last executing test programs: 4m18.4279667s ago: executing program 32 (id=1173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) 4m13.575433303s ago: executing program 4 (id=1451): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000000100"], 0x127281) 4m13.365670373s ago: executing program 4 (id=1456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) 4m13.174816397s ago: executing program 4 (id=1461): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x5, 0x15, "ff00"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCGWINSZ(r1, 0x5413, 0x0) 4m13.059836035s ago: executing program 4 (id=1465): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa600000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x80100, 0x68}, 0x94) 4m12.951861674s ago: executing program 4 (id=1468): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m12.943765092s ago: executing program 4 (id=1470): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.904449479s ago: executing program 33 (id=1470): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.07427727s ago: executing program 2 (id=2113): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x0) 3m37.596253908s ago: executing program 2 (id=2134): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3m37.491764958s ago: executing program 2 (id=2138): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x20) 3m37.462805943s ago: executing program 2 (id=2140): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4040000) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 3m37.360150783s ago: executing program 2 (id=2143): timer_create(0x3, 0x0, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) 3m36.526068554s ago: executing program 2 (id=2155): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 3m36.467739883s ago: executing program 34 (id=2155): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) 3m21.979845075s ago: executing program 0 (id=2488): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m19.415929875s ago: executing program 0 (id=2517): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x2000000, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x400025}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 3m19.331360538s ago: executing program 0 (id=2522): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x80000000) 3m19.072324509s ago: executing program 0 (id=2529): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") capset(0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 3m18.958550167s ago: executing program 0 (id=2534): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 3m18.929517342s ago: executing program 0 (id=2535): kexec_load(0x8, 0x1, &(0x7f0000001440)=[{&(0x7f0000000140)="4d71193f75a4a6d0f2900900000000000000c1a1a9ddf69b19dd8fe2b704d306eea3d824e41f71f87ff755744d61f0aa3aa38e656ee521858cb9f87ea72d724f87eb1bc26d9118856d508c709e6f0ed99c96c4ee862f5daf1801767607c7135d60da352155665a3d17c3e73b01b989a7a0035e2ca70511778dd7f581431f25c45a2ff656d4eaf5e4c3e8ed1d6470a54437f9438c39a11ab161346303fab50b83acdc7909c5a85435d0260002257e87f52bac02f8f3d434402fd39cfa969825bb5a10ecf96d9d7706b1f88167e1412bd3", 0xd0, 0x18000}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="65694c40212b71a5585daf3557cafb1b24c7cb861ff8b29c234bfa26a2da5897713a91daab555eec4f1527253582daf2dc97913d100951419ed3a989743c3a3d23750dd953baecbd", 0x48}], 0x1}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffc, 0x6, 0x80415, 0x1, "4b8b3ea40100dfed0b2f3409000000dd5a9601040049918ae7fd1f0ececfe0f4fcdf997dd52115394d4d0008000000000000020000000000000000000000eaff", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xc]}) 3m3.843912919s ago: executing program 35 (id=2535): kexec_load(0x8, 0x1, &(0x7f0000001440)=[{&(0x7f0000000140)="4d71193f75a4a6d0f2900900000000000000c1a1a9ddf69b19dd8fe2b704d306eea3d824e41f71f87ff755744d61f0aa3aa38e656ee521858cb9f87ea72d724f87eb1bc26d9118856d508c709e6f0ed99c96c4ee862f5daf1801767607c7135d60da352155665a3d17c3e73b01b989a7a0035e2ca70511778dd7f581431f25c45a2ff656d4eaf5e4c3e8ed1d6470a54437f9438c39a11ab161346303fab50b83acdc7909c5a85435d0260002257e87f52bac02f8f3d434402fd39cfa969825bb5a10ecf96d9d7706b1f88167e1412bd3", 0xd0, 0x18000}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="65694c40212b71a5585daf3557cafb1b24c7cb861ff8b29c234bfa26a2da5897713a91daab555eec4f1527253582daf2dc97913d100951419ed3a989743c3a3d23750dd953baecbd", 0x48}], 0x1}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffc, 0x6, 0x80415, 0x1, "4b8b3ea40100dfed0b2f3409000000dd5a9601040049918ae7fd1f0ececfe0f4fcdf997dd52115394d4d0008000000000000020000000000000000000000eaff", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xc]}) 44.583468689s ago: executing program 6 (id=7787): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x79, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7ffffe, 0x1}, 0x1a110, 0x1, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x6}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 44.540008071s ago: executing program 6 (id=7790): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) 44.473987618s ago: executing program 6 (id=7795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r2, r1, 0x4, r0}, 0x10) 44.440112412s ago: executing program 6 (id=7798): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 44.358953527s ago: executing program 6 (id=7804): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000024c0)='.\x00', 0x400000c) mkdir(&(0x7f0000000000)='./file0\x00', 0x70) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 43.734878007s ago: executing program 6 (id=7819): r0 = syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x0, 0x1, 0x315}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) r3 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 43.694051269s ago: executing program 36 (id=7819): r0 = syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x0, 0x1, 0x315}, &(0x7f0000000500)=0x0, &(0x7f0000000400)=0x0) r3 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 37.384424523s ago: executing program 1 (id=7975): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 37.299342747s ago: executing program 1 (id=7977): socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000940)=0x709b2c1c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x54f, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 37.298915697s ago: executing program 1 (id=7979): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 35.264817289s ago: executing program 1 (id=8032): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 35.191160744s ago: executing program 1 (id=8033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1ffd}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81}]}]}, 0x13c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 34.807637451s ago: executing program 1 (id=8049): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ffd, 0x32c, 0x0, r0}, &(0x7f0000000800)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 34.807597161s ago: executing program 37 (id=8049): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ffd, 0x32c, 0x0, r0}, &(0x7f0000000800)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 3.354607601s ago: executing program 9 (id=8868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004840) r1 = socket(0xa, 0x3, 0xff) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ee3548466cc", 0x1e}, {&(0x7f0000000200)="cf13dca2e9c3b481bb9a2bb2f92c", 0xe}], 0x2}, 0x8080) 3.322773415s ago: executing program 9 (id=8869): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3.236716949s ago: executing program 8 (id=8870): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e55dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.853617905s ago: executing program 9 (id=8878): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed"], 0x2c}}, 0x4000) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 2.51040495s ago: executing program 7 (id=8883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2.415613142s ago: executing program 3 (id=8885): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87, 0x2, [@TCA_MATCHALL_ACT={0x40, 0x2, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x874, 0xffffffffffffffff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.872373118s ago: executing program 5 (id=8886): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/105, 0x69}, 0x2}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.804203325s ago: executing program 5 (id=8887): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 513.391638ms ago: executing program 9 (id=8888): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, 0x0, 0x0, 0x5, 0x0, 0x1, r1}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) 211.854911ms ago: executing program 8 (id=8889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80), 0x0}, 0x20) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) 211.653161ms ago: executing program 8 (id=8890): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x600, 0x48c, 0x0, 0x0) 211.153921ms ago: executing program 3 (id=8891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 210.46513ms ago: executing program 7 (id=8892): r0 = socket(0x18, 0x4, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x1bb5, 0x4) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 210.20462ms ago: executing program 5 (id=8893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, r1}, 0x10) 204.627229ms ago: executing program 3 (id=8894): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 184.730745ms ago: executing program 3 (id=8895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 184.351825ms ago: executing program 7 (id=8896): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 125.752604ms ago: executing program 8 (id=8897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$isdn_base(0x22, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x2) 125.443624ms ago: executing program 5 (id=8898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="a4", 0x1, 0x24004051, &(0x7f00000001c0)={0xa, 0x2, 0x2, @loopback}, 0x1c) 125.249544ms ago: executing program 9 (id=8899): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) 97.805729ms ago: executing program 3 (id=8900): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r0, 0xfffffffc) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 89.111787ms ago: executing program 7 (id=8901): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x30}}}}, 0x32) close(r1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 81.149016ms ago: executing program 8 (id=8902): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) unshare(0x6020400) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 72.899914ms ago: executing program 5 (id=8903): socket$kcm(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0x400800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) 67.652063ms ago: executing program 7 (id=8904): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="bf000000000000003c001a803800048034"], 0x5c}}, 0x8000) 37.854438ms ago: executing program 9 (id=8907): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 35.701267ms ago: executing program 7 (id=8908): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0x16}, {0x0, 0x2, 0x1, 0x1000000, 0x0, 0x0, 0x2e4e}, {0x6, 0xfffffffffffffffd, 0x400000000000003}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000005d00)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) 0s ago: executing program 3 (id=8909): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0x66f, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x8, 0x0}) io_uring_enter(r1, 0x6e36, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): error count since last fsck: 1 [ 277.271412][ C1] EXT4-fs (loop8): initial error at time 2000000018: ext4_orphan_get:1391: inode 15 [ 277.271443][ C1] EXT4-fs (loop8): last error at time 2000000018: ext4_orphan_get:1391: inode 15 [ 277.308628][T21278] loop8: lost filesystem error report for type 5 error -117 [ 277.309089][T21281] netlink: 556 bytes leftover after parsing attributes in process `syz.5.7076'. [ 277.309253][T21278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.356754][T21285] netlink: 'syz.5.7078': attribute type 4 has an invalid length. [ 277.380361][T11549] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.389122][T21287] xfrm0 speed is unknown, defaulting to 1000 [ 277.542412][ T28] audit: type=1326 audit(2000000018.299:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21304 comm="syz.6.7087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c2756c799 code=0x0 [ 277.709775][T21322] loop1: detected capacity change from 0 to 1024 [ 277.717458][T21322] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 277.737844][T21322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 277.752068][T21322] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 277.766009][T21322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.782811][T21322] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.7095: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 277.828069][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.911456][T21339] dvmrp6: entered allmulticast mode [ 278.009330][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7108'. [ 278.515463][T21400] xfrm0 speed is unknown, defaulting to 1000 [ 278.590505][T21406] xfrm0 speed is unknown, defaulting to 1000 [ 278.847775][ T28] audit: type=1400 audit(2000000019.599:2037): avc: denied { mount } for pid=21437 comm="syz.7.7144" name="/" dev="rpc_pipefs" ino=102868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 278.863017][T21440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7146'. [ 278.929310][T21445] xt_hashlimit: size too large, truncated to 1048576 [ 279.161525][T21465] loop6: detected capacity change from 0 to 128 [ 279.230694][ T3371] kernel write not supported for file [eventfd] (pid: 3371 comm: kworker/0:2) [ 279.386049][ T28] audit: type=1400 audit(2000000020.139:2038): avc: denied { nlmsg_read } for pid=21486 comm="syz.1.7169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 279.493785][T21495] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7173'. [ 279.514348][T21495] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7173'. [ 279.562563][T21505] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7177'. [ 279.583690][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7179'. [ 279.655973][T21516] loop1: detected capacity change from 0 to 1024 [ 279.675219][T21516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.703322][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.842383][T21544] netlink: 'syz.1.7195': attribute type 83 has an invalid length. [ 279.886850][ T28] audit: type=1326 audit(2000000020.639:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 279.973929][ T28] audit: type=1326 audit(2000000020.639:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 280.013084][ T28] audit: type=1326 audit(2000000020.669:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 280.017352][T21565] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.055007][T21575] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7209'. [ 280.070290][ T28] audit: type=1326 audit(2000000020.669:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 280.133360][ T28] audit: type=1326 audit(2000000020.669:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 280.136826][T21580] xt_hashlimit: size too large, truncated to 1048576 [ 280.165112][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.172193][ T28] audit: type=1326 audit(2000000020.669:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 280.183045][T21565] FAT-fs (loop8): Filesystem has been set read-only [ 280.219298][T21592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7216'. [ 280.223186][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.239123][ T28] audit: type=1326 audit(2000000020.669:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21552 comm="syz.1.7201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 280.254288][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.285611][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.295561][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.304771][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.320200][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.329871][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.339584][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.356693][T21565] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.552998][T21607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.615692][T21607] ext4 filesystem being mounted at /993/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.631234][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.666054][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 280.945747][T21647] set_capacity_and_notify: 2 callbacks suppressed [ 280.945761][T21647] loop6: detected capacity change from 0 to 1764 [ 281.013239][T21659] loop8: detected capacity change from 0 to 512 [ 281.022820][T21659] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13 [ 281.031868][T21659] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.7248: iget: bad i_size value: 12154757448730 [ 281.050605][T21659] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.050852][T21659] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.7248: couldn't read orphan inode 13 (err -117) [ 281.060031][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 281.060054][ C0] EXT4-fs (loop8): initial error at time 2000000021: ext4_orphan_get:1391: inode 13 [ 281.060085][ C0] EXT4-fs (loop8): last error at time 2000000021: ext4_orphan_get:1391: inode 13 [ 281.097214][T21659] loop8: lost filesystem error report for type 5 error -117 [ 281.097935][T21659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.119744][T21659] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.7248: corrupted in-inode xattr: overlapping e_value [ 281.143515][T11549] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.542368][T21688] xfrm0 speed is unknown, defaulting to 1000 [ 281.632576][T21688] chnl_net:caif_netlink_parms(): no params data found [ 281.670466][T21688] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.681994][T21688] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.702173][T21688] bridge_slave_0: entered allmulticast mode [ 281.713453][T21688] bridge_slave_0: entered promiscuous mode [ 281.726388][T21688] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.733662][T21688] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.740902][T21688] bridge_slave_1: entered allmulticast mode [ 281.750917][T21688] bridge_slave_1: entered promiscuous mode [ 281.775463][T21688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.783726][T21730] xt_hashlimit: size too large, truncated to 1048576 [ 281.786329][T21688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.798176][T21732] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7274'. [ 281.812818][T21688] team0: Port device team_slave_0 added [ 281.820595][T21688] team0: Port device team_slave_1 added [ 281.834039][T21732] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7274'. [ 281.852327][T21732] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.882407][T21688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.897427][T21688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.950754][T21688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.962212][T21688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.969293][T21688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.018691][T21688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.056821][T21688] hsr_slave_0: entered promiscuous mode [ 282.067457][T21688] hsr_slave_1: entered promiscuous mode [ 282.079940][T21688] debugfs: 'hsr0' already exists in 'hsr' [ 282.092464][T21688] Cannot create hsr debugfs directory [ 282.194140][T21688] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.233119][T21688] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.318576][T21688] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.406602][T21688] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.523935][T21688] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 282.543164][T21688] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 282.563374][T21688] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 282.580395][T21688] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 282.666425][T21817] loop6: detected capacity change from 0 to 1024 [ 282.678356][T21817] EXT4-fs: inline encryption not supported [ 282.680633][T21688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.690999][T21817] EXT4-fs: Ignoring removed i_version option [ 282.699101][T21688] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.702444][T21819] sctp: [Deprecated]: syz.5.7311 (pid 21819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.702444][T21819] Use struct sctp_sack_info instead [ 282.718503][T21688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.732744][T21688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.748850][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.755947][ T551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.774127][T21817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.774855][ T551] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.793827][ T551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.891503][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.924324][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 282.924337][ T28] audit: type=1400 audit(2000000023.679:2063): avc: denied { associate } for pid=21832 comm="syz.5.7316" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 282.943106][T21688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.095179][ T28] audit: type=1326 audit(2000000023.829:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 283.140594][ T28] audit: type=1326 audit(2000000023.829:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 283.165003][ T28] audit: type=1326 audit(2000000023.829:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 283.209663][ T28] audit: type=1326 audit(2000000023.829:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 283.298591][ T28] audit: type=1326 audit(2000000023.829:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc31128c502 code=0x7ffc0000 [ 283.331293][ T28] audit: type=1326 audit(2000000023.839:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc31124cfce code=0x7ffc0000 [ 283.387740][T21688] veth0_vlan: entered promiscuous mode [ 283.398372][T21688] veth1_vlan: entered promiscuous mode [ 283.405975][ T28] audit: type=1326 audit(2000000023.869:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc31128c5c7 code=0x7ffc0000 [ 283.432583][T21872] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7327'. [ 283.449389][T21688] veth0_macvtap: entered promiscuous mode [ 283.463231][T21688] veth1_macvtap: entered promiscuous mode [ 283.490333][T21688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.497914][ T28] audit: type=1326 audit(2000000023.869:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc31124cfce code=0x7ffc0000 [ 283.500961][T21688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.531707][ T28] audit: type=1326 audit(2000000023.869:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.5.7320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc31124cfce code=0x7ffc0000 [ 283.587560][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.606846][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.625406][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.638725][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.819991][T21794] Set syz1 is full, maxelem 65536 reached [ 283.897738][T21913] xfrm0 speed is unknown, defaulting to 1000 [ 283.900942][T21917] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 283.960734][T21924] __nla_validate_parse: 4 callbacks suppressed [ 283.960748][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7349'. [ 284.028692][T21924] team0: Port device C removed [ 284.048500][T21920] xfrm0 speed is unknown, defaulting to 1000 [ 284.222190][T21946] loop8: detected capacity change from 0 to 128 [ 284.233950][T21946] EXT4-fs: Ignoring removed nobh option [ 284.243738][T21946] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.278162][T21946] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.295451][T21950] xfrm0 speed is unknown, defaulting to 1000 [ 284.336936][T21951] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7360'. [ 284.351935][T21953] : renamed from veth0_vlan (while UP) [ 284.352322][T21688] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.699371][T21976] xfrm0 speed is unknown, defaulting to 1000 [ 284.761177][T21978] xfrm0 speed is unknown, defaulting to 1000 [ 284.944837][T21988] loop6: detected capacity change from 0 to 512 [ 284.956296][T21988] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 284.971363][T21988] EXT4-fs (loop6): orphan cleanup on readonly fs [ 284.978096][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 284.991662][T21988] loop6: lost filesystem error report for type 5 error -117 [ 284.991917][T21988] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 285.007943][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 285.007980][ C0] EXT4-fs (loop6): initial error at time 2000000025: ext4_read_block_bitmap_nowait:517 [ 285.008025][ C0] EXT4-fs (loop6): last error at time 2000000025: ext4_read_block_bitmap_nowait:517 [ 285.034249][T21988] loop6: lost filesystem error report for type 5 error -117 [ 285.034554][T21988] EXT4-fs (loop6): 1 orphan inode deleted [ 285.048601][T21988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 285.063942][T21988] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 285.073752][T21988] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 285.083902][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.097466][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.112635][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.127625][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.142344][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.155888][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.169585][T21988] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.7376: Block bitmap for bg 0 marked uninitialized [ 285.196132][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.299076][T22003] loop6: detected capacity change from 0 to 1024 [ 285.306016][T22003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.316683][T22003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.328344][T22003] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 285.336652][T22003] System zones: 0-1, 3-36 [ 285.605390][T22020] sctp: [Deprecated]: syz.8.7389 (pid 22020) Use of int in maxseg socket option. [ 285.605390][T22020] Use struct sctp_assoc_value instead [ 285.800366][T22051] loop8: detected capacity change from 0 to 512 [ 285.829813][T22051] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.847965][T22051] EXT4-fs (loop8): shut down requested (2) [ 285.863301][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 285.880378][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 285.889349][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 285.898653][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 285.907762][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 285.918451][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 285.927831][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 285.933323][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7404'. [ 285.936901][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 285.946708][T22059] bond0: Unable to set up delay as MII monitoring is disabled [ 285.954691][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=15 [ 285.970699][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 285.979655][T22051] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 286.052015][T22067] netlink: 'syz.8.7408': attribute type 3 has an invalid length. [ 286.108699][T22075] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7412'. [ 286.211916][T22090] loop1: detected capacity change from 0 to 512 [ 286.219470][T22089] erspan0: entered promiscuous mode [ 286.240041][T22090] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7418: invalid indirect mapped block 256 (level 2) [ 286.294232][T22090] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 286.295056][T22090] EXT4-fs (loop1): 2 truncates cleaned up [ 286.305921][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 286.305938][ C1] EXT4-fs (loop1): initial error at time 2000000027: ext4_free_branches:1023: inode 11 [ 286.305974][ C1] EXT4-fs (loop1): last error at time 2000000027: ext4_free_branches:1023: inode 11 [ 286.825749][T22123] loop1: detected capacity change from 0 to 128 [ 286.852587][T22123] EXT4-fs mount: 6 callbacks suppressed [ 286.852603][T22123] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.896949][T22123] ext4 filesystem being mounted at /1286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.950310][ T4914] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.068130][T22134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7436'. [ 287.154314][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7442'. [ 287.163505][T22146] netlink: 'syz.1.7442': attribute type 30 has an invalid length. [ 287.176467][ T40] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.191984][ T40] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.213445][ T40] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.222675][ T40] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.570795][T22169] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 287.654595][ T3407] IPVS: starting estimator thread 0... [ 287.735698][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7457'. [ 287.751953][T22175] IPVS: using max 2448 ests per chain, 122400 per kthread [ 288.129533][T22236] xt_hashlimit: size too large, truncated to 1048576 [ 288.329310][T22254] xt_hashlimit: size too large, truncated to 1048576 [ 288.600725][T22278] loop1: detected capacity change from 0 to 512 [ 288.634508][T22278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.666979][T22278] ext4 filesystem being mounted at /1301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.721628][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.929500][T22309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7512'. [ 288.939354][T22309] netlink: 'syz.6.7512': attribute type 1 has an invalid length. [ 288.992966][T22314] loop1: detected capacity change from 0 to 512 [ 289.019037][T22314] EXT4-fs: Ignoring removed bh option [ 289.032568][T22314] EXT4-fs: inline encryption not supported [ 289.038955][T22314] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.076796][T22314] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 289.099644][T22314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7511: bg 0: block 248: padding at end of block bitmap is not set [ 289.114337][T22314] loop1: lost filesystem error report for type 5 error -117 [ 289.117174][T22314] __quota_error: 51 callbacks suppressed [ 289.117191][T22314] Quota error (device loop1): write_blk: dquota write failed [ 289.124608][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 289.124629][ C0] EXT4-fs (loop1): last error at time 2000000029: ext4_validate_block_bitmap:441 [ 289.153739][T22314] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 289.163899][T22314] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.7511: Failed to acquire dquot type 1 [ 289.175346][T22314] loop1: lost filesystem error report for type 5 error -117 [ 289.175968][T22314] EXT4-fs (loop1): 1 truncate cleaned up [ 289.192077][T22314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 289.316633][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 289.380334][ T28] audit: type=1326 audit(2000000030.129:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 289.435936][ T28] audit: type=1326 audit(2000000030.129:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 289.462364][ T28] audit: type=1326 audit(2000000030.169:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 289.525605][ T28] audit: type=1326 audit(2000000030.169:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 289.575833][ T28] audit: type=1326 audit(2000000030.169:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22359 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b654c799 code=0x7ffc0000 [ 290.085450][ T28] audit: type=1326 audit(2000000030.829:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.7.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 290.109568][ T28] audit: type=1326 audit(2000000030.839:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.7.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 290.164848][T22425] loop1: detected capacity change from 0 to 1024 [ 290.211392][ T28] audit: type=1326 audit(2000000030.839:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.7.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 290.329801][T22425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.409642][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.578246][T22462] loop8: detected capacity change from 0 to 512 [ 290.599805][T22462] EXT4-fs: Ignoring removed i_version option [ 290.617015][T22462] EXT4-fs: Ignoring removed bh option [ 290.634812][T22462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.723062][T22462] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.964770][T22498] loop1: detected capacity change from 0 to 2048 [ 290.998764][T22498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.050567][T22498] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 291.119541][T22498] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 291.143452][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.165950][T22498] EXT4-fs (loop1): This should not happen!! Data will be lost [ 291.165950][T22498] [ 291.176984][T22498] EXT4-fs (loop1): Total free blocks count 0 [ 291.184327][T22498] EXT4-fs (loop1): Free/Dirty block details [ 291.190299][T22498] EXT4-fs (loop1): free_blocks=2415919504 [ 291.216813][T22498] EXT4-fs (loop1): dirty_blocks=48 [ 291.231305][T22498] EXT4-fs (loop1): Block reservation details [ 291.239050][T22498] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 291.266360][T22510] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 291.507119][T22528] geneve2: entered promiscuous mode [ 291.756964][T22535] loop6: detected capacity change from 0 to 512 [ 291.794465][T22535] EXT4-fs: Ignoring removed i_version option [ 291.804906][T22535] EXT4-fs: Ignoring removed bh option [ 291.850669][T22535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.876306][T22535] ext4 filesystem being mounted at /1076/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.106322][T22559] xfrm0 speed is unknown, defaulting to 1000 [ 292.136935][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.164546][T22565] loop1: detected capacity change from 0 to 512 [ 292.200029][T22568] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.226563][T22565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 292.264803][T22565] ext4 filesystem being mounted at /1334/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.323833][T22574] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7627'. [ 292.349295][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 292.372775][T22574] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7627'. [ 292.462557][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7628'. [ 292.541043][T22599] loop1: detected capacity change from 0 to 512 [ 292.549375][T22601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7636'. [ 292.564094][T22599] EXT4-fs: Ignoring removed i_version option [ 292.580585][T22599] EXT4-fs: Ignoring removed bh option [ 292.592114][T22598] xt_CT: No such helper "snmp_trap" [ 292.612383][T22599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.641633][T22599] ext4 filesystem being mounted at /1336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.754622][T22615] loop6: detected capacity change from 0 to 512 [ 292.771991][T22615] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 292.815872][T22615] EXT4-fs (loop6): 1 truncate cleaned up [ 292.841000][T22615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.892221][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.024181][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7658'. [ 293.160442][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.245452][T22656] loop6: detected capacity change from 0 to 4096 [ 293.259124][T22656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.354795][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.616382][T22679] xfrm0 speed is unknown, defaulting to 1000 [ 293.846781][T22700] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 293.908237][T22705] loop1: detected capacity change from 0 to 128 [ 294.843439][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 294.843455][ T28] audit: type=1400 audit(2000000035.592:2137): avc: denied { setopt } for pid=22738 comm="syz.1.7704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.053338][T22757] loop1: detected capacity change from 0 to 4096 [ 295.067694][T22757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.096253][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.302948][T22780] loop6: detected capacity change from 0 to 1024 [ 295.318727][T22780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.345620][ T28] audit: type=1400 audit(2000000036.092:2138): avc: denied { write } for pid=22779 comm="syz.6.7713" name="file3" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.390112][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.412656][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7718'. [ 295.434489][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7718'. [ 295.509419][T22803] loop8: detected capacity change from 0 to 128 [ 295.586792][T22817] loop6: detected capacity change from 0 to 256 [ 295.602409][T22815] netlink: 'syz.8.7729': attribute type 2 has an invalid length. [ 295.717752][T22821] xfrm0 speed is unknown, defaulting to 1000 [ 296.552905][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7754'. [ 296.583725][T22874] vlan2: entered allmulticast mode [ 296.589665][T22874] bridge_slave_0: entered allmulticast mode [ 296.596488][T22874] bridge0: port 1(vlan2) entered blocking state [ 296.603436][T22874] bridge0: port 1(vlan2) entered disabled state [ 296.610461][T22874] vlan2: entered promiscuous mode [ 296.617063][T22874] bridge_slave_0: entered promiscuous mode [ 296.681313][T22823] syz.7.7734 (22823) used greatest stack depth: 7144 bytes left [ 296.724520][T22888] 9p: Bad value for 'wfdno' [ 296.873116][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7770'. [ 296.940914][T22912] set_capacity_and_notify: 1 callbacks suppressed [ 296.940931][T22912] loop6: detected capacity change from 0 to 512 [ 296.985160][T22912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.998179][T22912] ext4 filesystem being mounted at /1111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.036824][T10371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.060572][T22918] loop8: detected capacity change from 0 to 1024 [ 297.067392][T22918] EXT4-fs: Ignoring removed orlov option [ 297.104534][T22918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.119742][T22922] loop6: detected capacity change from 0 to 512 [ 297.141927][T22922] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7775'. [ 297.178647][T22918] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 297.304938][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.547992][T22964] __nla_validate_parse: 1 callbacks suppressed [ 297.548010][T22964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7797'. [ 297.603465][T22974] Invalid logical block size (5) [ 297.798508][T22987] tmpfs: Bad value for 'mpol' [ 297.924978][T22997] xfrm0 speed is unknown, defaulting to 1000 [ 297.953686][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7816'. [ 297.994825][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7816'. [ 298.284363][ T28] audit: type=1400 audit(2000000039.032:2139): avc: denied { write } for pid=23011 comm="syz.7.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.445315][T23040] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7826'. [ 298.469396][ T28] audit: type=1400 audit(2000000039.212:2140): avc: denied { mounton } for pid=23045 comm="syz.7.7830" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.498854][T23028] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7826'. [ 298.559252][ T40] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.600479][T23030] xfrm0 speed is unknown, defaulting to 1000 [ 298.627907][ T40] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.693621][ T40] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.763812][T23070] xfrm0 speed is unknown, defaulting to 1000 [ 298.781858][ T28] audit: type=1400 audit(2000000039.522:2141): avc: denied { bind } for pid=23098 comm="syz.1.7835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.802296][ T40] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.032052][ T40] vlan2: left promiscuous mode [ 299.055015][ T40] bridge_slave_0: left promiscuous mode [ 299.060796][ T40] bridge0: port 1(vlan2) entered disabled state [ 299.305732][ T40] team0: Port device bond0 removed [ 299.324989][ T40] bond0 (unregistering): Released all slaves [ 299.351012][T23192] loop8: detected capacity change from 0 to 512 [ 299.358311][ T40] bond1 (unregistering): Released all slaves [ 299.418316][T23030] chnl_net:caif_netlink_parms(): no params data found [ 299.445243][ T40] tipc: Disabling bearer [ 299.461171][ T40] tipc: Disabling bearer [ 299.481987][ T40] tipc: Left network mode [ 299.608152][ T40] hsr_slave_0: left promiscuous mode [ 299.621415][ T40] hsr_slave_1: left promiscuous mode [ 299.636958][ T40] veth1_macvtap: left promiscuous mode [ 299.643551][ T40] veth0_macvtap: left promiscuous mode [ 299.650851][ T40] veth1_vlan: left promiscuous mode [ 299.656565][ T40] veth0_vlan: left promiscuous mode [ 299.837579][T23030] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.855358][T23030] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.873382][T23030] bridge_slave_0: entered allmulticast mode [ 299.880711][T23030] bridge_slave_0: entered promiscuous mode [ 299.893111][T23030] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.908142][T23030] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.924267][T23030] bridge_slave_1: entered allmulticast mode [ 299.931941][T23030] bridge_slave_1: entered promiscuous mode [ 299.970524][T23030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.983084][T23030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.017295][T23030] team0: Port device team_slave_0 added [ 300.032038][T23236] loop1: detected capacity change from 0 to 1024 [ 300.043399][T23236] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 300.055755][T23030] team0: Port device team_slave_1 added [ 300.081536][T23236] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 300.094713][T23030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.101940][T23030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.128036][T23236] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 300.139905][T23236] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #32: comm syz.1.7858: iget: special inode unallocated [ 300.153421][T23030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.164327][T23236] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 300.164496][T23236] EXT4-fs (loop1): no journal found [ 300.173625][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 300.173661][ C0] EXT4-fs (loop1): initial error at time 2000000040: ext4_get_journal_inode:5863: inode 32 [ 300.173697][ C0] EXT4-fs (loop1): last error at time 2000000040: ext4_get_journal_inode:5863: inode 32 [ 300.206268][T23236] EXT4-fs (loop1): can't get journal size [ 300.214967][ T40] IPVS: stop unused estimator thread 0... [ 300.215849][T23030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.229673][T23236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.243591][T23030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.270553][T23030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.284434][T23255] netlink: 'syz.7.7861': attribute type 25 has an invalid length. [ 300.299578][T23255] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7861'. [ 300.336146][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.357999][T23030] hsr_slave_0: entered promiscuous mode [ 300.376917][T23030] hsr_slave_1: entered promiscuous mode [ 300.392270][T23030] debugfs: 'hsr0' already exists in 'hsr' [ 300.401210][T23030] Cannot create hsr debugfs directory [ 300.575186][T23287] loop1: detected capacity change from 0 to 256 [ 300.618519][T23290] loop8: detected capacity change from 0 to 1024 [ 300.644493][T23290] EXT4-fs: Ignoring removed bh option [ 300.660720][T23290] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.677344][T23030] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 300.684538][T23290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 300.695530][T23030] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 300.701941][T23290] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.7870: lblock 2 mapped to illegal pblock 2 (length 1) [ 300.717236][T23290] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 300.717340][T23290] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 300.726421][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 300.726444][ C1] EXT4-fs (loop8): initial error at time 2000000041: ext4_map_blocks:776: inode 3: block 2 [ 300.726490][ C1] EXT4-fs (loop8): last error at time 2000000041: ext4_map_blocks:776: inode 3: block 2 [ 300.761726][T23290] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.7870: lblock 0 mapped to illegal pblock 48 (length 1) [ 300.776665][T23290] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 300.777678][T23290] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 300.780570][T23030] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 300.786923][T23290] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.7870: Failed to acquire dquot type 0 [ 300.814529][T23290] loop8: lost filesystem error report for type 5 error -117 [ 300.822184][T23290] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 300.832234][T23290] loop8: lost filesystem error report for type 5 error -117 [ 300.836527][T23290] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.7870: mark_inode_dirty error [ 300.852939][T23030] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 300.855335][T23290] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 300.866892][T23290] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 300.921011][T23290] EXT4-fs (loop8): 1 orphan inode deleted [ 300.936665][T23290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.949791][ T6807] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 300.949826][ T6807] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 300.949987][ T6807] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 300.993715][T23311] loop1: detected capacity change from 0 to 512 [ 301.000846][T23311] EXT4-fs: Ignoring removed bh option [ 301.009882][T23311] EXT4-fs: inline encryption not supported [ 301.012212][T23315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.027712][T23311] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.047105][T23030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.047523][T23290] EXT4-fs (loop8): shut down requested (1) [ 301.058456][ T6807] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 0 [ 301.084279][T23311] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 301.084433][T23030] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.106175][T23311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7876: bg 0: block 248: padding at end of block bitmap is not set [ 301.121288][T23311] loop1: lost filesystem error report for type 5 error -117 [ 301.124284][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.126013][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.147614][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.154959][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 301.161399][ C1] EXT4-fs (loop1): last error at time 2000000041: ext4_validate_block_bitmap:441 [ 301.173673][T23311] Quota error (device loop1): write_blk: dquota write failed [ 301.181401][T23311] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 301.191353][T23311] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.7876: Failed to acquire dquot type 1 [ 301.203306][T23311] loop1: lost filesystem error report for type 5 error -117 [ 301.213645][T23030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.213930][T23311] EXT4-fs (loop1): 1 truncate cleaned up [ 301.220960][T23030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.248686][T23311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 301.265928][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.273111][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.375513][T23030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.383347][ T4914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 301.446102][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7882'. [ 301.472991][T23342] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.570670][T23363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7888'. [ 301.589891][T23363] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7888'. [ 301.615767][T23030] veth0_vlan: entered promiscuous mode [ 301.645891][T23030] veth1_vlan: entered promiscuous mode [ 301.664958][T23030] veth0_macvtap: entered promiscuous mode [ 301.674673][T23030] veth1_macvtap: entered promiscuous mode [ 301.704134][T23030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.715857][T23030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.743111][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.762088][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.775758][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.789316][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.876373][T23390] loop9: detected capacity change from 0 to 1024 [ 301.897348][T23390] EXT4-fs: Ignoring removed orlov option [ 301.948509][T23390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.134822][T23390] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 302.172075][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.488983][T23423] team0: Port device syz_tun added [ 302.575472][T23427] loop8: detected capacity change from 0 to 512 [ 302.576984][T23423] team0: Port device syz_tun removed [ 302.582486][T23427] EXT4-fs: Ignoring removed orlov option [ 302.611961][T23427] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.625542][T23427] EXT4-fs (loop8): 1 truncate cleaned up [ 302.631568][T23427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.687667][T23423] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 302.932365][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.027582][T23448] loop8: detected capacity change from 0 to 1024 [ 303.058666][T23448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.188491][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.199013][T23463] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7924'. [ 303.209251][T23460] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7924'. [ 303.234842][ T28] audit: type=1400 audit(2000000043.982:2142): avc: denied { read } for pid=23464 comm="syz.8.7926" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 303.266620][ T28] audit: type=1400 audit(2000000044.002:2143): avc: denied { open } for pid=23464 comm="syz.8.7926" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 303.297937][T23469] netlink: 'syz.1.7928': attribute type 6 has an invalid length. [ 303.488998][T23489] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7937'. [ 303.664422][T23503] tmpfs: Cannot disable swap on remount [ 303.878159][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7953'. [ 303.929398][T23529] loop9: detected capacity change from 0 to 8192 [ 303.938801][ T28] audit: type=1400 audit(2000000044.692:2144): avc: denied { mounton } for pid=23528 comm="syz.9.7955" path="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 304.094434][T23540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23540 comm=syz.8.7960 [ 304.254229][T23556] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.7967'. [ 304.264042][T23554] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.7967'. [ 304.468816][T23567] loop8: detected capacity change from 0 to 1024 [ 304.485179][T23567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.508548][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.627758][T23577] ref_ctr_offset mismatch. inode: 0x1c70 offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 304.704652][ T6801] Bluetooth: hci0: Frame reassembly failed (-84) [ 304.764201][ T28] audit: type=1400 audit(2000000045.512:2145): avc: denied { compute_member } for pid=23588 comm="syz.5.7981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 304.888657][ T28] audit: type=1326 audit(2000000045.632:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.5.7985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc31128c799 code=0x0 [ 304.935447][T23599] loop9: detected capacity change from 0 to 512 [ 304.946310][T23599] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.960721][T23599] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 304.969674][T23599] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 304.978051][T23599] System zones: 0-2, 18-18, 34-35 [ 304.985448][T23599] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.005833][T23591] loop8: detected capacity change from 0 to 65536 [ 305.013663][T23599] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 305.032417][T23599] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 305.040958][T23599] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 305.100538][T23599] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7986: bg 0: block 353: padding at end of block bitmap is not set [ 305.115981][T23599] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 305.136267][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.197978][T23617] loop8: detected capacity change from 0 to 1024 [ 305.233561][T23617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.321267][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.509810][T23643] loop8: detected capacity change from 0 to 512 [ 305.541241][T23643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.566832][T23643] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8002: bg 0: block 393: padding at end of block bitmap is not set [ 305.596144][T23643] loop8: lost filesystem error report for type 5 error -117 [ 305.596391][T23643] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 305.603805][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 305.603825][ C1] EXT4-fs (loop8): initial error at time 2000000046: ext4_validate_block_bitmap:441 [ 305.603863][ C1] EXT4-fs (loop8): last error at time 2000000046: ext4_validate_block_bitmap:441 [ 305.622533][T23646] loop9: detected capacity change from 0 to 2048 [ 305.628510][T23643] loop8: lost filesystem error report for type 5 error -117 [ 305.645729][T23643] EXT4-fs (loop8): 2 truncates cleaned up [ 305.659181][T23643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.694190][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.023996][T23685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.071279][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.230899][T23692] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 306.337886][T23697] pim6reg1: entered promiscuous mode [ 306.343767][T23697] pim6reg1: entered allmulticast mode [ 306.537302][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 306.537317][ T28] audit: type=1326 audit(2000000047.282:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23700 comm="syz.8.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 306.568621][ T28] audit: type=1326 audit(2000000047.282:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23700 comm="syz.8.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 306.592209][ T28] audit: type=1326 audit(2000000047.282:2156): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23700 comm="syz.8.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 306.616516][ T28] audit: type=1326 audit(2000000047.282:2157): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23700 comm="syz.8.8028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 306.668891][T23705] loop9: detected capacity change from 0 to 512 [ 306.692414][T23705] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 306.711681][ T4232] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.721745][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.739694][T23705] EXT4-fs (loop9): orphan cleanup on readonly fs [ 306.747796][T23705] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.8030: Block bitmap for bg 0 marked uninitialized [ 306.771204][T23705] loop9: lost filesystem error report for type 5 error -117 [ 306.771448][T23705] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 306.787527][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 306.787551][ C1] EXT4-fs (loop9): initial error at time 2000000047: ext4_read_block_bitmap_nowait:517 [ 306.787587][ C1] EXT4-fs (loop9): last error at time 2000000047: ext4_read_block_bitmap_nowait:517 [ 306.841144][T23705] loop9: lost filesystem error report for type 5 error -117 [ 306.841585][T23705] EXT4-fs (loop9): 1 orphan inode deleted [ 306.859306][T23705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.911281][T23705] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 306.926748][T23705] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 306.936538][T23705] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.8030: Block bitmap for bg 0 marked uninitialized [ 306.950143][T23705] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.8030: Block bitmap for bg 0 marked uninitialized [ 306.963910][T23705] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.8030: Block bitmap for bg 0 marked uninitialized [ 307.011678][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.207096][ T28] audit: type=1326 audit(2000000047.952:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23745 comm="syz.9.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcbd7c799 code=0x7ffc0000 [ 307.240236][T23751] EXT4-fs: Ignoring removed orlov option [ 307.240751][ T28] audit: type=1326 audit(2000000047.952:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23745 comm="syz.9.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcbd7c799 code=0x7ffc0000 [ 307.270066][T23751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.298089][ T28] audit: type=1326 audit(2000000047.952:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23745 comm="syz.9.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6bcbd7c799 code=0x7ffc0000 [ 307.299440][T23751] EXT4-fs (loop8): orphan cleanup on readonly fs [ 307.329050][ T28] audit: type=1326 audit(2000000047.952:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23745 comm="syz.9.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcbd7c799 code=0x7ffc0000 [ 307.335765][T23751] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8053: bg 0: block 248: padding at end of block bitmap is not set [ 307.352832][ T28] audit: type=1326 audit(2000000047.952:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23745 comm="syz.9.8051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcbd7c799 code=0x7ffc0000 [ 307.391197][T23751] loop8: lost filesystem error report for type 5 error -117 [ 307.401131][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 307.414906][ C1] EXT4-fs (loop8): last error at time 2000000048: ext4_validate_block_bitmap:441 [ 307.424354][T23751] Quota error (device loop8): write_blk: dquota write failed [ 307.431952][T23751] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.8053: Failed to acquire dquot type 1 [ 307.440516][T23752] xfrm0 speed is unknown, defaulting to 1000 [ 307.443459][T23751] loop8: lost filesystem error report for type 5 error -117 [ 307.450916][T23751] EXT4-fs (loop8): 1 truncate cleaned up [ 307.475877][T23751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.511852][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.531504][T23751] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 307.569281][T23751] EXT4-fs error (device loop8): __ext4_remount:6804: comm syz.8.8053: Abort forced by user [ 307.586800][T23751] EXT4-fs (loop8): Remounting filesystem read-only [ 307.600408][T23772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.612638][T23751] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 307.635055][T23751] ext4 filesystem being remounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.649273][T23752] chnl_net:caif_netlink_parms(): no params data found [ 307.685857][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.714534][T23786] xfrm0 speed is unknown, defaulting to 1000 [ 307.714725][T23752] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.729348][T23752] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.730450][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.737328][T23752] bridge_slave_0: entered allmulticast mode [ 307.753278][T23752] bridge_slave_0: entered promiscuous mode [ 307.759141][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.768189][T23752] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.775394][T23752] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.782698][T23752] bridge_slave_1: entered allmulticast mode [ 307.801616][T23752] bridge_slave_1: entered promiscuous mode [ 307.822794][T23795] set_capacity_and_notify: 3 callbacks suppressed [ 307.822846][T23795] loop9: detected capacity change from 0 to 128 [ 307.868211][T23752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.891005][T23795] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.897495][T23752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.925591][T23795] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.941483][T23752] team0: Port device team_slave_0 added [ 307.965077][T23752] team0: Port device team_slave_1 added [ 307.996098][T23752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.026042][T23800] xt_hashlimit: size too large, truncated to 1048576 [ 308.032388][T23030] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.042049][T23752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.117850][T23752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.129520][T23752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.156763][T23752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.183415][T23752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.271320][T23752] hsr_slave_0: entered promiscuous mode [ 308.278942][T23752] hsr_slave_1: entered promiscuous mode [ 308.285129][T23752] debugfs: 'hsr0' already exists in 'hsr' [ 308.290960][T23752] Cannot create hsr debugfs directory [ 308.457331][T23835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.499682][T23842] loop8: detected capacity change from 0 to 512 [ 308.552689][T23842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.591399][T23842] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.607880][T23849] xfrm0 speed is unknown, defaulting to 1000 [ 308.801664][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.809851][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.894870][T23752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.927426][T23752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.949913][T23752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.972967][T23752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.985014][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.088530][T23915] loop9: detected capacity change from 0 to 512 [ 309.114570][T23915] EXT4-fs: Ignoring removed i_version option [ 309.164500][T23752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.173368][T23915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.189817][T23752] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.292052][T23752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.322062][T23752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.338957][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.374340][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.381472][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.420115][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.427250][ T7106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.567737][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 309.587452][T23752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.016696][T23960] team0: Port device syz_tun added [ 310.022091][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.070582][T23963] team0: Port device syz_tun removed [ 310.096318][T23963] bridge_slave_0: left allmulticast mode [ 310.102334][T23963] bridge_slave_0: left promiscuous mode [ 310.108041][T23963] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.120139][T23963] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.130933][T23963] bond0: (slave bond_slave_0): Releasing backup interface [ 310.148030][T23963] bond0: (slave bond_slave_1): Releasing backup interface [ 310.172537][T23963] team0: Port device C removed [ 310.194781][T23963] team0: Port device team_slave_1 removed [ 310.212558][T23963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.226369][T23963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.246428][T23963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.253973][T23963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.264526][T23963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.284985][ T6807] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.323141][ T6807] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.348379][ T6807] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.381334][ T50] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.438011][T23752] veth0_vlan: entered promiscuous mode [ 310.462162][T23752] veth1_vlan: entered promiscuous mode [ 310.515714][T23752] veth0_macvtap: entered promiscuous mode [ 310.548631][T23752] veth1_macvtap: entered promiscuous mode [ 310.597386][T23752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.632612][T23752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.660596][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.689084][T23946] syz.5.8098 (23946) used greatest stack depth: 6832 bytes left [ 310.708981][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.775709][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.841767][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.014871][T24063] team0: Port device syz_tun added [ 311.032828][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.053076][T24063] team0: Port device syz_tun removed [ 311.082714][T24073] netlink: 'syz.8.8117': attribute type 3 has an invalid length. [ 311.094524][T24063] bridge_slave_0: left allmulticast mode [ 311.118400][T24063] bridge_slave_0: left promiscuous mode [ 311.128270][T24079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.136467][T24073] netlink: 'syz.8.8117': attribute type 4 has an invalid length. [ 311.144503][T24063] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.152340][T24073] netlink: 9067 bytes leftover after parsing attributes in process `syz.8.8117'. [ 311.166938][T24063] bridge_slave_1: left allmulticast mode [ 311.172930][T24063] bridge_slave_1: left promiscuous mode [ 311.190838][T24063] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.208264][T24063] bond0: (slave bond_slave_0): Releasing backup interface [ 311.218248][T24082] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8121'. [ 311.228877][T24063] bond0: (slave bond_slave_1): Releasing backup interface [ 311.241373][T24063] team0: Port device team_slave_0 removed [ 311.250968][T24063] team0: Port device team_slave_1 removed [ 311.257764][T24063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.265313][T24063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.277496][T24063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.285994][T24063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.297001][T24063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.444117][T24096] loop3: detected capacity change from 0 to 1024 [ 311.494833][T24096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.574170][T24119] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.8124: Allocating blocks 497-513 which overlap fs metadata [ 311.591202][ T9030] Bluetooth: hci0: command 0x1003 tx timeout [ 311.595900][ T4232] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 311.705709][T24094] EXT4-fs (loop3): pa ffff888107684460: logic 0, phys. 113, len 25 [ 311.713939][T24094] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 311.780703][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.834190][ T3663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.053646][T24178] loop8: detected capacity change from 0 to 164 [ 312.091521][T24178] ISOFS: unable to read i-node block [ 312.100513][T24178] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 312.117811][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 312.117826][ T28] audit: type=1400 audit(2000000052.862:2166): avc: denied { watch } for pid=24176 comm="syz.8.8138" path="/170/file0" dev="loop8" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 312.183428][T24188] loop8: detected capacity change from 0 to 512 [ 312.216312][ T28] audit: type=1400 audit(2000000052.962:2167): avc: denied { ioctl } for pid=24191 comm="syz.5.8142" path="socket:[111863]" dev="sockfs" ino=111863 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 312.252858][T24188] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.264594][T24190] 9pnet: p9_errstr2errno: server reported unknown error [ 312.300804][ T28] audit: type=1326 audit(2000000053.022:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 312.335131][ T28] audit: type=1326 audit(2000000053.022:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 312.389708][ T28] audit: type=1326 audit(2000000053.022:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc31128c799 code=0x7ffc0000 [ 312.431964][ T28] audit: type=1326 audit(2000000053.022:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc31128c502 code=0x7ffc0000 [ 312.461853][ T28] audit: type=1326 audit(2000000053.022:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc31124cfce code=0x7ffc0000 [ 312.486750][ T28] audit: type=1326 audit(2000000053.022:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc31128c5c7 code=0x7ffc0000 [ 312.510627][ T28] audit: type=1326 audit(2000000053.022:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc31124cfce code=0x7ffc0000 [ 312.551347][T23949] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 312.583561][T24231] loop9: detected capacity change from 0 to 128 [ 312.603875][T24237] loop8: detected capacity change from 0 to 512 [ 312.610985][T24231] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.621525][ T28] audit: type=1326 audit(2000000053.022:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24199 comm="syz.5.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc31124cfce code=0x7ffc0000 [ 312.656697][T24237] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.772891][T24249] delete_channel: no stack [ 312.783803][T24252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8155'. [ 312.827259][T24252] bond0 (unregistering): Released all slaves [ 312.869238][T24265] loop8: detected capacity change from 0 to 512 [ 312.881660][T24265] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 312.893758][T24265] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.8160: bad orphan inode 131083 [ 312.913445][T24265] loop8: lost filesystem error report for type 5 error -117 [ 313.175850][T24300] xt_hashlimit: size too large, truncated to 1048576 [ 313.298661][T24325] net_ratelimit: 2 callbacks suppressed [ 313.298677][T24325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.434623][T24341] syzkaller1: entered promiscuous mode [ 313.447554][T24341] syzkaller1: entered allmulticast mode [ 313.467524][T24348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.554543][T24357] loop8: detected capacity change from 0 to 4096 [ 313.622833][T24368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.682569][T24374] team0: Port device syz_tun added [ 313.706696][T24374] team0: Port device syz_tun removed [ 313.709125][T24381] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8206'. [ 313.725354][T24379] xt_hashlimit: size too large, truncated to 1048576 [ 313.731625][T24374] bridge_slave_0: left allmulticast mode [ 313.737894][T24374] bridge_slave_0: left promiscuous mode [ 313.743865][T24374] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.755321][T24374] bridge_slave_1: left allmulticast mode [ 313.762379][T24374] bridge_slave_1: left promiscuous mode [ 313.768227][T24374] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.803131][T24374] bond0: (slave bond_slave_0): Releasing backup interface [ 313.826088][T24374] bond0: (slave bond_slave_1): Releasing backup interface [ 313.912877][T24374] team0: Port device team_slave_0 removed [ 313.930881][T24374] team0: Port device team_slave_1 removed [ 313.942894][T24374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.953715][T24374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.972519][T24374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.980078][T24374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.989617][T24374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.103262][T24413] xfrm0 speed is unknown, defaulting to 1000 [ 314.192181][T24430] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.245671][T24435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.293869][T24443] team0: Port device syz_tun added [ 314.320669][T24443] team0: Port device syz_tun removed [ 314.344283][T24443] bridge_slave_0: left allmulticast mode [ 314.350834][T24443] bridge_slave_0: left promiscuous mode [ 314.357128][T24443] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.367285][T24443] bridge_slave_1: left allmulticast mode [ 314.373498][T24443] bridge_slave_1: left promiscuous mode [ 314.379413][T24443] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.389579][T24443] bond0: (slave bond_slave_0): Releasing backup interface [ 314.401028][T24443] bond0: (slave bond_slave_1): Releasing backup interface [ 314.421814][T24443] team0: Port device team_slave_0 removed [ 314.430961][T24443] team0: Port device team_slave_1 removed [ 314.446545][T24443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.459666][T24443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.495066][T24443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.508181][T24454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8239'. [ 314.508969][T24443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.536820][T24443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.555142][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.736046][ T6807] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.976301][T24523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.094537][ T3437] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 315.103143][T24537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.121590][T24537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.134686][ T3437] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.201497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.209715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.238041][T24538] fido_id[24538]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.806688][T24590] xfrm0 speed is unknown, defaulting to 1000 [ 316.318579][T24604] team0: Port device syz_tun added [ 316.356199][T24604] team0: Port device syz_tun removed [ 316.512321][T24608] loop8: detected capacity change from 0 to 512 [ 316.546603][T24608] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.791466][ T9030] Bluetooth: hci0: command 0x1003 tx timeout [ 316.791514][ T4232] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.923661][T24653] sctp: [Deprecated]: syz.5.8324 (pid 24653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.923661][T24653] Use struct sctp_sack_info instead [ 316.942758][T24550] syz.3.8280 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 317.007995][T24550] CPU: 0 UID: 0 PID: 24550 Comm: syz.3.8280 Not tainted syzkaller #0 PREEMPT(full) [ 317.008021][T24550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.008034][T24550] Call Trace: [ 317.008040][T24550] [ 317.008048][T24550] __dump_stack+0x1d/0x30 [ 317.008114][T24550] dump_stack_lvl+0x95/0xd0 [ 317.008138][T24550] dump_stack+0x15/0x1b [ 317.008156][T24550] dump_header+0x80/0x240 [ 317.008209][T24550] oom_kill_process+0x295/0x350 [ 317.008232][T24550] out_of_memory+0x97d/0xb80 [ 317.008253][T24550] try_charge_memcg+0x62e/0xa10 [ 317.008310][T24550] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 317.008340][T24550] __swap_cache_prepare_and_add+0x386/0x530 [ 317.008367][T24550] swap_cache_alloc_folio+0xa2/0x120 [ 317.008389][T24550] swap_cluster_readahead+0x36b/0x3d0 [ 317.008490][T24550] swapin_readahead+0xde/0x840 [ 317.008595][T24550] ? _raw_spin_unlock+0x9/0x30 [ 317.008614][T24550] ? swap_put_entries_cluster+0x385/0x3a0 [ 317.008644][T24550] ? swap_put_entries_cluster+0x151/0x3a0 [ 317.008673][T24550] ? __rcu_read_unlock+0x4e/0x70 [ 317.008698][T24550] ? swap_cache_get_folio+0x26f/0x280 [ 317.008733][T24550] do_swap_page+0x309/0x2210 [ 317.008762][T24550] ? css_rstat_updated+0xbb/0x280 [ 317.008782][T24550] ? __rcu_read_lock+0x36/0x50 [ 317.008799][T24550] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 317.008874][T24550] handle_mm_fault+0xb40/0x3020 [ 317.008904][T24550] ? vma_start_read+0x1c7/0x2c0 [ 317.008932][T24550] do_user_addr_fault+0x62f/0x1050 [ 317.009037][T24550] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 317.009088][T24550] ? trace_page_fault_user+0x1f/0xe0 [ 317.009118][T24550] exc_page_fault+0x62/0xa0 [ 317.009213][T24550] asm_exc_page_fault+0x26/0x30 [ 317.009239][T24550] RIP: 0033:0x7fa64688d2b6 [ 317.009256][T24550] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 317.009314][T24550] RSP: 002b:00007ffd90f662f0 EFLAGS: 00010246 [ 317.009330][T24550] RAX: 000000000004d2af RBX: 00007fa646b05fa0 RCX: 000000000004d260 [ 317.009423][T24550] RDX: 000000000000004f RSI: 0000000000000000 RDI: 00000000000003e8 [ 317.009436][T24550] RBP: 00007fa646b07da0 R08: 0000000004c23256 R09: 7fffffffffffffff [ 317.009450][T24550] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000004d2c1 [ 317.009462][T24550] R13: 00007fa646b0618c R14: 000000000004d033 R15: 00007ffd90f66420 [ 317.009484][T24550] [ 317.009496][T24550] memory: usage 307200kB, limit 307200kB, failcnt 367 [ 317.222493][T24670] loop9: detected capacity change from 0 to 1024 [ 317.224368][T24550] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 317.272691][T24550] kmem: usage 301848kB, limit 9007199254740988kB, failcnt 0 [ 317.280366][T24550] Memory cgroup stats for /syz3: [ 317.280530][T24550] cache 0 [ 317.282256][T24670] EXT4-fs mount: 12 callbacks suppressed [ 317.282346][T24670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.285637][T24550] rss 5480448 [ 317.309525][T24550] shmem 0 [ 317.312508][T24550] mapped_file 0 [ 317.315981][T24550] dirty 0 [ 317.318901][T24550] writeback 0 [ 317.322250][T24550] workingset_refault_anon 85 [ 317.326824][T24550] workingset_refault_file 0 [ 317.331501][T24550] swap 196608 [ 317.334776][T24550] swapcached 196608 [ 317.338609][T24550] pgpgin 55510 [ 317.342008][T24550] pgpgout 54172 [ 317.345466][T24550] pgfault 81888 [ 317.348910][T24550] pgmajfault 152 [ 317.353414][T24675] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.8329: Allocating blocks 497-513 which overlap fs metadata [ 317.354082][T24550] inactive_anon 0 [ 317.371001][T24550] active_anon 0 [ 317.374500][T24550] inactive_file 5480448 [ 317.378645][T24550] active_file 0 [ 317.382199][T24550] unevictable 0 [ 317.385732][T24550] hierarchical_memory_limit 314572800 [ 317.391090][T24550] hierarchical_memsw_limit 9223372036854771712 [ 317.397273][T24550] total_cache 0 [ 317.400795][T24550] total_rss 5480448 [ 317.404727][T24550] total_shmem 0 [ 317.408178][T24550] total_mapped_file 0 [ 317.412220][T24550] total_dirty 0 [ 317.415669][T24550] total_writeback 0 [ 317.419511][T24550] total_workingset_refault_anon 85 [ 317.424655][T24550] total_workingset_refault_file 0 [ 317.429667][T24550] total_swap 196608 [ 317.433499][T24550] total_swapcached 196608 [ 317.437820][T24550] total_pgpgin 55510 [ 317.441793][T24550] total_pgpgout 54172 [ 317.445783][T24550] total_pgfault 81888 [ 317.448152][T24676] IPv6: Can't replace route, no match found [ 317.449761][T24550] total_pgmajfault 152 [ 317.449771][T24550] total_inactive_anon 0 [ 317.449784][T24550] total_active_anon 0 [ 317.467861][T24550] total_inactive_file 5480448 [ 317.472619][T24550] total_active_file 0 [ 317.476591][T24550] total_unevictable 0 [ 317.480564][T24550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8280,pid=24550,uid=0 [ 317.495409][T24550] Memory cgroup out of memory: Killed process 24550 (syz.3.8280) total-vm:96340kB, anon-rss:6576kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 317.533739][T24666] EXT4-fs (loop9): pa ffff888107684460: logic 0, phys. 113, len 25 [ 317.541769][T24666] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 317.611692][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.692807][T24686] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8336'. [ 317.856282][T24702] loop8: detected capacity change from 0 to 1024 [ 317.863833][T24702] EXT4-fs: inline encryption not supported [ 317.875964][T24702] EXT4-fs: Ignoring removed nobh option [ 317.905949][T24702] EXT4-fs: Ignoring removed nobh option [ 317.916623][ T1109] Process accounting resumed [ 317.926033][T24702] EXT4-fs: Ignoring removed bh option [ 317.961907][T24702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.048720][T24711] TCP: TCP_TX_DELAY enabled [ 318.148895][T24702] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.8344: Allocating blocks 497-513 which overlap fs metadata [ 318.252871][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.392377][ T6805] net_ratelimit: 91 callbacks suppressed [ 318.392392][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.437115][T24753] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.502025][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 318.502040][ T28] audit: type=1326 audit(2000000059.252:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.532629][ T28] audit: type=1326 audit(2000000059.252:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.559597][ T28] audit: type=1326 audit(2000000059.252:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.586743][ T28] audit: type=1326 audit(2000000059.252:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.610465][ T28] audit: type=1326 audit(2000000059.252:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.635833][ T28] audit: type=1326 audit(2000000059.252:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.656108][T24773] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8375'. [ 318.659603][ T28] audit: type=1326 audit(2000000059.252:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.694265][ T28] audit: type=1326 audit(2000000059.252:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.724106][ T28] audit: type=1326 audit(2000000059.252:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.744029][T24777] futex_wake_op: syz.5.8377 tries to shift op by -1; fix this program [ 318.747987][ T28] audit: type=1326 audit(2000000059.252:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.8.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 318.852260][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8382'. [ 318.861219][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8382'. [ 319.089639][T24806] loop3: detected capacity change from 0 to 1024 [ 319.185259][T24806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.218055][T24806] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.8391: corrupted xattr block 113: invalid header [ 319.255890][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.312146][T24820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.435558][T24830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.684463][T24855] loop9: detected capacity change from 0 to 4096 [ 319.712374][T24855] EXT4-fs: Ignoring removed bh option [ 319.731372][T24855] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.751712][T24855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.775630][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.823475][T24859] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8412'. [ 320.217090][T24899] loop8: detected capacity change from 0 to 128 [ 320.311648][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.438849][T24929] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8443'. [ 320.468383][T24924] openvswitch: netlink: Missing key (keys=40, expected=100) [ 320.509134][T24937] loop3: detected capacity change from 0 to 1024 [ 320.546461][T24937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.568846][T24937] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.8447: Allocating blocks 497-513 which overlap fs metadata [ 320.617333][T24935] EXT4-fs (loop3): pa ffff8881076843f0: logic 32768, phys. 145, len 23 [ 320.625665][T24935] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 320.657039][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.662217][T24953] loop8: detected capacity change from 0 to 512 [ 320.681393][T24953] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 320.695110][T24953] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 320.710284][T24953] EXT4-fs (loop8): 1 truncate cleaned up [ 320.716138][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 320.716157][ C1] EXT4-fs (loop8): initial error at time 2000000061: ext4_mb_generate_buddy:1315 [ 320.716191][ C1] EXT4-fs (loop8): last error at time 2000000061: ext4_mb_generate_buddy:1315 [ 320.741172][T24953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.755381][T24953] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.8.8455: path /233/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 320.801147][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.839272][T24962] loop8: detected capacity change from 0 to 2048 [ 320.862805][T24962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.877368][T24962] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.879940][T24966] loop7: detected capacity change from 0 to 7 [ 320.896102][ C1] blk_print_req_error: 1 callbacks suppressed [ 320.896123][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.911798][ C1] buffer_io_error: 1 callbacks suppressed [ 320.911814][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.925567][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.935212][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.937045][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.945582][T24966] loop7: unable to read partition table [ 320.954012][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.960375][T24966] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 320.981848][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.991426][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.999560][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.009184][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 321.017326][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.026949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 321.035234][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.044957][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 321.054113][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.063731][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 321.086585][T24975] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8462'. [ 321.114377][T24977] loop8: detected capacity change from 0 to 512 [ 321.146945][T24977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.172004][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.327376][T24993] team0: Port device syz_tun added [ 321.349725][T24993] team0: Port device syz_tun removed [ 321.394966][T24993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.541415][ T1109] IPVS: starting estimator thread 0... [ 321.555487][ T3437] Process accounting resumed [ 321.576749][T25013] loop8: detected capacity change from 0 to 256 [ 321.591484][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.600518][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.611704][T25013] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.620176][T25016] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8481'. [ 321.667616][T25013] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.681243][T25005] IPVS: using max 2544 ests per chain, 127200 per kthread [ 321.737300][T25029] loop3: detected capacity change from 0 to 512 [ 321.813123][T25029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.826338][T25031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.848662][T25029] EXT4-fs (loop3): shut down requested (1) [ 321.884957][T25029] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 321.901908][T25029] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 321.913207][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.929763][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.016093][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8495'. [ 322.047780][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8495'. [ 322.204105][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 322.682940][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 323.255654][T25095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.432723][ T6805] net_ratelimit: 1 callbacks suppressed [ 323.432740][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.474773][T25104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.828169][T25119] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.858582][T25119] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.911612][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 323.911628][ T28] audit: type=1400 audit(2000000064.662:2354): avc: denied { recv } for pid=25050 comm="syz.3.8494" saddr=10.128.0.163 src=48826 daddr=10.128.0.130 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 325.352236][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.394913][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.437071][ T3040] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 326.438895][ T28] audit: type=1400 audit(2000000067.182:2355): avc: denied { map } for pid=25133 comm="syz.9.8524" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.546830][T25145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=25145 comm=syz.5.8530 [ 326.630110][ T28] audit: type=1400 audit(2000000067.372:2356): avc: denied { bind } for pid=25150 comm="syz.7.8534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.772830][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8542'. [ 326.795720][T25166] set_capacity_and_notify: 2 callbacks suppressed [ 326.795738][T25166] loop9: detected capacity change from 0 to 4096 [ 326.842086][T25166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.080548][T25183] netlink: 'syz.8.8548': attribute type 29 has an invalid length. [ 327.094160][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.112323][T25183] netlink: 'syz.8.8548': attribute type 29 has an invalid length. [ 327.147181][T25183] netlink: 500 bytes leftover after parsing attributes in process `syz.8.8548'. [ 327.204202][T25191] gretap0: entered promiscuous mode [ 327.289733][T25201] loop3: detected capacity change from 0 to 1024 [ 327.302372][T25203] loop9: detected capacity change from 0 to 1024 [ 327.314991][T25203] EXT4-fs: Ignoring removed orlov option [ 327.317908][T25201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.335826][T25203] EXT4-fs (loop9): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 327.346193][T25201] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.359398][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.385314][T25203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.418583][T25201] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.8558: lblock 3 mapped to illegal pblock 3 (length 3) [ 327.433858][T25201] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 327.446949][T25201] EXT4-fs (loop3): This should not happen!! Data will be lost [ 327.446949][T25201] [ 327.457095][ T6805] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 327.487422][ T6805] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 327.512313][ T6805] EXT4-fs (loop3): This should not happen!! Data will be lost [ 327.512313][ T6805] [ 327.524503][T25201] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8558: bg 0: block 112: padding at end of block bitmap is not set [ 327.539475][T25201] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 327.552418][T25201] EXT4-fs (loop3): This should not happen!! Data will be lost [ 327.552418][T25201] [ 327.593604][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.650905][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.798656][T25229] loop8: detected capacity change from 0 to 2048 [ 327.815787][T25229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.888278][T25229] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 327.903365][T25229] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1878 with error 28 [ 327.916173][T25229] EXT4-fs (loop8): This should not happen!! Data will be lost [ 327.916173][T25229] [ 327.926050][T25229] EXT4-fs (loop8): Total free blocks count 0 [ 327.932099][T25229] EXT4-fs (loop8): Free/Dirty block details [ 327.938116][T25229] EXT4-fs (loop8): free_blocks=2415919104 [ 327.944038][T25229] EXT4-fs (loop8): dirty_blocks=1888 [ 327.949375][T25229] EXT4-fs (loop8): Block reservation details [ 327.955457][T25229] EXT4-fs (loop8): i_reserved_data_blocks=118 [ 328.056061][ T40] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1878 with error 28 [ 328.130366][T25238] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 328.401265][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.633226][ T6807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.831939][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8587'. [ 329.192186][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8602'. [ 329.195367][ T28] audit: type=1326 audit(2000000069.942:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.229584][ T28] audit: type=1326 audit(2000000069.982:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.231242][T25315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8601'. [ 329.253519][ T28] audit: type=1326 audit(2000000069.982:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.280968][T25317] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8604'. [ 329.286436][ T28] audit: type=1326 audit(2000000069.982:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.318174][ T28] audit: type=1326 audit(2000000069.982:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.341830][ T28] audit: type=1326 audit(2000000069.982:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.365901][ T28] audit: type=1326 audit(2000000069.982:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.389691][ T28] audit: type=1326 audit(2000000069.982:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.390717][T25317] netlink: 'syz.5.8604': attribute type 1 has an invalid length. [ 329.422367][ T28] audit: type=1326 audit(2000000069.982:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.446155][ T28] audit: type=1326 audit(2000000069.982:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25310 comm="syz.8.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f0c0c799 code=0x7ffc0000 [ 329.514993][T25321] loop8: detected capacity change from 0 to 2048 [ 329.537235][T25321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.582437][T21688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.785483][T25346] sctp: [Deprecated]: syz.7.8616 (pid 25346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.785483][T25346] Use struct sctp_sack_info instead [ 329.934263][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8627'. [ 329.948705][ T50] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.959323][ T50] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.972374][ T50] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.985779][ T50] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.102358][T25383] xfrm0 speed is unknown, defaulting to 1000 [ 330.210415][T25388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 330.552352][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.641267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.819223][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 330.849158][T25419] loop3: detected capacity change from 0 to 512 [ 330.860341][T25419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 330.878410][T25419] EXT4-fs (loop3): 1 truncate cleaned up [ 330.884738][T25419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.900868][T25419] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 330.923897][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.029193][T25432] xfrm0 speed is unknown, defaulting to 1000 [ 331.061366][T25428] sctp: [Deprecated]: syz.3.8652 (pid 25428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.061366][T25428] Use struct sctp_sack_info instead [ 331.191249][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.199423][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.440702][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810b28e000: rx timeout, send abort [ 331.450816][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b28e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 331.671181][ T4232] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 331.674676][ T9030] Bluetooth: hci0: command 0x1003 tx timeout [ 331.839743][T25457] xfrm0 speed is unknown, defaulting to 1000 [ 332.871326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.879559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.987966][T25519] loop9: detected capacity change from 0 to 512 [ 333.027588][T25519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.056925][T25519] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.107979][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.118264][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.302509][T25543] xfrm0 speed is unknown, defaulting to 1000 [ 333.625498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.751976][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.764645][T25574] loop9: detected capacity change from 0 to 128 [ 333.823699][T25575] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8714'. [ 333.846443][T25575] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8714'. [ 333.892360][T25576] xfrm0 speed is unknown, defaulting to 1000 [ 333.996343][T25591] loop8: detected capacity change from 0 to 512 [ 334.024981][T25591] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.036427][T25591] EXT4-fs: inline encryption not supported [ 334.042558][T25591] EXT4-fs: test_dummy_encryption option not supported [ 334.575365][T25665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8752'. [ 334.584446][T25665] bond0: ARP target 8.4.0.0 is already present [ 334.590671][T25665] bond0: option arp_ip_target: invalid value (1032) [ 335.026752][T25676] loop3: detected capacity change from 0 to 1024 [ 335.034227][T25676] EXT4-fs: inline encryption not supported [ 335.040356][T25676] EXT4-fs: Ignoring removed bh option [ 335.052970][T25676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.068784][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 335.068799][ T28] audit: type=1400 audit(2000000075.822:2398): avc: denied { mounton } for pid=25675 comm="syz.3.8757" path="/95/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 335.097905][ T28] audit: type=1400 audit(2000000075.832:2399): avc: denied { unlink } for pid=23752 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 335.122499][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.185633][T25689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.250193][ T28] audit: type=1326 audit(2000000075.992:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.275594][ T28] audit: type=1326 audit(2000000075.992:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.299685][ T28] audit: type=1326 audit(2000000075.992:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.328711][ T28] audit: type=1326 audit(2000000075.992:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.352998][ T28] audit: type=1326 audit(2000000076.032:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.377796][ T28] audit: type=1326 audit(2000000076.032:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x0 [ 335.424377][ T28] audit: type=1326 audit(2000000076.082:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.463627][T25705] loop9: detected capacity change from 0 to 512 [ 335.486745][T25705] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.491827][ T28] audit: type=1326 audit(2000000076.082:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25699 comm="syz.7.8767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30574dc799 code=0x7ffc0000 [ 335.539277][T25705] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.8769: Failed to acquire dquot type 1 [ 335.560091][T25705] loop9: lost filesystem error report for type 5 error -5 [ 335.561156][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 335.574747][ C0] EXT4-fs (loop9): last error at time 2000000076: ext4_acquire_dquot:7001 [ 335.599967][T25705] EXT4-fs (loop9): 1 truncate cleaned up [ 335.607692][T25705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 335.623080][T25702] loop3: detected capacity change from 0 to 32768 [ 335.672269][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 335.782197][T25726] loop9: detected capacity change from 0 to 512 [ 335.809496][T25726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.975677][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.994847][T25739] loop9: detected capacity change from 0 to 128 [ 336.008252][T25739] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.037637][ T50] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.190516][T25759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=25759 comm=syz.9.8793 [ 336.299599][T25763] netlink: 'syz.9.8796': attribute type 83 has an invalid length. [ 336.311382][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.320017][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.476776][T25782] netlink: 'syz.8.8803': attribute type 10 has an invalid length. [ 336.492577][T25782] netlink: 65015 bytes leftover after parsing attributes in process `syz.8.8803'. [ 336.543592][T25790] pimreg: entered allmulticast mode [ 336.557625][T25790] pimreg: left allmulticast mode [ 336.570042][T25794] loop8: detected capacity change from 0 to 256 [ 336.880862][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8827'. [ 336.909530][T25827] netlink: 'syz.7.8827': attribute type 18 has an invalid length. [ 336.918210][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8827'. [ 337.145695][T25842] loop3: detected capacity change from 0 to 2048 [ 337.183619][T25842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.305470][T25842] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 337.345665][T25842] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 506 with error 28 [ 337.371974][T25842] EXT4-fs (loop3): This should not happen!! Data will be lost [ 337.371974][T25842] [ 337.397753][T25842] EXT4-fs (loop3): Total free blocks count 0 [ 337.416695][T25842] EXT4-fs (loop3): Free/Dirty block details [ 337.428353][T25842] EXT4-fs (loop3): free_blocks=2415919104 [ 337.442005][T25842] EXT4-fs (loop3): dirty_blocks=512 [ 337.454166][T25842] EXT4-fs (loop3): Block reservation details [ 337.465911][T25842] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 337.611633][ T6807] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 506 with error 28 [ 337.715150][T25866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.762974][T25866] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.833043][T25866] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 337.854934][T25866] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.888932][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.033594][T25891] xfrm0 speed is unknown, defaulting to 1000 [ 338.274568][T25901] set_capacity_and_notify: 1 callbacks suppressed [ 338.274609][T25901] loop9: detected capacity change from 0 to 1024 [ 338.291484][T25901] EXT4-fs: Ignoring removed bh option [ 338.329348][T25901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.390650][T25911] loop3: detected capacity change from 0 to 512 [ 338.400713][T23030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.415156][T25911] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 338.426263][T25911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 338.434332][T25911] System zones: 1-12 [ 338.455103][T25911] EXT4-fs (loop3): 1 truncate cleaned up [ 338.461405][T25911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.482165][T25911] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted [ 338.524613][T23752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.659303][T25928] SELinux: failed to load policy [ 338.698798][T25933] loop9: detected capacity change from 0 to 2048 [ 338.752509][T25933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.833346][T25933] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 338.859787][T25933] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1176 with error 28 [ 338.872921][ T6807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.887985][T25933] EXT4-fs (loop9): This should not happen!! Data will be lost [ 338.887985][T25933] [ 338.910456][T25933] EXT4-fs (loop9): Total free blocks count 0 [ 338.918377][T25933] EXT4-fs (loop9): Free/Dirty block details [ 338.935947][T25933] EXT4-fs (loop9): free_blocks=2415919104 [ 338.943926][T25933] EXT4-fs (loop9): dirty_blocks=1184 [ 338.949256][T25933] EXT4-fs (loop9): Block reservation details [ 338.959611][T25933] EXT4-fs (loop9): i_reserved_data_blocks=74 [ 339.351296][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.511543][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.550631][T25968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8885'. [ 340.791604][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.444629][ T6801] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1176 with error 28 [ 341.845282][ T28] kauditd_printk_skb: 370 callbacks suppressed [ 341.845342][ T28] audit: type=1400 audit(2000000082.592:2776): avc: denied { write } for pid=25992 comm="syz.8.8897" path="socket:[116576]" dev="sockfs" ino=116576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 341.967300][T26014] netlink: 'syz.5.8906': attribute type 3 has an invalid length. [ 342.005214][T26017] ================================================================== [ 342.013418][T26017] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 342.021337][T26017] [ 342.023743][T26017] write to 0xffff8881146242c0 of 8 bytes by task 26020 on cpu 0: [ 342.031433][T26017] cpu_map_kthread_run+0x4fe/0x1680 [ 342.036626][T26017] kthread+0x22a/0x280 [ 342.040672][T26017] ret_from_fork+0x150/0x360 [ 342.045246][T26017] ret_from_fork_asm+0x1a/0x30 [ 342.049990][T26017] [ 342.052294][T26017] read to 0xffff8881146242c0 of 8 bytes by task 26017 on cpu 1: [ 342.060081][T26017] bq_flush_to_queue+0x124/0x360 [ 342.065016][T26017] __cpu_map_flush+0x38/0x80 [ 342.069595][T26017] xdp_do_flush+0xf8/0x160 [ 342.074008][T26017] bpf_test_run_xdp_live+0xe8a/0x1360 [ 342.079361][T26017] bpf_prog_test_run_xdp+0x57b/0xa10 [ 342.084639][T26017] bpf_prog_test_run+0x204/0x340 [ 342.089565][T26017] __sys_bpf+0x52e/0x7e0 [ 342.093789][T26017] __x64_sys_bpf+0x41/0x50 [ 342.098191][T26017] x64_sys_call+0x10cb/0x3020 [ 342.102850][T26017] do_syscall_64+0x12c/0x370 [ 342.107430][T26017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.113307][T26017] [ 342.115634][T26017] value changed: 0xffff888178d26070 -> 0x0000000000000000 [ 342.117697][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.122725][T26017] [ 342.122731][T26017] Reported by Kernel Concurrency Sanitizer on: [ 342.122742][T26017] CPU: 1 UID: 0 PID: 26017 Comm: syz.9.8907 Not tainted syzkaller #0 PREEMPT(full) [ 342.148591][T26017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.158644][T26017] ================================================================== [ 344.631997][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.191334][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.272187][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.552076][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.831534][ T6807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.671564][ T7106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.311729][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.391510][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.871421][ T3437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog