last executing test programs: 2m14.268784534s ago: executing program 2 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2m13.732710602s ago: executing program 2 (id=1292): creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x2c020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) unlink(&(0x7f0000000180)='./file0\x00') 2m13.616144313s ago: executing program 2 (id=1296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = memfd_secret(0x0) cachestat(r1, &(0x7f0000000000)={0x2, 0x7fff}, &(0x7f0000000040), 0x0) 2m13.440316406s ago: executing program 2 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 2m13.429703296s ago: executing program 2 (id=1305): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2m13.082820041s ago: executing program 2 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2101099, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x151400, 0x3) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 2m13.003545303s ago: executing program 32 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2101099, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x151400, 0x3) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 2m12.587850959s ago: executing program 0 (id=1317): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m12.46068112s ago: executing program 0 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m12.160343575s ago: executing program 0 (id=1328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) 2m12.100378326s ago: executing program 0 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 2m12.038182707s ago: executing program 0 (id=1330): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 2m11.933263939s ago: executing program 3 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 2m11.608996054s ago: executing program 3 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m11.527808135s ago: executing program 0 (id=1334): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb2, 0x4a, 0x62, 0x20, 0x4855, 0x91, 0xd1bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa8, 0x2, 0x2, 0xff, 0xff, 0xff, 0x1, [@generic={0xb, 0x30, "ce21d40c07178e91a8"}], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m11.525438605s ago: executing program 33 (id=1334): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb2, 0x4a, 0x62, 0x20, 0x4855, 0x91, 0xd1bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa8, 0x2, 0x2, 0xff, 0xff, 0xff, 0x1, [@generic={0xb, 0x30, "ce21d40c07178e91a8"}], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m11.488310675s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) close(r2) 2m11.345232077s ago: executing program 3 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 2m11.242107449s ago: executing program 3 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03030000000000000000010000000800010012000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) 2m10.702327307s ago: executing program 3 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2m10.651437258s ago: executing program 34 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 4.332276706s ago: executing program 4 (id=4958): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61\x8c\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.152866998s ago: executing program 4 (id=4961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket(0x2, 0x2, 0x0) 3.437572149s ago: executing program 1 (id=4982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x7, 0xc, 0x38a0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.35733407s ago: executing program 1 (id=4997): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 3.268098992s ago: executing program 5 (id=4985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x10000}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 3.267365481s ago: executing program 7 (id=5002): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x2000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x28, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x4c5, 0x54}}}}}, 0x28}}, 0x4000054) 3.266808072s ago: executing program 4 (id=5003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 3.239452472s ago: executing program 1 (id=4988): syz_usbip_server_init(0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x80) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) 3.217128952s ago: executing program 4 (id=4989): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x5, 0xabb, 0x67, 0x8, 0x2, 0x6, 0x4, @private=0xa010100, @remote}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40281, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f00"], 0xffbf) 3.182926013s ago: executing program 5 (id=4990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 3.070840995s ago: executing program 7 (id=4991): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close(r0) unshare(0x62040200) unshare(0x20060400) 3.018515055s ago: executing program 4 (id=4992): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.878388217s ago: executing program 7 (id=4995): r0 = io_uring_setup(0x7d7b, &(0x7f0000000240)={0x0, 0x4641, 0x400, 0x4800004, 0x20003ba}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.73113339s ago: executing program 7 (id=4996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) 2.73030899s ago: executing program 6 (id=5000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x7, 0xc, 0x38a0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2.729702139s ago: executing program 5 (id=5001): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 2.67421662s ago: executing program 6 (id=5004): creat(0x0, 0x5c351178c085b978) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2.607463711s ago: executing program 5 (id=5005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 2.606780711s ago: executing program 7 (id=5017): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f00000001c0)={[{@usrjquota}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@delalloc}, {@noauto_da_alloc}]}, 0xee, 0x43e, &(0x7f00000008c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010100000000000000000100000005000100fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 2.596915901s ago: executing program 6 (id=5018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.547133922s ago: executing program 1 (id=5006): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000000)='./file0\x00', 0x1248c38, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) open(&(0x7f0000000200)='./file0\x00', 0x410001, 0x2c) 2.546513522s ago: executing program 6 (id=5007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.483657233s ago: executing program 6 (id=5009): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 2.392770855s ago: executing program 6 (id=5010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 2.391394804s ago: executing program 5 (id=5023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.323771885s ago: executing program 7 (id=5012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40) 2.322831905s ago: executing program 5 (id=5025): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0xa) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000300)='./file0\x00', 0x21488b, &(0x7f00000001c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYRESDEC], 0x1, 0x660, &(0x7f0000000840)="$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") 2.322159265s ago: executing program 1 (id=5026): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f00000001c0)={[{@usrjquota}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@delalloc}, {@noauto_da_alloc}]}, 0xee, 0x43e, &(0x7f00000008c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010100000000000000000100000005000100fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 522.4µs ago: executing program 4 (id=5013): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}]}}}]}, 0x3c}}, 0x4048000) 0s ago: executing program 1 (id=5028): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): =-32 for 48 [ 161.915832][ T8801] vhci_hcd: stop threads [ 161.921873][ T8801] vhci_hcd: release socket [ 161.926431][ T8801] vhci_hcd: disconnect device [ 161.932482][ T8801] vhci_hcd: stop threads [ 161.936886][ T8801] vhci_hcd: release socket [ 161.943346][ T8801] vhci_hcd: disconnect device [ 162.045242][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3206'. [ 162.056501][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3206'. [ 162.096689][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 162.108681][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3195'. [ 162.119661][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 162.133387][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3195'. [ 162.143997][T12477] netlink: 'syz.1.3195': attribute type 6 has an invalid length. [ 162.182359][T12479] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3197'. [ 162.212388][T12479] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3197'. [ 162.266633][T12481] syzkaller1: entered promiscuous mode [ 162.272692][T12481] syzkaller1: entered allmulticast mode [ 162.464256][T12510] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 162.477356][T12504] loop5: detected capacity change from 0 to 512 [ 162.487084][T12510] SELinux: failed to load policy [ 162.525116][T12504] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 162.546592][T12504] EXT4-fs (loop5): mount failed [ 162.625282][T12536] loop7: detected capacity change from 0 to 256 [ 162.648937][T12536] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 162.661281][T12536] FAT-fs (loop7): Filesystem has been set read-only [ 162.688165][ T6757] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 162.729014][T12553] loop7: detected capacity change from 0 to 512 [ 162.742525][T12553] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.804181][T12568] loop4: detected capacity change from 0 to 1024 [ 162.812610][T12568] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.824728][T12568] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.836604][T12568] JBD2: no valid journal superblock found [ 162.842912][T12568] EXT4-fs (loop4): Could not load journal inode [ 162.858390][T12568] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 163.017950][T12594] wireguard0: entered promiscuous mode [ 163.024013][T12594] wireguard0: entered allmulticast mode [ 163.315476][T12645] loop4: detected capacity change from 0 to 256 [ 163.525047][T12681] loop4: detected capacity change from 0 to 1024 [ 163.542827][T12681] ext3: Unknown parameter 'obj_type' [ 163.652552][T12700] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 163.658965][T12700] syzkaller1: Linktype set failed because interface is up [ 163.710668][T12712] $H: renamed from bond0 (while UP) [ 163.722824][T12712] $H: entered promiscuous mode [ 163.729736][T12712] bond_slave_0: entered promiscuous mode [ 163.736645][T12712] bond_slave_1: entered promiscuous mode [ 163.745521][T12712] dummy0: entered promiscuous mode [ 163.777588][T12720] atomic_op ffff888123963528 conn xmit_atomic 0000000000000000 [ 163.819671][T12725] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.884329][T12730] loop4: detected capacity change from 0 to 8192 [ 164.017830][T12758] loop4: detected capacity change from 0 to 1024 [ 164.026449][T12758] EXT4-fs: Ignoring removed orlov option [ 164.213253][T12777] loop1: detected capacity change from 0 to 2048 [ 164.258830][T12777] loop1: p1 < > p4 [ 164.263826][T12777] loop1: p4 size 8388608 extends beyond EOD, truncated [ 164.742990][T12787] loop6: detected capacity change from 0 to 1024 [ 164.773107][T12787] ext3: Unknown parameter 'obj_type' [ 164.836880][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.858669][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.940526][T12806] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 165.033314][T12818] loop4: detected capacity change from 0 to 256 [ 165.053232][T12822] loop6: detected capacity change from 0 to 512 [ 165.080486][T12822] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.453435][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 165.453501][ T30] audit: type=1326 audit(1748744369.963:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.497202][T12838] loop5: detected capacity change from 0 to 1024 [ 165.504636][T12838] ext3: Unknown parameter 'obj_type' [ 165.511808][ T30] audit: type=1326 audit(1748744370.003:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.536398][ T30] audit: type=1326 audit(1748744370.003:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.562974][ T30] audit: type=1326 audit(1748744370.003:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.588696][ T30] audit: type=1326 audit(1748744370.003:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.613925][ T30] audit: type=1326 audit(1748744370.003:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.640690][ T30] audit: type=1326 audit(1748744370.003:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.666061][ T30] audit: type=1326 audit(1748744370.003:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 165.691832][ T30] audit: type=1326 audit(1748744370.003:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa51183e9a3 code=0x7ffc0000 [ 165.717471][ T30] audit: type=1326 audit(1748744370.003:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.5.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa51183d41f code=0x7ffc0000 [ 165.842503][T12859] IPVS: Error connecting to the multicast addr [ 166.948414][ T36] usb 9-1: enqueue for inactive port 0 [ 166.954122][ T36] usb 9-1: enqueue for inactive port 0 [ 167.028328][ T36] vhci_hcd: vhci_device speed not set [ 167.133594][T12870] loop7: detected capacity change from 0 to 1024 [ 167.142600][T12870] ext3: Unknown parameter 'obj_type' [ 167.381560][T12912] loop6: detected capacity change from 0 to 128 [ 167.410235][T12917] loop1: detected capacity change from 0 to 256 [ 167.501712][T12932] loop1: detected capacity change from 0 to 1024 [ 167.514505][T12932] ext3: Unknown parameter 'obj_type' [ 167.669893][T12959] loop4: detected capacity change from 0 to 512 [ 167.679603][T12959] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.693333][T12959] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 167.709905][T12959] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3370: iget: bad extended attribute block 1 [ 167.711134][T12960] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 167.728458][T12960] syzkaller1: Linktype set failed because interface is up [ 167.738992][ T3393] syzkaller1: tun_net_xmit 90 [ 167.755150][T12959] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3370: couldn't read orphan inode 15 (err -117) [ 167.781889][T12959] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 167.911202][T12990] ref_ctr_offset mismatch. inode: 0xd04 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000300 [ 167.915956][T12993] loop5: detected capacity change from 0 to 1024 [ 167.931771][T12993] ext3: Unknown parameter 'obj_type' [ 167.981938][T13011] __nla_validate_parse: 11 callbacks suppressed [ 167.981955][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3387'. [ 168.000149][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3387'. [ 168.046658][T13018] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 168.053248][T13018] syzkaller1: Refused to change device type [ 169.277230][T13107] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3412'. [ 169.323115][T13112] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 169.380541][T13116] SELinux: truncated policydb string identifier [ 169.387232][T13116] SELinux: failed to load policy [ 169.456182][T13122] program syz.5.3418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.501018][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'. [ 169.510335][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'. [ 169.549234][T13134] netlink: 'syz.7.3428': attribute type 13 has an invalid length. [ 169.584142][T13134] gretap0: refused to change device tx_queue_len [ 169.590733][T13134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.662208][T13143] smc: net device bond0 applied user defined pnetid SYZ2 [ 169.687236][T13143] smc: net device bond0 erased user defined pnetid SYZ2 [ 169.780164][ T10] hid (null): global environment stack underflow [ 169.787882][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.795610][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.803235][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.814789][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.822537][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.830464][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.837908][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.845584][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.853049][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.860541][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.868018][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.875514][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.883083][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.890735][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.898289][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.905830][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x1 [ 169.913517][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.921082][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.928785][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.936392][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.944680][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.953280][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.961241][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.969133][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.976651][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 169.984409][ T10] hid-generic 0000:0000:0000.000C: global environment stack underflow [ 169.993786][ T10] hid-generic 0000:0000:0000.000C: item 0 4 1 11 parsing failed [ 170.002218][ T10] hid-generic 0000:0000:0000.000C: probe with driver hid-generic failed with error -22 [ 170.057915][T13166] loop1: detected capacity change from 0 to 8192 [ 170.074782][T13166] vfat: Unknown parameter 'H!1`w )ea뀋-sà_uŪ][_Hqm5W)-3?b5e]C"XG \ZHPX0xffffffffffffffff184467440737095516150xffffffffffffffff' [ 170.309063][T13197] sd 0:0:1:0: device reset [ 170.314868][T13199] sd 0:0:1:0: device reset [ 170.379559][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3456'. [ 170.389113][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3456'. [ 170.459333][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 170.459352][ T30] audit: type=1400 audit(1748744374.973:3641): avc: denied { bind } for pid=13216 comm="syz.7.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.489531][ T30] audit: type=1400 audit(1748744375.003:3642): avc: denied { setopt } for pid=13216 comm="syz.7.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.516275][ T30] audit: type=1400 audit(1748744375.023:3643): avc: denied { write } for pid=13216 comm="syz.7.3461" path="socket:[32267]" dev="sockfs" ino=32267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.556211][ T30] audit: type=1400 audit(1748744375.063:3644): avc: denied { create } for pid=13221 comm="syz.6.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.606929][ T30] audit: type=1400 audit(1748744375.113:3645): avc: denied { write } for pid=13221 comm="syz.6.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.726237][ T30] audit: type=1326 audit(1748744375.233:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.6.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 170.756976][ T30] audit: type=1326 audit(1748744375.263:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.6.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 170.784363][ T30] audit: type=1326 audit(1748744375.293:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.6.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 170.808183][ T30] audit: type=1326 audit(1748744375.293:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.6.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 170.831866][ T30] audit: type=1326 audit(1748744375.293:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.6.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 171.102025][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3486'. [ 171.125880][T13274] loop4: detected capacity change from 0 to 128 [ 171.149076][T13274] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 171.211808][T13289] netlink: 'syz.5.3494': attribute type 21 has an invalid length. [ 171.228494][T13289] netlink: 'syz.5.3494': attribute type 1 has an invalid length. [ 171.236309][T13289] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3494'. [ 171.298348][T13294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 171.305074][T13294] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 171.313370][T13294] vhci_hcd vhci_hcd.0: Device attached [ 171.343011][T13295] vhci_hcd: connection closed [ 171.343201][ T8782] vhci_hcd: stop threads [ 171.352313][ T8782] vhci_hcd: release socket [ 171.356750][ T8782] vhci_hcd: disconnect device [ 171.466719][T13304] bond0: entered promiscuous mode [ 171.472093][T13304] bond0: entered allmulticast mode [ 171.493357][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.556664][T13304] bond0 (unregistering): Released all slaves [ 171.692193][T13396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.701396][T13396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.754862][T13408] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3516'. [ 171.769448][T13408] batadv0: entered allmulticast mode [ 171.853835][T13418] loop1: detected capacity change from 0 to 128 [ 171.900575][T13418] bio_check_eod: 3 callbacks suppressed [ 171.900594][T13418] syz.1.3520: attempt to access beyond end of device [ 171.900594][T13418] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 172.056533][T13435] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 172.063158][T13435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.070902][T13435] vhci_hcd vhci_hcd.0: Device attached [ 172.081397][T13435] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 172.088410][T13435] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.096076][T13435] vhci_hcd vhci_hcd.0: Device attached [ 172.103239][T13435] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 172.109790][T13435] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.117544][T13435] vhci_hcd vhci_hcd.0: Device attached [ 172.124841][T13435] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 172.131472][T13435] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.139402][T13435] vhci_hcd vhci_hcd.0: Device attached [ 172.146273][T13435] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.155600][T13435] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 172.159800][T13453] loop1: detected capacity change from 0 to 512 [ 172.162372][T13435] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.176143][T13435] vhci_hcd vhci_hcd.0: Device attached [ 172.182521][T13453] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 172.186868][T13454] vhci_hcd: connection closed [ 172.191427][T13448] vhci_hcd: connection closed [ 172.194196][T13451] vhci_hcd: connection closed [ 172.196962][T13436] vhci_hcd: connection closed [ 172.201266][T13446] vhci_hcd: connection closed [ 172.206327][T13453] EXT4-fs (loop1): invalid journal inode [ 172.222998][ T8782] vhci_hcd: stop threads [ 172.227347][ T8782] vhci_hcd: release socket [ 172.231860][ T8782] vhci_hcd: disconnect device [ 172.241897][T13453] EXT4-fs (loop1): can't get journal size [ 172.242027][ T8782] vhci_hcd: stop threads [ 172.252062][ T8782] vhci_hcd: release socket [ 172.256726][ T8782] vhci_hcd: disconnect device [ 172.262349][ T8782] vhci_hcd: stop threads [ 172.262715][T13453] EXT4-fs (loop1): 1 truncate cleaned up [ 172.266605][ T8782] vhci_hcd: release socket [ 172.266676][ T8782] vhci_hcd: disconnect device [ 172.266805][ T8782] vhci_hcd: stop threads [ 172.278112][T13453] EXT4-fs mount: 8 callbacks suppressed [ 172.278132][T13453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.281802][ T8782] vhci_hcd: release socket [ 172.308457][ T8782] vhci_hcd: disconnect device [ 172.313447][ T8782] vhci_hcd: stop threads [ 172.317730][ T8782] vhci_hcd: release socket [ 172.322366][ T8782] vhci_hcd: disconnect device [ 172.327286][ T3393] usb 9-1: new high-speed USB device number 3 using vhci_hcd [ 172.336222][ T3393] usb 9-1: enqueue for inactive port 0 [ 172.342096][ T3393] usb 9-1: enqueue for inactive port 0 [ 172.347764][ T3393] usb 9-1: enqueue for inactive port 0 [ 172.363827][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.418745][ T3393] vhci_hcd: vhci_device speed not set [ 172.515474][T13489] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 172.522693][T13489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.530575][T13489] vhci_hcd vhci_hcd.0: Device attached [ 172.537796][T13490] vhci_hcd: connection closed [ 172.539757][ T8782] vhci_hcd: stop threads [ 172.548928][ T8782] vhci_hcd: release socket [ 172.553360][ T8782] vhci_hcd: disconnect device [ 172.575178][T13497] wireguard1: entered promiscuous mode [ 172.580866][T13497] wireguard1: entered allmulticast mode [ 173.532863][T13598] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 173.539463][T13598] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.547763][T13598] vhci_hcd vhci_hcd.0: Device attached [ 173.583986][T13599] vhci_hcd: connection closed [ 173.584220][ T8797] vhci_hcd: stop threads [ 173.593480][ T8797] vhci_hcd: release socket [ 173.598095][ T8797] vhci_hcd: disconnect device [ 173.647230][T13619] loop4: detected capacity change from 0 to 512 [ 173.658606][T13619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.675804][T13619] EXT4-fs (loop4): 1 truncate cleaned up [ 173.682614][T13619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.761147][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.823035][T13635] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 174.183445][T13662] loop4: detected capacity change from 0 to 1024 [ 174.209389][T13662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.232146][T13662] ext4 filesystem being mounted at /754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.285133][T13662] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm syz.4.3604: lblock 8 mapped to illegal pblock 8 (length 1) [ 174.305534][T13662] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 174.318019][T13662] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.318019][T13662] [ 174.353363][T13662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 174.378551][T13662] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 174.391430][T13662] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.391430][T13662] [ 174.401304][T13662] EXT4-fs (loop4): Total free blocks count 0 [ 174.407383][T13662] EXT4-fs (loop4): Free/Dirty block details [ 174.413341][T13662] EXT4-fs (loop4): free_blocks=4293918720 [ 174.419151][T13662] EXT4-fs (loop4): dirty_blocks=480 [ 174.424437][T13662] EXT4-fs (loop4): Block reservation details [ 174.517245][ T8802] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 7) [ 175.094992][T13681] loop6: detected capacity change from 0 to 1024 [ 175.129248][T13681] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.140330][T13681] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 175.178431][T13681] JBD2: no valid journal superblock found [ 175.184213][T13681] EXT4-fs (loop6): Could not load journal inode [ 175.352686][T13703] random: crng reseeded on system resumption [ 175.560231][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 175.560249][ T30] audit: type=1326 audit(1748744380.073:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="syz.7.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 175.562223][ T30] audit: type=1326 audit(1748744380.073:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="syz.7.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 175.562329][ T30] audit: type=1326 audit(1748744380.073:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="syz.7.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 175.584503][T13715] __nla_validate_parse: 2 callbacks suppressed [ 175.584523][T13715] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3620'. [ 175.674390][T13715] batadv_slave_1: entered promiscuous mode [ 175.838372][ T30] audit: type=1400 audit(1748744380.353:3834): avc: denied { write } for pid=13736 comm="syz.4.3642" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 175.842222][T13738] hub 9-0:1.0: USB hub found [ 175.842287][T13738] hub 9-0:1.0: 8 ports detected [ 175.894547][ T30] audit: type=1400 audit(1748744380.403:3835): avc: denied { write } for pid=13742 comm="syz.5.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 175.897297][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3629'. [ 175.923186][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3629'. [ 175.965419][ T30] audit: type=1400 audit(1748744380.473:3836): avc: denied { watch watch_reads } for pid=13747 comm="syz.5.3646" path="/457" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 175.966199][ T30] audit: type=1400 audit(1748744380.473:3837): avc: denied { watch } for pid=13747 comm="syz.5.3646" path="/457/file0" dev="tmpfs" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.073404][T13752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 176.073434][T13752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.073466][T13752] vhci_hcd vhci_hcd.0: Device attached [ 176.074537][T13753] vhci_hcd: connection closed [ 176.074654][ T8761] vhci_hcd: stop threads [ 176.074665][ T8761] vhci_hcd: release socket [ 176.074674][ T8761] vhci_hcd: disconnect device [ 176.140429][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3640'. [ 176.143509][T13762] ipvlan0: entered promiscuous mode [ 176.147745][T13762] ipvlan0: left promiscuous mode [ 176.162903][ T30] audit: type=1400 audit(1748744380.673:3838): avc: denied { append } for pid=13767 comm="syz.5.3643" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.218625][ T30] audit: type=1400 audit(1748744380.733:3839): avc: denied { write } for pid=13773 comm="syz.1.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.272845][T13778] loop7: detected capacity change from 0 to 512 [ 176.317038][ T30] audit: type=1326 audit(1748744380.823:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.1.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 176.350235][T13778] EXT4-fs (loop7): 1 orphan inode deleted [ 176.360454][T13778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.375365][T13778] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.380498][ T8790] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 1 [ 176.417316][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.434879][T13793] loop1: detected capacity change from 0 to 1024 [ 176.442823][T13793] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.453988][T13793] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 176.468118][T13793] JBD2: no valid journal superblock found [ 176.474122][T13793] EXT4-fs (loop1): Could not load journal inode [ 177.357722][T13828] loop5: detected capacity change from 0 to 512 [ 177.383369][T13828] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 177.400624][T13828] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 177.411654][T13828] System zones: 0-2, 18-18, 34-35 [ 177.430742][T13828] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.490333][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3662'. [ 177.529507][T13857] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 177.536219][T13857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.544350][T13857] vhci_hcd vhci_hcd.0: Device attached [ 177.555555][T13862] vhci_hcd: connection closed [ 177.556024][ T8790] vhci_hcd: stop threads [ 177.565151][ T8790] vhci_hcd: release socket [ 177.569733][ T8790] vhci_hcd: disconnect device [ 177.584882][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 177.672195][T13878] loop6: detected capacity change from 0 to 512 [ 177.682075][T13878] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 177.699751][T13878] EXT4-fs (loop6): 1 truncate cleaned up [ 177.705962][T13878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.740712][T13888] loop5: detected capacity change from 0 to 512 [ 177.751098][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.768857][T13888] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 177.774934][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3697'. [ 177.779767][T13888] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 177.798792][T13888] EXT4-fs (loop5): group descriptors corrupted! [ 177.953048][T13931] loop7: detected capacity change from 0 to 1024 [ 177.961758][T13931] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 177.980943][T13931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.000331][T13931] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.3694: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 178.034841][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.270166][T13956] loop4: detected capacity change from 0 to 1024 [ 178.282950][T13956] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.294151][T13956] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.319244][T13956] JBD2: no valid journal superblock found [ 178.325300][T13956] EXT4-fs (loop4): Could not load journal inode [ 178.370741][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3709'. [ 178.380250][T13975] netlink: 'syz.6.3709': attribute type 1 has an invalid length. [ 178.388049][T13975] netlink: 'syz.6.3709': attribute type 2 has an invalid length. [ 178.452698][T13984] netlink: 'syz.6.3714': attribute type 1 has an invalid length. [ 178.460723][T13984] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3714'. [ 178.917712][T14028] loop6: detected capacity change from 0 to 1024 [ 178.959414][T14028] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.970509][T14028] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.996801][T14028] JBD2: no valid journal superblock found [ 179.002695][T14028] EXT4-fs (loop6): Could not load journal inode [ 179.354722][T14049] loop6: detected capacity change from 0 to 1024 [ 179.391341][T14049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.439047][T14067] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 179.456038][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.810065][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3766'. [ 179.812309][T14131] smc: net device bond0 applied user defined pnetid SYZ2 [ 179.845310][T14131] smc: net device bond0 erased user defined pnetid SYZ2 [ 179.899244][T14138] hsr0: entered promiscuous mode [ 179.905028][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3769'. [ 179.915248][T14138] hsr_slave_0: left promiscuous mode [ 179.940448][T14138] hsr_slave_1: left promiscuous mode [ 179.967079][T14142] loop4: detected capacity change from 0 to 1024 [ 179.974573][T14138] hsr0 (unregistering): left promiscuous mode [ 179.983101][T14142] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.994162][T14142] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 180.006819][T14142] JBD2: no valid journal superblock found [ 180.012743][T14142] EXT4-fs (loop4): Could not load journal inode [ 180.391018][T14183] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 180.449387][T14186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14186 comm=syz.7.3786 [ 180.494175][T14189] veth1_to_bond: entered promiscuous mode [ 180.501890][T14188] veth1_to_bond: left promiscuous mode [ 180.592736][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 180.592755][ T30] audit: type=1326 audit(1748744385.103:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb715df5927 code=0x7ffc0000 [ 180.647414][ T30] audit: type=1326 audit(1748744385.103:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb715d9ab39 code=0x7ffc0000 [ 180.671050][ T30] audit: type=1326 audit(1748744385.103:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb715df5927 code=0x7ffc0000 [ 180.694731][ T30] audit: type=1326 audit(1748744385.103:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb715d9ab39 code=0x7ffc0000 [ 180.718297][ T30] audit: type=1326 audit(1748744385.103:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 180.741924][ T30] audit: type=1326 audit(1748744385.103:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 180.765561][ T30] audit: type=1326 audit(1748744385.103:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 180.789087][ T30] audit: type=1326 audit(1748744385.103:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 180.812798][ T30] audit: type=1326 audit(1748744385.103:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 180.837090][ T30] audit: type=1326 audit(1748744385.103:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.7.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 180.991017][T14206] loop6: detected capacity change from 0 to 736 [ 181.063047][T14206] rock: directory entry would overflow storage [ 181.069320][T14206] rock: sig=0x5850, size=36, remaining=14 [ 181.136690][T14229] loop7: detected capacity change from 0 to 128 [ 181.203598][T14229] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.217989][T14239] vlan0: entered allmulticast mode [ 181.229705][T14229] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.326911][ T6757] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.787274][T14219] Set syz1 is full, maxelem 65536 reached [ 181.802375][T14263] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.853199][T14265] loop6: detected capacity change from 0 to 1024 [ 181.877422][T14265] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.888454][T14265] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 181.916041][T14271] openvswitch: netlink: Message has 6 unknown bytes. [ 181.967006][T14265] JBD2: no valid journal superblock found [ 181.972862][T14265] EXT4-fs (loop6): Could not load journal inode [ 182.154924][T14292] bridge0: port 4(syz_tun) entered blocking state [ 182.161772][T14292] bridge0: port 4(syz_tun) entered disabled state [ 182.266584][T14292] syz_tun: entered allmulticast mode [ 182.275883][T14292] syz_tun: entered promiscuous mode [ 182.281834][T14292] bridge0: port 4(syz_tun) entered blocking state [ 182.288372][T14292] bridge0: port 4(syz_tun) entered forwarding state [ 182.324818][T14293] syz_tun: left allmulticast mode [ 182.330019][T14293] syz_tun: left promiscuous mode [ 182.335351][T14293] bridge0: port 4(syz_tun) entered disabled state [ 182.378062][T14293] dummy0: left allmulticast mode [ 182.389255][T14293] bridge0: port 3(dummy0) entered disabled state [ 182.423060][T14293] bridge_slave_0: left allmulticast mode [ 182.428889][T14293] bridge_slave_0: left promiscuous mode [ 182.434603][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.643587][T14293] bridge_slave_1: left allmulticast mode [ 182.649424][T14293] bridge_slave_1: left promiscuous mode [ 182.655139][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.746932][T14293] bond0: (slave bond_slave_0): Releasing backup interface [ 182.797129][T14293] bond0: (slave bond_slave_1): Releasing backup interface [ 182.832235][T14293] team0: Port device team_slave_0 removed [ 182.842519][T14293] team0: Port device team_slave_1 removed [ 182.850042][T14293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.857580][T14293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.880707][T14293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.888176][T14293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.012032][T14301] netlink: 'syz.1.3828': attribute type 10 has an invalid length. [ 183.038518][T14301] veth0_vlan: entered allmulticast mode [ 183.054687][T14301] veth0_vlan: left promiscuous mode [ 183.080880][T14301] veth0_vlan: entered promiscuous mode [ 183.093740][T14301] team0: Device veth0_vlan failed to register rx_handler [ 183.176541][T14325] loop1: detected capacity change from 0 to 512 [ 183.197707][T14325] EXT4-fs: Ignoring removed i_version option [ 183.256372][T14325] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 183.274790][T14325] System zones: 0-2, 18-18, 34-35 [ 183.285674][T14325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.308513][T14325] ext4 filesystem being mounted at /719/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.363948][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.472337][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'. [ 183.482353][T14347] loop4: detected capacity change from 0 to 512 [ 183.506350][T14347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.553490][T14347] ext4 filesystem being mounted at /806/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.555280][T14352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.603590][T14359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.630159][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.652956][T14359] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 183.697762][T14359] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 184.060688][T14424] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 184.573086][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3863'. [ 184.606493][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3863'. [ 184.647798][T14458] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 184.716444][T14462] netlink: 344 bytes leftover after parsing attributes in process `syz.5.3867'. [ 184.883678][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3877'. [ 184.904016][T14485] loop5: detected capacity change from 0 to 128 [ 184.936044][T14485] syz.5.3875: attempt to access beyond end of device [ 184.936044][T14485] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 184.949517][T14485] buffer_io_error: 22 callbacks suppressed [ 184.949530][T14485] Buffer I/O error on dev loop5, logical block 2065, async page read [ 184.980759][T14485] syz.5.3875: attempt to access beyond end of device [ 184.980759][T14485] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 184.994325][T14485] Buffer I/O error on dev loop5, logical block 2066, async page read [ 185.003922][T14485] syz.5.3875: attempt to access beyond end of device [ 185.003922][T14485] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 185.017535][T14485] Buffer I/O error on dev loop5, logical block 2067, async page read [ 185.030800][T14485] syz.5.3875: attempt to access beyond end of device [ 185.030800][T14485] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 185.045441][T14485] Buffer I/O error on dev loop5, logical block 2068, async page read [ 185.053981][T14485] syz.5.3875: attempt to access beyond end of device [ 185.053981][T14485] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 185.068152][T14485] Buffer I/O error on dev loop5, logical block 2069, async page read [ 185.085587][T14485] syz.5.3875: attempt to access beyond end of device [ 185.085587][T14485] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 185.099000][T14485] Buffer I/O error on dev loop5, logical block 2070, async page read [ 185.110128][T14485] syz.5.3875: attempt to access beyond end of device [ 185.110128][T14485] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 185.123452][T14485] Buffer I/O error on dev loop5, logical block 2071, async page read [ 185.134931][T14485] syz.5.3875: attempt to access beyond end of device [ 185.134931][T14485] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 185.148477][T14485] Buffer I/O error on dev loop5, logical block 2072, async page read [ 185.157486][T14485] syz.5.3875: attempt to access beyond end of device [ 185.157486][T14485] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 185.170880][T14485] Buffer I/O error on dev loop5, logical block 2065, async page read [ 185.180310][T14485] syz.5.3875: attempt to access beyond end of device [ 185.180310][T14485] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 185.194005][T14485] Buffer I/O error on dev loop5, logical block 2066, async page read [ 185.277197][T14523] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 185.619987][T14552] loop7: detected capacity change from 0 to 512 [ 185.657400][T14552] EXT4-fs (loop7): orphan cleanup on readonly fs [ 185.687796][T14552] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3895: bg 0: block 248: padding at end of block bitmap is not set [ 185.709729][T14552] __quota_error: 63 callbacks suppressed [ 185.709748][T14552] Quota error (device loop7): write_blk: dquota write failed [ 185.723054][T14552] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 185.733191][T14552] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3895: Failed to acquire dquot type 1 [ 185.758889][T14552] EXT4-fs (loop7): 1 truncate cleaned up [ 185.785408][T14552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.842575][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 185.850329][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 185.869936][ T36] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 185.879675][ T36] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.901693][T14558] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 185.921412][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.963178][ T30] audit: type=1326 audit(1748744390.473:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14576 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeb8fe969 code=0x7ffc0000 [ 186.002136][ T30] audit: type=1326 audit(1748744390.503:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14576 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeeb8fe969 code=0x7ffc0000 [ 186.026289][ T30] audit: type=1326 audit(1748744390.503:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14576 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeb8fe969 code=0x7ffc0000 [ 186.049964][ T30] audit: type=1326 audit(1748744390.503:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14576 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeeb8fe969 code=0x7ffc0000 [ 186.073542][ T30] audit: type=1326 audit(1748744390.503:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 186.096230][ T30] audit: type=1326 audit(1748744390.503:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 186.118968][ T30] audit: type=1326 audit(1748744390.503:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb715dfe969 code=0x7ffc0000 [ 186.141524][ T30] audit: type=1326 audit(1748744390.503:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14576 comm="syz.4.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeeb8fe969 code=0x7ffc0000 [ 186.265679][T14588] loop6: detected capacity change from 0 to 256 [ 186.384725][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3912'. [ 186.657241][T14639] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 186.863347][T14661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.873776][T14662] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 186.978708][T14671] loop6: detected capacity change from 0 to 1024 [ 187.052931][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3946'. [ 187.062386][T14671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.103295][T14671] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3940: bg 0: block 88: padding at end of block bitmap is not set [ 187.177966][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.322197][T14723] bond1: entered promiscuous mode [ 187.327388][T14723] bond1: entered allmulticast mode [ 187.351998][T14760] loop5: detected capacity change from 0 to 256 [ 187.359320][T14723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.380776][T14723] bond1 (unregistering): Released all slaves [ 187.441785][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3962'. [ 187.450870][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3962'. [ 187.460196][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3962'. [ 187.537231][T14807] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 187.714767][T14834] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 187.913976][T14855] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 188.014687][T14863] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 188.092236][T14883] batadv1: entered promiscuous mode [ 188.097573][T14883] batadv1: entered allmulticast mode [ 188.160771][T14887] loop4: detected capacity change from 0 to 1024 [ 188.200260][T14887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.240892][T14887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3998: bg 0: block 88: padding at end of block bitmap is not set [ 188.275547][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.411047][T14928] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 188.514074][T14942] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 188.546569][T14951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.585363][T14950] loop1: detected capacity change from 0 to 1024 [ 188.647809][T14950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.664290][T14950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4019: bg 0: block 88: padding at end of block bitmap is not set [ 188.769632][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.122990][T15017] loop5: detected capacity change from 0 to 256 [ 189.133434][T15013] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 189.624405][T15077] loop4: detected capacity change from 0 to 256 [ 189.722898][T15095] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 190.176813][T15116] loop4: detected capacity change from 0 to 512 [ 190.224484][T15116] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.256042][T15116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4081: bg 0: block 248: padding at end of block bitmap is not set [ 190.382657][T15116] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4081: Failed to acquire dquot type 1 [ 190.417446][T15140] netlink: 'syz.6.4089': attribute type 1 has an invalid length. [ 190.427180][T15116] EXT4-fs (loop4): 1 truncate cleaned up [ 190.937766][T15116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.152346][ T3465] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 191.160160][ T3465] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 191.201780][ T3465] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 191.247559][ T3465] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 191.280088][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.629667][T15182] loop7: detected capacity change from 0 to 256 [ 191.729434][T15192] openvswitch: netlink: Message has 6 unknown bytes. [ 191.871589][T15207] loop5: detected capacity change from 0 to 512 [ 191.924638][T15207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.943679][T15207] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.023785][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.053117][T15221] netlink: 'syz.4.4111': attribute type 10 has an invalid length. [ 192.097146][T15221] veth0_vlan: entered allmulticast mode [ 192.138545][T15221] veth0_vlan: left promiscuous mode [ 192.164458][T15221] veth0_vlan: entered promiscuous mode [ 192.177605][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 192.177621][ T30] audit: type=1326 audit(1748744396.683:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 192.207661][ T30] audit: type=1326 audit(1748744396.683:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 192.247191][T15221] team0: Device veth0_vlan failed to register rx_handler [ 192.254793][ T30] audit: type=1326 audit(1748744396.743:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 192.278558][ T30] audit: type=1326 audit(1748744396.743:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 192.302156][ T30] audit: type=1326 audit(1748744396.743:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 192.325793][ T30] audit: type=1326 audit(1748744396.743:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0592ed2d0 code=0x7ffc0000 [ 192.349520][ T30] audit: type=1326 audit(1748744396.743:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff0592f0197 code=0x7ffc0000 [ 192.373178][ T30] audit: type=1326 audit(1748744396.743:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 192.396839][ T30] audit: type=1326 audit(1748744396.743:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff0592f0197 code=0x7ffc0000 [ 192.420573][ T30] audit: type=1326 audit(1748744396.743:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.6.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0592ed5ca code=0x7ffc0000 [ 192.488788][T15247] openvswitch: netlink: Message has 6 unknown bytes. [ 192.499414][T15244] loop6: detected capacity change from 0 to 512 [ 192.510220][T15244] EXT4-fs: Ignoring removed i_version option [ 192.537817][T15244] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 192.546161][T15244] System zones: 0-2, 18-18, 34-35 [ 192.557063][T15244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.572715][T15244] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.599304][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.625654][T15262] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 192.637416][T15266] bridge0: port 3(syz_tun) entered blocking state [ 192.644003][T15266] bridge0: port 3(syz_tun) entered disabled state [ 192.669889][T15266] syz_tun: entered allmulticast mode [ 192.680653][T15266] syz_tun: entered promiscuous mode [ 192.686341][T15266] bridge0: port 3(syz_tun) entered blocking state [ 192.692893][T15266] bridge0: port 3(syz_tun) entered forwarding state [ 192.709704][T15266] syz_tun: left allmulticast mode [ 192.714831][T15266] syz_tun: left promiscuous mode [ 192.720358][T15266] bridge0: port 3(syz_tun) entered disabled state [ 192.757270][T15266] bridge_slave_0: left promiscuous mode [ 192.763152][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.772518][T15266] bridge_slave_1: left allmulticast mode [ 192.778415][T15266] bridge_slave_1: left promiscuous mode [ 192.784437][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.794535][T15266] bond0: (slave bond_slave_0): Releasing backup interface [ 192.804663][T15266] bond0: (slave bond_slave_1): Releasing backup interface [ 192.816740][T15266] team0: Port device team_slave_0 removed [ 192.825246][T15266] team0: Port device team_slave_1 removed [ 192.832182][T15266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.839750][T15266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.848682][T15266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.856089][T15266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.874166][T15278] vlan0: entered allmulticast mode [ 192.879414][T15278] bridge_slave_0: entered allmulticast mode [ 192.960154][T15292] loop4: detected capacity change from 0 to 128 [ 192.968674][T15292] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.982149][T15292] ext4 filesystem being mounted at /872/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.053510][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.105361][T15315] bridge0: port 5(syz_tun) entered blocking state [ 193.112049][T15315] bridge0: port 5(syz_tun) entered disabled state [ 193.119240][T15315] syz_tun: entered promiscuous mode [ 193.124881][T15315] bridge0: port 5(syz_tun) entered blocking state [ 193.131434][T15315] bridge0: port 5(syz_tun) entered forwarding state [ 193.159521][T15315] syz_tun: left promiscuous mode [ 193.164728][T15315] bridge0: port 5(syz_tun) entered disabled state [ 193.191393][T15315] team0: left allmulticast mode [ 193.201022][T15315] team_slave_0: left allmulticast mode [ 193.206710][T15315] team_slave_1: left allmulticast mode [ 193.212500][T15315] bridge0: port 3(team0) entered disabled state [ 193.221473][T15315] dummy0: left allmulticast mode [ 193.226618][T15315] bridge0: port 4(dummy0) entered disabled state [ 193.274754][T15315] bridge_slave_0: left allmulticast mode [ 193.280722][T15315] bridge_slave_0: left promiscuous mode [ 193.286442][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.295975][T15315] bridge_slave_1: left allmulticast mode [ 193.301831][T15315] bridge_slave_1: left promiscuous mode [ 193.307612][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.318130][T15315] bond0: (slave bond_slave_0): Releasing backup interface [ 193.330426][T15315] bond0: (slave bond_slave_1): Releasing backup interface [ 193.343269][T15315] team_slave_0: left promiscuous mode [ 193.352053][T15315] team0: Port device team_slave_0 removed [ 193.359791][T15315] team_slave_1: left promiscuous mode [ 193.367437][T15315] team0: Port device team_slave_1 removed [ 193.376159][T15315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.383818][T15315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.393580][T15315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.401351][T15315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.422673][T15315] bond1: (slave bond2): Releasing backup interface [ 193.434615][T15322] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 193.479788][ T36] syz!: Port: 1 Link DOWN [ 193.630493][T15347] bridge0: port 4(syz_tun) entered blocking state [ 193.637013][T15347] bridge0: port 4(syz_tun) entered disabled state [ 193.676128][T15347] syz_tun: entered allmulticast mode [ 193.688737][T15347] syz_tun: entered promiscuous mode [ 193.712652][T15347] bridge0: port 4(syz_tun) entered blocking state [ 193.719238][T15347] bridge0: port 4(syz_tun) entered forwarding state [ 193.732508][T15353] loop7: detected capacity change from 0 to 736 [ 193.773691][T15353] rock: directory entry would overflow storage [ 193.778322][T15347] syz_tun: left allmulticast mode [ 193.779994][T15353] rock: sig=0x5850, size=36, remaining=14 [ 193.784942][T15347] syz_tun: left promiscuous mode [ 193.785154][T15347] bridge0: port 4(syz_tun) entered disabled state [ 193.876396][T15363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15363 comm=syz.4.4165 [ 193.896244][T15347] team0: left allmulticast mode [ 193.939372][T15347] team_slave_0: left allmulticast mode [ 193.945010][T15347] team_slave_1: left allmulticast mode [ 193.950769][T15347] bridge0: port 3(team0) entered disabled state [ 193.969467][T15347] $H: (slave dummy0): Releasing backup interface [ 193.995080][T15347] dummy0: left promiscuous mode [ 194.044720][T15347] bridge_slave_0: left promiscuous mode [ 194.050513][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.071922][T15347] bridge_slave_1: left allmulticast mode [ 194.077682][T15347] bridge_slave_1: left promiscuous mode [ 194.083418][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.118471][T15347] $H: (slave bond_slave_0): Releasing backup interface [ 194.137617][T15347] bond_slave_0: left promiscuous mode [ 194.166500][T15347] $H: (slave bond_slave_1): Releasing backup interface [ 194.176076][T15389] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 194.198779][T15347] bond_slave_1: left promiscuous mode [ 194.209394][T15347] team_slave_0: left promiscuous mode [ 194.237334][T15347] team0: Port device team_slave_0 removed [ 194.244598][T15347] team_slave_1: left promiscuous mode [ 194.275301][T15347] team0: Port device team_slave_1 removed [ 194.298443][T15377] veth1_to_bond: entered promiscuous mode [ 194.339966][T15369] veth1_to_bond: left promiscuous mode [ 194.500347][T15403] hsr0: entered promiscuous mode [ 194.511600][T15403] __nla_validate_parse: 3 callbacks suppressed [ 194.511618][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4178'. [ 194.640519][T15373] Set syz1 is full, maxelem 65536 reached [ 194.648346][T15403] hsr_slave_0: left promiscuous mode [ 194.693586][T15403] hsr_slave_1: left promiscuous mode [ 194.727102][T15403] hsr0 (unregistering): left promiscuous mode [ 194.737149][T15406] smc: net device bond0 applied user defined pnetid SYZ2 [ 194.759599][T15410] smc: net device bond0 erased user defined pnetid SYZ2 [ 194.827715][T15440] loop4: detected capacity change from 0 to 1024 [ 194.841814][T15440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.875524][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.251466][T15522] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.272031][T15526] netlink: 'syz.7.4222': attribute type 1 has an invalid length. [ 195.280005][T15526] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4222'. [ 195.334616][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 195.376665][T15545] loop1: detected capacity change from 0 to 1024 [ 195.403882][T15549] netlink: 'syz.4.4241': attribute type 1 has an invalid length. [ 195.411733][T15549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4241'. [ 195.427536][T15545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.445346][T15557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4228'. [ 195.454614][T15557] netlink: 'syz.5.4228': attribute type 1 has an invalid length. [ 195.462476][T15557] netlink: 'syz.5.4228': attribute type 2 has an invalid length. [ 195.485967][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.528566][T15570] hsr0: entered promiscuous mode [ 195.605222][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4240'. [ 195.742637][T15608] loop1: detected capacity change from 0 to 1024 [ 195.751744][T15608] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 195.772075][T15608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.801257][T15608] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.4249: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 195.869960][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.919815][T15618] loop5: detected capacity change from 0 to 1024 [ 195.942550][T15618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.999526][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.423614][T15705] loop7: detected capacity change from 0 to 512 [ 196.451724][T15705] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 196.467793][T15705] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 196.477418][T15705] System zones: 0-2, 18-18, 34-35 [ 196.492082][T15705] EXT4-fs (loop7): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.530357][T15705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4278'. [ 196.581150][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 196.619494][T15729] loop6: detected capacity change from 0 to 512 [ 196.642669][T15729] EXT4-fs (loop6): 1 orphan inode deleted [ 196.655125][T15729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.669046][ T8774] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 196.681222][T15729] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.735009][T15748] hub 9-0:1.0: USB hub found [ 196.745213][T15748] hub 9-0:1.0: 8 ports detected [ 196.753841][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.831263][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4299'. [ 196.840527][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4299'. [ 196.902877][T15784] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4308'. [ 196.913117][T15784] batadv_slave_1: entered promiscuous mode [ 197.045011][T15809] loop4: detected capacity change from 0 to 512 [ 197.063074][T15809] EXT4-fs (loop4): 1 orphan inode deleted [ 197.071610][T15809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.084396][ T8805] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 1 [ 197.084699][T15809] ext4 filesystem being mounted at /901/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.130886][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.165860][T15823] random: crng reseeded on system resumption [ 197.205142][T15826] ipvlan0: entered promiscuous mode [ 197.211354][T15826] ipvlan0: left promiscuous mode [ 197.235903][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 197.235920][ T30] audit: type=1326 audit(1748744401.743:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.1.4323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x0 [ 197.325303][T15839] loop6: detected capacity change from 0 to 1024 [ 197.328470][T15838] hub 9-0:1.0: USB hub found [ 197.338561][T15838] hub 9-0:1.0: 8 ports detected [ 197.351796][T15839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.364280][T15839] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.381585][T15839] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.4340: lblock 8 mapped to illegal pblock 8 (length 1) [ 197.415419][T15839] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 197.427941][T15839] EXT4-fs (loop6): This should not happen!! Data will be lost [ 197.427941][T15839] [ 197.458013][T15839] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 197.473478][T15839] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 197.486217][T15839] EXT4-fs (loop6): This should not happen!! Data will be lost [ 197.486217][T15839] [ 197.486944][ T30] audit: type=1326 audit(1748744401.983:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 197.495988][T15839] EXT4-fs (loop6): Total free blocks count 0 [ 197.519635][ T30] audit: type=1326 audit(1748744401.983:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 197.525609][T15839] EXT4-fs (loop6): Free/Dirty block details [ 197.549221][ T30] audit: type=1326 audit(1748744401.983:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 197.555128][T15839] EXT4-fs (loop6): free_blocks=4293918720 [ 197.578528][ T30] audit: type=1326 audit(1748744401.983:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 197.584270][T15839] EXT4-fs (loop6): dirty_blocks=480 [ 197.613282][T15839] EXT4-fs (loop6): Block reservation details [ 197.641680][T15855] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 197.660026][T15857] loop1: detected capacity change from 0 to 512 [ 197.682438][T15857] EXT4-fs (loop1): 1 orphan inode deleted [ 197.690247][T15857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.702932][ T8774] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.712759][ T8774] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 197.725378][T15857] ext4 filesystem being mounted at /829/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.738692][ T8774] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 7) [ 197.785553][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.680009][ T30] audit: type=1326 audit(1748744403.193:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 198.692510][T15912] loop5: detected capacity change from 0 to 512 [ 198.703647][ T30] audit: type=1326 audit(1748744403.193:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 198.749015][T15912] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.763603][ T30] audit: type=1326 audit(1748744403.243:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 198.787135][ T30] audit: type=1326 audit(1748744403.243:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.1.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a957e969 code=0x7ffc0000 [ 198.833708][T15912] EXT4-fs (loop5): 1 truncate cleaned up [ 198.841058][T15912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.959983][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.551784][T16011] __nla_validate_parse: 3 callbacks suppressed [ 199.551872][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4381'. [ 199.567006][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4381'. [ 199.578974][T16011] wireguard1: entered promiscuous mode [ 199.584584][T16011] wireguard1: entered allmulticast mode [ 200.094796][T16084] loop6: detected capacity change from 0 to 512 [ 200.102211][T16084] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.127161][T16084] EXT4-fs (loop6): 1 truncate cleaned up [ 200.136801][T16084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.214435][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.239907][T16095] loop5: detected capacity change from 0 to 512 [ 200.260311][T16095] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 200.278254][T16095] EXT4-fs (loop5): invalid journal inode [ 200.284275][T16095] EXT4-fs (loop5): can't get journal size [ 200.291519][T16095] EXT4-fs (loop5): 1 truncate cleaned up [ 200.297810][T16095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.330685][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.356847][T16114] loop5: detected capacity change from 0 to 1024 [ 200.390820][T16114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.404594][T16114] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.421897][T16114] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.4420: lblock 8 mapped to illegal pblock 8 (length 1) [ 200.437786][T16114] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 200.450286][T16114] EXT4-fs (loop5): This should not happen!! Data will be lost [ 200.450286][T16114] [ 200.473959][T16114] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 200.492818][T16114] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 200.505344][T16114] EXT4-fs (loop5): This should not happen!! Data will be lost [ 200.505344][T16114] [ 200.515086][T16114] EXT4-fs (loop5): Total free blocks count 0 [ 200.521130][T16114] EXT4-fs (loop5): Free/Dirty block details [ 200.527097][T16114] EXT4-fs (loop5): free_blocks=4293918720 [ 200.533011][T16114] EXT4-fs (loop5): dirty_blocks=480 [ 200.538317][T16114] EXT4-fs (loop5): Block reservation details [ 200.571844][ T8772] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 7) [ 200.801561][T16128] sd 0:0:1:0: device reset [ 200.862753][T16135] loop5: detected capacity change from 0 to 128 [ 200.980766][T16136] loop7: detected capacity change from 0 to 8192 [ 200.983232][T16135] bio_check_eod: 6 callbacks suppressed [ 200.983246][T16135] syz.5.4426: attempt to access beyond end of device [ 200.983246][T16135] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 200.987487][T16136] vfat: Unknown parameter 'H!1`w )ea뀋-sà_uŪ][_Hqm5W)-3?b5e]C"XG \ZHPX0xffffffffffffffff184467440737095516150xffffffffffffffff' [ 201.178448][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4445'. [ 201.187375][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4445'. [ 201.599151][T16190] program syz.6.4448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.654182][T16193] SELinux: truncated policydb string identifier [ 201.661357][T16193] SELinux: failed to load policy [ 201.863297][T16213] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 201.870322][T16213] syzkaller1: Refused to change device type [ 201.888464][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 201.906754][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 201.930525][T16226] ref_ctr_offset mismatch. inode: 0xc2a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000300 [ 202.087679][T16246] loop5: detected capacity change from 0 to 128 [ 202.181705][T16259] loop7: detected capacity change from 0 to 256 [ 202.451477][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 202.451493][ T30] audit: type=1400 audit(1748744406.963:4176): avc: denied { connect } for pid=16288 comm="syz.6.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.492782][ T30] audit: type=1400 audit(1748744406.983:4177): avc: denied { read } for pid=16288 comm="syz.6.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.532638][ T30] audit: type=1326 audit(1748744407.043:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.556476][ T30] audit: type=1326 audit(1748744407.043:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.580034][ T30] audit: type=1326 audit(1748744407.043:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.603663][ T30] audit: type=1326 audit(1748744407.043:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.627266][ T30] audit: type=1326 audit(1748744407.043:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.651382][ T30] audit: type=1326 audit(1748744407.043:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.674988][ T30] audit: type=1326 audit(1748744407.043:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.698601][ T30] audit: type=1326 audit(1748744407.043:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16293 comm="syz.5.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 202.772033][T16304] loop7: detected capacity change from 0 to 512 [ 202.782084][T16306] $H: renamed from bond0 (while UP) [ 202.793212][T16304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.806812][T16306] $H: entered promiscuous mode [ 202.807350][T16304] ext4 filesystem being mounted at /684/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.828831][T16298] IPVS: Error connecting to the multicast addr [ 202.852707][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.862418][T16311] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 202.879434][T16317] loop1: detected capacity change from 0 to 256 [ 202.893121][T16313] loop6: detected capacity change from 0 to 1024 [ 202.908585][T16313] EXT4-fs: Ignoring removed orlov option [ 202.916698][T16313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.827174][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.900931][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4522'. [ 203.909963][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4522'. [ 203.932545][T16375] wireguard0: entered promiscuous mode [ 203.938371][T16375] wireguard0: entered allmulticast mode [ 203.946215][T16380] loop1: detected capacity change from 0 to 256 [ 203.959022][T16380] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 203.969264][T16380] FAT-fs (loop1): Filesystem has been set read-only [ 203.979495][T16385] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 203.998153][T16385] SELinux: failed to load policy [ 204.017464][ T3316] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 204.042153][T16395] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 204.147553][T16400] SELinux: failed to load policy [ 204.274700][T16427] loop1: detected capacity change from 0 to 512 [ 204.284239][T16427] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.293515][T16427] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 204.307711][T16427] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 204.317512][T16427] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 204.326679][T16427] System zones: 0-2, 18-18, 34-35 [ 204.337874][T16427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.376562][T16438] loop4: detected capacity change from 0 to 128 [ 204.385769][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.411686][T16438] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 204.427674][T16445] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 204.446752][T16438] ext4 filesystem being mounted at /946/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.463718][T16447] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4550'. [ 204.562441][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.743903][T16476] loop1: detected capacity change from 0 to 164 [ 204.751970][T16476] rock: directory entry would overflow storage [ 204.758264][T16476] rock: sig=0x66, size=4, remaining=3 [ 205.442581][T16549] loop4: detected capacity change from 0 to 1024 [ 205.454966][T16551] loop7: detected capacity change from 0 to 164 [ 205.465521][T16551] syz.7.4584: attempt to access beyond end of device [ 205.465521][T16551] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 205.479791][T16553] loop1: detected capacity change from 0 to 512 [ 205.480778][T16551] syz.7.4584: attempt to access beyond end of device [ 205.480778][T16551] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 205.490059][T16549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.523242][T16553] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4597: Parent and EA inode have the same ino 15 [ 205.551801][T16567] xt_hashlimit: max too large, truncated to 1048576 [ 205.556438][T16553] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.4597: Parent and EA inode have the same ino 15 [ 205.583520][T16553] EXT4-fs (loop1): 1 orphan inode deleted [ 205.584853][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.590093][T16553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.631232][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.658725][T16577] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4587'. [ 206.012254][T16611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4606'. [ 206.021311][T16611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4606'. [ 206.021400][T16611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4606'. [ 206.022601][T16615] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4617'. [ 206.043172][T16611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4606'. [ 206.099485][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4610'. [ 206.110402][T16619] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 206.123292][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4610'. [ 206.218349][T16634] loop7: detected capacity change from 0 to 512 [ 206.232230][T16634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.249500][T16634] ext4 filesystem being mounted at /705/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.318727][T16634] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 206.362982][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.539112][T16676] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 206.635374][T16689] SELinux: failed to load policy [ 206.667843][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.682763][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.691926][T16695] netlink: 'syz.5.4645': attribute type 6 has an invalid length. [ 206.734110][T16703] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4647'. [ 206.819829][T16713] loop5: detected capacity change from 0 to 512 [ 206.842167][T16713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.866835][T16713] ext4 filesystem being mounted at /653/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.879018][T16713] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.4649: corrupted inode contents [ 206.895104][T16713] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.4649: mark_inode_dirty error [ 206.907852][T16713] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.4649: corrupted inode contents [ 206.978628][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.014668][T16720] loop4: detected capacity change from 0 to 764 [ 207.051102][T16725] loop4: detected capacity change from 0 to 512 [ 207.065039][T16725] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 207.082139][T16725] EXT4-fs: error: could not find journal device path [ 207.175329][T16747] batadv1: entered allmulticast mode [ 207.181975][T16747] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 207.190323][T16747] bridge0: port 1(batadv1) entered blocking state [ 207.196925][T16747] bridge0: port 1(batadv1) entered disabled state [ 207.204692][T16747] batadv1: entered promiscuous mode [ 207.214299][T16747] bridge0: port 1(batadv1) entered blocking state [ 207.220833][T16747] bridge0: port 1(batadv1) entered forwarding state [ 207.317624][T16768] smc: net device bond0 applied user defined pnetid SYZ2 [ 207.328279][T16768] smc: net device bond0 erased user defined pnetid SYZ2 [ 207.568402][ T3465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3465 comm=kworker/0:6 [ 207.583044][T16786] 9pnet: p9_errstr2errno: server reported unknown error [ 207.657963][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 207.657982][ T30] audit: type=1326 audit(1748744412.163:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.690039][ T8775] batman_adv: batadv1: IGMP Querier appeared [ 207.696075][ T8775] batman_adv: batadv1: MLD Querier appeared [ 207.726428][ T30] audit: type=1326 audit(1748744412.163:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.750147][ T30] audit: type=1326 audit(1748744412.213:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.773915][ T30] audit: type=1326 audit(1748744412.213:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.797483][ T30] audit: type=1326 audit(1748744412.213:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.821138][ T30] audit: type=1326 audit(1748744412.213:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.844833][ T30] audit: type=1326 audit(1748744412.213:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.868425][ T30] audit: type=1326 audit(1748744412.213:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.892102][ T30] audit: type=1326 audit(1748744412.213:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.915691][ T30] audit: type=1326 audit(1748744412.213:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.5.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 207.983407][T16798] loop6: detected capacity change from 0 to 1024 [ 207.995945][T16798] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.006984][T16798] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.022578][T16798] JBD2: no valid journal superblock found [ 208.028520][T16798] EXT4-fs (loop6): Could not load journal inode [ 208.040376][T16798] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 208.057977][T16807] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4681'. [ 208.071179][T16807] batadv2: entered promiscuous mode [ 208.076556][T16807] batadv2: entered allmulticast mode [ 208.142654][T16823] netlink: 'syz.6.4686': attribute type 6 has an invalid length. [ 208.181055][T16828] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 208.256194][T16843] SET target dimension over the limit! [ 208.322533][T16855] netlink: 'syz.6.4708': attribute type 29 has an invalid length. [ 208.372657][T16860] loop5: detected capacity change from 0 to 512 [ 208.391081][T16860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.403794][T16860] ext4 filesystem being mounted at /663/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.454864][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.482412][T16870] loop6: detected capacity change from 0 to 164 [ 208.502936][T16870] syz.6.4713: attempt to access beyond end of device [ 208.502936][T16870] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 208.522995][T16875] xt_hashlimit: max too large, truncated to 1048576 [ 208.541377][T16870] syz.6.4713: attempt to access beyond end of device [ 208.541377][T16870] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 208.580335][T16884] tipc: Started in network mode [ 208.585260][T16884] tipc: Node identity ac14140f, cluster identity 4711 [ 208.592474][T16884] tipc: New replicast peer: 255.255.255.255 [ 208.598824][T16884] tipc: Enabled bearer , priority 10 [ 208.672581][T16907] loop6: detected capacity change from 0 to 512 [ 208.701748][T16907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.714830][T16907] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.775422][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.403326][T16927] loop4: detected capacity change from 0 to 512 [ 209.410245][T16926] loop5: detected capacity change from 0 to 164 [ 209.410326][T16929] xt_hashlimit: max too large, truncated to 1048576 [ 209.426968][T16926] syz.5.4723: attempt to access beyond end of device [ 209.426968][T16926] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 209.443691][T16927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.455817][T16926] syz.5.4723: attempt to access beyond end of device [ 209.455817][T16926] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 209.470927][T16927] ext4 filesystem being mounted at /979/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.609556][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.674934][T16956] loop4: detected capacity change from 0 to 256 [ 209.690225][T16961] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 209.720573][ T3465] tipc: Node number set to 2886997007 [ 209.859212][T16985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.989126][T17001] loop1: detected capacity change from 0 to 256 [ 209.996937][T16999] loop6: detected capacity change from 0 to 256 [ 210.031358][T17008] loop4: detected capacity change from 0 to 512 [ 210.049171][T17011] loop5: detected capacity change from 0 to 764 [ 210.056544][T17008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.070678][T17008] ext4 filesystem being mounted at /982/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.083829][T17008] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.4748: corrupted inode contents [ 210.096000][T17008] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.4748: mark_inode_dirty error [ 210.108675][T17008] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.4748: corrupted inode contents [ 210.141221][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.412269][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.439494][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.464300][T17055] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 210.502406][T17055] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 210.665901][T17097] loop7: detected capacity change from 0 to 764 [ 210.716369][T17104] loop7: detected capacity change from 0 to 512 [ 210.728350][T17106] loop5: detected capacity change from 0 to 512 [ 210.739339][T17106] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 210.756262][T17106] EXT4-fs: error: could not find journal device path [ 210.764383][T17104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.787400][T17104] ext4 filesystem being mounted at /731/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.839406][T17104] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.4765: corrupted inode contents [ 210.851924][T17104] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.4765: mark_inode_dirty error [ 210.863727][T17104] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.4765: corrupted inode contents [ 210.892692][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.982427][T17140] loop1: detected capacity change from 0 to 128 [ 211.003187][T17143] __nla_validate_parse: 5 callbacks suppressed [ 211.003207][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4777'. [ 211.026349][T17143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.029374][T17140] syz.1.4775: attempt to access beyond end of device [ 211.029374][T17140] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 211.046262][T17140] buffer_io_error: 6 callbacks suppressed [ 211.046276][T17140] Buffer I/O error on dev loop1, logical block 2065, async page read [ 211.063693][T17143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.071728][T17143] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 211.083668][T17140] syz.1.4775: attempt to access beyond end of device [ 211.083668][T17140] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 211.097135][T17140] Buffer I/O error on dev loop1, logical block 2066, async page read [ 211.111196][T17143] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 211.120530][T17140] syz.1.4775: attempt to access beyond end of device [ 211.120530][T17140] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 211.133882][T17140] Buffer I/O error on dev loop1, logical block 2067, async page read [ 211.146785][T17140] syz.1.4775: attempt to access beyond end of device [ 211.146785][T17140] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 211.160316][T17140] Buffer I/O error on dev loop1, logical block 2068, async page read [ 211.170790][T17140] syz.1.4775: attempt to access beyond end of device [ 211.170790][T17140] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 211.184161][T17140] Buffer I/O error on dev loop1, logical block 2069, async page read [ 211.196189][T17140] syz.1.4775: attempt to access beyond end of device [ 211.196189][T17140] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 211.209655][T17140] Buffer I/O error on dev loop1, logical block 2070, async page read [ 211.245925][T17140] Buffer I/O error on dev loop1, logical block 2071, async page read [ 211.254725][T17140] Buffer I/O error on dev loop1, logical block 2072, async page read [ 211.265309][T17140] Buffer I/O error on dev loop1, logical block 2065, async page read [ 211.274939][T17186] loop7: detected capacity change from 0 to 256 [ 211.298315][T17140] Buffer I/O error on dev loop1, logical block 2066, async page read [ 211.299025][T17189] loop6: detected capacity change from 0 to 764 [ 211.348554][T17201] loop1: detected capacity change from 0 to 512 [ 211.361461][T17201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.374550][T17201] ext4 filesystem being mounted at /905/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.389677][T17201] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4784: corrupted inode contents [ 211.390538][T17209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.411236][T17201] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.4784: mark_inode_dirty error [ 211.414301][T17209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.423409][T17201] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4784: corrupted inode contents [ 211.459469][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.628931][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4793'. [ 212.236633][T17243] loop4: detected capacity change from 0 to 128 [ 212.244384][T17245] loop6: detected capacity change from 0 to 128 [ 212.289315][T17245] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 212.622686][T17254] batadv1: entered allmulticast mode [ 212.639094][T17254] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.659225][T17254] bridge0: port 1(batadv1) entered blocking state [ 212.665783][T17254] bridge0: port 1(batadv1) entered disabled state [ 212.675937][T17254] batadv1: entered promiscuous mode [ 212.676417][T17265] loop1: detected capacity change from 0 to 128 [ 212.681991][T17254] bridge0: port 1(batadv1) entered blocking state [ 212.694031][T17254] bridge0: port 1(batadv1) entered forwarding state [ 212.705733][T17265] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 212.723603][T17265] ext4 filesystem being mounted at /914/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.778971][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.128343][ T8773] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 213.137639][ T8773] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 213.517113][T17277] loop6: detected capacity change from 0 to 256 [ 213.530419][T17281] netlink: 'syz.1.4816': attribute type 13 has an invalid length. [ 213.541953][T17281] gretap0: refused to change device tx_queue_len [ 213.548551][T17281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.807324][T17291] loop5: detected capacity change from 0 to 128 [ 213.816891][T17291] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.838341][T17291] ext4 filesystem being mounted at /686/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.859174][T17298] loop6: detected capacity change from 0 to 512 [ 213.881029][T17298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.898272][T17298] ext4 filesystem being mounted at /678/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.922416][T17298] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.4806: corrupted inode contents [ 213.944244][T17298] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.4806: mark_inode_dirty error [ 213.957702][ T6624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.973187][T17298] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.4806: corrupted inode contents [ 214.003793][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.001359][T17319] loop7: detected capacity change from 0 to 128 [ 215.024195][T17319] bio_check_eod: 58 callbacks suppressed [ 215.024214][T17319] syz.7.4812: attempt to access beyond end of device [ 215.024214][T17319] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 215.044026][T17319] syz.7.4812: attempt to access beyond end of device [ 215.044026][T17319] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 215.057907][T17319] syz.7.4812: attempt to access beyond end of device [ 215.057907][T17319] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 215.071487][T17319] syz.7.4812: attempt to access beyond end of device [ 215.071487][T17319] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 215.085747][T17319] syz.7.4812: attempt to access beyond end of device [ 215.085747][T17319] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 215.145736][T17319] syz.7.4812: attempt to access beyond end of device [ 215.145736][T17319] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 215.222451][T17319] syz.7.4812: attempt to access beyond end of device [ 215.222451][T17319] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 215.307531][T17319] syz.7.4812: attempt to access beyond end of device [ 215.307531][T17319] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 215.541190][T17324] syz.7.4812: attempt to access beyond end of device [ 215.541190][T17324] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 215.707826][T17324] syz.7.4812: attempt to access beyond end of device [ 215.707826][T17324] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 215.839035][T17329] loop6: detected capacity change from 0 to 512 [ 215.860987][T17329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.879265][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4819'. [ 215.891950][T17329] ext4 filesystem being mounted at /681/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.926295][T17329] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.4820: corrupted inode contents [ 215.948846][T17329] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.4820: mark_inode_dirty error [ 215.972457][T17329] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.4820: corrupted inode contents [ 215.990556][T17329] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4820: mark_inode_dirty error [ 216.006223][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 216.006242][ T30] audit: type=1400 audit(1748744420.513:4375): avc: denied { create } for pid=17326 comm="syz.6.4820" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 216.034883][ T30] audit: type=1400 audit(1748744420.543:4376): avc: denied { mounton } for pid=17326 comm="syz.6.4820" path="/681/bus/file0/bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 216.068349][ T6705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.581842][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4834'. [ 216.709341][T17380] netlink: 'syz.5.4846': attribute type 4 has an invalid length. [ 216.720927][T17380] netlink: 'syz.5.4846': attribute type 4 has an invalid length. [ 216.919981][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4844'. [ 217.073398][T17412] loop9: detected capacity change from 0 to 7 [ 217.082357][ T30] audit: type=1400 audit(1748744421.583:4377): avc: denied { append } for pid=17409 comm="syz.4.4848" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.116413][T17412] buffer_io_error: 86 callbacks suppressed [ 217.116450][T17412] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.145071][T17412] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.153078][T17412] loop9: unable to read partition table [ 217.176974][T17412] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 217.176974][T17412] U) failed (rc=-5) [ 217.251981][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4850'. [ 217.274327][T17422] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.433877][T17432] SELinux: security_context_str_to_sid () failed with errno=-22 [ 217.441754][ T30] audit: type=1400 audit(1748744421.943:4378): avc: denied { mounton } for pid=17431 comm="syz.4.4854" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 217.521062][T17435] SELinux: ebitmap start bit (6619172) is not a multiple of the map unit size (64) [ 217.530875][T17435] SELinux: failed to load policy [ 217.712493][T17449] netlink: 'syz.7.4863': attribute type 4 has an invalid length. [ 217.722844][T17449] netlink: 'syz.7.4863': attribute type 4 has an invalid length. [ 217.755888][ T30] audit: type=1326 audit(1748744422.263:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17452 comm="syz.7.4864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb715dfe969 code=0x0 [ 217.857848][ T30] audit: type=1400 audit(1748744422.363:4380): avc: denied { lock } for pid=17452 comm="syz.7.4864" path="socket:[42645]" dev="sockfs" ino=42645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 217.893477][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4865'. [ 218.614242][T17470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.622032][T17475] loop6: detected capacity change from 0 to 256 [ 218.623161][ T30] audit: type=1326 audit(1748744423.123:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 218.652546][ T30] audit: type=1326 audit(1748744423.123:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 218.676208][ T30] audit: type=1326 audit(1748744423.123:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0592ee969 code=0x7ffc0000 [ 218.678023][T17470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.699870][ T30] audit: type=1326 audit(1748744423.123:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.6.4879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0592ee9a3 code=0x7ffc0000 [ 218.734765][T17481] loop7: detected capacity change from 0 to 128 [ 218.795590][T17492] netlink: 'syz.1.4875': attribute type 4 has an invalid length. [ 218.806687][T17492] netlink: 'syz.1.4875': attribute type 4 has an invalid length. [ 218.814878][ T8786] batman_adv: batadv1: MLD Querier appeared [ 220.091310][T17509] loop7: detected capacity change from 0 to 512 [ 220.112089][T17509] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 220.135222][T17519] loop6: detected capacity change from 0 to 256 [ 220.146405][T17509] EXT4-fs (loop7): 1 truncate cleaned up [ 220.152753][T17509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.194769][T17530] loop6: detected capacity change from 0 to 2048 [ 220.218800][T17530] loop6: p1 < > p4 [ 220.223613][T17530] loop6: p4 size 8388608 extends beyond EOD, truncated [ 220.239254][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.299153][T17548] loop7: detected capacity change from 0 to 256 [ 220.399481][T17561] loop4: detected capacity change from 0 to 128 [ 220.435431][T17561] bio_check_eod: 23 callbacks suppressed [ 220.435450][T17561] syz.4.4890: attempt to access beyond end of device [ 220.435450][T17561] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 220.454736][T17562] loop5: detected capacity change from 0 to 2048 [ 220.498970][T17562] loop5: p1 < > p4 [ 220.503544][T17562] loop5: p4 size 8388608 extends beyond EOD, truncated [ 220.539552][T17576] random: crng reseeded on system resumption [ 221.433623][T17594] loop4: detected capacity change from 0 to 512 [ 221.442530][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4902'. [ 221.461226][T17594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.476342][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 221.476358][ T30] audit: type=1326 audit(1748744425.983:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 221.509799][T17594] EXT4-fs (loop4): 1 truncate cleaned up [ 221.510235][T17594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.510733][ T30] audit: type=1326 audit(1748744426.023:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 221.518587][T17603] loop5: detected capacity change from 0 to 256 [ 221.528770][ T30] audit: type=1326 audit(1748744426.023:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa51183e969 code=0x7ffc0000 [ 221.584994][ T30] audit: type=1326 audit(1748744426.023:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa51183e9a3 code=0x7ffc0000 [ 221.585028][ T30] audit: type=1326 audit(1748744426.023:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa51183d41f code=0x7ffc0000 [ 221.585066][ T30] audit: type=1326 audit(1748744426.023:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa51183e9f7 code=0x7ffc0000 [ 221.585169][ T30] audit: type=1326 audit(1748744426.033:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa51183d2d0 code=0x7ffc0000 [ 221.585205][ T30] audit: type=1326 audit(1748744426.033:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa51183e56b code=0x7ffc0000 [ 221.585237][ T30] audit: type=1326 audit(1748744426.033:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa51183d5ca code=0x7ffc0000 [ 221.585319][ T30] audit: type=1326 audit(1748744426.033:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17602 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa51183d5ca code=0x7ffc0000 [ 221.839676][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.848819][T17641] loop9: detected capacity change from 0 to 7 [ 221.931043][T17641] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.940570][T17641] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.940592][T17641] loop9: unable to read partition table [ 221.940641][T17641] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 221.940641][T17641] U) failed (rc=-5) [ 221.951734][T17648] SELinux: ebitmap start bit (6619172) is not a multiple of the map unit size (64) [ 221.993047][T17648] SELinux: failed to load policy [ 222.020166][T17655] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 222.207537][T17680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4920'. [ 222.207587][T17680] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4920'. [ 223.125444][T17726] loop7: detected capacity change from 0 to 512 [ 223.142223][T17724] bond1: entered promiscuous mode [ 223.147440][T17724] bond1: entered allmulticast mode [ 223.159821][T17724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.171382][T17724] bond1 (unregistering): Released all slaves [ 223.185821][T17726] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.4941: bad orphan inode 11862016 [ 223.201709][T17726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 223.217456][T17726] ext4 filesystem being mounted at /772/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.237070][T17726] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 223.279529][T17726] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 223.325042][T17726] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. [ 223.375154][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 223.918454][ T8786] batman_adv: batadv1: IGMP Querier appeared [ 224.075306][T17890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17890 comm=syz.5.4968 [ 224.232843][T17933] loop7: detected capacity change from 0 to 512 [ 224.243576][T17933] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.252756][T17933] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 224.286495][T17933] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 224.295759][T17933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 224.305197][T17933] System zones: 0-2, 18-18, 34-34 [ 224.318260][T17933] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.4987: iget: bad i_size value: 360287970189639680 [ 224.334269][T17933] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4987: couldn't read orphan inode 15 (err -117) [ 224.350455][T17933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.415766][ T6757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.478449][T17965] loop7: detected capacity change from 0 to 128 [ 224.501463][T17965] syz.7.4979: attempt to access beyond end of device [ 224.501463][T17965] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 224.524619][T17965] syz.7.4979: attempt to access beyond end of device [ 224.524619][T17965] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 224.538587][T17965] syz.7.4979: attempt to access beyond end of device [ 224.538587][T17965] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 224.555427][T17965] syz.7.4979: attempt to access beyond end of device [ 224.555427][T17965] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 224.571214][T17965] syz.7.4979: attempt to access beyond end of device [ 224.571214][T17965] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 224.585670][T17965] syz.7.4979: attempt to access beyond end of device [ 224.585670][T17965] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 224.601688][T17965] syz.7.4979: attempt to access beyond end of device [ 224.601688][T17965] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 224.616715][T17970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17970 comm=syz.6.4993 [ 224.617279][T17965] syz.7.4979: attempt to access beyond end of device [ 224.617279][T17965] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 224.645230][T17965] syz.7.4979: attempt to access beyond end of device [ 224.645230][T17965] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 224.761436][T17984] loop1: detected capacity change from 0 to 128 [ 224.864199][T18009] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 224.870930][T18009] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.878530][T18009] vhci_hcd vhci_hcd.0: Device attached [ 224.902818][T18013] syzkaller1: entered promiscuous mode [ 224.908496][T18013] syzkaller1: entered allmulticast mode [ 224.918271][T18009] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 224.924868][T18009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.932586][T18009] vhci_hcd vhci_hcd.0: Device attached [ 224.951093][T18009] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 224.957733][T18009] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.965435][T18009] vhci_hcd vhci_hcd.0: Device attached [ 224.974879][T18020] vhci_hcd: connection closed [ 224.975055][T18017] vhci_hcd: connection closed [ 224.979931][ T8782] vhci_hcd: stop threads [ 224.989014][ T8782] vhci_hcd: release socket [ 224.993588][ T8782] vhci_hcd: disconnect device [ 224.998501][T18010] vhci_hcd: connection closed [ 225.010389][ T8782] vhci_hcd: stop threads [ 225.019519][ T8782] vhci_hcd: release socket [ 225.023972][ T8782] vhci_hcd: disconnect device [ 225.033836][ T8782] vhci_hcd: stop threads [ 225.038112][ T8782] vhci_hcd: release socket [ 225.042603][ T8782] vhci_hcd: disconnect device [ 225.078246][ T10] vhci_hcd: vhci_device speed not set [ 225.084447][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.103388][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.361039][T18071] loop5: detected capacity change from 0 to 512 [ 225.368567][T18071] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.381417][T18071] EXT4-fs (loop5): 1 truncate cleaned up [ 225.388002][T18071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.473530][ T6624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.493397][T18081] loop7: detected capacity change from 0 to 512 [ 225.504808][T18081] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 225.515824][T18081] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 225.525944][T18081] EXT4-fs (loop7): group descriptors corrupted! [ 225.556056][T18092] loop1: detected capacity change from 0 to 512 [ 225.572492][T18092] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.5006: bad orphan inode 11862016 [ 225.573089][T18092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 225.573247][T18092] ext4 filesystem being mounted at /945/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.610255][T18101] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5009'. [ 225.610366][T18101] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5009'. [ 225.689804][T18092] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 225.710452][T18102] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 225.729491][T18102] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. [ 225.767255][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.780250][T18114] loop7: detected capacity change from 0 to 512 [ 225.794976][T18114] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 225.811181][T18114] EXT4-fs (loop7): mount failed [ 225.817402][T18122] loop1: detected capacity change from 0 to 512 [ 225.825977][T18122] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 225.836921][T18122] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 225.847030][T18122] EXT4-fs (loop1): group descriptors corrupted! [ 225.870955][T18128] loop5: detected capacity change from 0 to 164 [ 225.880686][T18128] rock: directory entry would overflow storage [ 225.886978][T18128] rock: sig=0x66, size=4, remaining=3 [ 228.089570][T18135] loop1: detected capacity change from 0 to 1024 [ 228.096346][T18135] EXT4-fs: Ignoring removed orlov option [ 228.104618][T18135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.720841][T18143] ================================================================== [ 228.728991][T18143] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 228.737326][T18143] [ 228.739657][T18143] write to 0xffff888106f98b3c of 4 bytes by task 18135 on cpu 1: [ 228.747371][T18143] xas_set_mark+0x12b/0x140 [ 228.751888][T18143] __folio_start_writeback+0x1dd/0x430 [ 228.757367][T18143] ext4_bio_write_folio+0x5ad/0x9f0 [ 228.762662][T18143] mpage_submit_folio+0xe4/0x170 [ 228.767627][T18143] mpage_process_page_bufs+0x39b/0x4a0 [ 228.773638][T18143] mpage_prepare_extent_to_map+0x741/0xaa0 [ 228.779472][T18143] ext4_do_writepages+0xa1a/0x21c0 [ 228.784701][T18143] ext4_writepages+0x176/0x300 [ 228.789564][T18143] do_writepages+0x1c3/0x310 [ 228.794186][T18143] file_write_and_wait_range+0x156/0x2c0 [ 228.799863][T18143] generic_buffers_fsync_noflush+0x45/0x120 [ 228.805776][T18143] ext4_sync_file+0x1ab/0x690 [ 228.810493][T18143] vfs_fsync_range+0x10a/0x130 [ 228.815282][T18143] ext4_buffered_write_iter+0x34f/0x3c0 [ 228.820837][T18143] ext4_file_write_iter+0xdbf/0xf00 [ 228.826053][T18143] iter_file_splice_write+0x5ef/0x970 [ 228.831462][T18143] direct_splice_actor+0x156/0x2a0 [ 228.836636][T18143] splice_direct_to_actor+0x312/0x680 [ 228.842076][T18143] do_splice_direct+0xda/0x150 [ 228.846896][T18143] do_sendfile+0x380/0x650 [ 228.851324][T18143] __x64_sys_sendfile64+0x105/0x150 [ 228.856556][T18143] x64_sys_call+0xb39/0x2fb0 [ 228.861187][T18143] do_syscall_64+0xd2/0x200 [ 228.865704][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.871754][T18143] [ 228.874107][T18143] read to 0xffff888106f98b3c of 4 bytes by task 18143 on cpu 0: [ 228.881924][T18143] filemap_write_and_wait_range+0xfc/0x340 [ 228.887766][T18143] filemap_invalidate_pages+0xa4/0x1a0 [ 228.893323][T18143] kiocb_invalidate_pages+0x6e/0x80 [ 228.898553][T18143] __iomap_dio_rw+0x5d4/0x1250 [ 228.903421][T18143] iomap_dio_rw+0x40/0x90 [ 228.907766][T18143] ext4_file_write_iter+0xad9/0xf00 [ 228.912993][T18143] iter_file_splice_write+0x5ef/0x970 [ 228.918411][T18143] direct_splice_actor+0x156/0x2a0 [ 228.923581][T18143] splice_direct_to_actor+0x312/0x680 [ 228.929010][T18143] do_splice_direct+0xda/0x150 [ 228.933830][T18143] do_sendfile+0x380/0x650 [ 228.938286][T18143] __x64_sys_sendfile64+0x105/0x150 [ 228.943524][T18143] x64_sys_call+0xb39/0x2fb0 [ 228.948189][T18143] do_syscall_64+0xd2/0x200 [ 228.952732][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.958654][T18143] [ 228.960992][T18143] value changed: 0x0a000021 -> 0x04000021 [ 228.966743][T18143] [ 228.969102][T18143] Reported by Kernel Concurrency Sanitizer on: [ 228.975293][T18143] CPU: 0 UID: 0 PID: 18143 Comm: syz.1.5028 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) [ 228.987566][T18143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.997654][T18143] ================================================================== [ 229.031557][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.