last executing test programs: 3.545040369s ago: executing program 4 (id=1824): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x3, 0x12) socketpair(0x15, 0x5, 0x80000fd, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 3.410220061s ago: executing program 4 (id=1828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.000212559s ago: executing program 4 (id=1833): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 1.935046307s ago: executing program 4 (id=1837): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) 1.900728348s ago: executing program 3 (id=1838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.871585408s ago: executing program 4 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.817468979s ago: executing program 3 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xd) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x22, &(0x7f0000000180)={@remote, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x7, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 1.75467278s ago: executing program 3 (id=1845): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) socket$kcm(0x28, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) 1.75405782s ago: executing program 4 (id=1848): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) clock_getres(0xa, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) tkill(r0, 0x13) 1.711173371s ago: executing program 3 (id=1850): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 1.215648069s ago: executing program 0 (id=1868): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xad) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 960.107574ms ago: executing program 0 (id=1859): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000951000000950074000000000031fb0d3a4231020004399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d19e93adb604a7d3deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c4f67581c92ef8a7e8ece17d5f5b169391ef409c39c263895739e3d702c128b35d5fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)=' \x00'/14, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='N-N:N/8'], 0x6a) 952.304674ms ago: executing program 1 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 844.467746ms ago: executing program 1 (id=1863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40) 833.316206ms ago: executing program 0 (id=1864): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee00) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 644.887289ms ago: executing program 3 (id=1866): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) 644.197449ms ago: executing program 2 (id=1867): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 569.6538ms ago: executing program 1 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xbd6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 550.115911ms ago: executing program 1 (id=1870): bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 513.222971ms ago: executing program 3 (id=1871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) delete_module(0x0, 0x800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 481.273802ms ago: executing program 1 (id=1872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 420.249263ms ago: executing program 1 (id=1873): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100001f, &(0x7f0000000240)={[{@errors_remount}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x21, 0x44d, &(0x7f0000001500)="$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") socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) 385.250014ms ago: executing program 2 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc010) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {0x0, 0xfff1}, {0x0, 0x7}}}, 0x24}}, 0x4044040) 314.437325ms ago: executing program 2 (id=1875): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x5) syz_open_dev$vcsa(&(0x7f0000000180), 0x47, 0x400000) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000300)=0x8, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c099}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 247.865056ms ago: executing program 2 (id=1876): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 230.161576ms ago: executing program 0 (id=1877): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3363, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000011000300686173683a6e65742c6e6574"], 0x4c}}, 0x0) r1 = fsopen(&(0x7f00000018c0)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0) 225.209186ms ago: executing program 2 (id=1878): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x31, 0xb, 0xffffffff}]}}]}, 0x3c}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 180.252467ms ago: executing program 2 (id=1879): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 82.162459ms ago: executing program 0 (id=1880): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 0s ago: executing program 0 (id=1881): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x100, 0x0, 0x1dd}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 5 vs 150994969 free clusters [ 84.176191][ T5856] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 84.188688][ T5856] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.188688][ T5856] [ 84.198457][ T5856] EXT4-fs (loop2): Total free blocks count 0 [ 84.204471][ T5856] EXT4-fs (loop2): Free/Dirty block details [ 84.210464][ T5856] EXT4-fs (loop2): free_blocks=2415919104 [ 84.216261][ T5856] EXT4-fs (loop2): dirty_blocks=8224 [ 84.221569][ T5856] EXT4-fs (loop2): Block reservation details [ 84.227629][ T5856] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 84.260717][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.852924][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 84.869427][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 84.973344][ T5901] loop4: detected capacity change from 0 to 2048 [ 85.017050][ T5901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.389569][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.418404][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 85.429720][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 85.490452][ T5932] lo speed is unknown, defaulting to 1000 [ 85.559459][ T5939] loop4: detected capacity change from 0 to 128 [ 86.433786][ T5957] loop2: detected capacity change from 0 to 2048 [ 86.527265][ T5957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.997227][ T5964] lo speed is unknown, defaulting to 1000 [ 87.069067][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.438591][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 87.438609][ T29] audit: type=1400 audit(1749360683.313:1215): avc: denied { ioctl } for pid=5998 comm="syz.0.792" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.608033][ T6007] loop0: detected capacity change from 0 to 2048 [ 87.671196][ T6007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.858177][ T6015] loop1: detected capacity change from 0 to 512 [ 87.865862][ T6015] EXT4-fs: Ignoring removed nobh option [ 87.913787][ T6015] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 87.946527][ T6015] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.797: attempt to clear invalid blocks 2 len 1 [ 87.961677][ T6015] EXT4-fs (loop1): Remounting filesystem read-only [ 87.999598][ T6015] EXT4-fs (loop1): 1 truncate cleaned up [ 88.007902][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.018211][ T6015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.055851][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.144192][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 88.287242][ T6022] Set syz1 is full, maxelem 65536 reached [ 88.325680][ T6041] xt_hashlimit: size too large, truncated to 1048576 [ 88.540921][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 88.672033][ T6054] lo speed is unknown, defaulting to 1000 [ 89.254486][ T6067] netlink: 3 bytes leftover after parsing attributes in process `syz.1.815'. [ 89.283443][ T6067] batadv1: entered promiscuous mode [ 89.288905][ T6067] batadv1: entered allmulticast mode [ 89.442510][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.476568][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.597333][ T29] audit: type=1400 audit(1749360685.473:1216): avc: denied { setopt } for pid=6080 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.695459][ T6092] loop4: detected capacity change from 0 to 1024 [ 89.704882][ T6092] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.715946][ T6092] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.752116][ T6092] jbd2_journal_init_inode: Cannot locate journal superblock [ 89.759618][ T6092] EXT4-fs (loop4): Could not load journal inode [ 89.843979][ T29] audit: type=1400 audit(1749360685.713:1217): avc: denied { map } for pid=6099 comm="syz.2.831" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.234030][ T6128] 9pnet_fd: Insufficient options for proto=fd [ 90.241790][ T2961] IPVS: starting estimator thread 0... [ 90.298899][ T29] audit: type=1400 audit(1749360686.173:1218): avc: denied { setopt } for pid=6134 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.325133][ T29] audit: type=1326 audit(1749360686.193:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 90.348765][ T29] audit: type=1326 audit(1749360686.203:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 90.348787][ T6129] IPVS: using max 2352 ests per chain, 117600 per kthread [ 90.379465][ T29] audit: type=1326 audit(1749360686.203:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 90.403063][ T29] audit: type=1326 audit(1749360686.243:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 90.426543][ T29] audit: type=1326 audit(1749360686.243:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 90.426582][ T29] audit: type=1326 audit(1749360686.273:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 90.639903][ T6162] pim6reg1: entered promiscuous mode [ 90.645303][ T6162] pim6reg1: entered allmulticast mode [ 91.018252][ T6183] xt_hashlimit: size too large, truncated to 1048576 [ 91.217350][ T6197] syzkaller1: entered promiscuous mode [ 91.222938][ T6197] syzkaller1: entered allmulticast mode [ 91.430810][ T6208] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 91.444081][ T6208] veth0_vlan: entered allmulticast mode [ 91.450260][ T6208] veth0_vlan: left promiscuous mode [ 91.457771][ T6208] veth0_vlan: entered promiscuous mode [ 91.464599][ T6208] team0: Device veth0_vlan failed to register rx_handler [ 91.617693][ T6204] lo speed is unknown, defaulting to 1000 [ 91.659608][ T6224] C: renamed from team_slave_0 [ 91.667627][ T6224] netlink: '+}[@': attribute type 3 has an invalid length. [ 91.674937][ T6224] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 91.683556][ T6224] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 91.782629][ T6226] lo speed is unknown, defaulting to 1000 [ 92.418274][ T6264] pim6reg1: entered promiscuous mode [ 92.423653][ T6264] pim6reg1: entered allmulticast mode [ 92.569523][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 92.569542][ T29] audit: type=1400 audit(1749360688.443:1263): avc: denied { mounton } for pid=6266 comm="syz.2.897" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 92.634834][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 92.786712][ T6283] loop2: detected capacity change from 0 to 128 [ 92.807725][ T6283] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.884733][ T6283] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.076665][ T6287] lo speed is unknown, defaulting to 1000 [ 93.174593][ T6300] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 93.182538][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.909'. [ 93.212738][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 93.223412][ T6300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232517][ T6300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.273671][ T6300] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 93.297217][ T6300] team0: Failed to send options change via netlink (err -105) [ 93.304841][ T6300] team0: Port device geneve1 added [ 93.312930][ T29] audit: type=1326 audit(1749360689.193:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 93.336540][ T29] audit: type=1326 audit(1749360689.193:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 93.369734][ T6298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.406948][ T29] audit: type=1326 audit(1749360689.193:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 93.430532][ T29] audit: type=1326 audit(1749360689.263:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 93.453885][ T29] audit: type=1326 audit(1749360689.263:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 93.506218][ T6298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.636171][ T6287] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 93.656630][ T6298] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.668493][ T6298] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684386][ T6298] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.734521][ T6298] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.948944][ T6313] loop1: detected capacity change from 0 to 8192 [ 93.972022][ T6313] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.125537][ T29] audit: type=1400 audit(1749360689.993:1269): avc: denied { mount } for pid=6320 comm="syz.0.920" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 94.147730][ T29] audit: type=1400 audit(1749360689.993:1270): avc: denied { mounton } for pid=6320 comm="syz.0.920" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 94.178990][ T29] audit: type=1400 audit(1749360690.053:1271): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 94.511032][ T29] audit: type=1400 audit(1749360690.383:1272): avc: denied { remount } for pid=6328 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.591690][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 94.974189][ T6357] loop0: detected capacity change from 0 to 8192 [ 94.989790][ T6357] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.013807][ T6359] lo speed is unknown, defaulting to 1000 [ 95.328302][ T6359] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 95.412333][ T6382] loop0: detected capacity change from 0 to 512 [ 95.446870][ T6382] EXT4-fs: Ignoring removed nobh option [ 95.475996][ T6382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.532229][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.545202][ T6382] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.575700][ T6396] loop1: detected capacity change from 0 to 128 [ 95.694094][ T6396] syz.1.946: attempt to access beyond end of device [ 95.694094][ T6396] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 95.712539][ T6396] syz.1.946: attempt to access beyond end of device [ 95.712539][ T6396] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 95.749054][ T6396] syz.1.946: attempt to access beyond end of device [ 95.749054][ T6396] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 95.763375][ T6396] syz.1.946: attempt to access beyond end of device [ 95.763375][ T6396] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 95.780538][ T6396] syz.1.946: attempt to access beyond end of device [ 95.780538][ T6396] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 95.794504][ T6408] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 95.802447][ T6408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'. [ 95.813103][ T6408] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 95.828984][ T6396] syz.1.946: attempt to access beyond end of device [ 95.828984][ T6396] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 95.844101][ T6396] syz.1.946: attempt to access beyond end of device [ 95.844101][ T6396] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 95.860799][ T5336] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.870826][ T6396] syz.1.946: attempt to access beyond end of device [ 95.870826][ T6396] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 95.908032][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 95.958623][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'. [ 96.046648][ T6421] Q±6ã×\b‹¡Y­4: renamed from lo [ 96.255372][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.268055][ T6436] wireguard0: entered promiscuous mode [ 96.274539][ T6436] wireguard0: entered allmulticast mode [ 96.364008][ T6453] loop1: detected capacity change from 0 to 512 [ 96.403190][ T6453] EXT4-fs (loop1): 1 orphan inode deleted [ 96.409521][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.426923][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 96.442344][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.968'. [ 96.501677][ T6465] lo speed is unknown, defaulting to 1000 [ 96.508256][ T6453] ext4 filesystem being mounted at /syzcgroup/cpu/syz1/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 96.523261][ T6453] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.547681][ T6453] openvswitch: netlink: Message has 6 unknown bytes. [ 96.591425][ T6469] loop4: detected capacity change from 0 to 512 [ 96.599016][ T6470] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.612588][ T6469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.621401][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 96.636638][ T6469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.649458][ T6469] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.650635][ T6477] netlink: 'syz.2.971': attribute type 10 has an invalid length. [ 96.667731][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.971'. [ 96.695546][ T6470] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.728488][ T6477] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 96.746925][ T6477] team0: Failed to send options change via netlink (err -105) [ 96.754467][ T6477] team0: Port device geneve1 added [ 96.768439][ T6480] pim6reg1: entered promiscuous mode [ 96.773806][ T6480] pim6reg1: entered allmulticast mode [ 96.802502][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.822319][ T6484] loop4: detected capacity change from 0 to 128 [ 96.830324][ T6470] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.882782][ T6486] pim6reg1: entered promiscuous mode [ 96.888264][ T6486] pim6reg1: entered allmulticast mode [ 96.897466][ T6470] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.905807][ T6487] syz.4.976: attempt to access beyond end of device [ 96.905807][ T6487] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 96.921042][ T6487] syz.4.976: attempt to access beyond end of device [ 96.921042][ T6487] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 96.953040][ T6470] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.966646][ T6470] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.979126][ T6470] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.991456][ T6470] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.085047][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'. [ 97.122642][ T6493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6493 comm=syz.2.981 [ 97.149737][ T6495] loop4: detected capacity change from 0 to 2048 [ 97.179330][ T6495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.231295][ T6495] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 97.248164][ T6495] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 97.260927][ T6495] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.260927][ T6495] [ 97.270690][ T6495] EXT4-fs (loop4): Total free blocks count 0 [ 97.274471][ T6497] loop2: detected capacity change from 0 to 8192 [ 97.276727][ T6495] EXT4-fs (loop4): Free/Dirty block details [ 97.289027][ T6495] EXT4-fs (loop4): free_blocks=4096 [ 97.294278][ T6495] EXT4-fs (loop4): dirty_blocks=32 [ 97.299551][ T6495] EXT4-fs (loop4): Block reservation details [ 97.305674][ T6495] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 97.313711][ T6497] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.360967][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.392780][ T6507] loop0: detected capacity change from 0 to 512 [ 97.439086][ T6507] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.459142][ T6515] loop4: detected capacity change from 0 to 512 [ 97.489375][ T6507] EXT4-fs (loop0): mount failed [ 97.526730][ T6515] EXT4-fs (loop4): 1 orphan inode deleted [ 97.545933][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 97.580479][ T6515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.603890][ T6515] ext4 filesystem being mounted at /syzcgroup/cpu/syz4/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 97.619693][ T6515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.659220][ T6515] openvswitch: netlink: Message has 6 unknown bytes. [ 97.678260][ T6527] pim6reg1: entered promiscuous mode [ 97.683656][ T6527] pim6reg1: entered allmulticast mode [ 97.689202][ T6529] loop0: detected capacity change from 0 to 8192 [ 97.735683][ T6529] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.846372][ T6546] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 97.855652][ T6546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.864485][ T6546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.873326][ T6546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.918807][ T6546] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 97.947959][ T6546] team0: Failed to send options change via netlink (err -105) [ 97.955548][ T6546] team0: Port device geneve1 added [ 97.997916][ T6537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.027023][ T6544] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 98.035122][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 98.035139][ T29] audit: type=1326 audit(1749360692.907:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.078258][ T29] audit: type=1326 audit(1749360692.947:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.101779][ T29] audit: type=1326 audit(1749360692.947:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.125204][ T29] audit: type=1326 audit(1749360692.947:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.148543][ T29] audit: type=1326 audit(1749360692.947:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.172070][ T29] audit: type=1326 audit(1749360692.947:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.195662][ T29] audit: type=1326 audit(1749360692.947:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.219637][ T29] audit: type=1326 audit(1749360692.947:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.242999][ T29] audit: type=1326 audit(1749360692.947:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.266344][ T29] audit: type=1326 audit(1749360692.947:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 98.293597][ T6537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.346432][ T6537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.412433][ T6537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.424359][ T6537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.437030][ T6537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.449553][ T6537] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549719][ T6558] loop4: detected capacity change from 0 to 512 [ 98.587905][ T6558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.600797][ T6558] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.631377][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.716977][ T6566] loop4: detected capacity change from 0 to 512 [ 98.724876][ T6557] wireguard0: entered promiscuous mode [ 98.731735][ T6557] wireguard0: entered allmulticast mode [ 98.759305][ T6566] EXT4-fs: Ignoring removed i_version option [ 98.781075][ T6566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.800179][ T6570] vlan0: entered allmulticast mode [ 98.811642][ T6566] EXT4-fs (loop4): 1 truncate cleaned up [ 98.818841][ T6566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.122841][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.202635][ T6593] tipc: Started in network mode [ 99.207650][ T6593] tipc: Node identity ac14140f, cluster identity 4711 [ 99.214652][ T6593] tipc: New replicast peer: 10.1.1.2 [ 99.220283][ T6593] tipc: Enabled bearer , priority 10 [ 99.694568][ T6598] openvswitch: netlink: Message has 6 unknown bytes. [ 99.722282][ T6602] __nla_validate_parse: 3 callbacks suppressed [ 99.722301][ T6602] netlink: 596 bytes leftover after parsing attributes in process `+}[@'. [ 100.345174][ T3404] tipc: Node number set to 2886997007 [ 100.672196][ T6614] loop0: detected capacity change from 0 to 2048 [ 100.724908][ T6622] loop2: detected capacity change from 0 to 512 [ 100.743535][ T6613] wireguard0: entered promiscuous mode [ 100.752899][ T6613] wireguard0: entered allmulticast mode [ 100.765542][ T6614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.805273][ T6622] EXT4-fs: Ignoring removed i_version option [ 100.823506][ T6622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.846467][ T6614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 100.861308][ T6622] EXT4-fs (loop2): 1 truncate cleaned up [ 100.863028][ T6614] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 100.879680][ T6614] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.879680][ T6614] [ 100.880587][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.889354][ T6614] EXT4-fs (loop0): Total free blocks count 0 [ 100.889375][ T6614] EXT4-fs (loop0): Free/Dirty block details [ 100.889390][ T6614] EXT4-fs (loop0): free_blocks=4096 [ 100.889406][ T6614] EXT4-fs (loop0): dirty_blocks=32 [ 100.923817][ T6614] EXT4-fs (loop0): Block reservation details [ 100.930062][ T6614] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 100.937575][ T6628] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.993733][ T6630] syzkaller0: entered promiscuous mode [ 100.999534][ T6630] syzkaller0: entered allmulticast mode [ 101.028050][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.103958][ T6634] netlink: 596 bytes leftover after parsing attributes in process `+}[@'. [ 101.177761][ T6638] loop1: detected capacity change from 0 to 512 [ 101.184607][ T6638] EXT4-fs: Ignoring removed nobh option [ 101.222839][ T6638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.243244][ T6638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.256460][ T6638] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.268606][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.482315][ T6656] lo speed is unknown, defaulting to 1000 [ 101.598064][ T6664] syzkaller0: entered promiscuous mode [ 101.603776][ T6664] syzkaller0: entered allmulticast mode [ 101.668376][ T6671] netlink: '+}[@': attribute type 13 has an invalid length. [ 101.782780][ T6675] loop0: detected capacity change from 0 to 512 [ 101.800488][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 101.827963][ T6675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.844944][ T6679] loop2: detected capacity change from 0 to 512 [ 101.855788][ T6675] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.897943][ T6679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.925228][ T6679] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.936850][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.950766][ T6679] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1047'. [ 101.973908][ T6687] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 101.987823][ T6679] hsr_slave_0: left promiscuous mode [ 101.993860][ T6679] hsr_slave_1: left promiscuous mode [ 102.032088][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.112583][ T6695] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 102.152117][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.210663][ T6698] loop2: detected capacity change from 0 to 512 [ 102.258064][ T6698] EXT4-fs (loop2): 1 orphan inode deleted [ 102.264398][ T6698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.285330][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 102.316168][ T6698] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.364400][ T6703] loop1: detected capacity change from 0 to 8192 [ 102.387948][ T6703] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.436013][ T6709] loop4: detected capacity change from 0 to 128 [ 102.450766][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.688944][ T6723] loop4: detected capacity change from 0 to 512 [ 102.713411][ T6723] EXT4-fs: Ignoring removed nobh option [ 102.731672][ T6718] wireguard0: entered promiscuous mode [ 102.743041][ T6718] wireguard0: entered allmulticast mode [ 102.760392][ T6723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.869596][ T6723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.905415][ T6723] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.104618][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 103.104635][ T29] audit: type=1400 audit(1749360697.977:1388): avc: denied { setattr } for pid=6737 comm="syz.3.1067" name="file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.167086][ T6744] loop2: detected capacity change from 0 to 512 [ 103.173866][ T6744] EXT4-fs: Ignoring removed oldalloc option [ 103.185127][ T6744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.195915][ T6744] EXT4-fs (loop2): 1 truncate cleaned up [ 103.201954][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.229019][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.283013][ T29] audit: type=1326 audit(1749360698.157:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 103.306058][ T29] audit: type=1326 audit(1749360698.157:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6733 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 103.367183][ T6755] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1071'. [ 103.418985][ T6758] loop0: detected capacity change from 0 to 512 [ 103.427093][ T6758] EXT4-fs: Ignoring removed orlov option [ 103.444308][ T6758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.464883][ T6758] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.473130][ T6758] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1073: bg 0: block 248: padding at end of block bitmap is not set [ 103.488622][ T6758] Quota error (device loop0): write_blk: dquota write failed [ 103.496088][ T6758] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 103.506158][ T6758] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1073: Failed to acquire dquot type 1 [ 103.519657][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.530560][ T6758] EXT4-fs (loop0): 1 truncate cleaned up [ 103.538876][ T6758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.597285][ T6766] loop1: detected capacity change from 0 to 128 [ 103.630818][ T29] audit: type=1326 audit(1749360698.497:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 103.654520][ T29] audit: type=1326 audit(1749360698.497:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 103.678045][ T29] audit: type=1326 audit(1749360698.497:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 103.701586][ T29] audit: type=1326 audit(1749360698.497:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 103.725111][ T29] audit: type=1326 audit(1749360698.507:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 103.750286][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.797326][ T6773] lo speed is unknown, defaulting to 1000 [ 104.072470][ T6781] loop1: detected capacity change from 0 to 512 [ 104.098880][ T6781] EXT4-fs: Ignoring removed orlov option [ 104.131776][ T6785] loop0: detected capacity change from 0 to 512 [ 104.138833][ T6781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.149029][ T6785] EXT4-fs: Ignoring removed oldalloc option [ 104.156607][ T6781] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.163052][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.183812][ T6781] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1092: bg 0: block 248: padding at end of block bitmap is not set [ 104.245598][ T6781] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1092: Failed to acquire dquot type 1 [ 104.265352][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 104.293982][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.315972][ T6781] EXT4-fs (loop1): 1 truncate cleaned up [ 104.334125][ T6781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.401964][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.470249][ T6798] @ÿ: renamed from bond_slave_0 [ 104.494427][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.053555][ T6819] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.075358][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 105.084431][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 105.146564][ T6819] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.174417][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 105.189919][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 105.207283][ T6819] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.226982][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 105.236605][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 105.269040][ T6836] loop1: detected capacity change from 0 to 512 [ 105.286375][ T6819] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.302733][ T6836] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1100: corrupted in-inode xattr: invalid ea_ino [ 105.314563][ T6840] 9pnet_fd: Insufficient options for proto=fd [ 105.326794][ T6836] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1100: couldn't read orphan inode 15 (err -117) [ 105.340895][ T6836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.353999][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 105.364241][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 105.379352][ T6819] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.392664][ T6819] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.404802][ T6819] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.418100][ T6819] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.492006][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.497018][ T6844] loop4: detected capacity change from 0 to 512 [ 105.518517][ T6845] loop0: detected capacity change from 0 to 512 [ 105.531792][ T6844] EXT4-fs: Ignoring removed oldalloc option [ 105.562251][ T6844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.585713][ T6845] loop0: detected capacity change from 0 to 2048 [ 105.621944][ T6845] EXT4-fs: Ignoring removed bh option [ 105.627790][ T6844] EXT4-fs (loop4): 1 truncate cleaned up [ 105.633906][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.666454][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.686944][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.913969][ T6871] lo speed is unknown, defaulting to 1000 [ 106.142025][ T6870] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.161024][ T6884] loop2: detected capacity change from 0 to 512 [ 106.195204][ T6870] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 106.198357][ T6884] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.207714][ T6870] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.207714][ T6870] [ 106.227276][ T6870] EXT4-fs (loop0): Total free blocks count 0 [ 106.233285][ T6870] EXT4-fs (loop0): Free/Dirty block details [ 106.239352][ T6870] EXT4-fs (loop0): free_blocks=2415919104 [ 106.245317][ T6870] EXT4-fs (loop0): dirty_blocks=8224 [ 106.250816][ T6870] EXT4-fs (loop0): Block reservation details [ 106.256950][ T6870] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 106.277247][ T6884] EXT4-fs (loop2): 1 truncate cleaned up [ 106.296809][ T6884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.329317][ T6886] loop1: detected capacity change from 0 to 512 [ 106.333463][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.406454][ T6886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.422492][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.470759][ T6886] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.510067][ T6893] loop4: detected capacity change from 0 to 164 [ 106.760206][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.837184][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 106.846443][ T6912] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1134'. [ 107.477606][ T6947] dummy0: left allmulticast mode [ 107.482833][ T6947] bridge0: port 3(dummy0) entered disabled state [ 107.527695][ T6947] bridge_slave_1: left allmulticast mode [ 107.533493][ T6947] bridge_slave_1: left promiscuous mode [ 107.539370][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.572644][ T6951] loop1: detected capacity change from 0 to 512 [ 107.588825][ T6947] bridge_slave_0: left allmulticast mode [ 107.594616][ T6947] bridge_slave_0: left promiscuous mode [ 107.600665][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.606050][ T6951] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 107.731751][ T6955] loop1: detected capacity change from 0 to 2048 [ 107.816134][ T6955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.925358][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.106092][ T7031] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.156704][ T7031] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.198660][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 108.198678][ T29] audit: type=1326 audit(1749360703.077:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.230005][ T7036] netlink: 'syz.2.1159': attribute type 27 has an invalid length. [ 108.238773][ T7031] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.248920][ T29] audit: type=1326 audit(1749360703.077:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.272492][ T29] audit: type=1326 audit(1749360703.077:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.296157][ T29] audit: type=1326 audit(1749360703.077:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.319620][ T29] audit: type=1326 audit(1749360703.107:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.343291][ T29] audit: type=1326 audit(1749360703.107:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.366778][ T29] audit: type=1326 audit(1749360703.107:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.393766][ T29] audit: type=1326 audit(1749360703.127:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2f338de963 code=0x7ffc0000 [ 108.417127][ T29] audit: type=1326 audit(1749360703.127:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2f338de963 code=0x7ffc0000 [ 108.440565][ T29] audit: type=1326 audit(1749360703.127:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7037 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 108.567104][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.574383][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.317253][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.328156][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.349262][ T7036] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.358031][ T7036] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.366570][ T7036] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.375015][ T7036] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.386094][ T7036] vlan0: left allmulticast mode [ 109.394392][ T7031] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.452997][ T7031] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.462472][ T7060] loop2: detected capacity change from 0 to 128 [ 109.473192][ T7031] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.510459][ T7031] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.523268][ T7031] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.566660][ T7104] __nla_validate_parse: 14 callbacks suppressed [ 110.566680][ T7104] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1181'. [ 110.587393][ T7104] batadv1: entered promiscuous mode [ 110.592728][ T7104] batadv1: entered allmulticast mode [ 110.836760][ T7116] loop0: detected capacity change from 0 to 512 [ 110.843594][ T7116] EXT4-fs: Ignoring removed i_version option [ 110.856890][ T7116] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.890109][ T7116] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1187: bg 0: block 131: padding at end of block bitmap is not set [ 110.908699][ T7116] EXT4-fs (loop0): Remounting filesystem read-only [ 110.915637][ T7116] EXT4-fs (loop0): 1 truncate cleaned up [ 110.923582][ T7116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.954323][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.960826][ T7125] syzkaller0: entered promiscuous mode [ 110.969001][ T7125] syzkaller0: entered allmulticast mode [ 111.022773][ T7130] loop0: detected capacity change from 0 to 512 [ 111.050061][ T7130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.061680][ T7130] EXT4-fs (loop0): 1 truncate cleaned up [ 111.068131][ T7130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.100798][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.124336][ T7140] loop2: detected capacity change from 0 to 512 [ 111.131478][ T7140] EXT4-fs: Ignoring removed nobh option [ 111.146976][ T7140] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.168784][ T7140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.182319][ T7140] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.291000][ T7150] loop0: detected capacity change from 0 to 1024 [ 111.298277][ T7150] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.309821][ T7150] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.1198: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 111.328765][ T7150] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1198: couldn't read orphan inode 11 (err -117) [ 111.341334][ T7150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.357139][ T7150] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1198: Invalid block bitmap block 0 in block_group 0 [ 111.371211][ T7150] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1198: Failed to acquire dquot type 0 [ 111.394732][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.722358][ T7169] loop0: detected capacity change from 0 to 128 [ 111.756271][ T7172] 9pnet_fd: Insufficient options for proto=fd [ 111.821903][ T7169] bio_check_eod: 1131 callbacks suppressed [ 111.821918][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.821918][ T7169] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 111.841514][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.841514][ T7169] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 111.855028][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.855028][ T7169] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 111.868879][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.868879][ T7169] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 111.882525][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.882525][ T7169] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 111.897047][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.897047][ T7169] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 111.924651][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.924651][ T7169] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 111.950328][ T7169] syz.0.1206: attempt to access beyond end of device [ 111.950328][ T7169] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 111.979172][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.192101][ T7194] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1215' sets config #1 [ 112.727374][ T7210] loop1: detected capacity change from 0 to 512 [ 112.755213][ T7210] loop1: detected capacity change from 0 to 2048 [ 112.763773][ T7210] EXT4-fs: Ignoring removed bh option [ 112.809282][ T7210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.264663][ T7229] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.343522][ T7229] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 113.356077][ T7229] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.356077][ T7229] [ 113.365924][ T7229] EXT4-fs (loop1): Total free blocks count 0 [ 113.371981][ T7229] EXT4-fs (loop1): Free/Dirty block details [ 113.378001][ T7229] EXT4-fs (loop1): free_blocks=2415919104 [ 113.383822][ T7229] EXT4-fs (loop1): dirty_blocks=8224 [ 113.389321][ T7229] EXT4-fs (loop1): Block reservation details [ 113.395364][ T7229] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 113.460888][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 113.460903][ T29] audit: type=1400 audit(1749360708.327:1849): avc: denied { watch } for pid=7249 comm="syz.3.1235" path="/268" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.489133][ T29] audit: type=1400 audit(1749360708.327:1850): avc: denied { watch_reads } for pid=7249 comm="syz.3.1235" path="/268" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.517257][ T7021] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 113.598854][ T29] audit: type=1326 audit(1749360708.477:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 113.622420][ T29] audit: type=1326 audit(1749360708.477:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 113.651300][ T29] audit: type=1326 audit(1749360708.527:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 113.674916][ T29] audit: type=1326 audit(1749360708.527:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 113.719662][ T29] audit: type=1326 audit(1749360708.527:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 113.744153][ T29] audit: type=1400 audit(1749360708.607:1856): avc: denied { accept } for pid=7258 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.763976][ T29] audit: type=1400 audit(1749360708.607:1857): avc: denied { read } for pid=7258 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.783529][ T29] audit: type=1326 audit(1749360708.617:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 113.789437][ T7265] loop0: detected capacity change from 0 to 128 [ 113.814084][ T7263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.817140][ T7265] EXT4-fs: Ignoring removed nobh option [ 113.853738][ T7265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.867479][ T7265] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.894335][ T7270] tipc: Started in network mode [ 113.899317][ T7270] tipc: Node identity ac14140f, cluster identity 4711 [ 113.906268][ T7270] tipc: New replicast peer: 255.255.255.255 [ 113.912506][ T7270] tipc: Enabled bearer , priority 10 [ 113.920475][ T7263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.941973][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.986486][ T7263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.026506][ T7263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.090971][ T7263] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.111334][ T7263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.166175][ T7263] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.175351][ T7287] loop4: detected capacity change from 0 to 1024 [ 114.183444][ T7263] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.202768][ T7287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.225234][ T7287] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.264456][ T7287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 114.279633][ T7287] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 114.291922][ T7287] EXT4-fs (loop4): This should not happen!! Data will be lost [ 114.291922][ T7287] [ 114.301810][ T7287] EXT4-fs (loop4): Total free blocks count 0 [ 114.307953][ T7287] EXT4-fs (loop4): Free/Dirty block details [ 114.313931][ T7287] EXT4-fs (loop4): free_blocks=4293918720 [ 114.319722][ T7287] EXT4-fs (loop4): dirty_blocks=16 [ 114.324960][ T7287] EXT4-fs (loop4): Block reservation details [ 114.331150][ T7287] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 114.374159][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.393286][ T7297] netlink: 'syz.0.1266': attribute type 39 has an invalid length. [ 114.641134][ T7320] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 114.662607][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 114.674143][ T7320] bridge_slave_1: left allmulticast mode [ 114.679885][ T7320] bridge_slave_1: left promiscuous mode [ 114.685705][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.700266][ T7320] bridge_slave_0: left allmulticast mode [ 114.706151][ T7320] bridge_slave_0: left promiscuous mode [ 114.711998][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.750432][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1265'. [ 114.825279][ T7329] futex_wake_op: syz.1.1269 tries to shift op by -1; fix this program [ 114.842170][ T6419] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 114.849749][ T6419] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 114.857325][ T6419] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 114.874295][ T6419] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 114.919696][ T6419] tipc: Node number set to 2886997007 [ 114.935237][ T7334] fido_id[7334]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.000833][ T7341] Q±6ã×\b‹¡Y­4: entered allmulticast mode [ 115.001096][ T7340] Q±6ã×\b‹¡Y­4: left allmulticast mode [ 115.345603][ T7359] loop4: detected capacity change from 0 to 1024 [ 115.354909][ T7359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.367484][ T7359] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.384734][ T7359] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 115.402154][ T7359] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.1291: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.417595][ T7359] EXT4-fs (loop4): Remounting filesystem read-only [ 115.424438][ T7359] EXT4-fs (loop4): 1 orphan inode deleted [ 115.434844][ T7359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.447804][ T7359] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.231414][ T7367] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 116.241354][ T7370] xt_hashlimit: size too large, truncated to 1048576 [ 116.241761][ T7365] loop2: detected capacity change from 0 to 512 [ 116.269388][ T7365] EXT4-fs: Ignoring removed nobh option [ 116.315434][ T7365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.336671][ T7375] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 116.344591][ T7375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1280'. [ 116.426194][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.447284][ T7365] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.468318][ T7375] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 117.064754][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.096049][ T7395] loop2: detected capacity change from 0 to 128 [ 117.178321][ T7399] syz.2.1292: attempt to access beyond end of device [ 117.178321][ T7399] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 117.192831][ T7399] syz.2.1292: attempt to access beyond end of device [ 117.192831][ T7399] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 117.221095][ T7403] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.241284][ T7399] syz.2.1292: attempt to access beyond end of device [ 117.241284][ T7399] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 117.267481][ T7399] syz.2.1292: attempt to access beyond end of device [ 117.267481][ T7399] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 117.306250][ T7399] syz.2.1292: attempt to access beyond end of device [ 117.306250][ T7399] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 117.325341][ T7399] syz.2.1292: attempt to access beyond end of device [ 117.325341][ T7399] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 117.347199][ T7403] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.408357][ T7403] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.468157][ T7403] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.482773][ T7413] xt_hashlimit: size too large, truncated to 1048576 [ 117.584501][ T7403] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.639424][ T7403] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.707407][ T7403] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.720135][ T7403] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.788679][ T7425] loop2: detected capacity change from 0 to 512 [ 117.804526][ T7427] loop1: detected capacity change from 0 to 1024 [ 117.811427][ T7425] EXT4-fs: Ignoring removed nobh option [ 117.821226][ T7425] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.841808][ T7427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.879042][ T7425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.891937][ T7425] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.148294][ T7439] loop4: detected capacity change from 0 to 8192 [ 118.633960][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.765255][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.946473][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 118.946489][ T29] audit: type=1400 audit(1749360713.827:2527): avc: denied { name_connect } for pid=7453 comm="syz.1.1316" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 119.146820][ T29] audit: type=1400 audit(1749360714.027:2528): avc: denied { setopt } for pid=7460 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.167422][ T29] audit: type=1400 audit(1749360714.047:2529): avc: denied { write } for pid=7460 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.258568][ T29] audit: type=1400 audit(1749360714.137:2530): avc: denied { write } for pid=7464 comm="syz.1.1320" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.261510][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 119.289340][ T29] audit: type=1400 audit(1749360714.167:2531): avc: denied { firmware_load } for pid=7464 comm="syz.1.1320" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 119.356176][ T29] audit: type=1326 audit(1749360714.237:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 119.380213][ T29] audit: type=1326 audit(1749360714.237:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 119.406983][ T29] audit: type=1326 audit(1749360714.287:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 119.432277][ T29] audit: type=1326 audit(1749360714.287:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 119.455317][ T29] audit: type=1326 audit(1749360714.287:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 119.859918][ T7498] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 119.868046][ T7498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1330'. [ 119.878868][ T7498] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 119.922004][ T7501] loop0: detected capacity change from 0 to 512 [ 119.963879][ T7501] EXT4-fs (loop0): 1 orphan inode deleted [ 119.970800][ T7501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.983815][ T7501] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.983780][ T7021] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 1 [ 120.038267][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.603323][ T7516] loop2: detected capacity change from 0 to 512 [ 120.611705][ T7516] EXT4-fs: Ignoring removed orlov option [ 120.626847][ T7516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.647681][ T7516] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.654731][ T7516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1339: bg 0: block 248: padding at end of block bitmap is not set [ 120.670802][ T7516] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1339: Failed to acquire dquot type 1 [ 120.683190][ T7516] EXT4-fs (loop2): 1 truncate cleaned up [ 120.691302][ T7516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.738746][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.496084][ T7543] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.556800][ T7543] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.616363][ T7543] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.676456][ T7543] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.730381][ T7543] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.741446][ T7543] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.752827][ T7543] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.763872][ T7543] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.934560][ T7557] netlink: 'syz.3.1354': attribute type 10 has an invalid length. [ 121.942484][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1354'. [ 121.951809][ T7557] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 122.699114][ T7569] loop1: detected capacity change from 0 to 1024 [ 122.728997][ T7569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.742766][ T7569] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.922674][ T7565] Set syz1 is full, maxelem 65536 reached [ 122.929312][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.822557][ T7617] loop2: detected capacity change from 0 to 128 [ 123.840470][ T7617] netlink: 'syz.2.1374': attribute type 6 has an invalid length. [ 124.076277][ T7619] Set syz1 is full, maxelem 65536 reached [ 124.190064][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 124.190079][ T29] audit: type=1326 audit(1749360719.067:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.219925][ T29] audit: type=1326 audit(1749360719.067:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.250753][ T29] audit: type=1326 audit(1749360719.127:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.274344][ T29] audit: type=1326 audit(1749360719.127:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.298089][ T29] audit: type=1326 audit(1749360719.127:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.321970][ T29] audit: type=1326 audit(1749360719.127:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.345708][ T29] audit: type=1326 audit(1749360719.127:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.369509][ T29] audit: type=1326 audit(1749360719.127:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.415251][ T29] audit: type=1326 audit(1749360719.127:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.439149][ T29] audit: type=1326 audit(1749360719.177:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951f5de929 code=0x7ffc0000 [ 124.538218][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1380'. [ 124.626318][ T7643] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.1391'. [ 124.641980][ T7639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7639 comm=syz.4.1380 [ 124.690130][ T7651] loop1: detected capacity change from 0 to 128 [ 125.698271][ T7687] loop0: detected capacity change from 0 to 256 [ 125.741418][ T7687] FAT-fs (loop0): Directory bread(block 64) failed [ 125.765281][ T7687] FAT-fs (loop0): Directory bread(block 65) failed [ 125.774124][ T7687] FAT-fs (loop0): Directory bread(block 66) failed [ 125.782315][ T7687] FAT-fs (loop0): Directory bread(block 67) failed [ 125.789749][ T7687] FAT-fs (loop0): Directory bread(block 68) failed [ 125.798127][ T7687] FAT-fs (loop0): Directory bread(block 69) failed [ 125.805495][ T7687] FAT-fs (loop0): Directory bread(block 70) failed [ 125.812424][ T7687] FAT-fs (loop0): Directory bread(block 71) failed [ 125.820793][ T7687] FAT-fs (loop0): Directory bread(block 72) failed [ 125.827836][ T7687] FAT-fs (loop0): Directory bread(block 73) failed [ 125.908455][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1400'. [ 125.913661][ T7695] syz.0.1399: attempt to access beyond end of device [ 125.913661][ T7695] loop0: rw=2051, sector=10504, nr_sectors = 32 limit=256 [ 125.933391][ T7695] syz.0.1399: attempt to access beyond end of device [ 125.933391][ T7695] loop0: rw=2051, sector=10568, nr_sectors = 32 limit=256 [ 125.937687][ T7693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7693 comm=syz.3.1400 [ 125.949610][ T7695] syz.0.1399: attempt to access beyond end of device [ 125.949610][ T7695] loop0: rw=2051, sector=10632, nr_sectors = 32 limit=256 [ 126.024390][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1403'. [ 126.073638][ T7701] loop4: detected capacity change from 0 to 512 [ 126.100943][ T7701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.126105][ T7701] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.154266][ T7701] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1403'. [ 126.170961][ T7701] hsr_slave_0: left promiscuous mode [ 126.176878][ T7701] hsr_slave_1: left promiscuous mode [ 126.197477][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.197477][ T6988] loop0: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 126.216736][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.216736][ T6988] loop0: rw=1, sector=1864, nr_sectors = 4088 limit=256 [ 126.250531][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.250531][ T6988] loop0: rw=1, sector=5952, nr_sectors = 2048 limit=256 [ 126.269885][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.270451][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.270451][ T6988] loop0: rw=1, sector=8000, nr_sectors = 2048 limit=256 [ 126.295914][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.295914][ T6988] loop0: rw=1, sector=10048, nr_sectors = 296 limit=256 [ 126.310663][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.310663][ T6988] loop0: rw=1, sector=10664, nr_sectors = 64 limit=256 [ 126.327242][ T6988] kworker/u8:27: attempt to access beyond end of device [ 126.327242][ T6988] loop0: rw=1, sector=10760, nr_sectors = 2200 limit=256 [ 126.766845][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'. [ 126.786260][ T7732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7732 comm=syz.0.1415 [ 126.872334][ T7742] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 126.897636][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 126.916576][ T7744] loop0: detected capacity change from 0 to 512 [ 126.951870][ T7747] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 127.169541][ T7744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.183919][ T7744] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.236004][ T7744] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1422'. [ 127.240903][ T7750] Set syz1 is full, maxelem 65536 reached [ 127.252211][ T7744] hsr_slave_0: left promiscuous mode [ 127.259061][ T7744] hsr_slave_1: left promiscuous mode [ 127.430421][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.801251][ T7759] netlink: 'syz.3.1428': attribute type 12 has an invalid length. [ 127.871307][ T7766] loop2: detected capacity change from 0 to 512 [ 127.910193][ T7766] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.001346][ T7763] lo speed is unknown, defaulting to 1000 [ 128.012391][ T7766] EXT4-fs (loop2): mount failed [ 128.152729][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1430'. [ 128.240697][ T7775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7775 comm=syz.2.1430 [ 128.434177][ T7781] bridge_slave_0: entered promiscuous mode [ 128.554002][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.576533][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.615455][ T7791] loop0: detected capacity change from 0 to 512 [ 128.627796][ T7791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.658668][ T7791] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.685570][ T7791] EXT4-fs (loop0): shut down requested (2) [ 128.695244][ T7794] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 129.052470][ T7807] netlink: 'syz.0.1443': attribute type 13 has an invalid length. [ 129.086958][ T7812] loop0: detected capacity change from 0 to 1024 [ 129.094138][ T7812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.148980][ T7812] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 129.216393][ T7827] loop0: detected capacity change from 0 to 128 [ 129.223440][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 129.223458][ T29] audit: type=1326 audit(1749360724.097:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.256202][ T29] audit: type=1326 audit(1749360724.097:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.280920][ T29] audit: type=1326 audit(1749360724.137:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.304477][ T29] audit: type=1326 audit(1749360724.137:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.328213][ T29] audit: type=1326 audit(1749360724.137:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.363585][ T7832] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.374543][ T29] audit: type=1326 audit(1749360724.157:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.397950][ T29] audit: type=1326 audit(1749360724.157:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.421662][ T29] audit: type=1326 audit(1749360724.157:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff911f0e929 code=0x7ffc0000 [ 129.445462][ T29] audit: type=1400 audit(1749360724.237:3225): avc: denied { bind } for pid=7831 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.465785][ T29] audit: type=1400 audit(1749360724.237:3226): avc: denied { setopt } for pid=7831 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.536366][ T7832] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.587000][ T7827] batadv_slave_0: entered promiscuous mode [ 129.593771][ T7827] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1448'. [ 129.610487][ T7832] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.628966][ T7827] batadv_slave_0 (unregistering): left promiscuous mode [ 129.676588][ T7832] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.744233][ T7832] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.780760][ T7832] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.850031][ T7832] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.882459][ T7837] lo speed is unknown, defaulting to 1000 [ 129.961896][ T7832] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.148096][ T7852] loop4: detected capacity change from 0 to 512 [ 130.178469][ T7852] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.311030][ T7857] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1457: corrupted inode contents [ 130.323371][ T7857] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.1457: mark_inode_dirty error [ 130.328792][ T7856] lo speed is unknown, defaulting to 1000 [ 130.367393][ T7857] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1457: corrupted inode contents [ 130.446506][ T7857] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.1457: mark_inode_dirty error [ 130.480041][ T7857] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.1457: mark inode dirty (error -117) [ 130.527185][ T7875] loop2: detected capacity change from 0 to 128 [ 130.536834][ T7857] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 130.650286][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'. [ 131.066247][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1472'. [ 131.098432][ T7903] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1472'. [ 131.119721][ T7888] Set syz1 is full, maxelem 65536 reached [ 131.125909][ T7903] hsr_slave_0: left promiscuous mode [ 131.142645][ T7903] hsr_slave_1: left promiscuous mode [ 131.224963][ T7907] loop4: detected capacity change from 0 to 512 [ 131.400264][ T7907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.420409][ T7907] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.1475: corrupted xattr entries [ 131.436357][ T7907] EXT4-fs (loop4): Remounting filesystem read-only [ 131.447122][ T7907] EXT4-fs (loop4): 1 truncate cleaned up [ 131.453207][ T7907] EXT4-fs mount: 6 callbacks suppressed [ 131.453220][ T7907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.619323][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.878297][ T7936] loop0: detected capacity change from 0 to 1024 [ 131.897259][ T7936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.093403][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.188966][ T7945] Set syz1 is full, maxelem 65536 reached [ 132.368297][ T7965] loop2: detected capacity change from 0 to 512 [ 132.375149][ T7965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.406732][ T7965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.433465][ T7965] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.732249][ T7987] team0: Port device team_slave_0 removed [ 132.739093][ T7987] team0: Port device team_slave_1 removed [ 132.754373][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.782457][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.811255][ T7987] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.819891][ T7987] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.828581][ T7987] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.837047][ T7987] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.850571][ T7987] team0: Port device geneve1 removed [ 132.857448][ T7987] bond1: (slave bond2): Releasing backup interface [ 132.881108][ T7994] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 132.889135][ T7994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'. [ 132.899960][ T7991] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.912156][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.958349][ T7994] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.967085][ T7994] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.975613][ T7994] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.996703][ T7994] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 133.207584][ T8007] Set syz1 is full, maxelem 65536 reached [ 133.328801][ T8034] loop4: detected capacity change from 0 to 512 [ 133.349223][ T8034] EXT4-fs (loop4): 1 orphan inode deleted [ 133.355831][ T8034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.369477][ T6988] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 133.389970][ T8034] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.442659][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.497563][ T8057] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 133.635446][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 133.644393][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 133.653490][ T8067] netlink: 'syz.0.1537': attribute type 11 has an invalid length. [ 133.736669][ T8063] Set syz1 is full, maxelem 65536 reached [ 133.752835][ T8071] loop0: detected capacity change from 0 to 512 [ 133.760109][ T8071] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 133.876378][ T8081] netlink: 'syz.1.1539': attribute type 10 has an invalid length. [ 133.884365][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1539'. [ 134.531244][ T8090] loop1: detected capacity change from 0 to 512 [ 134.553962][ T8093] tipc: Enabling of bearer rejected, failed to enable media [ 134.572763][ T8090] EXT4-fs (loop1): 1 orphan inode deleted [ 134.579954][ T8095] loop0: detected capacity change from 0 to 128 [ 134.587364][ T6998] __quota_error: 303 callbacks suppressed [ 134.587390][ T6998] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 134.594031][ T8090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.603253][ T6998] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 1 [ 134.627800][ T8101] syzkaller0: entered allmulticast mode [ 134.629386][ T29] audit: type=1400 audit(1749360729.497:3529): avc: denied { ioctl } for pid=8100 comm="syz.3.1547" path="socket:[20159]" dev="sockfs" ino=20159 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.633503][ T8090] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.665124][ T29] audit: type=1400 audit(1749360729.537:3530): avc: denied { ioctl } for pid=8098 comm="syz.2.1546" path="socket:[21304]" dev="sockfs" ino=21304 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.669325][ T8101] syzkaller0: entered promiscuous mode [ 134.700057][ T8095] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.702933][ T8101] syzkaller0 (unregistering): left allmulticast mode [ 134.713135][ T8095] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.719550][ T8101] syzkaller0 (unregistering): left promiscuous mode [ 134.763755][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.776887][ T29] audit: type=1400 audit(1749360729.607:3531): avc: denied { create } for pid=8094 comm="syz.0.1544" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.818920][ T29] audit: type=1400 audit(1749360729.607:3532): avc: denied { remove_name } for pid=8094 comm="syz.0.1544" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.862880][ T29] audit: type=1400 audit(1749360729.607:3533): avc: denied { rename } for pid=8094 comm="syz.0.1544" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.906731][ T29] audit: type=1400 audit(1749360729.617:3534): avc: denied { read } for pid=8094 comm="syz.0.1544" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 134.981893][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.995856][ T8109] 9pnet: p9_errstr2errno: server reported unknown error [ 135.025220][ T29] audit: type=1400 audit(1749360729.897:3535): avc: denied { create } for pid=8110 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.067800][ T29] audit: type=1400 audit(1749360729.907:3536): avc: denied { read } for pid=8110 comm="syz.2.1553" dev="nsfs" ino=4026533509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.089214][ T29] audit: type=1400 audit(1749360729.907:3537): avc: denied { open } for pid=8110 comm="syz.2.1553" path="net:[4026533509]" dev="nsfs" ino=4026533509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.158157][ T8123] bridge: RTM_NEWNEIGH with invalid ether address [ 135.167456][ T8119] lo speed is unknown, defaulting to 1000 [ 135.203717][ T8127] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 135.211741][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1556'. [ 135.251125][ T8127] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.259450][ T8127] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.267710][ T8127] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.288097][ T8127] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 135.297323][ T8127] team0: Failed to send options change via netlink (err -105) [ 135.304925][ T8127] team0: Port device geneve1 added [ 135.312759][ T8132] netlink: 'syz.2.1560': attribute type 4 has an invalid length. [ 135.341810][ T8121] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.394970][ T8138] loop0: detected capacity change from 0 to 512 [ 135.417119][ T8138] EXT4-fs (loop0): 1 orphan inode deleted [ 135.430807][ T8138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.444753][ T6999] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:35: Failed to release dquot type 1 [ 135.445097][ T8138] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.467563][ T8121] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.531417][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.579457][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 135.661434][ T8121] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.788513][ T8121] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.804907][ T8121] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.818121][ T8121] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.838519][ T8121] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.847769][ T8157] netlink: 'syz.3.1570': attribute type 39 has an invalid length. [ 135.934338][ T8163] loop1: detected capacity change from 0 to 164 [ 135.947095][ T8163] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 135.955446][ T8163] netlink: 'syz.1.1573': attribute type 39 has an invalid length. [ 136.150124][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'. [ 136.159173][ T8176] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1577'. [ 136.169804][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'. [ 136.367364][ T8179] loop4: detected capacity change from 0 to 512 [ 136.374240][ T8179] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 136.415848][ T8182] loop2: detected capacity change from 0 to 512 [ 136.455439][ T8182] EXT4-fs (loop2): 1 orphan inode deleted [ 136.461784][ T8182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.484093][ T6988] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 136.497034][ T8182] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.568230][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.963741][ T8216] loop2: detected capacity change from 0 to 512 [ 136.971542][ T8216] SELinux: security_context_str_to_sid (unconfined_u,errors=continue) failed with errno=-22 [ 137.019857][ T8221] loop4: detected capacity change from 0 to 512 [ 137.067828][ T8221] EXT4-fs (loop4): 1 orphan inode deleted [ 137.084983][ T8221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.100608][ T6976] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 137.124914][ T8221] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.204757][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.839565][ T8257] loop1: detected capacity change from 0 to 512 [ 137.914551][ T8257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.946094][ T8257] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.980583][ T8257] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1605: corrupted inode contents [ 138.012393][ T8257] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1605: mark_inode_dirty error [ 138.024803][ T8257] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1605: corrupted inode contents [ 138.038129][ T8257] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1605: corrupted inode contents [ 138.055276][ T8257] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1605: mark_inode_dirty error [ 138.068228][ T8257] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1605: corrupted inode contents [ 138.081244][ T8257] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1605: mark_inode_dirty error [ 138.083548][ T8268] __nla_validate_parse: 11 callbacks suppressed [ 138.083568][ T8268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1608'. [ 138.111213][ T8257] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1605: corrupted inode contents [ 138.123497][ T8257] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1605: mark_inode_dirty error [ 138.138320][ T8270] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1605: corrupted inode contents [ 138.166563][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.179362][ T8274] netlink: 'syz.3.1611': attribute type 11 has an invalid length. [ 138.187651][ T8274] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1611'. [ 138.228179][ T8280] loop1: detected capacity change from 0 to 512 [ 138.235724][ T8280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.248956][ T8280] EXT4-fs (loop1): 1 truncate cleaned up [ 138.258732][ T8280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.304596][ T8289] openvswitch: netlink: Message has 6 unknown bytes. [ 138.364135][ T8295] loop4: detected capacity change from 0 to 128 [ 138.376882][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.452412][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'. [ 138.501754][ T8309] lo speed is unknown, defaulting to 1000 [ 138.627026][ T8316] netlink: 'syz.1.1629': attribute type 27 has an invalid length. [ 138.648094][ T8316] wg2: left promiscuous mode [ 138.652934][ T8316] wg2: left allmulticast mode [ 138.659514][ T8316] ip6gre1: left allmulticast mode [ 138.664822][ T8316] vlan2: left allmulticast mode [ 138.671211][ T8316] dummy0: left allmulticast mode [ 138.676383][ T8316] vlan3: left allmulticast mode [ 138.681296][ T8316] bridge_slave_0: left allmulticast mode [ 138.999126][ T8334] loop2: detected capacity change from 0 to 128 [ 139.009656][ T8334] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.038519][ T8334] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.137537][ T8334] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.158782][ T5336] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.310316][ T8345] 9pnet: p9_errstr2errno: server reported unknown error [ 139.442053][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 139.451542][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 139.469581][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 139.478826][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 139.507751][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 139.517033][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 139.576721][ T8353] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.627657][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 139.627677][ T29] audit: type=1326 audit(1749360734.487:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.657716][ T29] audit: type=1326 audit(1749360734.487:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.681187][ T29] audit: type=1326 audit(1749360734.487:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.705019][ T29] audit: type=1326 audit(1749360734.487:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.728849][ T29] audit: type=1326 audit(1749360734.487:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.752552][ T29] audit: type=1326 audit(1749360734.487:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.776104][ T29] audit: type=1326 audit(1749360734.497:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.799618][ T29] audit: type=1326 audit(1749360734.497:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.823323][ T29] audit: type=1326 audit(1749360734.497:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.846747][ T29] audit: type=1326 audit(1749360734.497:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cde3be929 code=0x7ffc0000 [ 139.886938][ T8353] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.976176][ T8353] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.066369][ T8353] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.141599][ T8353] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.153189][ T8353] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.164682][ T8353] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.176351][ T8353] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.228672][ T8383] loop4: detected capacity change from 0 to 512 [ 140.242738][ T8383] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.283773][ T8383] EXT4-fs (loop4): 1 truncate cleaned up [ 140.292207][ T8383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.303888][ T8392] netlink: 'syz.0.1660': attribute type 27 has an invalid length. [ 140.313056][ T8392] batadv0: left promiscuous mode [ 140.318221][ T8392] batadv0: left allmulticast mode [ 140.419813][ T8406] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1667'. [ 141.282720][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.701377][ T8460] syz.2.1689 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.815378][ T8474] loop2: detected capacity change from 0 to 128 [ 142.855601][ T8474] EXT4-fs: Ignoring removed nobh option [ 142.870867][ T8474] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.909547][ T8474] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.995858][ T5336] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.428515][ T8510] loop4: detected capacity change from 0 to 128 [ 143.436936][ T8510] EXT4-fs: Ignoring removed nobh option [ 143.467035][ T8510] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.479668][ T8510] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.503193][ T8519] __nla_validate_parse: 2 callbacks suppressed [ 143.503239][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'. [ 143.535276][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.620371][ T8579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8579 comm=syz.3.1737 [ 144.641802][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 144.641819][ T29] audit: type=1326 audit(1749360739.517:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f338d58e7 code=0x7ffc0000 [ 144.678450][ T29] audit: type=1326 audit(1749360739.517:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f3387ab19 code=0x7ffc0000 [ 144.702589][ T29] audit: type=1326 audit(1749360739.517:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 144.726286][ T29] audit: type=1326 audit(1749360739.527:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f338d58e7 code=0x7ffc0000 [ 144.749705][ T29] audit: type=1326 audit(1749360739.527:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f3387ab19 code=0x7ffc0000 [ 144.773401][ T29] audit: type=1326 audit(1749360739.527:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 144.796864][ T29] audit: type=1326 audit(1749360739.527:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f338d58e7 code=0x7ffc0000 [ 144.820297][ T29] audit: type=1326 audit(1749360739.527:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f3387ab19 code=0x7ffc0000 [ 144.843739][ T29] audit: type=1326 audit(1749360739.527:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f338de929 code=0x7ffc0000 [ 144.867315][ T29] audit: type=1326 audit(1749360739.547:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f338d58e7 code=0x7ffc0000 [ 145.072944][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 145.100559][ T8614] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1750' sets config #1 [ 145.167798][ T8622] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1761' sets config #1 [ 145.272398][ T8635] netlink: 'syz.3.1758': attribute type 39 has an invalid length. [ 145.739240][ T8661] lo speed is unknown, defaulting to 1000 [ 145.806718][ T8659] pim6reg1: entered promiscuous mode [ 145.812171][ T8659] pim6reg1: entered allmulticast mode [ 146.657610][ T8670] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 146.668494][ T8670] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 146.670492][ T8673] futex_wake_op: syz.4.1774 tries to shift op by -1; fix this program [ 146.689399][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 146.712446][ T6419] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 146.719979][ T6419] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 146.727585][ T6419] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 146.741304][ T8670] bond0: (slave bridge0): Releasing backup interface [ 146.748760][ T6419] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 146.828546][ T8680] syzkaller0: entered promiscuous mode [ 146.834173][ T8680] syzkaller0: entered allmulticast mode [ 146.843211][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'. [ 146.968427][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1792'. [ 147.074153][ T8701] loop4: detected capacity change from 0 to 4096 [ 147.087758][ T8703] veth0: entered promiscuous mode [ 147.093443][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'. [ 147.105500][ T8703] veth0 (unregistering): left promiscuous mode [ 147.108594][ T8701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.209010][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.329938][ T8720] netlink: 'syz.2.1793': attribute type 10 has an invalid length. [ 147.340409][ T8720] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 147.366275][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 147.375893][ T8720] bridge_slave_1: left allmulticast mode [ 147.381602][ T8720] bridge_slave_1: left promiscuous mode [ 147.387455][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.397811][ T8720] bridge_slave_0: left allmulticast mode [ 147.403527][ T8720] bridge_slave_0: left promiscuous mode [ 147.409420][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.422062][ T8720] bond0: (slave bridge0): Releasing backup interface [ 147.603973][ T8725] futex_wake_op: syz.2.1794 tries to shift op by -1; fix this program [ 147.637017][ T3404] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 147.644491][ T3404] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 147.652091][ T3404] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 147.653277][ T8728] syzkaller0: entered promiscuous mode [ 147.665134][ T8728] syzkaller0: entered allmulticast mode [ 147.694694][ T3404] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 147.731760][ T8732] loop2: detected capacity change from 0 to 512 [ 147.740830][ T8732] EXT4-fs: Ignoring removed i_version option [ 147.754638][ T8732] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.804712][ T8732] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1798: bg 0: block 131: padding at end of block bitmap is not set [ 147.823016][ T8732] EXT4-fs (loop2): Remounting filesystem read-only [ 147.830272][ T8732] EXT4-fs (loop2): 1 truncate cleaned up [ 147.836612][ T8732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.900219][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.969681][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'. [ 148.221521][ T8765] loop4: detected capacity change from 0 to 512 [ 148.223914][ T8764] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 148.228511][ T8765] journal_path: Lookup failure for './file0/../file0' [ 148.242744][ T8765] EXT4-fs: error: could not find journal device path [ 148.261537][ T8764] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.278375][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 148.296142][ T8764] bond0: (slave bridge0): Releasing backup interface [ 148.312055][ T8766] loop4: detected capacity change from 0 to 1024 [ 148.320114][ T8766] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.331133][ T8766] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.344165][ T8766] JBD2: no valid journal superblock found [ 148.350052][ T8766] EXT4-fs (loop4): Could not load journal inode [ 148.377271][ T8768] syzkaller0: entered promiscuous mode [ 148.382859][ T8768] syzkaller0: entered allmulticast mode [ 149.084910][ T8775] loop4: detected capacity change from 0 to 512 [ 149.092045][ T6419] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 149.105481][ T8775] EXT4-fs: Ignoring removed i_version option [ 149.125412][ T8775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.193082][ T8775] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1815: bg 0: block 131: padding at end of block bitmap is not set [ 149.248149][ T8775] EXT4-fs (loop4): Remounting filesystem read-only [ 149.254845][ T8775] EXT4-fs (loop4): 1 truncate cleaned up [ 149.297059][ T8775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.369685][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.533228][ T8788] futex_wake_op: syz.0.1819 tries to shift op by -1; fix this program [ 149.541761][ T8786] loop2: detected capacity change from 0 to 1024 [ 149.548984][ T8786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.557961][ T8786] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.577978][ T3404] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 149.585623][ T3404] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 149.593138][ T3404] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 149.596157][ T8786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 149.611283][ T8786] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1820: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.614194][ T3404] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 149.626930][ T8786] EXT4-fs (loop2): Remounting filesystem read-only [ 149.641611][ T8786] EXT4-fs (loop2): 1 orphan inode deleted [ 149.647997][ T8786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.662459][ T8786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.685215][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 149.685231][ T29] audit: type=1326 audit(1749360744.567:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1acb04d290 code=0x7ffc0000 [ 149.758331][ T29] audit: type=1326 audit(1749360744.567:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1acb04e52b code=0x7ffc0000 [ 149.781990][ T29] audit: type=1326 audit(1749360744.567:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1acb04d58a code=0x7ffc0000 [ 149.805366][ T29] audit: type=1326 audit(1749360744.567:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.829118][ T29] audit: type=1326 audit(1749360744.607:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.836607][ T8796] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 149.852714][ T29] audit: type=1326 audit(1749360744.607:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.884027][ T29] audit: type=1326 audit(1749360744.607:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.907879][ T29] audit: type=1326 audit(1749360744.607:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.931607][ T29] audit: type=1326 audit(1749360744.607:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.955235][ T29] audit: type=1326 audit(1749360744.617:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8785 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acb04e929 code=0x7ffc0000 [ 149.994234][ T8804] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1829'. [ 150.163485][ T8815] loop4: detected capacity change from 0 to 1024 [ 150.173963][ T8815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.201987][ T8833] syzkaller0: entered promiscuous mode [ 151.207741][ T8833] syzkaller0: entered allmulticast mode [ 151.215766][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.229323][ T8837] futex_wake_op: syz.3.1836 tries to shift op by -1; fix this program [ 151.443863][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 151.620249][ T8874] loop2: detected capacity change from 0 to 512 [ 151.633166][ T8874] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.647975][ T8874] EXT4-fs: Mount option(s) incompatible with ext3 [ 151.713200][ T8878] 9pnet_fd: Insufficient options for proto=fd [ 151.885508][ T6419] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec [ 151.967913][ T8881] loop1: detected capacity change from 0 to 1024 [ 151.979960][ T8881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.993761][ T8881] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.014807][ T8881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 152.036747][ T8881] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1857: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.075108][ T8881] EXT4-fs (loop1): Remounting filesystem read-only [ 152.088894][ T8881] EXT4-fs (loop1): 1 orphan inode deleted [ 152.095280][ T8881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.109075][ T8881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.351885][ T8904] loop2: detected capacity change from 0 to 164 [ 152.380008][ T8905] netlink: 'syz.1.1863': attribute type 13 has an invalid length. [ 152.455022][ T8905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.466364][ T8905] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.484738][ T8905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.512081][ T8907] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 152.531301][ T8907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.561478][ T8907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.570042][ T8907] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 152.607113][ T8907] bond1: (slave vti0): Error -95 calling set_mac_address [ 152.757213][ T8924] loop1: detected capacity change from 0 to 512 [ 152.769312][ T8924] EXT4-fs: Ignoring removed i_version option [ 152.784866][ T8924] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.791880][ T8924] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1873: bg 0: block 131: padding at end of block bitmap is not set [ 152.808014][ T8924] EXT4-fs (loop1): Remounting filesystem read-only [ 152.814726][ T8924] EXT4-fs (loop1): 1 truncate cleaned up [ 152.827658][ T8924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.936492][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 152.946212][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 152.981152][ T8936] loop2: detected capacity change from 0 to 1024 [ 152.990381][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.312998][ T8936] ================================================================== [ 153.321350][ T8936] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 153.330547][ T8936] [ 153.332902][ T8936] read-write to 0xffff888106b9e140 of 8 bytes by task 8940 on cpu 1: [ 153.341002][ T8936] __filemap_remove_folio+0x1bc/0x2a0 [ 153.346434][ T8936] folio_unmap_invalidate+0x1dd/0x360 [ 153.351836][ T8936] invalidate_inode_pages2_range+0x27c/0x3d0 [ 153.357843][ T8936] filemap_invalidate_pages+0x16d/0x1a0 [ 153.363503][ T8936] kiocb_invalidate_pages+0x6e/0x80 [ 153.368720][ T8936] __iomap_dio_rw+0x5d4/0x1250 [ 153.373517][ T8936] iomap_dio_rw+0x40/0x90 [ 153.377901][ T8936] ext4_file_write_iter+0xad9/0xf00 [ 153.383126][ T8936] iter_file_splice_write+0x5ef/0x970 [ 153.388532][ T8936] direct_splice_actor+0x153/0x2a0 [ 153.393677][ T8936] splice_direct_to_actor+0x30f/0x680 [ 153.399084][ T8936] do_splice_direct+0xda/0x150 [ 153.403883][ T8936] do_sendfile+0x380/0x650 [ 153.408341][ T8936] __x64_sys_sendfile64+0x105/0x150 [ 153.413563][ T8936] x64_sys_call+0xb39/0x2fb0 [ 153.418176][ T8936] do_syscall_64+0xd2/0x200 [ 153.422705][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.428620][ T8936] [ 153.430955][ T8936] read to 0xffff888106b9e140 of 8 bytes by task 8936 on cpu 0: [ 153.438513][ T8936] filemap_write_and_wait_range+0x59/0x340 [ 153.444444][ T8936] ext4_file_write_iter+0xe04/0xf00 [ 153.449670][ T8936] iter_file_splice_write+0x5ef/0x970 [ 153.455077][ T8936] direct_splice_actor+0x153/0x2a0 [ 153.460232][ T8936] splice_direct_to_actor+0x30f/0x680 [ 153.465641][ T8936] do_splice_direct+0xda/0x150 [ 153.470447][ T8936] do_sendfile+0x380/0x650 [ 153.474890][ T8936] __x64_sys_sendfile64+0x105/0x150 [ 153.480111][ T8936] x64_sys_call+0xb39/0x2fb0 [ 153.484726][ T8936] do_syscall_64+0xd2/0x200 [ 153.489250][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.495511][ T8936] [ 153.497845][ T8936] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 153.504960][ T8936] [ 153.507297][ T8936] Reported by Kernel Concurrency Sanitizer on: [ 153.513554][ T8936] CPU: 0 UID: 0 PID: 8936 Comm: syz.2.1879 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 153.525644][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.535804][ T8936] ================================================================== [ 153.670396][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.894294][ T8940] syz.2.1879 (8940) used greatest stack depth: 9144 bytes left [ 153.902862][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.