0x0, 0x0) 782.69473ms ago: executing program 4 (id=3035): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc11000012000102000000000000000000000000bf401db1"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 781.27714ms ago: executing program 3 (id=3036): ustat(0x200, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18e4fdf299000000000000fa78142c0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(0xffffffffffffffff, r4, 0x0) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 631.303732ms ago: executing program 2 (id=3037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000001000370428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8b06050025000000480012800b000100697036746e6c00003800028014000300fc01000000000000000000000000000114000200fc01000000000000000000000000000008000100", @ANYBLOB="040013"], 0x68}}, 0x0) 569.079893ms ago: executing program 4 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b0000f00000f8ffffffb703000008000000b704000000a40000000100000095002bf86abfc17dce367a0b0f21e50f70da7e28d8ab985a3fe75cd0a115266378b433be7e1a1224dc98f137cadc9ce9f06694f6c4faf1a3ec9b03e1a609b23d11c38c9b4e8c32dcfc181124fb399a4152c440f421a4028ba2395bc613f7459d79cd77110ad950d1b2e53a6733217bc5cc00d747653238045a9d2ba97dbd33dc38727e4a684d8e812afa0000000080000000000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x200000000000001) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 508.687343ms ago: executing program 2 (id=3039): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}, {@mmap}, {@posixacl}, {@afid={'afid', 0x3d, 0x6}}, {@ignoreqv}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x65, 0x65, 0x65, 0x39, 0x0, 0x37], 0x2d, [0x64, 0x62, 0x66, 0x39], 0x2d, [0x61, 0x62, 0x38, 0x66], 0x2d, [0x35, 0x62, 0x66, 0x32], 0x2d, [0x31, 0x5c, 0x34, 0x66, 0x66, 0x39, 0x63, 0x61]}}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r2}}, {@fowner_gt={'fowner>', r4}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x35, 0x50, 0x31, 0x33, 0x39], 0x2d, [0x61, 0x66, 0x39, 0x66], 0x2d, [0x62, 0x31, 0x6, 0x63], 0x2d, [0x66, 0x2c, 0x37, 0x39], 0x2d, [0x61, 0x33, 0x0, 0x32, 0x63, 0x64, 0x64, 0x37]}}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='spi_message_done\x00'}, 0x18) unshare(0x66000080) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x0, 0x207, &(0x7f0000000a40)="$eJzs289qE10UAPAzbdpv+nVhF65EYcCNq6A+gUEqiAEhkoWuDFQ3rQjpJgpin8e1D+HLuOlCsotMZmj+tAXTMZkQfz8Y7uGeueHcRXLu4ubt3Q/HRx9P3+98OY80yWIr4kkMIw7yqJSUYzqOd2NGElX8qrQaALiRTqfXqrsGlqvfb/VuR8T+pUz3Wy0FAQAAAAAAAAAAUNki9/+3Ir7O3/8/W3G9AEB17v9vpGT6XNbvt3r3ivPbHPf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPoMR6Nbo/xJy7F8/ouINCL2IuL/iGhERD5fd70AQHXD0Wzfv67/R0QSEfo/AGyAV6/fvGi124edLEsjfp4NuoNuMRb5Z8/bhw+zsYPJqvPBoLt9kX9U5LPZ/M743JDnH1+Z340H94t8nnv6sj2X34+j5W8fAP5JzezCVH/fLp+IZvOqfN6fi2jqfDDXvxtxp7GybQAACzj99Pm4d3Lyrl89yD9uaiZZbPleWdD173xv/LVSBTcJfiRrUcbaBGmsRRmLB+mfvFzv7xKwfJMv/WRup86CAAAAAAAAAAAAAACAS1bxl6O69wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOb5HQAA//9ujk84") syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @private2, 0x47c070f5}, {0xa, 0x4e24, 0x7, @private0, 0x62337cfb}, r6, 0x8}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_hwaddr=@remote}) 328.241166ms ago: executing program 5 (id=3040): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7c9d, &(0x7f0000000bc0)={0x0, 0x67b7, 0x100, 0x8003, 0x3fb}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000580)=0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 43.937009ms ago: executing program 5 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) 43.620969ms ago: executing program 2 (id=3042): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 5 (id=3043): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1c, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000b300000000000000230a00001811539a123998da4e31475aa0c9010000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b00000000000000000000000000000a30020087a60000185a000009000000000000000000000085000000a1000000534702000400000018440000040000000000000000000000185b00000c00000000000000000000003fa10100ffffffff9500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x17, &(0x7f0000000380)=""/23, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000680)=[{0x4, 0x3, 0xb, 0x6}, {0x2, 0x4, 0x8, 0xc}, {0x5, 0x1, 0x5, 0xb}, {0x4, 0x5, 0xe, 0x9}, {0x5, 0x3, 0xa, 0x5}], 0x10, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): /root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ba83e969 code=0x7ffc0000 [ 152.487480][ T29] audit: type=1326 audit(1746119680.062:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 152.511312][ T29] audit: type=1326 audit(1746119680.062:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 152.535009][ T29] audit: type=1326 audit(1746119680.062:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2fa41d2d0 code=0x7ffc0000 [ 152.558590][ T29] audit: type=1326 audit(1746119680.062:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 152.582247][ T29] audit: type=1326 audit(1746119680.062:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 152.605785][ T29] audit: type=1326 audit(1746119680.062:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 152.670377][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.753028][T10785] sit0: left promiscuous mode [ 152.784074][T10788] sit0: entered promiscuous mode [ 152.852331][T10786] loop3: detected capacity change from 0 to 512 [ 152.862996][T10786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.898216][T10786] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.916351][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2310'. [ 153.109450][T10813] bond1: entered promiscuous mode [ 153.114582][T10813] bond1: entered allmulticast mode [ 153.120020][T10813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.129916][T10813] bond1 (unregistering): Released all slaves [ 153.227832][T10836] loop2: detected capacity change from 0 to 512 [ 153.237264][T10836] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.252089][T10834] loop1: detected capacity change from 0 to 512 [ 153.279245][T10834] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.288453][T10834] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 153.299695][T10834] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 153.308977][T10834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 153.317533][T10834] System zones: 0-2, 18-18, 34-34 [ 153.323089][T10836] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.323141][T10834] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 153.348394][T10834] EXT4-fs (loop1): 1 truncate cleaned up [ 153.361744][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 153.377214][T10849] sit0: entered promiscuous mode [ 153.620098][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2331'. [ 153.640285][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2336'. [ 153.711891][T10863] bond1: entered promiscuous mode [ 153.717148][T10863] bond1: entered allmulticast mode [ 153.725489][T10863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.736644][T10863] bond1 (unregistering): Released all slaves [ 153.747157][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 153.782265][T10886] loop1: detected capacity change from 0 to 512 [ 153.789623][T10886] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.798814][T10886] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 153.820652][T10886] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 153.840588][T10886] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 153.848977][T10886] System zones: 0-2, 18-18, 34-34 [ 153.855517][T10886] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 153.873589][T10886] EXT4-fs (loop1): 1 truncate cleaned up [ 153.971289][T10903] 9pnet_fd: Insufficient options for proto=fd [ 153.996913][T10908] sit0: left promiscuous mode [ 154.067230][T10908] sit0: entered promiscuous mode [ 154.076323][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 154.095878][T10914] loop1: detected capacity change from 0 to 256 [ 154.134963][T10914] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.172979][T10914] 9pnet_fd: Insufficient options for proto=fd [ 154.212420][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2352'. [ 154.398955][T10926] loop4: detected capacity change from 0 to 512 [ 154.425397][T10926] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.434783][T10926] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 154.471887][T10926] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 154.477274][T10924] loop3: detected capacity change from 0 to 128 [ 154.488633][T10926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 154.498402][T10924] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.513753][T10926] System zones: 0-2, 18-18, 34-34 [ 154.519545][T10926] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.581839][T10926] EXT4-fs (loop4): 1 truncate cleaned up [ 154.624082][T10935] loop5: detected capacity change from 0 to 512 [ 154.651387][T10935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.687953][T10935] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.772185][T10947] netlink: 'syz.5.2361': attribute type 4 has an invalid length. [ 154.793002][T10947] netlink: 'syz.5.2361': attribute type 4 has an invalid length. [ 154.839890][T10951] loop2: detected capacity change from 0 to 2048 [ 154.890064][T10947] serio: Serial port ptm0 [ 155.038484][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 155.055743][T10967] 9pnet_fd: Insufficient options for proto=fd [ 155.112086][T10970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10970 comm=syz.2.2369 [ 155.124886][T10970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10970 comm=syz.2.2369 [ 155.195134][T10979] loop5: detected capacity change from 0 to 256 [ 155.209638][T10978] loop2: detected capacity change from 0 to 512 [ 155.218341][T10978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.219542][T10979] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.244798][T10981] 9pnet_fd: Insufficient options for proto=fd [ 155.244828][T10979] 9pnet_fd: Insufficient options for proto=fd [ 155.278776][T10978] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.367601][T10988] loop3: detected capacity change from 0 to 128 [ 155.376707][T10989] loop4: detected capacity change from 0 to 256 [ 155.386589][T10988] bio_check_eod: 192 callbacks suppressed [ 155.386674][T10988] syz.3.2374: attempt to access beyond end of device [ 155.386674][T10988] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 155.388372][T10989] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.392895][T10988] syz.3.2374: attempt to access beyond end of device [ 155.392895][T10988] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 155.430731][T10988] syz.3.2374: attempt to access beyond end of device [ 155.430731][T10988] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 155.464247][T10989] 9pnet_fd: Insufficient options for proto=fd [ 155.884230][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2379'. [ 155.993864][T11010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11010 comm=syz.2.2381 [ 156.006699][T11010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11010 comm=syz.2.2381 [ 156.098593][T11018] sit0: entered promiscuous mode [ 156.223720][T11024] 9pnet_fd: Insufficient options for proto=fd [ 156.310581][T11022] sit0: entered promiscuous mode [ 156.434810][T11029] loop5: detected capacity change from 0 to 256 [ 156.451682][T11029] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.488352][T11029] 9pnet_fd: Insufficient options for proto=fd [ 156.505671][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.505671][ T84] loop3: rw=1, sector=185, nr_sectors = 96 limit=128 [ 156.519794][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.519794][ T84] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 156.543794][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.543794][ T84] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 156.559794][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.559794][ T84] loop3: rw=1, sector=321, nr_sectors = 8 limit=128 [ 156.575820][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.575820][ T84] loop3: rw=1, sector=337, nr_sectors = 8 limit=128 [ 156.620810][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.620810][ T84] loop3: rw=1, sector=353, nr_sectors = 8 limit=128 [ 156.634300][ T84] kworker/u8:4: attempt to access beyond end of device [ 156.634300][ T84] loop3: rw=1, sector=369, nr_sectors = 8 limit=128 [ 156.855940][T11048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11048 comm=syz.3.2392 [ 156.868805][T11048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11048 comm=syz.3.2392 [ 157.050114][T11061] loop5: detected capacity change from 0 to 512 [ 157.057340][T11061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.084089][T11061] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.134621][T11069] loop5: detected capacity change from 0 to 2048 [ 157.403513][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 157.438369][T11086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11086 comm=syz.5.2403 [ 157.439574][T11090] loop2: detected capacity change from 0 to 512 [ 157.451262][T11086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=11086 comm=syz.5.2403 [ 157.458255][T11090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.498384][T11090] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.623305][T11098] loop4: detected capacity change from 0 to 512 [ 157.643475][T11098] EXT4-fs (loop4): 1 orphan inode deleted [ 157.649867][T11098] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.660058][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 157.661520][ T3964] __quota_error: 92 callbacks suppressed [ 157.661536][ T3964] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.684910][ T3964] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 157.724251][T11103] loop4: detected capacity change from 0 to 512 [ 157.731909][T11103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.762872][T11103] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.763177][T11107] loop2: detected capacity change from 0 to 2048 [ 157.836977][T11113] loop2: detected capacity change from 0 to 512 [ 157.862307][T11113] EXT4-fs (loop2): 1 orphan inode deleted [ 157.862494][T11118] sit0: left promiscuous mode [ 157.868680][T11113] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.883946][ T84] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.893751][ T84] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 157.907812][T11118] sit0: entered promiscuous mode [ 158.149464][T11133] loop1: detected capacity change from 0 to 8192 [ 158.172519][T11135] loop3: detected capacity change from 0 to 512 [ 158.179581][T11135] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.196093][T11139] loop2: detected capacity change from 0 to 512 [ 158.204298][T11133] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 158.211495][T11133] FAT-fs (loop1): Filesystem has been set read-only [ 158.219932][T11139] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.229126][T11139] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 158.250054][T11139] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 158.261253][T11139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 158.271849][T11135] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.278993][T11139] System zones: 0-2, 18-18, 34-34 [ 158.295050][T11139] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.310618][T11139] EXT4-fs (loop2): 1 truncate cleaned up [ 158.325798][T11144] loop1: detected capacity change from 0 to 512 [ 158.341838][T11144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.367906][T11146] loop5: detected capacity change from 0 to 1024 [ 158.374951][T11147] __nla_validate_parse: 1 callbacks suppressed [ 158.374966][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 158.377095][T11146] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.403775][T11146] EXT4-fs: dax option not supported [ 158.431909][T11144] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.453995][T11150] loop3: detected capacity change from 0 to 8192 [ 158.497862][T11150] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 158.505242][T11150] FAT-fs (loop3): Filesystem has been set read-only [ 158.918797][T11171] loop3: detected capacity change from 0 to 512 [ 158.986391][T11174] loop4: detected capacity change from 0 to 8192 [ 159.000062][T11176] loop2: detected capacity change from 0 to 128 [ 159.014257][T11171] EXT4-fs (loop3): 1 orphan inode deleted [ 159.015083][T11174] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 159.021702][T11171] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.027188][T11174] FAT-fs (loop4): Filesystem has been set read-only [ 159.040187][ T3952] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 159.054134][ T3952] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 159.069514][T11173] loop1: detected capacity change from 0 to 128 [ 159.077908][T11173] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.227917][ T29] audit: type=1326 audit(1746119686.802:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.251706][ T29] audit: type=1326 audit(1746119686.802:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.277450][ T29] audit: type=1326 audit(1746119686.852:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.301185][ T29] audit: type=1326 audit(1746119686.852:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.325884][ T29] audit: type=1326 audit(1746119686.902:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.353905][T11188] loop5: detected capacity change from 0 to 512 [ 159.361703][T11188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.392490][T11188] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.426530][ T29] audit: type=1326 audit(1746119687.002:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.453370][ T29] audit: type=1326 audit(1746119687.002:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.2.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 159.625281][T11204] loop1: detected capacity change from 0 to 512 [ 159.631472][T11207] loop2: detected capacity change from 0 to 2048 [ 159.636505][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'. [ 159.664729][T11204] EXT4-fs (loop1): 1 orphan inode deleted [ 159.681806][ T3958] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 159.710371][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 159.713178][T11204] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.760190][T11207] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 159.772619][T11207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.772619][T11207] [ 159.782539][T11207] EXT4-fs (loop2): Total free blocks count 0 [ 159.788598][T11207] EXT4-fs (loop2): Free/Dirty block details [ 159.794588][T11207] EXT4-fs (loop2): free_blocks=0 [ 159.799535][T11207] EXT4-fs (loop2): dirty_blocks=0 [ 159.804586][T11207] EXT4-fs (loop2): Block reservation details [ 159.810604][T11207] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 159.847276][T11218] loop1: detected capacity change from 0 to 1024 [ 159.848543][T11220] loop2: detected capacity change from 0 to 512 [ 159.855280][T11218] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.866869][T11218] EXT4-fs: dax option not supported [ 159.873190][T11220] EXT4-fs (loop2): 1 orphan inode deleted [ 159.879642][T11220] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.966747][T11224] loop3: detected capacity change from 0 to 256 [ 159.974378][T11224] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.995653][T11227] usb usb7: usbfs: process 11227 (syz.2.2444) did not claim interface 0 before use [ 160.012641][T11229] loop4: detected capacity change from 0 to 512 [ 160.019775][T11229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.025280][T11231] loop2: detected capacity change from 0 to 512 [ 160.036161][T11231] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.045254][T11231] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 160.059312][T11231] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 160.068902][T11231] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 160.078147][T11231] System zones: 0-2, 18-18, 34-34 [ 160.086312][T11231] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 160.104504][T11229] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.139454][T11231] EXT4-fs (loop2): 1 truncate cleaned up [ 160.227905][ T3320] EXT4-fs unmount: 93 callbacks suppressed [ 160.227930][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.310124][T11239] loop3: detected capacity change from 0 to 512 [ 160.323803][T11239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.337079][T11239] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.351776][T11239] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2451: Failed to acquire dquot type 0 [ 160.576898][T11247] loop5: detected capacity change from 0 to 2048 [ 160.592237][T11247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.611072][T11249] loop4: detected capacity change from 0 to 2048 [ 160.617809][T11247] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.660812][T11249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.777695][T11258] loop1: detected capacity change from 0 to 512 [ 160.834238][T11256] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2452: bg 0: block 345: padding at end of block bitmap is not set [ 160.855419][T11258] EXT4-fs (loop1): 1 orphan inode deleted [ 160.863888][T11258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.880360][ T3958] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 160.908977][T11249] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 160.909264][T11258] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.921303][T11249] EXT4-fs (loop4): This should not happen!! Data will be lost [ 160.921303][T11249] [ 160.941570][T11249] EXT4-fs (loop4): Total free blocks count 0 [ 160.947570][T11249] EXT4-fs (loop4): Free/Dirty block details [ 160.953607][T11249] EXT4-fs (loop4): free_blocks=0 [ 160.958618][T11249] EXT4-fs (loop4): dirty_blocks=0 [ 160.963834][T11249] EXT4-fs (loop4): Block reservation details [ 160.969894][T11249] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 160.997452][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.009613][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.032346][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 161.069848][T11270] loop1: detected capacity change from 0 to 512 [ 161.077574][T11270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.104728][T11273] loop4: detected capacity change from 0 to 512 [ 161.113511][T11270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.131580][T11270] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.144117][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.163951][T11273] EXT4-fs (loop4): 1 orphan inode deleted [ 161.173478][T11273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.192741][ T3952] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 161.208129][T11273] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.222537][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.254970][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.280153][T11285] loop4: detected capacity change from 0 to 1024 [ 161.288699][T11285] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.295694][T11285] EXT4-fs: dax option not supported [ 161.430190][T11291] loop1: detected capacity change from 0 to 128 [ 161.440963][T11291] bio_check_eod: 192 callbacks suppressed [ 161.440982][T11291] syz.1.2466: attempt to access beyond end of device [ 161.440982][T11291] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 161.460963][T11291] syz.1.2466: attempt to access beyond end of device [ 161.460963][T11291] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 161.484054][T11291] syz.1.2466: attempt to access beyond end of device [ 161.484054][T11291] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 161.814918][T11298] sit0: left promiscuous mode [ 161.875943][T11298] sit0: entered promiscuous mode [ 162.064204][T11301] loop3: detected capacity change from 0 to 512 [ 162.103102][T11301] EXT4-fs (loop3): 1 orphan inode deleted [ 162.117213][T11301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.161578][ T3952] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 162.170439][T11301] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.193721][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 162.260831][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.301305][T11255] syz.5.2452 (11255) used greatest stack depth: 9496 bytes left [ 162.321498][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 162.340225][T11307] loop4: detected capacity change from 0 to 8192 [ 162.427865][T11315] loop3: detected capacity change from 0 to 512 [ 162.435930][T11315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.457932][T11313] loop2: detected capacity change from 0 to 512 [ 162.485572][T11315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.501746][T11313] EXT4-fs (loop2): 1 orphan inode deleted [ 162.507954][T11313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.525819][T11315] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.540400][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 162.549694][T11247] syz.5.2452 (11247) used greatest stack depth: 7032 bytes left [ 162.574064][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.584640][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.595293][T11313] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.644086][T11327] loop5: detected capacity change from 0 to 512 [ 162.654711][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.678244][T11327] EXT4-fs (loop5): 1 orphan inode deleted [ 162.685219][T11327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.698057][ T31] __quota_error: 37 callbacks suppressed [ 162.698073][ T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.713519][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 162.726258][T11327] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.757328][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.810449][T11342] loop5: detected capacity change from 0 to 8192 [ 162.953948][T11350] sit0: left promiscuous mode [ 162.992347][T11350] sit0: entered promiscuous mode [ 163.006514][T11352] loop2: detected capacity change from 0 to 512 [ 163.034925][T11352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.047602][T11352] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.093597][T11352] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 163.104048][T11352] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 163.113513][T11352] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2486: Failed to acquire dquot type 0 [ 163.139170][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.139170][ T31] loop1: rw=1, sector=185, nr_sectors = 96 limit=128 [ 163.160847][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.160847][ T31] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 163.182081][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.182081][ T31] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 163.197009][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.197009][ T31] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 163.210610][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.210610][ T31] loop1: rw=1, sector=337, nr_sectors = 8 limit=128 [ 163.224125][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.224125][ T31] loop1: rw=1, sector=353, nr_sectors = 8 limit=128 [ 163.237876][ T31] kworker/u8:1: attempt to access beyond end of device [ 163.237876][ T31] loop1: rw=1, sector=369, nr_sectors = 8 limit=128 [ 163.273710][ T29] audit: type=1326 audit(1746119690.852:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11358 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 163.297576][ T29] audit: type=1326 audit(1746119690.852:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11358 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 163.321160][ T29] audit: type=1326 audit(1746119690.852:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11358 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 163.347743][ T29] audit: type=1326 audit(1746119690.852:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11358 comm="syz.1.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 163.424684][T11363] loop4: detected capacity change from 0 to 512 [ 163.424684][T11361] loop5: detected capacity change from 0 to 512 [ 163.425391][T11361] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.470036][T11370] loop3: detected capacity change from 0 to 512 [ 163.470635][T11361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.491490][T11363] EXT4-fs (loop4): 1 orphan inode deleted [ 163.497535][T11370] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.500370][T11361] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.506693][T11370] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 163.518000][T11363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.531088][ T377] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.547858][ T377] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 163.559596][T11373] loop1: detected capacity change from 0 to 4096 [ 163.565379][T11363] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.577322][T11370] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 163.591264][T11370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 163.599834][T11370] System zones: 0-2, 18-18, 34-34 [ 163.605653][T11370] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 163.611311][T11373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.621373][T11370] EXT4-fs (loop3): 1 truncate cleaned up [ 163.640907][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.641388][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.650768][T11370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.713634][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.746384][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.768568][T11383] loop4: detected capacity change from 0 to 8192 [ 163.777251][T11388] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2498'. [ 163.801633][T11393] loop1: detected capacity change from 0 to 512 [ 163.835092][ T29] audit: type=1326 audit(1746119691.412:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 163.860596][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.878435][ T29] audit: type=1326 audit(1746119691.432:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.3.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd2fa41e969 code=0x7ffc0000 [ 163.909690][T11393] EXT4-fs (loop1): 1 orphan inode deleted [ 163.918478][T11393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.931911][ T3952] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 163.948151][T11404] loop3: detected capacity change from 0 to 512 [ 163.963639][T11393] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.974182][T11404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.000538][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.022145][T11404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.040691][T11404] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.090251][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.099637][T11417] loop1: detected capacity change from 0 to 1024 [ 164.110407][T11414] loop5: detected capacity change from 0 to 8192 [ 164.117313][T11417] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.134585][T11417] EXT4-fs: dax option not supported [ 164.147992][T11419] loop3: detected capacity change from 0 to 512 [ 164.195528][T11421] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2511'. [ 164.259966][T11419] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.269309][T11419] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 164.288112][T11419] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 164.298161][T11419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 164.306254][T11419] System zones: 0-2, 18-18, 34-34 [ 164.331632][T11419] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 164.417622][T11419] EXT4-fs (loop3): 1 truncate cleaned up [ 164.467401][T11419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.564493][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.725087][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 164.886382][T11448] loop4: detected capacity change from 0 to 512 [ 164.893935][T11448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.912624][T11448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.926387][T11448] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.956732][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.984059][T11455] loop1: detected capacity change from 0 to 128 [ 165.178172][T11463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2525'. [ 165.208206][T11465] loop4: detected capacity change from 0 to 512 [ 165.215930][T11465] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.225186][T11465] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 165.234401][T11465] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 165.243429][T11465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 165.251496][T11465] System zones: 0-2, 18-18, 34-34 [ 165.257128][T11465] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 165.278548][T11465] EXT4-fs (loop4): 1 truncate cleaned up [ 165.285982][T11465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.361335][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.394833][T11478] sit0: left promiscuous mode [ 165.427094][T11478] sit0: entered promiscuous mode [ 165.549468][T11483] loop3: detected capacity change from 0 to 512 [ 165.696256][T11483] EXT4-fs (loop3): 1 orphan inode deleted [ 165.704811][T11483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.724768][ T3958] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 165.763811][T11483] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.903222][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.940151][T11502] loop3: detected capacity change from 0 to 1024 [ 165.956009][T11502] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.963781][T11502] EXT4-fs: dax option not supported [ 166.014894][T11507] serio: Serial port ptm0 [ 166.274457][T11520] loop4: detected capacity change from 0 to 512 [ 166.327309][T11520] EXT4-fs (loop4): 1 orphan inode deleted [ 166.336256][T11520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.349664][T11520] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.485838][T11525] loop5: detected capacity change from 0 to 512 [ 166.496387][T11525] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.503529][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.505479][T11525] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 166.519023][T11525] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 166.532124][T11525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 166.540260][T11525] System zones: 0-2, 18-18, 34-34 [ 166.545882][T11525] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 166.560836][T11525] EXT4-fs (loop5): 1 truncate cleaned up [ 166.566955][T11525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.607705][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.815571][T11564] sit0: left promiscuous mode [ 166.847869][T11564] sit0: entered promiscuous mode [ 167.309812][T11620] serio: Serial port ptm0 [ 167.706897][T11662] loop4: detected capacity change from 0 to 1024 [ 167.717494][T11666] loop5: detected capacity change from 0 to 512 [ 167.725145][T11662] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.732596][T11666] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.741722][T11666] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 167.751356][T11662] EXT4-fs: dax option not supported [ 167.762400][T11666] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 167.780330][T11666] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 167.788694][T11666] System zones: 0-2, 18-18, 34-34 [ 167.875850][T11666] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 167.904496][T11666] EXT4-fs (loop5): 1 truncate cleaned up [ 167.914757][T11666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.968840][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.993579][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 167.993605][ T29] audit: type=1326 audit(1746119695.572:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 168.028429][ T29] audit: type=1326 audit(1746119695.572:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 168.047366][T11686] 9pnet_fd: Insufficient options for proto=fd [ 168.052123][ T29] audit: type=1326 audit(1746119695.572:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 168.091831][ T29] audit: type=1326 audit(1746119695.672:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 168.115488][ T29] audit: type=1326 audit(1746119695.672:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 168.139541][ T29] audit: type=1326 audit(1746119695.672:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f167732d2d0 code=0x7ffc0000 [ 168.163161][ T29] audit: type=1326 audit(1746119695.672:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 168.186661][ T29] audit: type=1326 audit(1746119695.672:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 168.191599][T11690] loop2: detected capacity change from 0 to 256 [ 168.210492][ T29] audit: type=1326 audit(1746119695.672:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 168.240203][ T29] audit: type=1326 audit(1746119695.672:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f167732e969 code=0x7ffc0000 [ 168.275497][T11690] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.376305][T11692] serio: Serial port ptm0 [ 168.616198][T11722] loop2: detected capacity change from 0 to 512 [ 168.623986][T11722] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.633145][T11722] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 168.647120][T11722] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 168.656629][T11722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 168.664915][T11722] System zones: 0-2, 18-18, 34-34 [ 168.673223][T11722] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 168.690076][T11722] EXT4-fs (loop2): 1 truncate cleaned up [ 168.703656][T11722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.758542][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.777906][T11744] sit0: left promiscuous mode [ 168.811798][T11744] sit0: entered promiscuous mode [ 169.519759][T11811] serio: Serial port ptm0 [ 169.536309][T11816] loop2: detected capacity change from 0 to 1024 [ 169.543186][T11816] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.563033][T11816] EXT4-fs: dax option not supported [ 169.594719][T11820] 9pnet_fd: Insufficient options for proto=fd [ 169.733795][T11826] loop1: detected capacity change from 0 to 256 [ 169.748545][T11826] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.837808][T11839] loop4: detected capacity change from 0 to 2048 [ 169.961572][T11839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.975145][T11839] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.160780][T11881] loop1: detected capacity change from 0 to 8192 [ 170.659737][T11969] loop5: detected capacity change from 0 to 1024 [ 170.668179][T11969] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.675032][T11969] EXT4-fs: dax option not supported [ 170.764086][T11971] serio: Serial port ptm0 [ 170.975826][T11839] syz.4.2582 (11839) used greatest stack depth: 6208 bytes left [ 171.027050][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.108414][T11999] loop4: detected capacity change from 0 to 128 [ 171.139730][T11999] bio_check_eod: 192 callbacks suppressed [ 171.139818][T11999] syz.4.2595: attempt to access beyond end of device [ 171.139818][T11999] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 171.159807][T11999] syz.4.2595: attempt to access beyond end of device [ 171.159807][T11999] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 171.190590][T11999] syz.4.2595: attempt to access beyond end of device [ 171.190590][T11999] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 171.223953][T12015] loop2: detected capacity change from 0 to 1024 [ 171.241579][T12015] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.248300][T12015] EXT4-fs: dax option not supported [ 171.634047][T12076] serio: Serial port ptm0 [ 172.169839][T12151] loop1: detected capacity change from 0 to 512 [ 172.217333][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.217333][ T3958] loop4: rw=1, sector=185, nr_sectors = 96 limit=128 [ 172.231284][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.231284][ T3958] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 172.245041][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.245041][ T3958] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 172.258759][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.258759][ T3958] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 172.272820][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.272820][ T3958] loop4: rw=1, sector=337, nr_sectors = 8 limit=128 [ 172.273919][T12151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.287741][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.287741][ T3958] loop4: rw=1, sector=353, nr_sectors = 8 limit=128 [ 172.303108][T12151] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.323201][ T3958] kworker/u8:11: attempt to access beyond end of device [ 172.323201][ T3958] loop4: rw=1, sector=369, nr_sectors = 8 limit=128 [ 172.339493][T12151] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2610: Failed to acquire dquot type 0 [ 172.382955][T12159] loop4: detected capacity change from 0 to 1024 [ 172.389791][T12159] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.396977][T12159] EXT4-fs: dax option not supported [ 172.449825][T12165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12165 comm=syz.5.2615 [ 172.462776][T12165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12165 comm=syz.5.2615 [ 172.531507][T12175] loop5: detected capacity change from 0 to 512 [ 172.553505][T12175] EXT4-fs (loop5): 1 orphan inode deleted [ 172.559706][T12175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.572878][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 172.573542][T12175] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.644522][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.676037][T12183] 9pnet_fd: Insufficient options for proto=fd [ 172.798109][T12193] loop4: detected capacity change from 0 to 256 [ 172.815379][T12193] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.850354][T12193] 9pnet_fd: Insufficient options for proto=fd [ 172.954454][T12190] loop5: detected capacity change from 0 to 8192 [ 173.066881][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.138966][T12207] loop1: detected capacity change from 0 to 1024 [ 173.149893][T12207] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.157725][T12207] EXT4-fs: dax option not supported [ 173.181681][T12212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12212 comm=syz.5.2626 [ 173.194530][T12212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12212 comm=syz.5.2626 [ 173.317030][T12227] loop1: detected capacity change from 0 to 512 [ 173.335071][T12227] EXT4-fs (loop1): 1 orphan inode deleted [ 173.344558][T12227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.373972][T12227] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.385168][ T3952] __quota_error: 59 callbacks suppressed [ 173.385184][ T3952] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 173.400892][ T3952] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 173.431032][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 173.444566][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.475037][T12238] loop1: detected capacity change from 0 to 512 [ 173.499820][T12240] loop2: detected capacity change from 0 to 1024 [ 173.512745][T12240] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.523871][T12240] EXT4-fs: dax option not supported [ 173.542324][T12238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.558281][T12238] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.571306][T12238] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 173.581859][T12238] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 173.591329][T12238] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2636: Failed to acquire dquot type 0 [ 173.602938][T12249] loop3: detected capacity change from 0 to 512 [ 173.619658][T12249] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.628885][T12249] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 173.647302][T12249] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 173.657202][T12251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12251 comm=syz.2.2640 [ 173.657476][T12249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 173.669974][T12251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12251 comm=syz.2.2640 [ 173.691646][T12249] System zones: 0-2, 18-18, 34-34 [ 173.697334][T12249] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 173.699283][ T29] audit: type=1326 audit(1746119701.272:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 173.720858][T12249] EXT4-fs (loop3): 1 truncate cleaned up [ 173.735901][ T29] audit: type=1326 audit(1746119701.292:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 173.764486][ T29] audit: type=1326 audit(1746119701.292:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c52f5d2d0 code=0x7ffc0000 [ 173.769591][T12249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.788108][ T29] audit: type=1326 audit(1746119701.292:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 173.788205][ T29] audit: type=1326 audit(1746119701.292:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 173.788234][ T29] audit: type=1326 audit(1746119701.292:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 173.870850][ T29] audit: type=1326 audit(1746119701.292:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12258 comm="syz.2.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c52f5e969 code=0x7ffc0000 [ 173.951258][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.987019][T12266] 9pnet_fd: Insufficient options for proto=fd [ 174.015005][T12271] loop3: detected capacity change from 0 to 512 [ 174.043325][T12271] EXT4-fs (loop3): 1 orphan inode deleted [ 174.049723][T12271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.062758][T12271] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.073330][ T3952] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 174.124763][T12275] loop2: detected capacity change from 0 to 256 [ 174.149522][T12275] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.203864][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.251369][T12275] 9pnet_fd: Insufficient options for proto=fd [ 174.575753][T12290] loop4: detected capacity change from 0 to 1024 [ 174.596365][T12290] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.602989][T12290] EXT4-fs: dax option not supported [ 174.627585][T12281] serio: Serial port ptm0 [ 174.755181][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 174.764181][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 174.823988][T12299] bond1: entered promiscuous mode [ 174.829150][T12299] bond1: entered allmulticast mode [ 174.842981][T12299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.869100][T12310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12310 comm=syz.1.2652 [ 174.881927][T12310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12310 comm=syz.1.2652 [ 175.213907][T12320] loop4: detected capacity change from 0 to 512 [ 175.266015][T12320] EXT4-fs (loop4): 1 orphan inode deleted [ 175.280444][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 175.298117][T12320] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.338443][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2659'. [ 175.380193][T12333] serio: Serial port ptm0 [ 175.420264][T12336] loop2: detected capacity change from 0 to 1024 [ 175.427057][T12336] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.433569][T12336] EXT4-fs: dax option not supported [ 175.613134][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12344 comm=syz.2.2666 [ 175.625940][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12344 comm=syz.2.2666 [ 175.656710][T12348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2667'. [ 175.698763][T12352] loop2: detected capacity change from 0 to 2048 [ 175.816706][T12352] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28 [ 175.828989][T12352] EXT4-fs (loop2): This should not happen!! Data will be lost [ 175.828989][T12352] [ 175.838692][T12352] EXT4-fs (loop2): Total free blocks count 0 [ 175.844710][T12352] EXT4-fs (loop2): Free/Dirty block details [ 175.850676][T12352] EXT4-fs (loop2): free_blocks=0 [ 175.855624][T12352] EXT4-fs (loop2): dirty_blocks=0 [ 175.860663][T12352] EXT4-fs (loop2): Block reservation details [ 175.866706][T12352] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 175.898295][T12357] loop2: detected capacity change from 0 to 512 [ 175.912648][T12357] EXT4-fs (loop2): 1 orphan inode deleted [ 175.918956][T12357] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.930482][ T412] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 176.115217][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.131871][T12374] loop3: detected capacity change from 0 to 256 [ 176.147525][T12374] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.196909][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.245529][T12361] chnl_net:caif_netlink_parms(): no params data found [ 176.294303][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.362550][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.393987][T12384] loop1: detected capacity change from 0 to 1024 [ 176.402298][T12384] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.409084][T12384] EXT4-fs: dax option not supported [ 176.424062][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.431214][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.440680][T12361] bridge_slave_0: entered allmulticast mode [ 176.447357][T12361] bridge_slave_0: entered promiscuous mode [ 176.455495][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.462610][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.469848][T12361] bridge_slave_1: entered allmulticast mode [ 176.476392][T12361] bridge_slave_1: entered promiscuous mode [ 176.532724][T12361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.567296][T12386] serio: Serial port ptm0 [ 176.583663][T12361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.593074][T12390] loop1: detected capacity change from 0 to 512 [ 176.599711][ T31] bridge_slave_1: left allmulticast mode [ 176.600874][T12388] loop5: detected capacity change from 0 to 128 [ 176.605468][ T31] bridge_slave_1: left promiscuous mode [ 176.617359][T12390] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.617454][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.626506][T12390] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 176.640911][T12388] bio_check_eod: 91 callbacks suppressed [ 176.640929][T12388] syz.5.2677: attempt to access beyond end of device [ 176.640929][T12388] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 176.662738][ T31] bridge_slave_0: left allmulticast mode [ 176.663225][T12388] syz.5.2677: attempt to access beyond end of device [ 176.663225][T12388] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 176.668400][ T31] bridge_slave_0: left promiscuous mode [ 176.681976][T12388] syz.5.2677: attempt to access beyond end of device [ 176.681976][T12388] loop5: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 176.687652][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.713081][T12390] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 176.723360][T12390] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 176.731461][T12390] System zones: 0-2, 18-18, 34-34 [ 176.736979][T12390] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.765566][T12390] EXT4-fs (loop1): 1 truncate cleaned up [ 176.845625][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.855960][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.874193][ T31] bond0 (unregistering): Released all slaves [ 176.883402][ T31] bond1 (unregistering): Released all slaves [ 176.916875][T12361] team0: Port device team_slave_0 added [ 176.928963][T12361] team0: Port device team_slave_1 added [ 176.951395][ T31] hsr_slave_0: left promiscuous mode [ 176.957460][ T31] hsr_slave_1: left promiscuous mode [ 176.966818][ T31] veth1_macvtap: left promiscuous mode [ 176.967007][T12403] loop1: detected capacity change from 0 to 512 [ 176.972388][ T31] veth0_macvtap: left promiscuous mode [ 176.972544][ T31] veth1_vlan: left promiscuous mode [ 176.984566][T12403] EXT4-fs (loop1): 1 orphan inode deleted [ 176.990829][ T31] veth0_vlan: left promiscuous mode [ 177.000618][T12403] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.012041][ T84] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 177.097432][ T31] team0 (unregistering): Port device team_slave_1 removed [ 177.108930][ T31] team0 (unregistering): Port device team_slave_0 removed [ 177.145124][T12361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.152206][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.178262][T12361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.190457][T12361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.197512][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.223495][T12361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.259054][T12361] hsr_slave_0: entered promiscuous mode [ 177.266195][T12361] hsr_slave_1: entered promiscuous mode [ 177.416222][ T31] IPVS: stop unused estimator thread 0... [ 177.592867][T12361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.603123][T12361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.611549][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.611549][ T37] loop5: rw=1, sector=185, nr_sectors = 96 limit=128 [ 177.626561][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.626561][ T37] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 177.643842][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.643842][ T37] loop5: rw=1, sector=305, nr_sectors = 8 limit=128 [ 177.657480][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.657480][ T37] loop5: rw=1, sector=321, nr_sectors = 8 limit=128 [ 177.672645][T12361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.679424][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.679424][ T37] loop5: rw=1, sector=337, nr_sectors = 8 limit=128 [ 177.679471][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.679471][ T37] loop5: rw=1, sector=353, nr_sectors = 8 limit=128 [ 177.679576][ T37] kworker/u8:2: attempt to access beyond end of device [ 177.679576][ T37] loop5: rw=1, sector=369, nr_sectors = 8 limit=128 [ 177.696376][T12412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2684'. [ 177.752964][T12361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.803483][T12361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.816977][T12361] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.838325][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.845531][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.846788][T12417] loop3: detected capacity change from 0 to 256 [ 177.863925][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.871031][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.900144][T12417] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.054220][T12425] loop5: detected capacity change from 0 to 1024 [ 178.062395][T12425] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.069045][T12425] EXT4-fs: dax option not supported [ 178.134997][T12361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.250069][T12361] veth0_vlan: entered promiscuous mode [ 178.265182][T12361] veth1_vlan: entered promiscuous mode [ 178.289653][T12361] veth0_macvtap: entered promiscuous mode [ 178.297075][T12361] veth1_macvtap: entered promiscuous mode [ 178.307389][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.318084][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.328033][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.338472][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.348348][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.358872][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.368719][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.379179][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.390091][T12361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.401485][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.412141][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.422049][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.432575][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.442415][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.452882][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.463013][T12361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.473466][T12361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.483389][T12434] serio: Serial port ptm0 [ 178.486968][T12361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.502478][T12361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.511322][T12361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.520060][T12361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.528944][T12361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.556466][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 178.556505][ T29] audit: type=1400 audit(1746119706.132:5875): avc: denied { mount } for pid=12361 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.556687][T12447] loop4: detected capacity change from 0 to 128 [ 178.591258][ T29] audit: type=1400 audit(1746119706.142:5876): avc: denied { mount } for pid=12361 comm="syz-executor" name="/" dev="gadgetfs" ino=4160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 178.647876][T12454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2694'. [ 178.673291][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 178.698726][T12457] bond1: entered promiscuous mode [ 178.703970][T12457] bond1: entered allmulticast mode [ 178.709449][T12457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.721172][ T29] audit: type=1326 audit(1746119706.302:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.744776][ T29] audit: type=1326 audit(1746119706.302:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.768466][ T29] audit: type=1326 audit(1746119706.302:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37ceb8d2d0 code=0x7ffc0000 [ 178.792177][ T29] audit: type=1326 audit(1746119706.302:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.815771][ T29] audit: type=1326 audit(1746119706.302:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.839324][ T29] audit: type=1326 audit(1746119706.302:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.864013][ T29] audit: type=1326 audit(1746119706.302:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.887576][ T29] audit: type=1326 audit(1746119706.302:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 178.988559][T12466] loop3: detected capacity change from 0 to 1024 [ 178.999381][T12466] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.011145][T12466] EXT4-fs: dax option not supported [ 179.275854][T12476] loop5: detected capacity change from 0 to 8192 [ 179.366340][T12482] loop3: detected capacity change from 0 to 512 [ 179.377444][T12484] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2705'. [ 179.400774][T12482] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.415136][T12482] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2704: Failed to acquire dquot type 0 [ 179.478805][T12498] sit0: left promiscuous mode [ 179.512791][T12498] sit0: entered promiscuous mode [ 180.020354][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'. [ 180.092166][T12530] loop5: detected capacity change from 0 to 128 [ 180.236714][T12543] sit0: left promiscuous mode [ 180.266569][T12543] sit0: entered promiscuous mode [ 180.432441][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 180.686352][T12559] loop3: detected capacity change from 0 to 2048 [ 180.703738][T12559] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.777676][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 180.833820][T12565] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2733'. [ 180.836225][T12564] bond1: entered promiscuous mode [ 180.848009][T12564] bond1: entered allmulticast mode [ 180.852933][T12565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2733'. [ 180.855153][T12564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.000143][T12574] loop2: detected capacity change from 0 to 128 [ 181.086921][T12576] loop4: detected capacity change from 0 to 2048 [ 181.127874][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2740'. [ 181.198359][T12583] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2733: bg 0: block 345: padding at end of block bitmap is not set [ 181.263039][T12585] sit0: left promiscuous mode [ 181.306402][T12585] sit0: entered promiscuous mode [ 181.329286][T12576] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 181.341683][T12576] EXT4-fs (loop4): This should not happen!! Data will be lost [ 181.341683][T12576] [ 181.351507][T12576] EXT4-fs (loop4): Total free blocks count 0 [ 181.357505][T12576] EXT4-fs (loop4): Free/Dirty block details [ 181.363475][T12576] EXT4-fs (loop4): free_blocks=0 [ 181.368511][T12576] EXT4-fs (loop4): dirty_blocks=0 [ 181.373609][T12576] EXT4-fs (loop4): Block reservation details [ 181.379661][T12576] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 181.784727][T12597] loop5: detected capacity change from 0 to 8192 [ 181.831826][T12608] loop5: detected capacity change from 0 to 128 [ 181.842285][T12608] bio_check_eod: 296 callbacks suppressed [ 181.842300][T12608] syz.5.2750: attempt to access beyond end of device [ 181.842300][T12608] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 181.862410][T12606] loop3: detected capacity change from 0 to 8192 [ 181.863394][T12608] syz.5.2750: attempt to access beyond end of device [ 181.863394][T12608] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 181.883843][T12608] syz.5.2750: attempt to access beyond end of device [ 181.883843][T12608] loop5: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 181.942103][ T3958] kworker/u8:11: attempt to access beyond end of device [ 181.942103][ T3958] loop2: rw=1, sector=185, nr_sectors = 96 limit=128 [ 181.956632][ T3958] kworker/u8:11: attempt to access beyond end of device [ 181.956632][ T3958] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 181.973054][ T3958] kworker/u8:11: attempt to access beyond end of device [ 181.973054][ T3958] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 182.002163][ T3958] kworker/u8:11: attempt to access beyond end of device [ 182.002163][ T3958] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 182.015993][ T3958] kworker/u8:11: attempt to access beyond end of device [ 182.015993][ T3958] loop2: rw=1, sector=337, nr_sectors = 8 limit=128 [ 182.029566][ T3958] kworker/u8:11: attempt to access beyond end of device [ 182.029566][ T3958] loop2: rw=1, sector=353, nr_sectors = 8 limit=128 [ 182.043129][ T3958] kworker/u8:11: attempt to access beyond end of device [ 182.043129][ T3958] loop2: rw=1, sector=369, nr_sectors = 8 limit=128 [ 182.083598][T12620] loop2: detected capacity change from 0 to 2048 [ 182.209923][T12620] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 182.222254][T12620] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.222254][T12620] [ 182.231952][T12620] EXT4-fs (loop2): Total free blocks count 0 [ 182.237966][T12620] EXT4-fs (loop2): Free/Dirty block details [ 182.243966][T12620] EXT4-fs (loop2): free_blocks=0 [ 182.248964][T12620] EXT4-fs (loop2): dirty_blocks=0 [ 182.254038][T12620] EXT4-fs (loop2): Block reservation details [ 182.260039][T12620] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 182.442684][T12642] loop1: detected capacity change from 0 to 256 [ 182.472833][T12642] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.825013][T12657] loop3: detected capacity change from 0 to 512 [ 182.834115][T12657] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.843422][T12657] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 182.854478][T12657] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 182.863983][T12657] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 182.872121][T12657] System zones: 0-2, 18-18, 34-34 [ 182.879793][T12657] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 182.902061][T12657] EXT4-fs (loop3): 1 truncate cleaned up [ 183.132649][T12680] sit0: left promiscuous mode [ 183.164333][T12680] sit0: entered promiscuous mode [ 183.343189][T12696] loop1: detected capacity change from 0 to 128 [ 183.807273][T12715] loop2: detected capacity change from 0 to 512 [ 183.815706][T12715] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.824904][T12715] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 183.835411][T12715] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 183.844665][T12715] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 183.852891][T12715] System zones: 0-2, 18-18, 34-34 [ 183.858799][T12715] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 183.875367][T12715] EXT4-fs (loop2): 1 truncate cleaned up [ 183.923841][T12721] sit0: entered allmulticast mode [ 184.111481][T12727] serio: Serial port ptm0 [ 184.127195][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 184.127212][ T29] audit: type=1326 audit(1746119711.702:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12728 comm="syz.2.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.181022][ T29] audit: type=1326 audit(1746119711.732:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12728 comm="syz.2.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.204656][ T29] audit: type=1326 audit(1746119711.732:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12728 comm="syz.2.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.508546][T12749] loop2: detected capacity change from 0 to 512 [ 184.516467][T12749] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.525619][T12749] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 184.537396][T12749] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 184.546504][T12749] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 184.554584][T12749] System zones: 0-2, 18-18, 34-34 [ 184.560212][T12749] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 184.575014][T12749] EXT4-fs (loop2): 1 truncate cleaned up [ 184.614628][ T29] audit: type=1326 audit(1746119712.192:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.638234][ T29] audit: type=1326 audit(1746119712.192:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.661869][ T29] audit: type=1326 audit(1746119712.192:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37ceb8d2d0 code=0x7ffc0000 [ 184.685564][ T29] audit: type=1326 audit(1746119712.192:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.709112][ T29] audit: type=1326 audit(1746119712.192:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.732640][ T29] audit: type=1326 audit(1746119712.192:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.756200][ T29] audit: type=1326 audit(1746119712.192:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12753 comm="syz.2.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 184.857256][T12756] loop1: detected capacity change from 0 to 8192 [ 184.875738][T12758] sit0: left promiscuous mode [ 184.885162][T12760] loop2: detected capacity change from 0 to 512 [ 184.934051][T12760] EXT4-fs (loop2): 1 orphan inode deleted [ 184.950856][ T3958] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 184.964256][T12760] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.982573][T12762] loop1: detected capacity change from 0 to 8192 [ 185.054948][T12768] loop2: detected capacity change from 0 to 128 [ 185.169979][T12779] loop5: detected capacity change from 0 to 512 [ 185.197850][T12779] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.207131][T12779] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 185.218229][T12779] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 185.249202][T12779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 185.262004][T12779] System zones: 0-2, 18-18, 34-34 [ 185.268927][T12779] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.289540][T12779] EXT4-fs (loop5): 1 truncate cleaned up [ 185.304929][T12789] loop1: detected capacity change from 0 to 512 [ 185.313162][T12789] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.322290][T12789] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 185.341656][T12789] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 185.351011][T12789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 185.359133][T12789] System zones: 0-2, 18-18, 34-34 [ 185.364787][T12789] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.379649][T12789] EXT4-fs (loop1): 1 truncate cleaned up [ 185.532131][T12804] loop3: detected capacity change from 0 to 512 [ 185.564336][T12804] EXT4-fs (loop3): 1 orphan inode deleted [ 185.576809][T12804] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.590712][ T84] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 185.701956][T12814] loop3: detected capacity change from 0 to 2048 [ 185.729608][T12814] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.742231][T12796] chnl_net:caif_netlink_parms(): no params data found [ 185.812272][T12824] sit0: left promiscuous mode [ 185.841962][T12827] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2816'. [ 185.867690][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.874851][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.893449][T12827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2816'. [ 185.902912][T12796] bridge_slave_0: entered allmulticast mode [ 185.962001][T12796] bridge_slave_0: entered promiscuous mode [ 185.985730][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.992891][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.017666][T12796] bridge_slave_1: entered allmulticast mode [ 186.045570][T12796] bridge_slave_1: entered promiscuous mode [ 186.102639][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.127993][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.173396][T12796] team0: Port device team_slave_0 added [ 186.182131][T12796] team0: Port device team_slave_1 added [ 186.208067][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.215119][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.241136][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.245723][T12835] 9pnet_fd: Insufficient options for proto=fd [ 186.291698][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2822'. [ 186.301204][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.308270][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.334329][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.404198][T12842] loop4: detected capacity change from 0 to 256 [ 186.419367][T12796] hsr_slave_0: entered promiscuous mode [ 186.425259][T12842] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.436342][T12796] hsr_slave_1: entered promiscuous mode [ 186.446829][T12796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.456195][T12842] 9pnet_fd: Insufficient options for proto=fd [ 186.467582][T12796] Cannot create hsr debugfs directory [ 186.619917][T12849] loop2: detected capacity change from 0 to 512 [ 186.641317][T12849] EXT4-fs (loop2): 1 orphan inode deleted [ 186.710518][T12849] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.721479][ T377] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 186.863351][T12796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.925807][T12861] 9pnet_fd: Insufficient options for proto=fd [ 186.943952][T12863] sit0: entered promiscuous mode [ 187.046569][T12866] loop4: detected capacity change from 0 to 256 [ 187.057330][T12866] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.072789][T12866] 9pnet_fd: Insufficient options for proto=fd [ 187.165296][T12796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.216334][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2832'. [ 187.234902][T12796] team0: Port device netdevsim1 removed [ 187.245754][T12796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.343099][T12796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.436905][T12880] loop5: detected capacity change from 0 to 512 [ 187.444078][T12796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.445507][T12880] EXT4-fs: Ignoring removed oldalloc option [ 187.455737][T12882] loop4: detected capacity change from 0 to 512 [ 187.457146][T12880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.475167][T12880] EXT4-fs (loop5): 1 truncate cleaned up [ 187.492901][T12882] EXT4-fs (loop4): 1 orphan inode deleted [ 187.502124][T12882] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.517858][ T84] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 187.533252][T12796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.549914][T12796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.562869][T12796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.593189][T12890] 9pnet_fd: Insufficient options for proto=fd [ 187.645383][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.696023][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.711592][T12897] sit0: entered promiscuous mode [ 187.717038][T12899] loop4: detected capacity change from 0 to 256 [ 187.724204][T12899] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.737748][T12899] 9pnet_fd: Insufficient options for proto=fd [ 187.877929][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.885180][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.900588][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.907784][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.935231][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 188.022907][T12911] loop2: detected capacity change from 0 to 512 [ 188.045697][T12911] EXT4-fs (loop2): 1 orphan inode deleted [ 188.053793][T12911] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.064415][ T412] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 188.225711][T12925] loop2: detected capacity change from 0 to 512 [ 188.240929][T12925] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.250020][T12925] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 188.267057][T12925] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 188.284246][T12925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 188.312916][T12925] System zones: 0-2, 18-18, 34-34 [ 188.318655][T12925] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 188.352130][T12925] EXT4-fs (loop2): 1 truncate cleaned up [ 188.378373][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.508799][T12945] loop4: detected capacity change from 0 to 512 [ 188.543818][T12951] loop3: detected capacity change from 0 to 512 [ 188.558642][T12945] EXT4-fs (loop4): 1 orphan inode deleted [ 188.570252][T12951] EXT4-fs (loop3): 1 orphan inode deleted [ 188.578557][T12945] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.589186][T12951] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.599874][ T3958] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 188.625559][T12796] veth0_vlan: entered promiscuous mode [ 188.649072][T12796] veth1_vlan: entered promiscuous mode [ 188.676491][T12796] veth0_macvtap: entered promiscuous mode [ 188.698242][T12796] veth1_macvtap: entered promiscuous mode [ 188.745982][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.756638][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.766544][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.777052][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.786975][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.797570][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.807697][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.818365][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.828218][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.838697][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.849919][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.858102][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.868608][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.878502][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.889030][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.898909][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.909437][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.919311][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.929918][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.939764][T12796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.950450][T12796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.967631][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.982986][T12796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.991948][T12796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.000786][T12796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.009513][T12796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.029010][T12969] 9pnet_fd: Insufficient options for proto=fd [ 189.118399][T12978] loop5: detected capacity change from 0 to 512 [ 189.125539][T12978] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.134754][T12978] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 189.157775][T12980] loop4: detected capacity change from 0 to 256 [ 189.164620][T12978] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 189.175647][T12980] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.186695][T12978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 189.197365][T12978] System zones: 0-2, 18-18, 34-34 [ 189.203397][T12983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12983 comm=syz.1.2864 [ 189.205243][T12980] 9pnet_fd: Insufficient options for proto=fd [ 189.216157][T12983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12983 comm=syz.1.2864 [ 189.238102][T12978] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 189.253722][T12978] EXT4-fs (loop5): 1 truncate cleaned up [ 189.325603][T12990] loop1: detected capacity change from 0 to 128 [ 189.335970][T12990] bio_check_eod: 391 callbacks suppressed [ 189.335987][T12990] syz.1.2866: attempt to access beyond end of device [ 189.335987][T12990] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 189.356024][T12990] syz.1.2866: attempt to access beyond end of device [ 189.356024][T12990] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 189.369671][T12990] syz.1.2866: attempt to access beyond end of device [ 189.369671][T12990] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 189.425268][T12994] loop5: detected capacity change from 0 to 512 [ 189.518013][T12994] EXT4-fs (loop5): 1 orphan inode deleted [ 189.524590][T12994] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.540916][ T412] __quota_error: 37 callbacks suppressed [ 189.540932][ T412] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.556449][ T412] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 189.638530][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.638530][ T412] loop1: rw=1, sector=185, nr_sectors = 96 limit=128 [ 189.660508][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.660508][ T412] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 189.680870][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.680870][ T412] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 189.698152][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.698152][ T412] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 189.735392][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.735392][ T412] loop1: rw=1, sector=337, nr_sectors = 8 limit=128 [ 189.774912][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.774912][ T412] loop1: rw=1, sector=353, nr_sectors = 8 limit=128 [ 189.788900][ T412] kworker/u8:6: attempt to access beyond end of device [ 189.788900][ T412] loop1: rw=1, sector=369, nr_sectors = 8 limit=128 [ 189.923577][T13018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13018 comm=syz.2.2876 [ 189.936404][T13018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13018 comm=syz.2.2876 [ 190.007052][T13029] 9pnet_fd: Insufficient options for proto=fd [ 190.164583][T13039] loop4: detected capacity change from 0 to 512 [ 190.213878][T13035] loop2: detected capacity change from 0 to 256 [ 190.222756][T13035] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.237210][T13039] EXT4-fs (loop4): 1 orphan inode deleted [ 190.243681][T13039] EXT4-fs mount: 53 callbacks suppressed [ 190.243697][T13039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.264884][T13035] 9pnet_fd: Insufficient options for proto=fd [ 190.272368][ T412] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.282228][ T412] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 190.292012][T13039] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.326018][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.330146][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'. [ 190.445651][T13052] sit0: entered promiscuous mode [ 190.493470][T13062] loop3: detected capacity change from 0 to 128 [ 190.506765][T13062] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.663288][ T29] audit: type=1326 audit(1746119718.242:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.687041][ T29] audit: type=1326 audit(1746119718.242:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.713975][ T29] audit: type=1326 audit(1746119718.292:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.737822][ T29] audit: type=1326 audit(1746119718.292:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.761626][ T29] audit: type=1326 audit(1746119718.292:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.785323][ T29] audit: type=1326 audit(1746119718.292:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.808930][ T29] audit: type=1326 audit(1746119718.292:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.832490][ T29] audit: type=1326 audit(1746119718.292:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.4.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42800fe969 code=0x7ffc0000 [ 190.856932][T13075] loop5: detected capacity change from 0 to 512 [ 190.886446][T13075] EXT4-fs (loop5): 1 orphan inode deleted [ 190.892953][T13075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.905647][ T412] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 190.907183][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 190.920633][T13075] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.989422][T13084] loop1: detected capacity change from 0 to 128 [ 191.002263][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.126295][T13105] loop5: detected capacity change from 0 to 1024 [ 191.133667][T13105] EXT4-fs: Ignoring removed orlov option [ 191.143429][T13105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.167993][T13105] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.181960][T13105] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 191.204409][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.237368][T13116] loop3: detected capacity change from 0 to 512 [ 191.252528][T13116] EXT4-fs (loop3): 1 orphan inode deleted [ 191.258761][T13116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.271632][T13116] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.282675][ T412] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 191.306117][T13120] loop5: detected capacity change from 0 to 512 [ 191.314260][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.344732][T13120] EXT4-fs (loop5): 1 orphan inode deleted [ 191.361301][ T84] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 191.373795][T13120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.386633][T13120] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.429990][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.446186][T13130] loop2: detected capacity change from 0 to 512 [ 191.476627][T13130] EXT4-fs: Ignoring removed oldalloc option [ 191.504311][T13130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.535688][T13130] EXT4-fs (loop2): 1 truncate cleaned up [ 191.541856][T13130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.624571][T12361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.831492][T13154] loop2: detected capacity change from 0 to 512 [ 191.852336][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2923'. [ 191.861584][T13157] loop3: detected capacity change from 0 to 2048 [ 191.875954][T13154] EXT4-fs (loop2): 1 orphan inode deleted [ 191.886249][T13154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.899794][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 191.911702][T13154] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.924269][T13161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2926'. [ 191.934345][T13157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.029281][T12361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.094872][T13157] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 192.131436][T13157] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 606 with error 28 [ 192.144019][T13157] EXT4-fs (loop3): This should not happen!! Data will be lost [ 192.144019][T13157] [ 192.148187][T13180] loop5: detected capacity change from 0 to 512 [ 192.153740][T13157] EXT4-fs (loop3): Total free blocks count 0 [ 192.153759][T13157] EXT4-fs (loop3): Free/Dirty block details [ 192.172056][T13157] EXT4-fs (loop3): free_blocks=2415919104 [ 192.177846][T13157] EXT4-fs (loop3): dirty_blocks=608 [ 192.183115][T13157] EXT4-fs (loop3): Block reservation details [ 192.189114][T13157] EXT4-fs (loop3): i_reserved_data_blocks=38 [ 192.213602][T13180] EXT4-fs: Ignoring removed oldalloc option [ 192.226422][T13180] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.265548][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 192.275483][T13180] EXT4-fs (loop5): 1 truncate cleaned up [ 192.275634][T13187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2938'. [ 192.305156][T13180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.332167][T13194] loop4: detected capacity change from 0 to 2048 [ 192.342756][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.343212][T13197] loop1: detected capacity change from 0 to 512 [ 192.365434][T13194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.377943][T13194] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.378864][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.409924][T13197] EXT4-fs (loop1): 1 orphan inode deleted [ 192.417669][T13197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.431400][T13197] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.441843][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 192.455763][T13206] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2939'. [ 192.464923][T13206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2939'. [ 192.513804][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.544815][T13210] 9pnet_fd: Insufficient options for proto=fd [ 192.576788][T13214] sit0: entered allmulticast mode [ 192.682479][T13218] loop3: detected capacity change from 0 to 256 [ 192.705481][T13218] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.736597][T13218] 9pnet_fd: Insufficient options for proto=fd [ 192.744191][T13223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2949'. [ 192.906287][T13229] loop1: detected capacity change from 0 to 512 [ 192.950612][T13229] EXT4-fs (loop1): 1 orphan inode deleted [ 192.959175][T13229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.972301][ T3964] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 192.994336][T13229] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.106764][T13234] loop3: detected capacity change from 0 to 512 [ 193.135662][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.156573][T13234] EXT4-fs: Ignoring removed oldalloc option [ 193.166675][T13234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.183528][T13234] EXT4-fs (loop3): 1 truncate cleaned up [ 193.189485][T13240] loop1: detected capacity change from 0 to 512 [ 193.189814][T13234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.214063][T13243] sit0: left promiscuous mode [ 193.262394][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.283588][T13240] EXT4-fs (loop1): 1 orphan inode deleted [ 193.289809][T13240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.304079][ T3964] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 193.323954][T13240] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.337811][T13250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'. [ 193.349438][T13251] loop3: detected capacity change from 0 to 128 [ 193.364957][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.381755][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.439716][T13255] 9pnet_fd: Insufficient options for proto=fd [ 193.495249][T13260] sit0: entered promiscuous mode [ 193.505699][T13262] loop5: detected capacity change from 0 to 512 [ 193.573694][T13262] EXT4-fs (loop5): 1 orphan inode deleted [ 193.593734][T13274] loop3: detected capacity change from 0 to 512 [ 193.600887][T13262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.626230][T13277] loop4: detected capacity change from 0 to 256 [ 193.637166][ T3958] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 193.663485][T13277] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.677096][T13274] EXT4-fs: Ignoring removed oldalloc option [ 193.686815][T13262] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.700205][T13274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.708764][T13277] 9pnet_fd: Insufficient options for proto=fd [ 193.715634][T13274] EXT4-fs (loop3): 1 truncate cleaned up [ 193.723466][T13274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.769922][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.816442][T13285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2972'. [ 193.885284][ T3490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.919991][T13286] serio: Serial port ptm0 [ 194.154986][T13302] loop4: detected capacity change from 0 to 128 [ 194.230658][T13307] loop1: detected capacity change from 0 to 512 [ 194.244156][T13307] EXT4-fs: Ignoring removed oldalloc option [ 194.254701][T13307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.268397][T13307] EXT4-fs (loop1): 1 truncate cleaned up [ 194.274610][T13307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.292192][T13311] loop2: detected capacity change from 0 to 512 [ 194.303525][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.314974][T13311] EXT4-fs (loop2): 1 orphan inode deleted [ 194.321727][T13311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.335646][ T3958] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 194.348134][T13311] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.382760][T12361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.392238][ T377] bio_check_eod: 198 callbacks suppressed [ 194.392255][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.392255][ T377] loop4: rw=1, sector=185, nr_sectors = 96 limit=128 [ 194.398703][T13318] loop1: detected capacity change from 0 to 512 [ 194.412012][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.412012][ T377] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 194.432461][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.432461][ T377] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 194.446421][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.446421][ T377] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 194.460095][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.460095][ T377] loop4: rw=1, sector=337, nr_sectors = 8 limit=128 [ 194.473715][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.473715][ T377] loop4: rw=1, sector=353, nr_sectors = 8 limit=128 [ 194.487234][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.487234][ T377] loop4: rw=1, sector=369, nr_sectors = 8 limit=128 [ 194.495716][T13318] EXT4-fs (loop1): 1 orphan inode deleted [ 194.501388][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.501388][ T377] loop4: rw=1, sector=385, nr_sectors = 8 limit=128 [ 194.520603][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.520603][ T377] loop4: rw=1, sector=401, nr_sectors = 8 limit=128 [ 194.536032][T13318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.545251][T13324] 9pnet_fd: Insufficient options for proto=fd [ 194.548578][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 194.550222][T13318] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.577030][ T377] kworker/u8:5: attempt to access beyond end of device [ 194.577030][ T377] loop4: rw=1, sector=417, nr_sectors = 8 limit=128 [ 194.616395][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.701828][T13332] loop2: detected capacity change from 0 to 256 [ 194.727769][T13334] 9pnet_fd: Insufficient options for proto=fd [ 194.777459][T13332] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.793003][T13332] 9pnet_fd: Insufficient options for proto=fd [ 194.824068][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 194.824085][ T29] audit: type=1326 audit(1746119722.402:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.1.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 194.863096][ T29] audit: type=1326 audit(1746119722.402:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.1.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 194.886876][ T29] audit: type=1326 audit(1746119722.402:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.1.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 194.910444][ T29] audit: type=1326 audit(1746119722.402:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.1.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 194.936191][T13343] loop4: detected capacity change from 0 to 256 [ 194.948126][T13343] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.967898][T13343] 9pnet_fd: Insufficient options for proto=fd [ 195.014757][T13347] loop1: detected capacity change from 0 to 512 [ 195.023565][T13347] EXT4-fs: Ignoring removed oldalloc option [ 195.029945][T13347] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.058231][T13347] EXT4-fs (loop1): 1 truncate cleaned up [ 195.066482][T13347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.097548][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.139111][T13353] loop1: detected capacity change from 0 to 512 [ 195.206777][T13353] EXT4-fs (loop1): 1 orphan inode deleted [ 195.221746][ T377] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 195.231757][ T377] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 195.252785][T13353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.277797][T13353] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.305548][T13361] loop2: detected capacity change from 0 to 128 [ 195.373084][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.498531][ T29] audit: type=1326 audit(1746119723.072:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13370 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 195.522263][ T29] audit: type=1326 audit(1746119723.072:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13370 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 195.565461][ T29] audit: type=1326 audit(1746119723.132:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13370 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 195.589309][ T29] audit: type=1326 audit(1746119723.132:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13370 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a054e969 code=0x7ffc0000 [ 195.671953][T13378] loop1: detected capacity change from 0 to 128 [ 195.681147][T13378] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.704223][ T29] audit: type=1326 audit(1746119723.282:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ceb8e969 code=0x7ffc0000 [ 195.789845][T13392] 9pnet_fd: Insufficient options for proto=fd [ 195.924747][T13402] loop1: detected capacity change from 0 to 256 [ 195.953650][T13402] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.982367][T13402] 9pnet_fd: Insufficient options for proto=fd [ 196.057950][T13404] loop2: detected capacity change from 0 to 128 [ 196.190719][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 196.196805][T13412] 9pnet_fd: Insufficient options for proto=fd [ 196.273044][T13420] loop5: detected capacity change from 0 to 256 [ 196.281524][T13421] loop1: detected capacity change from 0 to 128 [ 196.359768][T13421] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.418481][T13420] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.596262][T13441] __nla_validate_parse: 2 callbacks suppressed [ 196.596277][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 196.655467][T13460] loop4: detected capacity change from 0 to 512 [ 196.715235][T13460] EXT4-fs (loop4): 1 orphan inode deleted [ 196.730789][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 196.759160][T13460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.782637][T13460] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.856323][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.958758][T13488] 9pnet_fd: Insufficient options for proto=fd [ 197.122342][T13507] loop5: detected capacity change from 0 to 256 [ 197.148543][T13509] loop1: detected capacity change from 0 to 2048 [ 197.351720][T13509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.352450][T13507] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.380891][T13509] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.394346][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 197.409531][T13507] 9pnet_fd: Insufficient options for proto=fd [ 197.429157][ T412] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.486094][T13543] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3034'. [ 197.513766][T13543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3034'. [ 197.525747][T13545] 9pnet_fd: Insufficient options for proto=fd [ 197.592030][T13548] loop2: detected capacity change from 0 to 256 [ 197.612863][T13548] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.946895][T13556] loop2: detected capacity change from 0 to 128 [ 198.033739][T13556] ================================================================== [ 198.041873][T13556] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 198.049011][T13556] [ 198.051345][T13556] write to 0xffff888106b27b14 of 4 bytes by task 13559 on cpu 0: [ 198.059175][T13556] xas_set_mark+0x12b/0x140 [ 198.063701][T13556] __folio_start_writeback+0x1dd/0x430 [ 198.069176][T13556] __mpage_writepage+0xc86/0x1150 [ 198.074228][T13556] write_cache_pages+0x61/0x100 [ 198.079104][T13556] mpage_writepages+0x72/0xf0 [ 198.083800][T13556] fat_writepages+0x24/0x30 [ 198.088313][T13556] do_writepages+0x1d2/0x480 [ 198.092924][T13556] file_write_and_wait_range+0x156/0x2c0 [ 198.098572][T13556] __generic_file_fsync+0x46/0x140 [ 198.103698][T13556] fat_file_fsync+0x49/0x100 [ 198.108307][T13556] vfs_fsync_range+0x10a/0x130 [ 198.113086][T13556] generic_file_write_iter+0x1b8/0x2f0 [ 198.118567][T13556] iter_file_splice_write+0x5ef/0x970 [ 198.123950][T13556] direct_splice_actor+0x153/0x2a0 [ 198.129072][T13556] splice_direct_to_actor+0x30f/0x680 [ 198.134457][T13556] do_splice_direct+0xda/0x150 [ 198.139239][T13556] do_sendfile+0x380/0x640 [ 198.143678][T13556] __x64_sys_sendfile64+0x105/0x150 [ 198.148898][T13556] x64_sys_call+0xb39/0x2fb0 [ 198.153506][T13556] do_syscall_64+0xd0/0x1a0 [ 198.158019][T13556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.163928][T13556] [ 198.166255][T13556] read to 0xffff888106b27b14 of 4 bytes by task 13556 on cpu 1: [ 198.173890][T13556] xas_find_marked+0x5dc/0x620 [ 198.178663][T13556] find_get_entry+0x5d/0x380 [ 198.183265][T13556] filemap_get_folios_tag+0x92/0x210 [ 198.188569][T13556] filemap_fdatawait_range+0x88/0x1d0 [ 198.193951][T13556] __writeback_single_inode+0xdb/0x7c0 [ 198.199432][T13556] writeback_single_inode+0x167/0x3e0 [ 198.204829][T13556] sync_inode_metadata+0x5b/0x90 [ 198.209785][T13556] __generic_file_fsync+0xf8/0x140 [ 198.214911][T13556] fat_file_fsync+0x49/0x100 [ 198.219519][T13556] vfs_fsync_range+0x10a/0x130 [ 198.224293][T13556] generic_file_write_iter+0x1b8/0x2f0 [ 198.229771][T13556] iter_file_splice_write+0x5ef/0x970 [ 198.235153][T13556] direct_splice_actor+0x153/0x2a0 [ 198.240275][T13556] splice_direct_to_actor+0x30f/0x680 [ 198.245666][T13556] do_splice_direct+0xda/0x150 [ 198.250438][T13556] do_sendfile+0x380/0x640 [ 198.254879][T13556] __x64_sys_sendfile64+0x105/0x150 [ 198.260097][T13556] x64_sys_call+0xb39/0x2fb0 [ 198.264705][T13556] do_syscall_64+0xd0/0x1a0 [ 198.269223][T13556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.275130][T13556] [ 198.277472][T13556] value changed: 0x0a000021 -> 0x00000021 [ 198.283194][T13556] [ 198.285521][T13556] Reported by Kernel Concurrency Sanitizer on: [ 198.291674][T13556] CPU: 1 UID: 0 PID: 13556 Comm: syz.2.3042 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 198.304182][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.314245][T13556] ================================================================== [ 198.375041][T12796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.602245][T13556] ================================================================== [ 198.610388][T13556] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 198.618341][T13556] [ 198.620677][T13556] write to 0xffff888106b27a28 of 4 bytes by task 13559 on cpu 0: [ 198.628454][T13556] __mark_inode_dirty+0x240/0x760 [ 198.633509][T13556] fat_update_time+0x1ec/0x200 [ 198.638296][T13556] touch_atime+0x145/0x330 [ 198.642930][T13556] filemap_splice_read+0x629/0x6b0 [ 198.648065][T13556] splice_direct_to_actor+0x26c/0x680 [ 198.653476][T13556] do_splice_direct+0xda/0x150 [ 198.658262][T13556] do_sendfile+0x380/0x640 [ 198.662712][T13556] __x64_sys_sendfile64+0x105/0x150 [ 198.667943][T13556] x64_sys_call+0xb39/0x2fb0 [ 198.672558][T13556] do_syscall_64+0xd0/0x1a0 [ 198.677084][T13556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.683003][T13556] [ 198.685343][T13556] read to 0xffff888106b27a28 of 4 bytes by task 13556 on cpu 1: [ 198.692995][T13556] __mark_inode_dirty+0x52/0x760 [ 198.697981][T13556] fat_update_time+0x1ec/0x200 [ 198.702767][T13556] touch_atime+0x145/0x330 [ 198.707217][T13556] filemap_splice_read+0x629/0x6b0 [ 198.712385][T13556] splice_direct_to_actor+0x26c/0x680 [ 198.717838][T13556] do_splice_direct+0xda/0x150 [ 198.722635][T13556] do_sendfile+0x380/0x640 [ 198.727111][T13556] __x64_sys_sendfile64+0x105/0x150 [ 198.732350][T13556] x64_sys_call+0xb39/0x2fb0 [ 198.736992][T13556] do_syscall_64+0xd0/0x1a0 [ 198.741537][T13556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.747459][T13556] [ 198.749802][T13556] value changed: 0x00000000 -> 0x00000038 [ 198.755536][T13556] [ 198.757874][T13556] Reported by Kernel Concurrency Sanitizer on: [ 198.764042][T13556] CPU: 1 UID: 0 PID: 13556 Comm: syz.2.3042 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 198.776571][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.786652][T13556] ================================================================== [ 201.470447][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!