last executing test programs: 6.221879832s ago: executing program 4 (id=5561): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x939e02dc105d5baa, 0x2}, {0xb}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6.099096294s ago: executing program 4 (id=5563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x8, 0x8da, 0x8001, 0x810, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @private2}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.577605492s ago: executing program 2 (id=5565): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, 0x100, 0x306c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x50}}, 0xeb64d656001f6f32) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) 5.450162324s ago: executing program 3 (id=5566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41101}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r7, &(0x7f0000000240)=""/195, 0xc3) 5.11237096s ago: executing program 2 (id=5568): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000000c0)=""/73) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 4.986820282s ago: executing program 0 (id=5569): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x51) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x5f}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") 4.47456563s ago: executing program 3 (id=5570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e6000000000000000000000000004000000000000000002fabcfbd"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='fib6_table_lookup\x00', r3}, 0x18) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) syz_pidfd_open(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 4.193125774s ago: executing program 2 (id=5572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e6000000000000000000000000004000000000000000002fabcfbd"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='fib6_table_lookup\x00', r3}, 0x18) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) syz_pidfd_open(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) 4.046929366s ago: executing program 1 (id=5573): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_delete(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xffffffffffffffe7, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3688a80000080600"], 0x0) 3.267507358s ago: executing program 4 (id=5574): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffffff, &(0x7f00000002c0)='.\x00', 0x0) 3.19692436s ago: executing program 4 (id=5575): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 3.115726501s ago: executing program 3 (id=5576): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 3.018570412s ago: executing program 0 (id=5577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 3.017960513s ago: executing program 1 (id=5578): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.002781493s ago: executing program 2 (id=5579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 2.941733724s ago: executing program 3 (id=5580): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2.889447935s ago: executing program 0 (id=5581): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000000c0)=""/73) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 2.768010786s ago: executing program 3 (id=5582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 2.57369688s ago: executing program 3 (id=5583): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x9, {0x9, 0x0, "d75b90993b34e1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a000600000008001600020000000800100000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000400)=0x8, 0x12) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) 2.52188442s ago: executing program 1 (id=5584): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='rpcgss_bad_seqno\x00', r0, 0x0, 0xa}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r1}, 0x38) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 2.261339964s ago: executing program 1 (id=5585): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffffff, &(0x7f00000002c0)='.\x00', 0x0) 2.247396254s ago: executing program 1 (id=5586): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0xb, 0x0, &(0x7f0000000180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) unshare(0x62040200) 1.854431021s ago: executing program 0 (id=5587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x9, 0xc) splice(r3, 0x0, r6, 0x0, 0x80, 0x7) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) 1.722909083s ago: executing program 2 (id=5588): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x51) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") 1.660549044s ago: executing program 4 (id=5589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 1.328929969s ago: executing program 1 (id=5590): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3d0, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) unshare(0x40020000) 919.404696ms ago: executing program 0 (id=5591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 247.460546ms ago: executing program 4 (id=5592): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 24.425859ms ago: executing program 2 (id=5593): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@auto_da_alloc}, {@dioread_lock}, {@noblock_validity}, {@abort}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@stripe={'stripe', 0x3d, 0x8001}}, {@bh}, {@dioread_nolock}]}, 0x3, 0x563, &(0x7f00000014c0)="$eJzs3d9rW1UcAPDvTdt1v3QdjKEiUtiDk7l0bf0xwYf5KDoc6PsMbVZGk2U06VjrwO3BvfgiQxBxIL7ru4/Df8C/YqCDIaOo4Evkpjdd1iZt1mZLt3w+cMc590fO/ebe79m5PQkJYGCNp//kIl6OiG+SiEMRkWTbhiPbOL6638qDazPpkkS9/ulfSWO/tN58reZxB7LKSxHx21cRJ3Ib260uLc8XSqXiQlafqJUvT1SXlk9eLBfminPFS1PT06ffnp567913ehbrG+f++f6TOx+e/vrYyne/3Dt8K4kzcTDb1hrHDlxvrYzHePaejMSZdTtO9qCx3STp9wmwLUNZno9E2gcciqEs64Hn35cRUQcGVCL/YUA1xwHNZ/sePQc/M+5/sPoAtDH+4dW/jcTexrPR/pXkkSej9Hl3rAftp238+uftW+kSvfs7BMCWrt+IiFPDwxv7vyTr/7bvVBf7rG9D/wdPz510/PNmu/FPbm38E23GPwfa5O52tM//0ZY1uXs9aKajdPz3ftvx79qk1dhQVnuhMeYbSS5cLBXTvu3FiDgeI6NpfbP5nNMrd+udtrWO/9Ilbb85FszO497w6KPHzBZqhZ3E3Or+jYhX2o5/k7Xrn7S5/un7ca7LNo4Wb7/WadvW8T9Z9Z8iXm97/R/OaCWbz09ONO6HieZdsdHfN4/+3qn9fsefXv/9m8c/lrTO11bXvUCbud31ftz7X7HTtkfij+7v/z3JZ43ynmzd1UKttjAZsSf5eOP6qYfHNuvN/dP4jx/bvP9rd//vi4jPtw694eaRn1/tKv4+Xf/Zx7r+j1+4+9EXP3Rqv7v+761G6Xi2ppv+r9sT3Ml7BwAAAAAAALtNLiIORpLLr5VzuXx+9fMdR2J/rlSp1k5cqCxemo3Gd2XHYiTXnOk+1PJ5iMns87DN+tS6+nREHI6Ib4f2Ner5mUpptt/BAwAAAAAAAAAAAAAAAAAAwC5xoMP3/1N/DPX77IAnzk9+w+DaMv978UtPwK7k/38YXPIfBpf8h8El/2FwyX8YXPIfBpf8h8El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09my71lQfXZtL67JWlxfnKlZOzxep8vrw4k5+pLFzOz1Uqc6VifqZS3ur1SpXK5cmpWLw6UStWaxPVpeXz5cripdr5i+XCXPH8v/VVTyU2AAAAAAAAAAAAAAAAAAAAeFZUl5bnC6VSceGxC6PbOkrheSsM747TUOhxod89EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA89H8AAAD///lUPuY=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 0s ago: executing program 0 (id=5594): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, 0x100, 0x306c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x50}}, 0xeb64d656001f6f32) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100b8}}}}}}, @IFLA_MTU={0x8, 0x4, 0x8d2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040890}, 0x44180) kernel console output (not intermixed with test programs): om 0 to 512 [ 649.954415][T19367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 650.001878][T19367] EXT4-fs (loop2): orphan cleanup on readonly fs [ 650.009553][T19367] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4470: bg 0: block 248: padding at end of block bitmap is not set [ 650.027942][T19367] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4470: Failed to acquire dquot type 1 [ 650.044385][T19367] EXT4-fs (loop2): 1 truncate cleaned up [ 650.051620][T19367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.405572][T19374] loop3: detected capacity change from 0 to 512 [ 651.450301][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.460394][T19374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 651.470204][T19374] EXT4-fs (loop3): orphan cleanup on readonly fs [ 651.476967][T19374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4471: bg 0: block 248: padding at end of block bitmap is not set [ 651.492477][T19374] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4471: Failed to acquire dquot type 1 [ 651.504225][T19374] EXT4-fs (loop3): 1 truncate cleaned up [ 651.924451][T19374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.092080][T19382] loop4: detected capacity change from 0 to 2048 [ 652.106857][T19380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4473'. [ 652.116832][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.131236][T19382] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.278273][T19411] loop1: detected capacity change from 0 to 1024 [ 653.340971][T19411] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.4481: casefold flag without casefold feature [ 653.357356][T19411] EXT4-fs (loop1): get root inode failed [ 653.363084][T19411] EXT4-fs (loop1): mount failed [ 653.433348][T19418] loop3: detected capacity change from 0 to 512 [ 653.463942][T19418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.476936][T19418] EXT4-fs (loop3): orphan cleanup on readonly fs [ 653.479786][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 653.484974][T19418] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4483: bg 0: block 248: padding at end of block bitmap is not set [ 653.508606][T19418] __quota_error: 6 callbacks suppressed [ 653.514285][T19418] Quota error (device loop3): write_blk: dquota write failed [ 653.521778][T19418] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 653.531710][T19418] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4483: Failed to acquire dquot type 1 [ 653.545061][T19418] EXT4-fs (loop3): 1 truncate cleaned up [ 653.551629][T19418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 653.580589][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.498510][T19436] loop3: detected capacity change from 0 to 512 [ 654.535067][T19436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 654.547621][T19436] EXT4-fs (loop3): orphan cleanup on readonly fs [ 654.555286][T19436] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4486: bg 0: block 248: padding at end of block bitmap is not set [ 654.618207][T19436] Quota error (device loop3): write_blk: dquota write failed [ 654.625667][T19436] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 654.635598][T19436] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4486: Failed to acquire dquot type 1 [ 654.648483][T19436] EXT4-fs (loop3): 1 truncate cleaned up [ 654.654757][T19436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.853803][T19442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4489'. [ 655.517186][T19450] xt_hashlimit: max too large, truncated to 1048576 [ 655.524975][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.533502][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.086858][T19458] xt_hashlimit: max too large, truncated to 1048576 [ 656.095236][T19458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.103845][T19458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.930419][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.978032][T19477] loop4: detected capacity change from 0 to 512 [ 657.986547][T19477] EXT4-fs: test_dummy_encryption option not supported [ 658.376394][T19487] loop1: detected capacity change from 0 to 512 [ 658.384802][T19487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 658.395921][T19487] EXT4-fs (loop1): orphan cleanup on readonly fs [ 658.403464][T19487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4501: bg 0: block 248: padding at end of block bitmap is not set [ 658.419703][T19487] Quota error (device loop1): write_blk: dquota write failed [ 658.427129][T19487] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 658.437156][T19487] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4501: Failed to acquire dquot type 1 [ 658.452662][T19487] EXT4-fs (loop1): 1 truncate cleaned up [ 658.460907][T19487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 659.229816][T19496] loop2: detected capacity change from 0 to 1024 [ 659.289554][T19496] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.4502: casefold flag without casefold feature [ 659.325117][T19496] EXT4-fs (loop2): get root inode failed [ 659.330825][T19496] EXT4-fs (loop2): mount failed [ 660.620627][ T29] audit: type=1326 audit(1750808477.212:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.644184][ T29] audit: type=1326 audit(1750808477.212:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.667721][ T29] audit: type=1326 audit(1750808477.212:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.691263][ T29] audit: type=1326 audit(1750808477.212:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19514 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0b41011e5 code=0x7ffc0000 [ 660.714743][ T29] audit: type=1326 audit(1750808477.212:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.754636][T19511] loop3: detected capacity change from 0 to 512 [ 660.802476][T19511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 660.812530][ T29] audit: type=1326 audit(1750808477.372:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.836128][ T29] audit: type=1326 audit(1750808477.372:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.859867][ T29] audit: type=1326 audit(1750808477.372:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.883394][ T29] audit: type=1326 audit(1750808477.372:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19514 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.906852][ T29] audit: type=1326 audit(1750808477.382:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19512 comm="syz.0.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 660.932611][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.546520][T19511] EXT4-fs (loop3): orphan cleanup on readonly fs [ 661.598472][T19511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4506: bg 0: block 248: padding at end of block bitmap is not set [ 661.614094][T19511] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4506: Failed to acquire dquot type 1 [ 661.625799][T19511] EXT4-fs (loop3): 1 truncate cleaned up [ 661.633026][T19511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 661.864898][T19527] loop1: detected capacity change from 0 to 512 [ 661.922184][T19527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 661.931988][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.952341][T19527] EXT4-fs (loop1): orphan cleanup on readonly fs [ 661.959791][T19527] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4509: bg 0: block 248: padding at end of block bitmap is not set [ 661.975145][T19527] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4509: Failed to acquire dquot type 1 [ 661.989450][T19527] EXT4-fs (loop1): 1 truncate cleaned up [ 662.002239][T19527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 662.681034][T19534] loop3: detected capacity change from 0 to 512 [ 662.698014][T19534] EXT4-fs: test_dummy_encryption option not supported [ 663.147109][T19544] loop2: detected capacity change from 0 to 1024 [ 663.485150][T19549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4511'. [ 663.496282][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.529966][T19544] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.4516: casefold flag without casefold feature [ 663.551139][T19544] EXT4-fs (loop2): get root inode failed [ 663.556819][T19544] EXT4-fs (loop2): mount failed [ 663.626823][T19554] loop3: detected capacity change from 0 to 512 [ 663.652187][T19554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 663.800721][T19554] EXT4-fs (loop3): orphan cleanup on readonly fs [ 663.807811][T19554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4518: bg 0: block 248: padding at end of block bitmap is not set [ 663.823183][T19554] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4518: Failed to acquire dquot type 1 [ 663.835056][T19554] EXT4-fs (loop3): 1 truncate cleaned up [ 663.844606][T19554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.351785][T19565] veth7: entered promiscuous mode [ 665.356851][T19565] veth7: entered allmulticast mode [ 665.397340][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.479584][T19568] loop3: detected capacity change from 0 to 1024 [ 665.540355][T19568] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.4521: casefold flag without casefold feature [ 665.558183][T19568] EXT4-fs (loop3): get root inode failed [ 665.563881][T19568] EXT4-fs (loop3): mount failed [ 667.963521][T19596] loop4: detected capacity change from 0 to 512 [ 668.007103][T19596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.023516][T19596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 668.030538][T19596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4527: bg 0: block 248: padding at end of block bitmap is not set [ 668.045853][T19596] __quota_error: 7 callbacks suppressed [ 668.045863][T19596] Quota error (device loop4): write_blk: dquota write failed [ 668.058832][T19596] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 668.068855][T19596] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4527: Failed to acquire dquot type 1 [ 668.085475][T19596] EXT4-fs (loop4): 1 truncate cleaned up [ 668.099285][T19596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 668.637023][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4526'. [ 669.218404][T19606] loop3: detected capacity change from 0 to 8192 [ 669.421204][ T29] audit: type=1400 audit(1750808486.012:1201): avc: denied { mount } for pid=19605 comm="syz.3.4531" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 669.699492][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.719439][ T29] audit: type=1400 audit(1750808486.322:1202): avc: denied { unmount } for pid=13744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 669.913095][T19622] loop3: detected capacity change from 0 to 1024 [ 669.930966][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4534'. [ 669.974109][T19622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.233795][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.543519][T19636] xt_hashlimit: max too large, truncated to 1048576 [ 670.552275][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.560818][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.488495][T19652] loop3: detected capacity change from 0 to 512 [ 671.514866][T19652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.528341][T19652] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.640882][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.730224][T19663] loop1: detected capacity change from 0 to 512 [ 671.744101][T19663] ext4: Unknown parameter 'dont_appraise' [ 671.770209][T19666] loop4: detected capacity change from 0 to 512 [ 671.824691][T19671] loop1: detected capacity change from 0 to 2048 [ 671.849442][T19666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.863574][T19666] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.875565][T19671] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.946905][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.703190][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 672.850869][T19694] netlink: 'syz.0.4555': attribute type 4 has an invalid length. [ 672.920461][ T29] audit: type=1326 audit(1750808489.522:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 672.945534][ T29] audit: type=1326 audit(1750808489.542:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 672.969080][ T29] audit: type=1326 audit(1750808489.542:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 672.993240][ T29] audit: type=1326 audit(1750808489.552:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.016873][ T29] audit: type=1326 audit(1750808489.552:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.040361][ T29] audit: type=1326 audit(1750808489.562:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.063861][ T29] audit: type=1326 audit(1750808489.562:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.087397][ T29] audit: type=1326 audit(1750808489.562:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.110875][ T29] audit: type=1326 audit(1750808489.562:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.134454][ T29] audit: type=1326 audit(1750808489.572:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19700 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc7c8611e5 code=0x7ffc0000 [ 673.162168][ T29] audit: type=1326 audit(1750808489.722:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19700 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.185681][ T29] audit: type=1326 audit(1750808489.732:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.209166][ T29] audit: type=1326 audit(1750808489.732:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.4.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 673.605691][T19708] loop2: detected capacity change from 0 to 512 [ 673.819967][T19708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.832476][T19708] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.843519][T19708] netlink: 'syz.2.4560': attribute type 13 has an invalid length. [ 673.858100][T19708] gretap0: refused to change device tx_queue_len [ 673.864656][T19708] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 673.954661][T19729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4566'. [ 674.198888][ T29] audit: type=1326 audit(1750808490.772:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 674.222463][ T29] audit: type=1326 audit(1750808490.772:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 674.245946][ T29] audit: type=1326 audit(1750808490.772:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19727 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 674.434933][T19726] x_tables: ip_tables: osf match: only valid for protocol 6 [ 674.447066][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.103661][T19749] loop2: detected capacity change from 0 to 512 [ 675.132144][T19749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 675.264556][T19749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 675.271472][T19749] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4572: bg 0: block 248: padding at end of block bitmap is not set [ 675.286758][T19749] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4572: Failed to acquire dquot type 1 [ 675.299151][T19749] EXT4-fs (loop2): 1 truncate cleaned up [ 675.662595][T19756] loop3: detected capacity change from 0 to 512 [ 675.675732][T19756] EXT4-fs: test_dummy_encryption option not supported [ 675.759801][T19749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.146445][T19762] netlink: 'syz.3.4574': attribute type 4 has an invalid length. [ 676.522777][T19764] veth13: entered promiscuous mode [ 676.527935][T19764] veth13: entered allmulticast mode [ 676.809618][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.897595][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4583'. [ 678.106111][T19794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4582'. [ 678.232800][T19793] loop3: detected capacity change from 0 to 8192 [ 678.415841][T19799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4585'. [ 678.683821][T19800] loop3: detected capacity change from 0 to 512 [ 678.720291][T19800] EXT4-fs: test_dummy_encryption option not supported [ 679.157670][T19809] x_tables: ip_tables: osf match: only valid for protocol 6 [ 679.457408][T19818] loop4: detected capacity change from 0 to 512 [ 679.482911][T19821] loop1: detected capacity change from 0 to 512 [ 680.289214][T19821] EXT4-fs: test_dummy_encryption option not supported [ 680.324397][T19818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.710662][T19823] loop2: detected capacity change from 0 to 512 [ 680.717295][T19823] EXT4-fs: test_dummy_encryption option not supported [ 680.725005][T19818] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.711909][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.904845][T19842] loop1: detected capacity change from 0 to 512 [ 681.911540][T19842] EXT4-fs: test_dummy_encryption option not supported [ 682.480985][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4598'. [ 682.801226][T19838] loop2: detected capacity change from 0 to 8192 [ 683.307402][T19848] loop2: detected capacity change from 0 to 2048 [ 683.343116][T19848] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.577682][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 683.577696][ T29] audit: type=1326 audit(1750808500.172:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19857 comm="syz.1.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1105de929 code=0x7ffc0000 [ 683.636796][ T29] audit: type=1326 audit(1750808500.202:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19857 comm="syz.1.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc1105de929 code=0x7ffc0000 [ 683.660395][ T29] audit: type=1326 audit(1750808500.212:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19857 comm="syz.1.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1105de929 code=0x7ffc0000 [ 683.684001][ T29] audit: type=1326 audit(1750808500.212:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19857 comm="syz.1.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1105de929 code=0x7ffc0000 [ 683.707521][ T29] audit: type=1326 audit(1750808500.222:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1106111e5 code=0x7ffc0000 [ 683.739313][T19859] veth15: entered promiscuous mode [ 683.744544][T19859] veth15: entered allmulticast mode [ 683.778133][ T29] audit: type=1326 audit(1750808500.372:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc1105de929 code=0x7ffc0000 [ 684.010960][T19869] wg2: entered promiscuous mode [ 684.015904][T19869] wg2: entered allmulticast mode [ 684.142943][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 684.566118][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4608'. [ 685.606207][T19906] loop4: detected capacity change from 0 to 8192 [ 685.789025][T19912] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 685.796646][T19912] FAT-fs (loop4): Filesystem has been set read-only [ 685.853020][T19911] loop1: detected capacity change from 0 to 512 [ 685.899996][T19911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.967247][T19911] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 686.152811][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.398886][ T29] audit: type=1326 audit(1750808502.972:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19919 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 686.422480][ T29] audit: type=1326 audit(1750808502.972:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19919 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 686.445974][ T29] audit: type=1326 audit(1750808502.982:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19919 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 686.469454][ T29] audit: type=1326 audit(1750808502.982:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19919 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 686.635346][T19915] x_tables: ip_tables: osf match: only valid for protocol 6 [ 687.282543][T19955] loop1: detected capacity change from 0 to 1024 [ 687.320563][T19955] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.4627: casefold flag without casefold feature [ 687.334271][T19955] EXT4-fs (loop1): get root inode failed [ 687.339998][T19955] EXT4-fs (loop1): mount failed [ 688.864833][T19984] veth11: entered promiscuous mode [ 688.870031][T19984] veth11: entered allmulticast mode [ 689.608966][T19996] wg2: entered promiscuous mode [ 689.613863][T19996] wg2: entered allmulticast mode [ 689.828091][T19991] wg2: entered promiscuous mode [ 689.833793][T19991] wg2: entered allmulticast mode [ 690.144237][T20017] loop2: detected capacity change from 0 to 512 [ 690.151903][T20017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 690.384775][T20017] EXT4-fs (loop2): orphan cleanup on readonly fs [ 690.391854][T20017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4640: bg 0: block 248: padding at end of block bitmap is not set [ 690.407642][T20017] __quota_error: 30 callbacks suppressed [ 690.407656][T20017] Quota error (device loop2): write_blk: dquota write failed [ 690.420715][T20017] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 690.430637][T20017] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4640: Failed to acquire dquot type 1 [ 690.800551][T20017] EXT4-fs (loop2): 1 truncate cleaned up [ 690.807087][ T29] audit: type=1326 audit(1750808507.092:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.830632][ T29] audit: type=1326 audit(1750808507.092:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.854092][ T29] audit: type=1326 audit(1750808507.092:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.877498][ T29] audit: type=1326 audit(1750808507.092:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.901110][ T29] audit: type=1326 audit(1750808507.092:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.924571][ T29] audit: type=1326 audit(1750808507.092:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.948041][ T29] audit: type=1326 audit(1750808507.092:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 690.971601][ T29] audit: type=1326 audit(1750808507.092:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20019 comm="syz.0.4642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 691.622200][T20017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 691.775369][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.048301][T20050] veth9: entered promiscuous mode [ 692.053390][T20050] veth9: entered allmulticast mode [ 692.642869][T20062] loop3: detected capacity change from 0 to 512 [ 693.060998][T20062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.169816][T20062] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 693.230416][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.237637][T20088] loop4: detected capacity change from 0 to 8192 [ 694.620586][T20096] x_tables: ip_tables: osf match: only valid for protocol 6 [ 695.967579][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4667'. [ 696.531322][T20122] xt_hashlimit: max too large, truncated to 1048576 [ 696.539160][T20122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.547628][T20122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.205960][T20139] xt_hashlimit: max too large, truncated to 1048576 [ 698.215441][T20139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.224062][T20139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.530687][T20154] veth15: entered promiscuous mode [ 699.535919][T20154] veth15: entered allmulticast mode [ 699.625759][T20156] x_tables: ip_tables: osf match: only valid for protocol 6 [ 699.880130][T20169] xt_hashlimit: max too large, truncated to 1048576 [ 699.889470][T20169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.898084][T20169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.932062][T20170] loop2: detected capacity change from 0 to 1024 [ 699.990101][T20170] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.4683: casefold flag without casefold feature [ 700.004610][T20170] EXT4-fs (loop2): get root inode failed [ 700.010371][T20170] EXT4-fs (loop2): mount failed [ 701.022246][T20194] veth17: entered promiscuous mode [ 701.027412][T20194] veth17: entered allmulticast mode [ 701.236324][T20193] veth11: entered promiscuous mode [ 701.241518][T20193] veth11: entered allmulticast mode [ 701.476580][T20196] wg2: entered promiscuous mode [ 701.481523][T20196] wg2: entered allmulticast mode [ 702.803991][T20200] tipc: Enabled bearer , priority 0 [ 702.811100][T20199] tipc: Resetting bearer [ 702.823030][T20199] tipc: Disabling bearer [ 703.790575][T20211] veth17: entered promiscuous mode [ 703.795758][T20211] veth17: entered allmulticast mode [ 703.863497][T20213] loop2: detected capacity change from 0 to 1024 [ 703.909826][T20213] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.4696: casefold flag without casefold feature [ 703.940399][T20213] EXT4-fs (loop2): get root inode failed [ 703.946070][T20213] EXT4-fs (loop2): mount failed [ 704.130150][T20218] loop1: detected capacity change from 0 to 512 [ 704.302186][T20218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.352321][T20218] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.632602][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.349147][T20242] veth7: entered promiscuous mode [ 705.354299][T20242] veth7: entered allmulticast mode [ 705.361680][T20237] tipc: Enabled bearer , priority 0 [ 705.381202][T20236] tipc: Resetting bearer [ 705.407181][T20236] tipc: Disabling bearer [ 707.458784][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 707.458799][ T29] audit: type=1326 audit(1750808523.722:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.488403][ T29] audit: type=1326 audit(1750808523.722:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.511939][ T29] audit: type=1326 audit(1750808523.722:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.535501][ T29] audit: type=1326 audit(1750808523.722:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.559067][ T29] audit: type=1326 audit(1750808523.722:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.582640][ T29] audit: type=1326 audit(1750808523.722:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.606123][ T29] audit: type=1326 audit(1750808523.722:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.629645][ T29] audit: type=1326 audit(1750808523.722:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.653194][ T29] audit: type=1326 audit(1750808523.722:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 707.676738][ T29] audit: type=1326 audit(1750808523.722:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20248 comm="syz.4.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 708.552961][T20276] loop1: detected capacity change from 0 to 1024 [ 708.594866][T20276] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.4715: casefold flag without casefold feature [ 708.626451][T20254] x_tables: ip_tables: osf match: only valid for protocol 6 [ 708.674517][T20276] EXT4-fs (loop1): get root inode failed [ 708.680278][T20276] EXT4-fs (loop1): mount failed [ 708.854178][T20285] loop1: detected capacity change from 0 to 512 [ 708.878704][T20285] EXT4-fs: test_dummy_encryption option not supported [ 710.175934][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4719'. [ 711.231838][T20326] veth19: entered promiscuous mode [ 711.236990][T20326] veth19: entered allmulticast mode [ 712.743463][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 712.743478][ T29] audit: type=1326 audit(1750808529.342:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 712.773149][ T29] audit: type=1326 audit(1750808529.342:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.292112][ T29] audit: type=1326 audit(1750808529.342:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.315804][ T29] audit: type=1326 audit(1750808529.342:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.339348][ T29] audit: type=1326 audit(1750808529.342:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.362933][ T29] audit: type=1326 audit(1750808529.402:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.386411][ T29] audit: type=1326 audit(1750808529.402:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.409979][ T29] audit: type=1326 audit(1750808529.402:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.433590][ T29] audit: type=1326 audit(1750808529.402:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 713.457030][ T29] audit: type=1326 audit(1750808529.402:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.0.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 714.239529][T20366] netlink: 'syz.0.4742': attribute type 4 has an invalid length. [ 714.684483][T20371] hub 8-0:1.0: USB hub found [ 714.689377][T20371] hub 8-0:1.0: 8 ports detected [ 714.723362][T20372] veth9: entered promiscuous mode [ 714.728420][T20372] veth9: entered allmulticast mode [ 715.258165][T20380] xt_hashlimit: max too large, truncated to 1048576 [ 715.266761][T20380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.275348][T20380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.849842][T20374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4745'. [ 716.039356][T20386] veth13: entered promiscuous mode [ 716.044686][T20386] veth13: entered allmulticast mode [ 716.327790][T20395] xt_hashlimit: max too large, truncated to 1048576 [ 716.337747][T20395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.346376][T20395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.845803][T20406] loop1: detected capacity change from 0 to 512 [ 717.853395][T20406] EXT4-fs: test_dummy_encryption option not supported [ 719.985734][T20426] veth11: entered promiscuous mode [ 719.990951][T20426] veth11: entered allmulticast mode [ 721.103461][T20443] loop1: detected capacity change from 0 to 512 [ 721.111125][T20443] EXT4-fs: test_dummy_encryption option not supported [ 721.280828][T20443] netlink: 'syz.1.4767': attribute type 4 has an invalid length. [ 721.557489][T20451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4764'. [ 721.684403][T20455] loop1: detected capacity change from 0 to 512 [ 722.018008][T20453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4770'. [ 722.119122][T20455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.138935][T20455] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.924941][T20479] veth21: entered promiscuous mode [ 722.930161][T20479] veth21: entered allmulticast mode [ 724.284893][T20488] loop2: detected capacity change from 0 to 1024 [ 724.293784][T20489] loop3: detected capacity change from 0 to 512 [ 724.308940][T20488] EXT4-fs: Ignoring removed orlov option [ 724.309030][T20489] EXT4-fs: test_dummy_encryption option not supported [ 724.323781][T20488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.539642][T20489] netlink: 'syz.3.4780': attribute type 4 has an invalid length. [ 724.601577][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.822415][T20496] veth17: entered promiscuous mode [ 724.827580][T20496] veth17: entered allmulticast mode [ 724.928276][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 724.928289][ T29] audit: type=1326 audit(1750808541.482:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 725.030272][ T29] audit: type=1326 audit(1750808541.552:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 725.053767][ T29] audit: type=1326 audit(1750808541.562:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20502 comm="syz.3.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b294011e5 code=0x7ffc0000 [ 725.077361][ T29] audit: type=1326 audit(1750808541.562:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 725.100857][ T29] audit: type=1326 audit(1750808541.572:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.3.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 725.286897][ T29] audit: type=1326 audit(1750808541.702:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20502 comm="syz.3.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 726.095876][T20515] loop3: detected capacity change from 0 to 1024 [ 726.109250][T20515] EXT4-fs: Ignoring removed orlov option [ 726.127071][T20515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.357605][T20520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.448710][ T29] audit: type=1400 audit(1750808542.952:1407): avc: denied { read } for pid=20516 comm="syz.2.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 726.826809][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.066353][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.105883][T20530] loop2: detected capacity change from 0 to 512 [ 727.112761][T20532] loop3: detected capacity change from 0 to 1024 [ 727.123550][T20530] EXT4-fs: test_dummy_encryption option not supported [ 727.149457][T20532] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.4792: casefold flag without casefold feature [ 727.162508][T20533] veth21: entered promiscuous mode [ 727.167618][T20533] veth21: entered allmulticast mode [ 727.175831][T20532] EXT4-fs (loop3): get root inode failed [ 727.181506][T20532] EXT4-fs (loop3): mount failed [ 727.309486][T20530] netlink: 'syz.2.4793': attribute type 4 has an invalid length. [ 727.366230][ T29] audit: type=1326 audit(1750808543.952:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20541 comm="syz.0.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 727.389779][ T29] audit: type=1326 audit(1750808543.952:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20541 comm="syz.0.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 727.413259][ T29] audit: type=1326 audit(1750808543.952:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20541 comm="syz.0.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff0b40ce929 code=0x7ffc0000 [ 727.928417][T20548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.308746][T20576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.359189][T20576] hub 8-0:1.0: USB hub found [ 729.364207][T20576] hub 8-0:1.0: 8 ports detected [ 729.934144][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 729.934158][ T29] audit: type=1326 audit(1750808546.532:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369963e929 code=0x7ffc0000 [ 730.319323][T20594] xt_hashlimit: max too large, truncated to 1048576 [ 730.327372][T20594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.335922][T20594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.409735][ T29] audit: type=1326 audit(1750808546.572:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369963e929 code=0x7ffc0000 [ 730.433264][ T29] audit: type=1326 audit(1750808546.572:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f369963e929 code=0x7ffc0000 [ 730.456703][ T29] audit: type=1326 audit(1750808546.582:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369963e929 code=0x7ffc0000 [ 730.480245][ T29] audit: type=1326 audit(1750808546.582:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36996711e5 code=0x7ffc0000 [ 730.503778][ T29] audit: type=1326 audit(1750808546.582:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369963e929 code=0x7ffc0000 [ 730.527361][ T29] audit: type=1326 audit(1750808546.812:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f369963e929 code=0x7ffc0000 [ 730.890081][T20590] loop1: detected capacity change from 0 to 1024 [ 730.905998][T20590] EXT4-fs: Ignoring removed orlov option [ 731.037071][T20590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.128787][T20600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.186379][T20600] hub 8-0:1.0: USB hub found [ 731.192198][T20600] hub 8-0:1.0: 8 ports detected [ 731.821692][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.842341][T20607] loop3: detected capacity change from 0 to 512 [ 731.884330][T20608] netlink: 'syz.0.4812': attribute type 4 has an invalid length. [ 731.918908][T20607] EXT4-fs: test_dummy_encryption option not supported [ 732.070469][T20614] loop1: detected capacity change from 0 to 512 [ 732.101476][T20614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 732.171286][T20614] EXT4-fs (loop1): 1 truncate cleaned up [ 732.177353][T20614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.431705][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.958175][T20650] loop3: detected capacity change from 0 to 256 [ 734.081815][T20650] FAT-fs (loop3): codepage cp950 not found [ 735.441481][T20672] loop2: detected capacity change from 0 to 512 [ 735.455718][T20672] EXT4-fs: test_dummy_encryption option not supported [ 735.846583][ T29] audit: type=1326 audit(1750808552.442:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 735.870142][ T29] audit: type=1326 audit(1750808552.442:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 735.893687][ T29] audit: type=1326 audit(1750808552.442:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 735.917205][ T29] audit: type=1326 audit(1750808552.442:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 735.940688][ T29] audit: type=1326 audit(1750808552.442:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 735.964178][ T29] audit: type=1326 audit(1750808552.442:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 735.987752][ T29] audit: type=1326 audit(1750808552.442:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 736.011239][ T29] audit: type=1326 audit(1750808552.442:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 736.034751][ T29] audit: type=1326 audit(1750808552.442:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 736.058237][ T29] audit: type=1326 audit(1750808552.442:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20677 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 736.116185][T20686] loop3: detected capacity change from 0 to 256 [ 736.131698][T20686] FAT-fs (loop3): codepage cp950 not found [ 736.278662][T20693] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4836'. [ 736.287874][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4836'. [ 736.605480][T20705] loop4: detected capacity change from 0 to 256 [ 736.668956][T20705] FAT-fs (loop4): codepage cp950 not found [ 736.819440][T20715] netlink: 'syz.0.4839': attribute type 4 has an invalid length. [ 738.061692][T20738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.107769][T20738] hub 8-0:1.0: USB hub found [ 738.112700][T20738] hub 8-0:1.0: 8 ports detected [ 739.189698][T20758] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4851'. [ 739.239765][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4851'. [ 739.802853][T20768] loop4: detected capacity change from 0 to 128 [ 741.122215][T20773] veth19: entered promiscuous mode [ 741.127356][T20773] veth19: entered allmulticast mode [ 741.338218][ T6151] kworker/u8:23: attempt to access beyond end of device [ 741.338218][ T6151] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 741.592684][T20778] loop4: detected capacity change from 0 to 512 [ 741.604675][T20779] loop1: detected capacity change from 0 to 512 [ 741.615654][T20778] EXT4-fs: test_dummy_encryption option not supported [ 741.861961][T20779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.006688][T20786] netlink: 'syz.4.4857': attribute type 4 has an invalid length. [ 742.026717][T20779] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.739676][T20802] veth13: entered promiscuous mode [ 743.744842][T20802] veth13: entered allmulticast mode [ 745.971178][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 746.052348][T20824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 746.098287][T20824] hub 8-0:1.0: USB hub found [ 746.103079][T20824] hub 8-0:1.0: 8 ports detected [ 746.669885][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.609858][T20856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4876'. [ 747.793744][T20862] loop3: detected capacity change from 0 to 1024 [ 747.870098][T20862] EXT4-fs: Ignoring removed orlov option [ 747.976285][T20862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.303190][T20880] loop2: detected capacity change from 0 to 512 [ 748.330358][T20880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.349093][T20880] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.695573][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'. [ 748.878062][T20889] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4885'. [ 748.924559][T20889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4885'. [ 749.095412][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.160353][T20896] loop4: detected capacity change from 0 to 512 [ 749.190762][T20896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.203411][T20896] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 749.214573][T20896] netlink: 'syz.4.4887': attribute type 13 has an invalid length. [ 749.223206][T20896] gretap0: refused to change device tx_queue_len [ 749.229786][T20896] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 750.005186][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.043459][T20909] loop3: detected capacity change from 0 to 1024 [ 750.070072][T20909] EXT4-fs: Ignoring removed orlov option [ 750.095093][T20909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.833072][T20913] loop4: detected capacity change from 0 to 256 [ 750.889817][T20913] FAT-fs (loop4): codepage cp950 not found [ 751.887683][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.522811][T20931] loop4: detected capacity change from 0 to 512 [ 752.571380][T20931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.595498][T20931] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 752.864892][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.371128][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.462980][T20958] loop2: detected capacity change from 0 to 512 [ 753.488807][T20958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.501437][T20958] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 753.514089][T20958] netlink: 'syz.2.4901': attribute type 13 has an invalid length. [ 753.522689][T20958] gretap0: refused to change device tx_queue_len [ 753.529215][T20958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 754.293461][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.349957][T20964] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4905'. [ 754.360072][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4905'. [ 754.386399][T20966] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4906'. [ 754.395737][T20966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4906'. [ 755.391338][T20979] loop2: detected capacity change from 0 to 256 [ 755.405044][T20979] FAT-fs (loop2): codepage cp950 not found [ 756.009860][T20992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.067107][T20992] hub 8-0:1.0: USB hub found [ 756.072859][T20992] hub 8-0:1.0: 8 ports detected [ 756.582986][T21001] loop2: detected capacity change from 0 to 512 [ 756.865695][T21006] loop3: detected capacity change from 0 to 512 [ 756.898479][T21001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.914243][T21006] EXT4-fs: test_dummy_encryption option not supported [ 756.922568][T20997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4913'. [ 757.115510][T21001] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.618436][T21046] loop1: detected capacity change from 0 to 256 [ 758.707147][T21046] FAT-fs (loop1): codepage cp950 not found [ 761.950898][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.022657][T21072] loop3: detected capacity change from 0 to 512 [ 762.039054][T21072] EXT4-fs: test_dummy_encryption option not supported [ 762.151937][T21079] loop4: detected capacity change from 0 to 128 [ 762.351560][T21083] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4939'. [ 762.405771][T21083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4939'. [ 762.622833][T21086] 9pnet_fd: Insufficient options for proto=fd [ 763.428182][T21096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.959614][T21100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4943'. [ 764.128727][T21109] loop2: detected capacity change from 0 to 1024 [ 764.143381][T21109] EXT4-fs: Ignoring removed orlov option [ 764.155422][T21109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.264634][T21125] veth21: entered promiscuous mode [ 764.269886][T21125] veth21: entered allmulticast mode [ 764.556605][T21137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.384890][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.903515][T21171] loop1: detected capacity change from 0 to 512 [ 767.289754][T21171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.312939][T21171] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 767.349399][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.494268][T21180] 9pnet_fd: Insufficient options for proto=fd [ 767.627702][T21189] veth13: entered promiscuous mode [ 767.633012][T21189] veth13: entered allmulticast mode [ 767.789916][T21194] loop4: detected capacity change from 0 to 1024 [ 767.798908][T21194] EXT4-fs: Ignoring removed orlov option [ 767.814771][T21194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.342235][T21205] loop3: detected capacity change from 0 to 1024 [ 768.559573][T21205] EXT4-fs: Ignoring removed orlov option [ 768.995593][T21205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.820238][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.251911][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.853539][T21246] veth17: entered promiscuous mode [ 770.858726][T21246] veth17: entered allmulticast mode [ 770.922180][T21248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4980'. [ 772.686395][T21267] veth23: entered promiscuous mode [ 772.691670][T21267] veth23: entered allmulticast mode [ 773.592568][T21292] loop4: detected capacity change from 0 to 1024 [ 773.615121][T21292] EXT4-fs: Ignoring removed orlov option [ 773.660344][T21292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.222330][T21301] netlink: 'syz.0.5000': attribute type 4 has an invalid length. [ 775.363655][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.755356][T21355] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5016'. [ 779.764459][T21355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5016'. [ 780.107742][T21361] hub 8-0:1.0: USB hub found [ 780.112706][T21361] hub 8-0:1.0: 8 ports detected [ 780.915464][T21374] loop2: detected capacity change from 0 to 256 [ 781.008191][T21375] xt_hashlimit: max too large, truncated to 1048576 [ 781.016409][T21375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.024879][T21375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.343285][T21378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.358763][T21374] FAT-fs (loop2): codepage cp950 not found [ 781.485135][T21371] hub 8-0:1.0: USB hub found [ 781.669814][T21371] hub 8-0:1.0: 8 ports detected [ 782.006754][T21393] 9pnet_fd: Insufficient options for proto=fd [ 782.071753][T21396] loop3: detected capacity change from 0 to 128 [ 782.189287][T21397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.280573][T21410] xt_hashlimit: max too large, truncated to 1048576 [ 783.290512][T21410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.299169][T21410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.249386][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 784.249400][ T29] audit: type=1326 audit(1750808600.822:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.4.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 784.279052][ T29] audit: type=1326 audit(1750808600.822:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.4.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 784.302558][ T29] audit: type=1326 audit(1750808600.822:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc7c8611e5 code=0x7ffc0000 [ 784.326089][ T29] audit: type=1326 audit(1750808600.822:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.4.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 784.349658][ T29] audit: type=1326 audit(1750808600.822:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.4.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 784.564509][T21418] hub 8-0:1.0: USB hub found [ 784.569365][T21418] hub 8-0:1.0: 8 ports detected [ 785.259667][T21419] loop2: detected capacity change from 0 to 128 [ 785.266930][ T29] audit: type=1326 audit(1750808601.372:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 785.385520][T21421] loop4: detected capacity change from 0 to 1024 [ 785.406244][T21421] EXT4-fs: Ignoring removed orlov option [ 785.445742][T21421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.721625][T21430] loop3: detected capacity change from 0 to 512 [ 785.741220][T21430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.770519][T21430] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.221944][T21440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 786.715281][T21446] 9pnet_fd: Insufficient options for proto=fd [ 786.764694][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.051582][T21451] loop2: detected capacity change from 0 to 1024 [ 787.097857][T21451] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.5043: casefold flag without casefold feature [ 787.111031][T21451] EXT4-fs (loop2): get root inode failed [ 787.116703][T21451] EXT4-fs (loop2): mount failed [ 787.179801][T21459] loop4: detected capacity change from 0 to 128 [ 787.491540][T21463] loop1: detected capacity change from 0 to 512 [ 787.668190][T21463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.680831][T21463] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 787.703916][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.842944][T21469] loop1: detected capacity change from 0 to 128 [ 788.106424][T21473] loop2: detected capacity change from 0 to 512 [ 788.142758][T21473] EXT4-fs: test_dummy_encryption option not supported [ 788.398515][T21477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 788.443070][T21477] hub 8-0:1.0: USB hub found [ 788.447820][T21477] hub 8-0:1.0: 8 ports detected [ 789.574639][T21489] netlink: 'syz.2.5048': attribute type 4 has an invalid length. [ 790.772910][ T6122] kworker/u8:9: attempt to access beyond end of device [ 790.772910][ T6122] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 790.824530][T21504] loop2: detected capacity change from 0 to 512 [ 790.859425][T21504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.871994][T21504] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 790.882988][T21504] netlink: 'syz.2.5057': attribute type 13 has an invalid length. [ 791.113053][T21504] gretap0: refused to change device tx_queue_len [ 791.119759][T21504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 791.243784][T21515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 791.289438][T21515] hub 8-0:1.0: USB hub found [ 791.294109][T21515] hub 8-0:1.0: 8 ports detected [ 792.074549][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.172654][T21525] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5061'. [ 792.185888][T21527] loop1: detected capacity change from 0 to 512 [ 792.195077][T21530] loop4: detected capacity change from 0 to 256 [ 792.202018][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5061'. [ 792.227374][T21527] EXT4-fs: test_dummy_encryption option not supported [ 792.246284][T21530] FAT-fs (loop4): codepage cp950 not found [ 792.929556][T21543] netlink: 'syz.1.5066': attribute type 4 has an invalid length. [ 793.202039][T21546] syzkaller0: entered promiscuous mode [ 793.207542][T21546] syzkaller0: entered allmulticast mode [ 793.302076][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.565768][T21557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 793.617942][T21557] hub 8-0:1.0: USB hub found [ 793.778684][T21557] hub 8-0:1.0: 8 ports detected [ 793.996436][T21565] netlink: 'syz.0.5073': attribute type 13 has an invalid length. [ 794.005531][T21565] gretap0: refused to change device tx_queue_len [ 794.012188][T21565] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 794.278690][ T29] audit: type=1326 audit(1750808610.842:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21568 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 794.302258][ T29] audit: type=1326 audit(1750808610.842:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21568 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 794.325840][ T29] audit: type=1326 audit(1750808610.842:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21568 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 794.349236][ T29] audit: type=1326 audit(1750808610.842:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21568 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 794.372740][ T29] audit: type=1326 audit(1750808610.842:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21568 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 794.396290][ T29] audit: type=1326 audit(1750808610.842:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b294011e5 code=0x7ffc0000 [ 794.442908][ T29] audit: type=1326 audit(1750808611.022:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.3.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4b293ce929 code=0x7ffc0000 [ 795.163301][T21592] loop1: detected capacity change from 0 to 2048 [ 795.261662][T21592] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.429524][T21598] netlink: 'syz.0.5082': attribute type 4 has an invalid length. [ 796.004386][T21606] 9pnet_fd: Insufficient options for proto=fd [ 796.262307][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 796.490493][T21622] loop3: detected capacity change from 0 to 512 [ 796.836735][T21622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.849388][T21622] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 796.860569][T21622] netlink: 'syz.3.5093': attribute type 13 has an invalid length. [ 796.869344][T21622] gretap0: refused to change device tx_queue_len [ 796.875899][T21622] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 797.220403][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5096'. [ 797.350799][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.508336][T21640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.558492][T21640] hub 8-0:1.0: USB hub found [ 797.563505][T21640] hub 8-0:1.0: 8 ports detected [ 798.456700][T21664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.510727][T21664] hub 8-0:1.0: USB hub found [ 798.515644][T21664] hub 8-0:1.0: 8 ports detected [ 798.966151][T21674] loop2: detected capacity change from 0 to 1024 [ 798.976522][T21673] loop4: detected capacity change from 0 to 1024 [ 799.014321][T21673] EXT4-fs: Ignoring removed orlov option [ 799.086716][T21673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.100219][T21674] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.5110: casefold flag without casefold feature [ 799.147029][T21674] EXT4-fs (loop2): get root inode failed [ 799.152779][T21674] EXT4-fs (loop2): mount failed [ 799.174558][ T29] audit: type=1400 audit(1750808615.772:1449): avc: denied { unmount } for pid=13525 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 799.628206][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5113'. [ 800.635863][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.646837][T21696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 800.681911][T21696] hub 8-0:1.0: USB hub found [ 800.686605][T21696] hub 8-0:1.0: 8 ports detected [ 800.860426][T21702] loop1: detected capacity change from 0 to 1024 [ 800.873311][T21702] EXT4-fs: Ignoring removed orlov option [ 800.889316][T21702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.942266][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.205670][T21718] syzkaller0: entered promiscuous mode [ 802.211251][T21718] syzkaller0: entered allmulticast mode [ 803.452556][T21722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.507621][T21722] hub 8-0:1.0: USB hub found [ 803.512654][T21722] hub 8-0:1.0: 8 ports detected [ 805.851948][T21738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.860787][T21738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.315874][T21748] loop1: detected capacity change from 0 to 1024 [ 806.340792][T21748] EXT4-fs: Ignoring removed orlov option [ 806.421444][T21748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.483260][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.658874][T21759] loop3: detected capacity change from 0 to 512 [ 806.671275][T21759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.684183][T21759] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 806.709714][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.780249][T21766] loop3: detected capacity change from 0 to 128 [ 807.330468][T21777] vlan3: entered allmulticast mode [ 807.727345][ T6134] kworker/u8:15: attempt to access beyond end of device [ 807.727345][ T6134] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 807.742202][ T6134] kworker/u8:15: attempt to access beyond end of device [ 807.742202][ T6134] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 807.755855][ T6134] kworker/u8:15: attempt to access beyond end of device [ 807.755855][ T6134] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 807.770598][ T6134] kworker/u8:15: attempt to access beyond end of device [ 807.770598][ T6134] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 807.822634][ T6134] kworker/u8:15: attempt to access beyond end of device [ 807.822634][ T6134] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 808.181072][ T6134] kworker/u8:15: attempt to access beyond end of device [ 808.181072][ T6134] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 808.224202][ T6134] kworker/u8:15: attempt to access beyond end of device [ 808.224202][ T6134] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 808.238443][ T6134] kworker/u8:15: attempt to access beyond end of device [ 808.238443][ T6134] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 808.254666][ T6134] kworker/u8:15: attempt to access beyond end of device [ 808.254666][ T6134] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 808.271099][ T6134] kworker/u8:15: attempt to access beyond end of device [ 808.271099][ T6134] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 808.355545][T21789] loop3: detected capacity change from 0 to 1024 [ 808.362948][T21789] EXT4-fs: Ignoring removed orlov option [ 808.379919][T21789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.443711][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.459773][T21812] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5150'. [ 809.469235][T21812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5150'. [ 809.572628][T21814] 9pnet_fd: Insufficient options for proto=fd [ 809.644064][T21819] loop1: detected capacity change from 0 to 1024 [ 809.656518][T21819] EXT4-fs: Ignoring removed orlov option [ 809.664573][T21819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.042402][T21832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.051107][T21832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.393704][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.703538][T21842] loop3: detected capacity change from 0 to 512 [ 811.710112][T21842] EXT4-fs: Ignoring removed i_version option [ 811.816832][T21842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.851405][T21842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.069909][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5158'. [ 813.346609][ T29] audit: type=1400 audit(1750808629.942:1450): avc: denied { map } for pid=21853 comm="syz.3.5163" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 813.370923][T21857] loop2: detected capacity change from 0 to 512 [ 813.371253][T21857] EXT4-fs: test_dummy_encryption option not supported [ 814.108157][T21876] netlink: 'syz.2.5162': attribute type 4 has an invalid length. [ 814.583681][T21885] loop4: detected capacity change from 0 to 128 [ 815.707304][ T6149] bio_check_eod: 102 callbacks suppressed [ 815.707317][ T6149] kworker/u8:22: attempt to access beyond end of device [ 815.707317][ T6149] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 815.816604][ T6149] kworker/u8:22: attempt to access beyond end of device [ 815.816604][ T6149] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 815.912973][ T6149] kworker/u8:22: attempt to access beyond end of device [ 815.912973][ T6149] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 816.008061][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.008061][ T6149] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 816.085815][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.085815][ T6149] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 816.152044][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.152044][ T6149] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 816.196956][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.196956][ T6149] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 816.232074][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.232074][ T6149] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 816.286953][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.286953][ T6149] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 816.306013][ T6149] kworker/u8:22: attempt to access beyond end of device [ 816.306013][ T6149] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 816.577928][T21909] vlan3: entered allmulticast mode [ 817.319830][T21914] loop1: detected capacity change from 0 to 512 [ 817.358502][T21914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.371160][T21914] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.931794][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.314488][T21939] loop1: detected capacity change from 0 to 256 [ 819.426870][T21939] FAT-fs (loop1): codepage cp950 not found [ 820.574419][T21959] loop1: detected capacity change from 0 to 1024 [ 820.584097][T21959] EXT4-fs: Ignoring removed orlov option [ 821.779774][T21959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.100085][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.136903][T21968] loop3: detected capacity change from 0 to 256 [ 822.146831][T21969] loop4: detected capacity change from 0 to 512 [ 822.162448][T21968] FAT-fs (loop3): codepage cp950 not found [ 822.733753][T21969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.769970][T21969] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 822.818824][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.074160][T21994] loop4: detected capacity change from 0 to 512 [ 823.285245][T21994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.297919][T21994] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.333230][T21999] loop3: detected capacity change from 0 to 512 [ 824.339770][T21999] EXT4-fs: Ignoring removed i_version option [ 824.539189][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.646074][T21999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.659857][T21999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.150868][T22005] syzkaller0: entered promiscuous mode [ 825.156375][T22005] syzkaller0: entered allmulticast mode [ 825.547193][T22012] syzkaller0: entered promiscuous mode [ 825.552773][T22012] syzkaller0: entered allmulticast mode [ 825.982993][T22015] loop3: detected capacity change from 0 to 512 [ 826.005060][T22015] EXT4-fs (loop3): 1 orphan inode deleted [ 826.021159][ T6151] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 826.030980][ T6151] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 826.050235][T22024] 9pnet_fd: Insufficient options for proto=fd [ 826.068854][T22015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.111288][T22015] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.245132][T22015] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5204: iget: bad i_size value: 360287970189639690 [ 827.059095][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.897247][T22050] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5213'. [ 827.923260][T22050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5213'. [ 828.601883][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5215'. [ 829.382050][T22071] 9pnet_fd: Insufficient options for proto=fd [ 829.484946][T22075] loop1: detected capacity change from 0 to 1024 [ 829.493124][ T29] audit: type=1400 audit(1750808646.092:1451): avc: denied { append } for pid=22074 comm="syz.3.5220" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 829.569496][T22077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 829.618802][T22077] hub 8-0:1.0: USB hub found [ 829.624333][T22077] hub 8-0:1.0: 8 ports detected [ 829.739676][T22075] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.5219: casefold flag without casefold feature [ 829.952748][T22075] EXT4-fs (loop1): get root inode failed [ 829.958444][T22075] EXT4-fs (loop1): mount failed [ 830.856125][T22095] syzkaller0: entered promiscuous mode [ 830.861700][T22095] syzkaller0: entered allmulticast mode [ 831.191581][T22102] vlan2: entered allmulticast mode [ 831.216644][T22107] 9pnet_fd: Insufficient options for proto=fd [ 831.274888][T22108] vlan2: entered allmulticast mode [ 831.603740][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5230'. [ 832.672437][T22126] loop3: detected capacity change from 0 to 1024 [ 832.686480][T22126] EXT4-fs: Ignoring removed orlov option [ 832.751030][T22126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.038863][T22136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 833.065767][T22138] loop2: detected capacity change from 0 to 1024 [ 833.079869][T22138] EXT4-fs: Ignoring removed nobh option [ 833.085491][T22138] EXT4-fs: Ignoring removed bh option [ 833.093117][T22138] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 833.155554][T22139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.164002][T22139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.292046][T22138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.873024][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.923974][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.937082][ T29] audit: type=1326 audit(1750808651.522:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 834.960690][ T29] audit: type=1326 audit(1750808651.522:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 834.960923][T22151] loop3: detected capacity change from 0 to 1024 [ 834.984213][ T29] audit: type=1326 audit(1750808651.522:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 834.984239][ T29] audit: type=1326 audit(1750808651.522:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 834.984263][ T29] audit: type=1326 audit(1750808651.522:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 835.051559][T22157] loop4: detected capacity change from 0 to 1024 [ 835.061087][ T29] audit: type=1326 audit(1750808651.532:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 835.070128][T22151] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.5240: casefold flag without casefold feature [ 835.090849][ T29] audit: type=1326 audit(1750808651.532:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 835.104944][T22151] EXT4-fs (loop3): get root inode failed [ 835.128161][ T29] audit: type=1326 audit(1750808651.532:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 835.132675][T22151] EXT4-fs (loop3): mount failed [ 835.156142][ T29] audit: type=1326 audit(1750808651.532:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 835.184723][ T29] audit: type=1326 audit(1750808651.532:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22148 comm="syz.4.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7c82e929 code=0x7ffc0000 [ 835.265672][T22163] vlan2: entered allmulticast mode [ 835.339968][T22157] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.5243: casefold flag without casefold feature [ 835.541565][T22157] EXT4-fs (loop4): get root inode failed [ 835.547325][T22157] EXT4-fs (loop4): mount failed [ 836.565457][T22175] syzkaller0: entered promiscuous mode [ 836.570984][T22175] syzkaller0: entered allmulticast mode [ 837.407097][T22189] loop2: detected capacity change from 0 to 512 [ 837.653610][T22195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 838.016923][T22189] EXT4-fs (loop2): 1 orphan inode deleted [ 838.023049][T22189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.047134][ T6151] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 838.061143][T22189] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.167010][T22189] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5248: iget: bad i_size value: 360287970189639690 [ 838.350160][T22210] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5253'. [ 838.380205][T22210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5253'. [ 838.415264][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.147930][T22221] loop2: detected capacity change from 0 to 1024 [ 839.168214][T22221] EXT4-fs: Ignoring removed orlov option [ 839.190595][T22221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.529466][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.982481][T22256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5265'. [ 842.071562][T22256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5265'. [ 845.200270][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 845.200285][ T29] audit: type=1400 audit(1750808661.252:1462): avc: denied { setopt } for pid=22270 comm="syz.3.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 845.662017][T22278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.670624][T22278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.124557][T22283] 9pnet_fd: Insufficient options for proto=fd [ 846.206791][T22292] loop3: detected capacity change from 0 to 128 [ 846.739033][T22302] loop4: detected capacity change from 0 to 128 [ 847.144470][ T6151] bio_check_eod: 102 callbacks suppressed [ 847.144528][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.144528][ T6151] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 847.166203][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.166203][ T6151] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 847.181135][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.181135][ T6151] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 847.195643][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.195643][ T6151] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 847.210343][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.210343][ T6151] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 847.225039][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.225039][ T6151] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 847.240512][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.240512][ T6151] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 847.254319][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.254319][ T6151] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 847.269756][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.269756][ T6151] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 847.284202][ T6151] kworker/u8:23: attempt to access beyond end of device [ 847.284202][ T6151] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 847.614584][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'. [ 847.848166][T22320] loop2: detected capacity change from 0 to 1024 [ 847.856673][T22320] EXT4-fs: Ignoring removed nobh option [ 847.863372][T22320] EXT4-fs: Ignoring removed bh option [ 847.870464][T22320] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 847.895553][T22320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.176324][T22339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.168748][T22339] hub 8-0:1.0: USB hub found [ 849.355004][T22339] hub 8-0:1.0: 8 ports detected [ 849.510768][T22348] loop3: detected capacity change from 0 to 512 [ 849.517283][T22348] EXT4-fs: Ignoring removed i_version option [ 849.634836][T22348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.647623][T22348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.659714][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.413724][T22360] loop2: detected capacity change from 0 to 1024 [ 850.470294][T22360] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.5291: casefold flag without casefold feature [ 850.498804][T22360] EXT4-fs (loop2): get root inode failed [ 850.504477][T22360] EXT4-fs (loop2): mount failed [ 851.691339][T22383] xt_hashlimit: max too large, truncated to 1048576 [ 851.699366][T22383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.707832][T22383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.598784][T22385] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5300'. [ 852.735610][T22385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5300'. [ 853.010499][T22391] loop3: detected capacity change from 0 to 512 [ 855.056743][T22391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.069313][T22391] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.595165][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.736827][T22406] 9pnet_fd: Insufficient options for proto=fd [ 856.640956][T22413] loop3: detected capacity change from 0 to 512 [ 856.647517][T22413] EXT4-fs: Ignoring removed i_version option [ 856.664134][T22413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.664801][T22413] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.801004][T22424] loop3: detected capacity change from 0 to 512 [ 856.801407][T22424] EXT4-fs: test_dummy_encryption option not supported [ 856.890154][T22426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 856.925600][T22426] hub 8-0:1.0: USB hub found [ 856.925793][T22426] hub 8-0:1.0: 8 ports detected [ 857.803950][T22440] loop2: detected capacity change from 0 to 512 [ 857.891533][T22440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.905281][T22440] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.151944][T22452] loop3: detected capacity change from 0 to 128 [ 858.766872][T22463] loop4: detected capacity change from 0 to 128 [ 858.890143][ T6130] bio_check_eod: 101 callbacks suppressed [ 858.890157][ T6130] kworker/u8:13: attempt to access beyond end of device [ 858.890157][ T6130] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 858.942947][ T6130] kworker/u8:13: attempt to access beyond end of device [ 858.942947][ T6130] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 858.967956][ T6130] kworker/u8:13: attempt to access beyond end of device [ 858.967956][ T6130] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 858.981439][ T6130] kworker/u8:13: attempt to access beyond end of device [ 858.981439][ T6130] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 858.995135][ T6130] kworker/u8:13: attempt to access beyond end of device [ 858.995135][ T6130] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 859.010170][ T6130] kworker/u8:13: attempt to access beyond end of device [ 859.010170][ T6130] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 859.024780][ T6130] kworker/u8:13: attempt to access beyond end of device [ 859.024780][ T6130] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 859.038595][ T6130] kworker/u8:13: attempt to access beyond end of device [ 859.038595][ T6130] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 859.053014][ T6130] kworker/u8:13: attempt to access beyond end of device [ 859.053014][ T6130] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 859.066633][ T6130] kworker/u8:13: attempt to access beyond end of device [ 859.066633][ T6130] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 859.130032][T22466] syzkaller0: entered promiscuous mode [ 859.135572][T22466] syzkaller0: entered allmulticast mode [ 859.150414][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.986138][T22485] loop1: detected capacity change from 0 to 1024 [ 861.007753][T22485] EXT4-fs: Ignoring removed orlov option [ 861.120994][T22485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.608543][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'. [ 862.057495][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.147405][T22499] bridge0: port 3(syz_tun) entered blocking state [ 862.153963][T22499] bridge0: port 3(syz_tun) entered disabled state [ 862.160603][T22499] syz_tun: entered allmulticast mode [ 862.166627][T22499] syz_tun: entered promiscuous mode [ 862.869718][T22503] loop1: detected capacity change from 0 to 1024 [ 862.876351][T22503] EXT4-fs: Ignoring removed orlov option [ 862.891338][T22503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.105242][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.847062][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5347'. [ 869.908405][T22549] veth23: entered promiscuous mode [ 869.913587][T22549] veth23: entered allmulticast mode [ 870.283611][T22568] syzkaller0: entered promiscuous mode [ 870.289153][T22568] syzkaller0: entered allmulticast mode [ 871.331309][T22580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 871.372344][T22580] hub 8-0:1.0: USB hub found [ 871.377068][T22580] hub 8-0:1.0: 8 ports detected [ 872.804455][T22587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 873.046860][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5360'. [ 873.952435][T22615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5367'. [ 874.256946][T22631] loop3: detected capacity change from 0 to 512 [ 874.264231][T22631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 874.274689][T22631] EXT4-fs (loop3): orphan cleanup on readonly fs [ 874.281963][T22631] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5371: bg 0: block 248: padding at end of block bitmap is not set [ 874.297106][T22631] Quota error (device loop3): write_blk: dquota write failed [ 874.304524][T22631] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 874.314476][T22631] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5371: Failed to acquire dquot type 1 [ 874.327535][T22631] EXT4-fs (loop3): 1 truncate cleaned up [ 874.337201][T22631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 874.455231][T22635] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5373'. [ 874.500927][T22635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5373'. [ 874.676010][T22638] loop2: detected capacity change from 0 to 512 [ 874.682462][T22638] EXT4-fs: Ignoring removed i_version option [ 875.162501][T22638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.127225][T22638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.471737][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 876.874606][T22656] loop4: detected capacity change from 0 to 512 [ 876.995654][T22656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.008281][T22656] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.490222][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.855307][T22668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 877.958305][T22673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5382'. [ 877.968953][T22668] hub 8-0:1.0: USB hub found [ 878.015551][T22668] hub 8-0:1.0: 8 ports detected [ 878.065661][T22675] loop1: detected capacity change from 0 to 1024 [ 878.117559][T22675] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.5385: casefold flag without casefold feature [ 878.142421][T22677] loop2: detected capacity change from 0 to 2048 [ 878.178400][T22675] EXT4-fs (loop1): get root inode failed [ 878.184114][T22675] EXT4-fs (loop1): mount failed [ 878.214469][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.219284][T22677] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.303904][T22694] loop1: detected capacity change from 0 to 1024 [ 879.676780][T22697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 879.792398][T22697] hub 8-0:1.0: USB hub found [ 879.816984][T22697] hub 8-0:1.0: 8 ports detected [ 880.185814][T22694] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.5390: casefold flag without casefold feature [ 880.232765][T22694] EXT4-fs (loop1): get root inode failed [ 880.238428][T22694] EXT4-fs (loop1): mount failed [ 880.437716][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 880.985173][T22706] veth25: entered promiscuous mode [ 880.990375][T22706] veth25: entered allmulticast mode [ 881.167080][T22727] loop1: detected capacity change from 0 to 512 [ 881.273320][T22727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.285979][T22727] ext4 filesystem being mounted at /488/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 881.316347][T22724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5398'. [ 881.795667][T22740] loop2: detected capacity change from 0 to 128 [ 881.932194][T22742] xt_hashlimit: max too large, truncated to 1048576 [ 881.940851][T22742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.949413][T22742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.128508][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.528126][ T6130] bio_check_eod: 214 callbacks suppressed [ 882.528139][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.528139][ T6130] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 882.547654][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.547654][ T6130] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 882.561113][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.561113][ T6130] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 882.574925][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.574925][ T6130] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 882.589246][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.589246][ T6130] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 882.602928][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.602928][ T6130] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 882.617356][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.617356][ T6130] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 882.631682][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.631682][ T6130] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 882.645410][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.645410][ T6130] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 882.659841][ T6130] kworker/u8:13: attempt to access beyond end of device [ 882.659841][ T6130] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 882.977926][T22761] loop2: detected capacity change from 0 to 128 [ 883.389307][T22768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5412'. [ 883.389541][T22771] veth27: entered promiscuous mode [ 883.403545][T22771] veth27: entered allmulticast mode [ 883.834510][T22776] loop1: detected capacity change from 0 to 512 [ 884.105654][T22776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.118255][T22776] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 884.245768][T22783] loop2: detected capacity change from 0 to 512 [ 884.291317][T22783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.304039][T22783] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.581519][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.450897][T22793] SELinux: syz.3.5417 (22793) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 885.784202][T22801] loop1: detected capacity change from 0 to 2048 [ 885.879697][T22802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 886.073290][T22801] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.118689][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.323028][T22813] loop4: detected capacity change from 0 to 1024 [ 886.360759][T22813] EXT4-fs: Ignoring removed nobh option [ 886.366522][T22813] EXT4-fs: Ignoring removed bh option [ 886.389204][T22815] loop2: detected capacity change from 0 to 512 [ 886.395847][T22815] EXT4-fs: test_dummy_encryption option not supported [ 886.430701][T22813] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 886.450454][T22813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.538130][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5424'. [ 886.885457][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 887.208896][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.335521][T22831] loop4: detected capacity change from 0 to 128 [ 887.482214][T22827] veth15: entered promiscuous mode [ 887.487444][T22827] veth15: entered allmulticast mode [ 887.737015][T22840] loop3: detected capacity change from 0 to 128 [ 888.312841][ T6122] bio_check_eod: 214 callbacks suppressed [ 888.312854][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.312854][ T6122] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 888.365361][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.365361][ T6122] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 888.413547][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.413547][ T6122] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 888.462825][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.462825][ T6122] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 888.510767][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.510767][ T6122] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 888.620488][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.620488][ T6122] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 888.635233][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.635233][ T6122] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 888.648680][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.648680][ T6122] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 888.663028][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.663028][ T6122] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 888.676684][ T6122] kworker/u8:9: attempt to access beyond end of device [ 888.676684][ T6122] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 888.731816][T22852] 9pnet_fd: Insufficient options for proto=fd [ 889.085368][T22873] loop1: detected capacity change from 0 to 1024 [ 889.092337][T22873] EXT4-fs: Ignoring removed orlov option [ 889.110603][T22873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.229579][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.800544][T22883] netlink: 'syz.1.5443': attribute type 4 has an invalid length. [ 890.232573][T22890] 9pnet_fd: Insufficient options for proto=fd [ 890.362295][T22893] loop1: detected capacity change from 0 to 512 [ 890.419748][T22893] EXT4-fs: test_dummy_encryption option not supported [ 890.887466][T22909] loop3: detected capacity change from 0 to 1024 [ 890.915496][T22909] EXT4-fs: Ignoring removed orlov option [ 890.931189][T22909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.991668][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.789483][T22925] loop1: detected capacity change from 0 to 512 [ 891.911214][T22925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.923894][T22925] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.133404][T22933] loop4: detected capacity change from 0 to 128 [ 893.092858][T22929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 893.140258][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.158917][T22936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.268678][T22936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.332846][T22936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5461'. [ 893.342756][ T29] audit: type=1400 audit(1750808709.942:1463): avc: denied { connect } for pid=22935 comm="syz.2.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 893.435720][T22948] loop3: detected capacity change from 0 to 1024 [ 893.459619][T22948] EXT4-fs: Ignoring removed orlov option [ 893.543911][T22948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.864033][T13744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.065073][T22957] loop3: detected capacity change from 0 to 8192 [ 894.147016][T22959] loop3: detected capacity change from 0 to 512 [ 894.167220][T22959] EXT4-fs: test_dummy_encryption option not supported [ 895.188916][T22980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 895.241527][T22980] hub 8-0:1.0: USB hub found [ 895.246327][T22980] hub 8-0:1.0: 8 ports detected [ 897.742433][T23003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 898.718883][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5483'. [ 898.856535][T23016] loop1: detected capacity change from 0 to 512 [ 898.896854][T23016] EXT4-fs: test_dummy_encryption option not supported [ 900.301626][T23041] loop2: detected capacity change from 0 to 1024 [ 900.325923][T23041] EXT4-fs: Ignoring removed nobh option [ 900.347792][T23041] EXT4-fs: Ignoring removed bh option [ 900.366116][T23041] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 900.402234][T23041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.591566][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.784412][T23054] loop4: detected capacity change from 0 to 512 [ 900.790931][T23054] EXT4-fs: Ignoring removed i_version option [ 900.814195][T23054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.830415][T23054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.859475][T23058] loop1: detected capacity change from 0 to 512 [ 900.887420][T23058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.899995][T23058] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.008993][T23053] syzkaller0: entered promiscuous mode [ 901.014525][T23053] syzkaller0: entered allmulticast mode [ 902.461869][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.522186][T23081] loop1: detected capacity change from 0 to 1024 [ 902.553538][T23081] EXT4-fs: Ignoring removed orlov option [ 902.573575][T23081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.733368][T13525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.821094][T23088] xt_hashlimit: max too large, truncated to 1048576 [ 902.829450][T23088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.837868][T23088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.194399][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5503'. [ 903.950465][T23103] vlan2: entered allmulticast mode [ 904.396504][T23109] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5509'. [ 904.425273][T23109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5509'. [ 905.373931][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5514'. [ 906.440660][T23129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5515'. [ 907.505204][T23147] loop1: detected capacity change from 0 to 1024 [ 907.532363][T23147] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.5521: casefold flag without casefold feature [ 907.584144][T23147] EXT4-fs (loop1): get root inode failed [ 907.589875][T23147] EXT4-fs (loop1): mount failed [ 908.584873][T23161] loop2: detected capacity change from 0 to 512 [ 908.639312][T23164] syzkaller0: entered promiscuous mode [ 908.644810][T23164] syzkaller0: entered allmulticast mode [ 908.660622][T23161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.673157][T23161] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.697032][T23172] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5527'. [ 908.707088][T23172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5527'. [ 908.864803][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.958363][T23183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 909.867304][T23197] loop2: detected capacity change from 0 to 512 [ 910.005356][T23202] bridge0: port 3(syz_tun) entered blocking state [ 910.011883][T23202] bridge0: port 3(syz_tun) entered disabled state [ 910.018441][T23202] syz_tun: entered allmulticast mode [ 910.024778][T23202] syz_tun: entered promiscuous mode [ 910.435780][T23197] EXT4-fs: test_dummy_encryption option not supported [ 910.590950][T23191] veth29: entered promiscuous mode [ 910.596131][T23191] veth29: entered allmulticast mode [ 911.006548][T23214] syzkaller0: entered promiscuous mode [ 911.012156][T23214] syzkaller0: entered allmulticast mode [ 911.245161][T23231] loop2: detected capacity change from 0 to 512 [ 911.251771][T23231] EXT4-fs: Ignoring removed i_version option [ 911.309097][T23231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.322300][T23231] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.179555][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 912.518113][T23249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.527622][T23249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.543886][T23249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5550'. [ 912.627674][T23253] bridge0: port 3(syz_tun) entered blocking state [ 912.634299][T23253] bridge0: port 3(syz_tun) entered forwarding state [ 912.659266][T23253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.678308][T23253] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.699369][T23253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 913.017743][T23259] loop2: detected capacity change from 0 to 512 [ 913.033563][T23259] EXT4-fs: test_dummy_encryption option not supported [ 913.053175][T23255] veth31: entered promiscuous mode [ 913.058308][T23255] veth31: entered allmulticast mode [ 913.169112][T23263] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5554'. [ 913.178332][T23263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5554'. [ 914.123264][T23280] loop2: detected capacity change from 0 to 512 [ 914.159187][T23280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.171777][T23280] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.644337][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.818840][T23289] loop2: detected capacity change from 0 to 2048 [ 915.860798][T23289] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.069070][T23296] syzkaller0: entered promiscuous mode [ 916.074560][T23296] syzkaller0: entered allmulticast mode [ 916.682303][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 916.865694][T23309] veth3: left promiscuous mode [ 916.883244][T23309] veth7: left promiscuous mode [ 916.905177][T23309] veth9: left promiscuous mode [ 916.924484][T23309] veth11: left promiscuous mode [ 916.949819][T23309] veth13: left promiscuous mode [ 916.963404][T23309] veth17: left promiscuous mode [ 916.978229][T23309] veth19: left promiscuous mode [ 917.019087][T23309] veth21: left promiscuous mode [ 917.029444][T23309] veth23: left promiscuous mode [ 917.072462][T23307] veth19: entered promiscuous mode [ 917.077670][T23307] veth19: entered allmulticast mode [ 917.182555][T23316] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5567'. [ 917.192085][T23316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5567'. [ 917.400519][T23320] SELinux: syz.2.5568 (23320) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 919.523948][T23357] loop2: detected capacity change from 0 to 1024 [ 919.530846][T23357] EXT4-fs: Ignoring removed orlov option [ 919.593157][T23360] SELinux: syz.0.5581 (23360) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 919.707647][T23363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.728195][T23359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5575'. [ 919.737733][T23363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.758974][T23363] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5583'. [ 919.926569][T23357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.960385][T23368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.978039][T23368] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.000921][T23368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.537460][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.609988][T23384] loop4: detected capacity change from 0 to 1024 [ 920.616733][T23384] EXT4-fs: Ignoring removed orlov option [ 920.624842][T23384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.753322][T23388] loop2: detected capacity change from 0 to 512 [ 920.793966][T23388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.806794][T23388] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.020055][T14423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.235307][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.264658][T13286] ================================================================== [ 922.272766][T13286] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 922.280341][T13286] [ 922.282662][T13286] read-write to 0xffff888237d25e68 of 1 bytes by task 23400 on cpu 1: [ 922.290819][T13286] folio_add_lru+0xa5/0x1f0 [ 922.295335][T13286] shmem_get_folio_gfp+0x7ab/0xd60 [ 922.300464][T13286] shmem_fault+0xf6/0x250 [ 922.304805][T13286] __do_fault+0xb9/0x200 [ 922.309052][T13286] handle_mm_fault+0xf78/0x2be0 [ 922.313911][T13286] __get_user_pages+0x1036/0x1fb0 [ 922.318935][T13286] __mm_populate+0x243/0x3a0 [ 922.323526][T13286] vm_mmap_pgoff+0x232/0x2e0 [ 922.328119][T13286] ksys_mmap_pgoff+0xc2/0x310 [ 922.332803][T13286] x64_sys_call+0x1602/0x2fb0 [ 922.337474][T13286] do_syscall_64+0xd2/0x200 [ 922.341981][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.347871][T13286] [ 922.350197][T13286] read to 0xffff888237d25e68 of 1 bytes by task 13286 on cpu 0: [ 922.357819][T13286] __lru_add_drain_all+0x12b/0x3f0 [ 922.362935][T13286] lru_add_drain_all+0x10/0x20 [ 922.367711][T13286] invalidate_bdev+0x47/0x70 [ 922.372291][T13286] ext4_put_super+0x624/0x7d0 [ 922.376972][T13286] generic_shutdown_super+0xe3/0x210 [ 922.382254][T13286] kill_block_super+0x2a/0x70 [ 922.386932][T13286] ext4_kill_sb+0x42/0x80 [ 922.391250][T13286] deactivate_locked_super+0x75/0x1c0 [ 922.396624][T13286] deactivate_super+0x97/0xa0 [ 922.401302][T13286] cleanup_mnt+0x269/0x2e0 [ 922.405718][T13286] __cleanup_mnt+0x19/0x20 [ 922.410137][T13286] task_work_run+0x12e/0x1a0 [ 922.414724][T13286] exit_to_user_mode_loop+0xe4/0x100 [ 922.420008][T13286] do_syscall_64+0x1d6/0x200 [ 922.424591][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.430478][T13286] [ 922.432788][T13286] value changed: 0x02 -> 0x05 [ 922.437445][T13286] [ 922.439752][T13286] Reported by Kernel Concurrency Sanitizer on: [ 922.445902][T13286] CPU: 0 UID: 0 PID: 13286 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 922.458563][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 922.468610][T13286] ================================================================== [ 922.505532][T23400] veth33: entered promiscuous mode [ 922.510719][T23400] veth33: entered allmulticast mode [ 922.600841][T23405] loop2: detected capacity change from 0 to 1024 [ 922.607618][T23405] EXT4-fs: Ignoring removed nobh option [ 922.613343][T23405] EXT4-fs: Ignoring removed bh option [ 922.619248][T23405] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 922.640020][T23405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.246354][T13286] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.