last executing test programs: 1m9.355027717s ago: executing program 2 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001b400)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019140)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3, @ANYBLOB="216cd05960ffd77a126547a77f777a186cbb1267ce2001130db0d1033cb0cb4c4bbe4e18aec177b2dd782fc511e5b47695c6af82fb012634f946fef14d44752465ebd504"], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) 1m9.285139578s ago: executing program 2 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 1m9.227663889s ago: executing program 2 (id=213): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m8.962538383s ago: executing program 2 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 1m8.896900964s ago: executing program 2 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0x8}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m8.667605487s ago: executing program 2 (id=234): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") pipe2$9p(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x200, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1m8.585535659s ago: executing program 32 (id=234): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") pipe2$9p(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x200, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 55.075548428s ago: executing program 0 (id=609): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 54.301196899s ago: executing program 0 (id=628): r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) 54.035664533s ago: executing program 0 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2f}]}}}]}, 0x38}}, 0x0) 53.977596884s ago: executing program 0 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 53.862032146s ago: executing program 0 (id=638): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x1, 0xffeffc03}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f00000085c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x3516, 0x483, 0x0, 0x0, 0x0) 53.155463866s ago: executing program 0 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) 53.107028237s ago: executing program 33 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="b2", 0x5f65bd31, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) 2.566483722s ago: executing program 3 (id=1918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2.494758283s ago: executing program 3 (id=1920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 2.275938607s ago: executing program 3 (id=1934): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.162247038s ago: executing program 3 (id=1925): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 2.04038427s ago: executing program 3 (id=1927): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x8a, &(0x7f0000000400), &(0x7f0000000740)=""/138, 0x7, 0x0, 0x0, 0xf00, 0x0, &(0x7f0000000bc0)="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", 0x7, 0x0, 0x9}, 0x50) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.769641314s ago: executing program 3 (id=1928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0), 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r2) 1.072802365s ago: executing program 1 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) close(r2) 990.597266ms ago: executing program 5 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x80000001}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 986.552695ms ago: executing program 1 (id=1953): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = getpid() close(0x3) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xa) r3 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 962.159706ms ago: executing program 5 (id=1954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x391, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r1}, 0x10) 919.449467ms ago: executing program 5 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 847.568388ms ago: executing program 1 (id=1959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 646.19764ms ago: executing program 4 (id=1963): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) 620.334901ms ago: executing program 1 (id=1965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 565.332532ms ago: executing program 4 (id=1966): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 508.024153ms ago: executing program 4 (id=1967): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 441.435004ms ago: executing program 4 (id=1968): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000f51000/0x2000)=nil) shmat(r0, &(0x7f0000b2f000/0x3000)=nil, 0xffffffffffffcfff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 439.356874ms ago: executing program 6 (id=1978): r0 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="00000000000000000000ddffffffffff415b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x50) 426.853144ms ago: executing program 5 (id=1969): open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x20000000000003ae, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 328.384635ms ago: executing program 6 (id=1970): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x14, 0x0, 0x0, 0x9, 0x84404, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}, 0x2000, 0xffffffffffffffff, 0x80000000, 0x0, 0x5eba, 0x13, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 264.169216ms ago: executing program 5 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 259.289056ms ago: executing program 6 (id=1972): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 244.190876ms ago: executing program 1 (id=1973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/25]}, 0x91) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 140.904618ms ago: executing program 6 (id=1974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 140.297628ms ago: executing program 4 (id=1975): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./control\x00', 0x81) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) 90.781249ms ago: executing program 1 (id=1976): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x84, 0xfe, 0x2, 0x0, 0x0, 0x100, 0x50820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x400000000000061}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffbeffff, 0x0, 0x4080000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex_waitv(&(0x7f0000000a80)=[{0x800, &(0x7f0000000180)=0xc19, 0x82}, {0x8, &(0x7f00000001c0)=0xffffffffffff3f48, 0x82}, {0x7f, &(0x7f0000000240)=0x101, 0x2}, {0x0, &(0x7f0000000280)=0x4000000000000000, 0x82}, {0x7f, &(0x7f0000000300), 0x2}, {0x0, &(0x7f0000000340)=0x6, 0x82}, {0x9, &(0x7f0000000380)=0x6}, {0x8e, &(0x7f00000003c0)=0x3, 0x2}, {0x5, &(0x7f0000000400)=0x9, 0x2}, {0x800, &(0x7f00000004c0)=0xfffffffffffffff9, 0x82}, {0x6, 0x0, 0x82}, {0xfffffffffffffffa, &(0x7f0000000580)=0x6, 0x2}, {0x7, &(0x7f00000005c0)=0x3e9, 0x82}, {0xdf4, &(0x7f0000000600)=0x81, 0x82}, {0xd51, &(0x7f0000000640)=0x40, 0x82}, {0x5, &(0x7f0000000680)=0x4, 0x90b2cc3bb2eae862}, {0x9, &(0x7f00000006c0)=0x5, 0x2}, {0x7, &(0x7f0000000700)=0xd, 0x2}, {0xe7, &(0x7f0000000800)=0x4, 0x3}, {0x1000, &(0x7f0000000840)=0xd487, 0x80}, {0x7fff, &(0x7f0000000880)=0x401, 0x2}, {0x7, &(0x7f00000008c0)=0x1, 0x2}, {0x8, &(0x7f0000000900)=0x8, 0x2}], 0x17, 0x0, &(0x7f0000000980), 0x1) futex(&(0x7f0000000cc0)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 39.93557ms ago: executing program 5 (id=1977): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x8}, 0xc4c, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 39.44065ms ago: executing program 6 (id=1979): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x97, 0x0, 0x0, 0x0) 11.19538ms ago: executing program 6 (id=1980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x4, 0x4000105, 0x0, 0x7, 0x109]}, &(0x7f0000000400)=0x54) 0s ago: executing program 4 (id=1981): pipe(&(0x7f0000000040)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x80003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc127fce969 code=0x7ffc0000 [ 52.980816][ T29] audit: type=1326 audit(1747373843.604:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fce969 code=0x7ffc0000 [ 53.004144][ T29] audit: type=1326 audit(1747373843.604:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fce969 code=0x7ffc0000 [ 53.076221][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.219018][ T5082] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.367488][ T5094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.539937][ T5097] bridge0: entered promiscuous mode [ 53.582029][ T5097] macvlan2: entered promiscuous mode [ 53.627402][ T5097] bridge0: port 3(macvlan2) entered blocking state [ 53.634074][ T5097] bridge0: port 3(macvlan2) entered disabled state [ 53.674706][ T5103] loop4: detected capacity change from 0 to 512 [ 53.689199][ T5097] macvlan2: entered allmulticast mode [ 53.694711][ T5097] bridge0: entered allmulticast mode [ 53.704233][ T5103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.720346][ T5103] EXT4-fs (loop4): 1 truncate cleaned up [ 53.735883][ T5097] macvlan2: left allmulticast mode [ 53.741079][ T5097] bridge0: left allmulticast mode [ 53.747101][ T5103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.773389][ T5097] bridge0: left promiscuous mode [ 53.784731][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 53.907329][ T5107] loop1: detected capacity change from 0 to 512 [ 53.949143][ T5111] netlink: '+}[@': attribute type 13 has an invalid length. [ 53.949866][ T5107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.979829][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.995944][ T5107] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.619: invalid block [ 54.025757][ T5107] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.619: invalid indirect mapped block 4294967295 (level 1) [ 54.059053][ T5115] loop4: detected capacity change from 0 to 1024 [ 54.065924][ T5115] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.072512][ T5115] EXT4-fs: Ignoring removed nobh option [ 54.078199][ T5115] EXT4-fs: Ignoring removed bh option [ 54.109853][ T5107] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.619: invalid indirect mapped block 4294967295 (level 1) [ 54.110430][ T5115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.131620][ T5107] EXT4-fs (loop1): 2 truncates cleaned up [ 54.150211][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.157545][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.174706][ T5115] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.610: inode #327696: comm syz.4.610: iget: illegal inode # [ 54.189646][ T5115] EXT4-fs (loop4): Remounting filesystem read-only [ 54.196945][ T5115] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.610: cleanup dec ref error -30 [ 54.199402][ T5107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.209955][ T5115] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.610: dec ref error=-30 [ 54.263823][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.337325][ T5107] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.1.619: path /138/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 54.366239][ T5111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.383581][ T5111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.430841][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.471541][ T5111] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.480745][ T5111] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.489793][ T5111] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.498898][ T5111] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.637063][ T5149] loop4: detected capacity change from 0 to 512 [ 54.639672][ T5148] loop1: detected capacity change from 0 to 512 [ 54.657909][ T5149] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.666505][ T5149] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.672186][ T5148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.684428][ T5149] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.627: Failed to acquire dquot type 1 [ 54.750107][ T5154] loop3: detected capacity change from 0 to 512 [ 54.768652][ T5149] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.627: bg 0: block 40: padding at end of block bitmap is not set [ 54.785848][ T5154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.797898][ T5148] EXT4-fs (loop1): 1 truncate cleaned up [ 54.805343][ T5148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.818288][ T5149] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.830798][ T5154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.864933][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 54.874325][ T5149] EXT4-fs (loop4): 1 truncate cleaned up [ 54.894654][ T5149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.907311][ T5154] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.963620][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.042774][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.190501][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.200074][ T5183] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.254557][ T5190] loop4: detected capacity change from 0 to 512 [ 55.261076][ T5190] journal_path: Lookup failure for './file0' [ 55.267149][ T5190] EXT4-fs: error: could not find journal device path [ 55.284024][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 55.323321][ T5198] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.462721][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 55.596790][ T5226] loop4: detected capacity change from 0 to 164 [ 55.608036][ T5226] syz.4.660: attempt to access beyond end of device [ 55.608036][ T5226] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.638730][ T5226] syz.4.660: attempt to access beyond end of device [ 55.638730][ T5226] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.749160][ T5229] pim6reg: entered allmulticast mode [ 55.760980][ T5229] pim6reg: left allmulticast mode [ 55.920075][ T5233] SELinux: failed to load policy [ 56.185555][ T5252] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.669'. [ 56.284256][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.364305][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.371472][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.385568][ T5235] bridge_slave_0: entered allmulticast mode [ 56.392408][ T5235] bridge_slave_0: entered promiscuous mode [ 56.399475][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.406599][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.415351][ T5235] bridge_slave_1: entered allmulticast mode [ 56.424501][ T5235] bridge_slave_1: entered promiscuous mode [ 56.454028][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.466995][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.497949][ T5235] team0: Port device team_slave_0 added [ 56.516981][ T5276] loop5: detected capacity change from 0 to 256 [ 56.524482][ T5235] team0: Port device team_slave_1 added [ 56.535392][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 56.585989][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.593107][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.619105][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.640969][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.648008][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.674550][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.752831][ T5235] hsr_slave_0: entered promiscuous mode [ 56.759097][ T5235] hsr_slave_1: entered promiscuous mode [ 56.765241][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.772874][ T5235] Cannot create hsr debugfs directory [ 56.886847][ T5235] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.902788][ T5235] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.019296][ T5235] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.034798][ T5235] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.080701][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.136785][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.207735][ T5235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.218301][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.277804][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.284939][ T4472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.324493][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.331727][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.473684][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.549381][ T5328] loop4: detected capacity change from 0 to 512 [ 57.593512][ T5328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.611245][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 57.611259][ T29] audit: type=1326 audit(1747373848.254:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 57.640871][ T29] audit: type=1326 audit(1747373848.254:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 57.646309][ T5328] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.664304][ T29] audit: type=1326 audit(1747373848.254:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 57.698076][ T29] audit: type=1326 audit(1747373848.254:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 57.721546][ T29] audit: type=1326 audit(1747373848.254:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 57.789249][ T29] audit: type=1400 audit(1747373848.434:1090): avc: denied { write } for pid=5325 comm="syz.4.699" path="/127/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.858296][ T5352] netlink: 76 bytes leftover after parsing attributes in process `syz.5.706'. [ 57.912289][ T5235] veth0_vlan: entered promiscuous mode [ 57.923751][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.924039][ T5235] veth1_vlan: entered promiscuous mode [ 57.953452][ T5235] veth0_macvtap: entered promiscuous mode [ 57.969418][ T5235] veth1_macvtap: entered promiscuous mode [ 57.986605][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.000212][ T29] audit: type=1400 audit(1747373848.644:1091): avc: denied { read } for pid=5368 comm="syz.5.713" path="socket:[9799]" dev="sockfs" ino=9799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.000787][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.035287][ T5235] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.044264][ T5235] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.053049][ T5235] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.061879][ T5235] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.078225][ T5372] xt_hashlimit: size too large, truncated to 1048576 [ 58.139125][ T29] audit: type=1326 audit(1747373848.784:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 58.169590][ T5382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 58.174830][ T5383] netlink: 240 bytes leftover after parsing attributes in process `syz.5.713'. [ 58.198777][ T29] audit: type=1326 audit(1747373848.814:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 58.222436][ T29] audit: type=1326 audit(1747373848.814:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 58.406664][ T5402] loop5: detected capacity change from 0 to 128 [ 58.414082][ T5402] vfat: Unknown parameter 'õ³ò8' [ 58.463128][ T5400] SELinux: failed to load policy [ 58.600764][ T5415] loop3: detected capacity change from 0 to 2048 [ 58.623776][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.892484][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.932140][ T5441] loop3: detected capacity change from 0 to 1024 [ 58.944174][ T5445] vlan2: entered allmulticast mode [ 58.945505][ T5441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.968094][ T5441] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 58.998438][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.086571][ T5459] bridge0: port 3(gretap0) entered blocking state [ 59.093257][ T5459] bridge0: port 3(gretap0) entered disabled state [ 59.103057][ T5459] gretap0: entered allmulticast mode [ 59.108886][ T5459] gretap0: entered promiscuous mode [ 59.116239][ T5459] bridge0: port 3(gretap0) entered blocking state [ 59.122798][ T5459] bridge0: port 3(gretap0) entered forwarding state [ 59.190393][ T5468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.751'. [ 59.190727][ T5465] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 59.210877][ T5465] SELinux: failed to load policy [ 59.316200][ T5488] ref_ctr_offset mismatch. inode: 0x361 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 59.428751][ T5503] loop4: detected capacity change from 0 to 512 [ 59.484772][ T5512] bridge0: port 3(gretap0) entered blocking state [ 59.491327][ T5512] bridge0: port 3(gretap0) entered disabled state [ 59.503245][ T5503] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.527570][ T5509] SELinux: failed to load policy [ 59.532846][ T5512] gretap0: entered allmulticast mode [ 59.544021][ T5512] gretap0: entered promiscuous mode [ 59.552962][ T5512] bridge0: port 3(gretap0) entered blocking state [ 59.559591][ T5512] bridge0: port 3(gretap0) entered forwarding state [ 59.576858][ T5503] EXT4-fs (loop4): mount failed [ 59.593535][ T5517] gretap0: left allmulticast mode [ 59.598676][ T5517] gretap0: left promiscuous mode [ 59.603772][ T5517] bridge0: port 3(gretap0) entered disabled state [ 60.149661][ T5554] syzkaller0: entered promiscuous mode [ 60.155279][ T5554] syzkaller0: entered allmulticast mode [ 60.261174][ T5563] loop1: detected capacity change from 0 to 2048 [ 60.283105][ T5563] loop1: p1 < > p4 [ 60.287567][ T5563] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.409236][ T5585] netlink: 76 bytes leftover after parsing attributes in process `syz.1.803'. [ 60.547100][ T5600] loop3: detected capacity change from 0 to 1024 [ 60.569974][ T5600] EXT4-fs: Ignoring removed nobh option [ 60.575784][ T5600] EXT4-fs: Ignoring removed bh option [ 60.627368][ T5600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.924292][ T5636] loop6: detected capacity change from 0 to 1024 [ 60.955061][ T5636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.023000][ T5644] loop4: detected capacity change from 0 to 128 [ 61.040320][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.088513][ T5649] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 61.100961][ T5649] EXT4-fs (loop6): This should not happen!! Data will be lost [ 61.100961][ T5649] [ 61.110730][ T5649] EXT4-fs (loop6): Total free blocks count 0 [ 61.116802][ T5649] EXT4-fs (loop6): Free/Dirty block details [ 61.122889][ T5649] EXT4-fs (loop6): free_blocks=0 [ 61.128017][ T5649] EXT4-fs (loop6): dirty_blocks=0 [ 61.131061][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.133251][ T5649] EXT4-fs (loop6): Block reservation details [ 61.146165][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.148033][ T5649] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 61.227552][ T5235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.272584][ T5666] loop3: detected capacity change from 0 to 512 [ 61.279602][ T5666] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 61.313984][ T5672] hub 9-0:1.0: USB hub found [ 61.318669][ T5672] hub 9-0:1.0: 8 ports detected [ 61.357424][ T5678] net_ratelimit: 290 callbacks suppressed [ 61.357476][ T5678] Set syz1 is full, maxelem 65536 reached [ 61.627777][ T5704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5704 comm=syz.1.852 [ 61.667371][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 62.026591][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.040625][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.050815][ T5749] netlink: 52 bytes leftover after parsing attributes in process `syz.6.870'. [ 62.231896][ T818] IPVS: starting estimator thread 0... [ 62.321340][ T5762] IPVS: using max 2352 ests per chain, 117600 per kthread [ 62.510387][ T5768] loop6: detected capacity change from 0 to 2048 [ 62.532928][ T5768] loop6: p1 < > p4 [ 62.538099][ T5768] loop6: p4 size 8388608 extends beyond EOD, truncated [ 62.607271][ T5774] pim6reg: entered allmulticast mode [ 62.617656][ T5774] pim6reg: left allmulticast mode [ 62.650370][ T5783] netlink: 76 bytes leftover after parsing attributes in process `syz.3.886'. [ 62.685645][ T5785] loop4: detected capacity change from 0 to 512 [ 62.689675][ T5787] loop6: detected capacity change from 0 to 512 [ 62.700387][ T5787] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 62.710602][ T5785] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.726272][ T5787] EXT4-fs (loop6): 1 truncate cleaned up [ 62.735419][ T5787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.843826][ T5800] loop5: detected capacity change from 0 to 2048 [ 62.863887][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 62.863905][ T29] audit: type=1326 audit(1747373853.504:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 62.893790][ T29] audit: type=1326 audit(1747373853.504:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 62.917186][ T29] audit: type=1326 audit(1747373853.504:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 62.940702][ T29] audit: type=1326 audit(1747373853.504:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 62.964100][ T29] audit: type=1326 audit(1747373853.504:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 62.987884][ T29] audit: type=1326 audit(1747373853.504:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3bb31225 code=0x7ffc0000 [ 63.011887][ T29] audit: type=1326 audit(1747373853.514:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 63.035595][ T29] audit: type=1326 audit(1747373853.664:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 63.059071][ T29] audit: type=1326 audit(1747373853.664:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b3ba9ab39 code=0x7ffc0000 [ 63.083125][ T29] audit: type=1326 audit(1747373853.664:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 63.109618][ T5800] loop5: p1 < > p4 [ 63.125326][ T5235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.135281][ T5800] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.158806][ T5812] ip6gre1: entered allmulticast mode [ 63.195357][ T5821] netlink: 76 bytes leftover after parsing attributes in process `syz.4.901'. [ 63.317317][ T5832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5832 comm=syz.3.909 [ 63.455609][ T5848] IPv4: Oversized IP packet from 127.202.26.0 [ 63.572848][ T5857] loop4: detected capacity change from 0 to 2048 [ 63.579655][ T5857] ext4: Unknown parameter 'noacl' [ 63.640956][ T5862] bridge0: entered promiscuous mode [ 63.646391][ T5862] macvlan2: entered promiscuous mode [ 63.659560][ T5862] bridge0: port 4(macvlan2) entered blocking state [ 63.666542][ T5862] bridge0: port 4(macvlan2) entered disabled state [ 63.674447][ T5862] macvlan2: entered allmulticast mode [ 63.679869][ T5862] bridge0: entered allmulticast mode [ 63.691543][ T5862] macvlan2: left allmulticast mode [ 63.696712][ T5862] bridge0: left allmulticast mode [ 63.705082][ T5862] bridge0: left promiscuous mode [ 63.851767][ T5876] bridge0: port 4(gretap0) entered blocking state [ 63.858285][ T5876] bridge0: port 4(gretap0) entered disabled state [ 63.867166][ T5876] gretap0: entered allmulticast mode [ 63.873607][ T5876] gretap0: entered promiscuous mode [ 63.885270][ T5880] Driver unsupported XDP return value 0 on prog (id 810) dev N/A, expect packet loss! [ 63.895241][ T5876] gretap0: left allmulticast mode [ 63.895488][ T5878] loop4: detected capacity change from 0 to 1024 [ 63.900297][ T5876] gretap0: left promiscuous mode [ 63.910453][ T5878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.911898][ T5876] bridge0: port 4(gretap0) entered disabled state [ 63.966906][ T5884] loop3: detected capacity change from 0 to 2048 [ 64.013587][ T5884] loop3: p1 < > p4 [ 64.024196][ T5884] loop3: p4 size 8388608 extends beyond EOD, truncated [ 64.125691][ T5896] loop3: detected capacity change from 0 to 1024 [ 64.132585][ T5896] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.139214][ T5896] EXT4-fs: Ignoring removed nobh option [ 64.145004][ T5896] EXT4-fs: Ignoring removed bh option [ 64.162496][ T5899] hub 9-0:1.0: USB hub found [ 64.168410][ T5899] hub 9-0:1.0: 8 ports detected [ 64.298943][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.939'. [ 64.412863][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 64.561429][ T5920] bridge0: entered promiscuous mode [ 64.568816][ T5920] macvlan2: entered promiscuous mode [ 64.585959][ T5920] bridge0: port 3(macvlan2) entered blocking state [ 64.592677][ T5920] bridge0: port 3(macvlan2) entered disabled state [ 64.599661][ T5920] macvlan2: entered allmulticast mode [ 64.605286][ T5920] bridge0: entered allmulticast mode [ 64.619129][ T5920] macvlan2: left allmulticast mode [ 64.624340][ T5920] bridge0: left allmulticast mode [ 64.639811][ T5920] bridge0: left promiscuous mode [ 64.706315][ T5926] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 64.717853][ T5925] IPVS: stopping master sync thread 5926 ... [ 64.811606][ T5909] Set syz1 is full, maxelem 65536 reached [ 64.980272][ T5945] loop6: detected capacity change from 0 to 512 [ 64.993738][ T5945] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 65.002231][ T5945] EXT4-fs (loop6): orphan cleanup on readonly fs [ 65.009210][ T5945] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.956: Failed to acquire dquot type 1 [ 65.024071][ T5945] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.956: bg 0: block 40: padding at end of block bitmap is not set [ 65.048282][ T5945] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 65.058029][ T5945] EXT4-fs (loop6): 1 truncate cleaned up [ 65.133689][ T5948] SELinux: failed to load policy [ 65.185447][ T5957] loop5: detected capacity change from 0 to 164 [ 65.199325][ T5957] syz.5.962: attempt to access beyond end of device [ 65.199325][ T5957] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.215140][ T5957] syz.5.962: attempt to access beyond end of device [ 65.215140][ T5957] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 66.238303][ T5975] syzkaller0: entered promiscuous mode [ 66.243959][ T5975] syzkaller0: entered allmulticast mode [ 66.253935][ T5979] bridge0: entered promiscuous mode [ 66.259485][ T5979] macvlan0: entered promiscuous mode [ 66.278825][ T5987] loop1: detected capacity change from 0 to 1024 [ 66.281318][ T5979] bridge0: port 3(macvlan0) entered blocking state [ 66.291979][ T5979] bridge0: port 3(macvlan0) entered disabled state [ 66.299279][ T5979] macvlan0: entered allmulticast mode [ 66.299685][ T5987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.304796][ T5979] bridge0: entered allmulticast mode [ 66.317790][ T5979] macvlan0: left allmulticast mode [ 66.322992][ T5979] bridge0: left allmulticast mode [ 66.328666][ T5979] bridge0: left promiscuous mode [ 66.399115][ T5998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.976'. [ 66.435743][ T6002] bridge: RTM_NEWNEIGH with invalid ether address [ 66.896468][ T6011] xt_hashlimit: size too large, truncated to 1048576 [ 67.274928][ T6030] loop3: detected capacity change from 0 to 1024 [ 67.319586][ T6030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.529555][ T6045] bridge0: port 3(gretap0) entered blocking state [ 67.536148][ T6045] bridge0: port 3(gretap0) entered disabled state [ 67.551123][ T6045] gretap0: entered allmulticast mode [ 67.559654][ T6045] gretap0: entered promiscuous mode [ 67.565133][ T6045] bridge0: port 3(gretap0) entered blocking state [ 67.571638][ T6045] bridge0: port 3(gretap0) entered forwarding state [ 67.599098][ T6047] loop3: detected capacity change from 0 to 512 [ 67.600103][ T6042] gretap0: left allmulticast mode [ 67.610671][ T6042] gretap0: left promiscuous mode [ 67.615830][ T6042] bridge0: port 3(gretap0) entered disabled state [ 67.624024][ T6047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.685273][ T6047] EXT4-fs (loop3): 1 truncate cleaned up [ 67.748064][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 67.957616][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 67.957633][ T29] audit: type=1326 audit(2000000004.810:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 67.987676][ T29] audit: type=1326 audit(2000000004.810:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.036194][ T29] audit: type=1326 audit(2000000004.810:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.060092][ T29] audit: type=1326 audit(2000000004.810:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.083582][ T29] audit: type=1326 audit(2000000004.810:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.107305][ T29] audit: type=1326 audit(2000000004.810:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.130859][ T29] audit: type=1326 audit(2000000004.810:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.136190][ T6068] netlink: 'syz.5.1005': attribute type 10 has an invalid length. [ 68.154448][ T29] audit: type=1326 audit(2000000004.810:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.154486][ T29] audit: type=1326 audit(2000000004.870:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.154517][ T29] audit: type=1326 audit(2000000004.870:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 68.198432][ T6068] batman_adv: batadv0: Adding interface: team0 [ 68.239261][ T6068] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.264443][ T6068] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 68.315145][ T6068] netlink: 'syz.5.1005': attribute type 10 has an invalid length. [ 68.323096][ T6068] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1005'. [ 68.338767][ T6068] team0: entered promiscuous mode [ 68.343921][ T6068] team_slave_0: entered promiscuous mode [ 68.349681][ T6068] team_slave_1: entered promiscuous mode [ 68.358450][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.366111][ T6068] batman_adv: batadv0: Interface activated: team0 [ 68.373296][ T6068] batman_adv: batadv0: Interface deactivated: team0 [ 68.379995][ T6068] batman_adv: batadv0: Removing interface: team0 [ 68.390312][ T6068] bridge0: port 3(team0) entered blocking state [ 68.396695][ T6068] bridge0: port 3(team0) entered disabled state [ 68.407797][ T6068] team0: entered allmulticast mode [ 68.412987][ T6068] team_slave_0: entered allmulticast mode [ 68.418802][ T6068] team_slave_1: entered allmulticast mode [ 68.427080][ T6068] bridge0: port 3(team0) entered blocking state [ 68.433711][ T6068] bridge0: port 3(team0) entered forwarding state [ 68.540693][ T6090] netlink: 'syz.5.1014': attribute type 1 has an invalid length. [ 68.563522][ T6092] loop1: detected capacity change from 0 to 128 [ 68.579361][ T6092] vfat: Unknown parameter 'õ³ò8' [ 68.857549][ T6111] xt_hashlimit: size too large, truncated to 1048576 [ 68.944712][ T6113] loop6: detected capacity change from 0 to 512 [ 69.009543][ T6113] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.035628][ T6113] EXT4-fs (loop6): mount failed [ 69.049859][ T6122] loop5: detected capacity change from 0 to 1024 [ 69.071932][ T6124] netlink: 'syz.3.1025': attribute type 4 has an invalid length. [ 69.079708][ T6124] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1025'. [ 69.082963][ T6122] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.099178][ T6122] EXT4-fs: Ignoring removed nobh option [ 69.104811][ T6122] EXT4-fs: Ignoring removed bh option [ 69.129844][ T6126] bridge0: port 3(gretap0) entered blocking state [ 69.136514][ T6126] bridge0: port 3(gretap0) entered disabled state [ 69.138827][ T6122] EXT4-fs mount: 12 callbacks suppressed [ 69.138844][ T6122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.166945][ T6126] gretap0: entered allmulticast mode [ 69.176338][ T6126] gretap0: entered promiscuous mode [ 69.188497][ T6132] loop3: detected capacity change from 0 to 512 [ 69.199495][ T6126] bridge0: port 3(gretap0) entered blocking state [ 69.205986][ T6126] bridge0: port 3(gretap0) entered forwarding state [ 69.214304][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.291663][ T6132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.314189][ T6132] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.325480][ T6134] vhci_hcd: invalid port number 94 [ 69.330650][ T6134] vhci_hcd: default hub control req: 0017 v007f i005e l0 [ 69.482865][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.588791][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1044'. [ 69.688033][ T6181] loop4: detected capacity change from 0 to 1024 [ 69.696618][ T6181] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.705714][ T6181] EXT4-fs: Ignoring removed nobh option [ 69.711346][ T6181] EXT4-fs: Ignoring removed bh option [ 69.736083][ T6181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.742294][ T6186] netlink: 'syz.6.1051': attribute type 10 has an invalid length. [ 69.766905][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.793552][ T6186] batman_adv: batadv0: Adding interface: team0 [ 69.799847][ T6186] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.825437][ T6186] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 69.839363][ T6189] netlink: 'syz.6.1051': attribute type 10 has an invalid length. [ 69.847482][ T6189] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1051'. [ 69.857580][ T6191] sd 0:0:1:0: device reset [ 69.858551][ T6189] team0: entered promiscuous mode [ 69.867117][ T6189] team_slave_0: entered promiscuous mode [ 69.873120][ T6189] team_slave_1: entered promiscuous mode [ 69.882102][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.889209][ T6189] batman_adv: batadv0: Interface activated: team0 [ 69.895911][ T6189] batman_adv: batadv0: Interface deactivated: team0 [ 69.902554][ T6189] batman_adv: batadv0: Removing interface: team0 [ 69.916411][ T6189] bridge0: port 4(team0) entered blocking state [ 69.922836][ T6189] bridge0: port 4(team0) entered disabled state [ 69.929504][ T6189] team0: entered allmulticast mode [ 69.934691][ T6189] team_slave_0: entered allmulticast mode [ 69.940460][ T6189] team_slave_1: entered allmulticast mode [ 69.950923][ T6189] bridge0: port 4(team0) entered blocking state [ 69.957273][ T6189] bridge0: port 4(team0) entered forwarding state [ 70.008623][ T6203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.322695][ T6214] loop6: detected capacity change from 0 to 1024 [ 70.329522][ T6214] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.336814][ T6214] EXT4-fs: Ignoring removed nobh option [ 70.342482][ T6214] EXT4-fs: Ignoring removed bh option [ 70.350792][ T6217] loop5: detected capacity change from 0 to 256 [ 70.389411][ T6214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.430395][ T5235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.485219][ T6224] syzkaller1: entered promiscuous mode [ 70.490836][ T6224] syzkaller1: entered allmulticast mode [ 70.824268][ T6237] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 70.834118][ T6233] xt_hashlimit: size too large, truncated to 1048576 [ 70.834976][ T6237] batman_adv: batadv0: Adding interface: team0 [ 70.847132][ T6237] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.872467][ T6237] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 70.965996][ T6237] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 70.974191][ T6237] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1069'. [ 71.008672][ T6237] team0: entered promiscuous mode [ 71.013833][ T6237] team_slave_0: entered promiscuous mode [ 71.019607][ T6237] team_slave_1: entered promiscuous mode [ 71.033066][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.048629][ T6237] batman_adv: batadv0: Interface activated: team0 [ 71.055280][ T6237] batman_adv: batadv0: Interface deactivated: team0 [ 71.062073][ T6237] batman_adv: batadv0: Removing interface: team0 [ 71.074318][ T6237] bridge0: port 4(team0) entered blocking state [ 71.080660][ T6237] bridge0: port 4(team0) entered disabled state [ 71.095578][ T6237] team0: entered allmulticast mode [ 71.101819][ T6237] team_slave_0: entered allmulticast mode [ 71.107644][ T6237] team_slave_1: entered allmulticast mode [ 71.122851][ T6237] bridge0: port 4(team0) entered blocking state [ 71.129276][ T6237] bridge0: port 4(team0) entered forwarding state [ 71.467253][ T6282] xt_hashlimit: size too large, truncated to 1048576 [ 71.665427][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 71.728540][ T6303] loop4: detected capacity change from 0 to 512 [ 71.735569][ T6303] journal_path: Non-blockdev passed as './bus' [ 71.741997][ T6303] EXT4-fs: error: could not find journal device path [ 71.837631][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 71.847413][ T6322] IPVS: Error joining to the multicast group [ 71.884047][ T6329] xt_hashlimit: size too large, truncated to 1048576 [ 71.929016][ T6332] SELinux: Context Ü is not valid (left unmapped). [ 71.981108][ T6337] loop3: detected capacity change from 0 to 128 [ 72.121614][ T6347] ip6t_rpfilter: unknown options [ 72.226830][ T6360] bond1: entered promiscuous mode [ 72.232020][ T6360] bond1: entered allmulticast mode [ 72.237565][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.249656][ T6360] bond1 (unregistering): Released all slaves [ 72.309777][ T6377] ALSA: seq fatal error: cannot create timer (-22) [ 72.494123][ T6386] loop5: detected capacity change from 0 to 1024 [ 72.534171][ T6386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.580556][ T6386] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1131: Allocating blocks 385-513 which overlap fs metadata [ 72.630441][ T6402] EXT4-fs (loop5): pa ffff8881006c27e0: logic 16, phys. 129, len 24 [ 72.638542][ T6402] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 72.733988][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.225727][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 73.225743][ T29] audit: type=1400 audit(2000000010.080:1377): avc: denied { execute } for pid=6447 comm="syz.6.1156" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 73.270215][ T6446] vhci_hcd: invalid port number 96 [ 73.275459][ T6446] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 73.357077][ T29] audit: type=1326 audit(2000000010.210:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.380972][ T29] audit: type=1326 audit(2000000010.210:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.408857][ T6461] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1159'. [ 73.411814][ T29] audit: type=1326 audit(2000000010.210:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.418115][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 73.441414][ T29] audit: type=1326 audit(2000000010.210:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.473911][ T29] audit: type=1326 audit(2000000010.210:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.497460][ T29] audit: type=1326 audit(2000000010.210:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.521012][ T29] audit: type=1326 audit(2000000010.210:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.527493][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 73.544329][ T29] audit: type=1326 audit(2000000010.210:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.544359][ T29] audit: type=1326 audit(2000000010.210:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.6.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 73.613854][ T6460] ip6gre2: entered allmulticast mode [ 73.658025][ T6468] xt_hashlimit: size too large, truncated to 1048576 [ 73.866960][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1167'. [ 74.086692][ T6484] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1171'. [ 74.300922][ T6514] loop5: detected capacity change from 0 to 128 [ 74.430235][ T6532] tipc: Failed to remove unknown binding: 66,1,1/0:3916056546/3916056548 [ 74.447683][ T6536] loop1: detected capacity change from 0 to 128 [ 74.466588][ T6536] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.479282][ T6539] loop3: detected capacity change from 0 to 2048 [ 74.479525][ T6536] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.532761][ T6539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.545551][ T6539] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.546113][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.605244][ T6546] netlink: 'syz.1.1198': attribute type 12 has an invalid length. [ 74.670722][ T4521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:61: bg 0: block 345: padding at end of block bitmap is not set [ 74.743696][ T4521] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 197 with error 117 [ 74.756525][ T4521] EXT4-fs (loop3): This should not happen!! Data will be lost [ 74.756525][ T4521] [ 74.896106][ T6551] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.453723][ T6539] syz.3.1197 (6539) used greatest stack depth: 7032 bytes left [ 75.480910][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.732588][ T6585] loop6: detected capacity change from 0 to 8192 [ 75.781920][ T6585] loop6: p1 p2 p3 [ 75.786049][ T6585] loop6: p2 start 3506442254 is beyond EOD, truncated [ 75.793000][ T6585] loop6: p3 size 49412 extends beyond EOD, truncated [ 75.867410][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 75.877147][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 75.913786][ T6611] loop3: detected capacity change from 0 to 2048 [ 75.921455][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 75.930667][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1227'. [ 75.932926][ T6611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.939682][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 75.961491][ T6613] netlink: 'syz.6.1227': attribute type 6 has an invalid length. [ 75.998672][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.083789][ T6632] loop1: detected capacity change from 0 to 512 [ 76.090811][ T6632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.107888][ T6632] EXT4-fs (loop1): 1 truncate cleaned up [ 76.114549][ T6632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.169933][ T6637] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.257292][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.257601][ T6637] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.288385][ T6644] capability: warning: `syz.1.1238' uses 32-bit capabilities (legacy support in use) [ 76.311036][ T6637] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.364131][ T6637] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.438839][ T6637] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.452459][ T6637] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.467268][ T6637] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.479867][ T6637] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672203][ T6668] loop5: detected capacity change from 0 to 512 [ 76.679253][ T6668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.703147][ T6668] EXT4-fs (loop5): 1 truncate cleaned up [ 76.709398][ T6668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.776110][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.826532][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.836155][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.919809][ T6686] loop4: detected capacity change from 0 to 2048 [ 76.974532][ T6686] Alternate GPT is invalid, using primary GPT. [ 76.981060][ T6686] loop4: p2 p3 p7 [ 77.526200][ T6765] loop3: detected capacity change from 0 to 1024 [ 77.540881][ T6765] EXT4-fs: Ignoring removed oldalloc option [ 77.555157][ T6765] EXT4-fs: Ignoring removed orlov option [ 77.579317][ T6765] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 77.630307][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.716017][ T6765] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 77.752971][ T6765] EXT4-fs (loop3): Remounting filesystem read-only [ 77.799347][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.903658][ T10] kernel write not supported for file /564/attr/exec (pid: 10 comm: kworker/0:1) [ 78.075121][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.083383][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.121476][ T6828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.129818][ T6830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.150855][ T6830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.171934][ T6826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.180156][ T6826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.238096][ T6833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.246624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.279443][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 78.279462][ T29] audit: type=1400 audit(2000000015.130:1476): avc: denied { ioctl } for pid=6834 comm="syz.4.1297" path="socket:[15471]" dev="sockfs" ino=15471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 78.523603][ T29] audit: type=1326 audit(2000000015.380:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.547178][ T29] audit: type=1326 audit(2000000015.380:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.571158][ T29] audit: type=1326 audit(2000000015.430:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.594868][ T29] audit: type=1326 audit(2000000015.430:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.618310][ T29] audit: type=1326 audit(2000000015.430:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.642212][ T29] audit: type=1326 audit(2000000015.430:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.665701][ T29] audit: type=1326 audit(2000000015.430:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.689351][ T29] audit: type=1326 audit(2000000015.430:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.713112][ T29] audit: type=1326 audit(2000000015.530:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6851 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 78.823498][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.012708][ T6875] loop6: detected capacity change from 0 to 2048 [ 79.034122][ T6875] Alternate GPT is invalid, using primary GPT. [ 79.040619][ T6875] loop6: p2 p3 p7 [ 79.138028][ T6886] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.147269][ T6886] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.404930][ T6892] __nla_validate_parse: 7 callbacks suppressed [ 79.404945][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'. [ 79.853997][ T6929] loop3: detected capacity change from 0 to 1024 [ 79.874250][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.903362][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.969076][ T6934] loop4: detected capacity change from 0 to 2048 [ 79.985753][ T6934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.000928][ T6934] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.078378][ T6944] bridge0: port 3(team0) entered disabled state [ 80.084925][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.092137][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.114187][ T4516] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 345: padding at end of block bitmap is not set [ 80.139617][ T6944] bridge0: entered allmulticast mode [ 80.172383][ T4516] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 34 with error 117 [ 80.185468][ T4516] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.185468][ T4516] [ 80.205156][ T6945] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 50 with max blocks 2 with error 117 [ 80.217704][ T6945] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.217704][ T6945] [ 80.297625][ T6949] loop3: detected capacity change from 0 to 1024 [ 80.314378][ T6949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.346948][ T6949] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.423436][ T6949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 80.443401][ T6949] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.1342: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.457952][ T6940] bridge0: port 3(team0) entered blocking state [ 80.464351][ T6940] bridge0: port 3(team0) entered forwarding state [ 80.471049][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.478183][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.485480][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.492652][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.501280][ T6940] bridge0: entered promiscuous mode [ 80.512486][ T6949] EXT4-fs (loop3): Remounting filesystem read-only [ 80.527341][ T6949] EXT4-fs (loop3): 1 orphan inode deleted [ 80.536926][ T6949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.552277][ T6949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.603298][ T6956] loop1: detected capacity change from 0 to 2048 [ 80.653851][ T6956] Alternate GPT is invalid, using primary GPT. [ 80.660284][ T6956] loop1: p2 p3 p7 [ 80.697759][ T6961] IPVS: Error connecting to the multicast addr [ 80.783941][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 81.001980][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 81.081329][ T6934] syz.4.1338 (6934) used greatest stack depth: 6032 bytes left [ 81.096113][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.136082][ T6991] loop1: detected capacity change from 0 to 128 [ 81.273270][ T7003] loop6: detected capacity change from 0 to 1024 [ 81.300885][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.300885][ T4516] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 81.317616][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.317616][ T4516] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 81.335212][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.335212][ T4516] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 81.349258][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.349258][ T4516] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 81.363243][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.363243][ T4516] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 81.376981][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.376981][ T4516] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 81.379879][ T7003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.393376][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.393376][ T4516] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 81.416141][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.416141][ T4516] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 81.429933][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.429933][ T4516] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 81.443518][ T4516] kworker/u8:58: attempt to access beyond end of device [ 81.443518][ T4516] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 81.463156][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'. [ 81.501175][ T5235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.842864][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1381'. [ 82.181136][ T7085] loop5: detected capacity change from 0 to 1024 [ 82.214251][ T7085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.289076][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.312206][ T7096] netlink: 'syz.6.1387': attribute type 4 has an invalid length. [ 82.333668][ T7096] netlink: 'syz.6.1387': attribute type 4 has an invalid length. [ 82.385096][ T7104] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 82.528934][ T7110] bridge0: entered allmulticast mode [ 82.535207][ T7110] bridge0: entered promiscuous mode [ 82.655828][ T7130] loop1: detected capacity change from 0 to 1024 [ 82.673422][ T7130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.701304][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.724050][ T7137] loop1: detected capacity change from 0 to 256 [ 82.745507][ T7139] netlink: 'syz.5.1404': attribute type 4 has an invalid length. [ 82.788776][ T7139] netlink: 'syz.5.1404': attribute type 4 has an invalid length. [ 82.883464][ T7153] sd 0:0:1:0: device reset [ 82.889527][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 83.126730][ T7167] loop4: detected capacity change from 0 to 256 [ 83.137323][ T7168] loop1: detected capacity change from 0 to 527 [ 83.146426][ T7168] EXT4-fs (loop1): failed to parse options in superblock:  [ 83.159461][ T7168] EXT4-fs (loop1): Unsupported encryption level 4 [ 83.234277][ T7175] syzkaller1: entered promiscuous mode [ 83.239818][ T7175] syzkaller1: entered allmulticast mode [ 83.319497][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 83.319516][ T29] audit: type=1326 audit(2000000020.170:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.6.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 83.349375][ T29] audit: type=1326 audit(2000000020.170:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.6.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 83.385161][ T29] audit: type=1326 audit(2000000020.230:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.6.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 83.408588][ T29] audit: type=1326 audit(2000000020.230:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.6.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 83.432193][ T29] audit: type=1326 audit(2000000020.230:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.6.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c81e969 code=0x7ffc0000 [ 83.477727][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 83.511230][ T7182] pim6reg1: entered promiscuous mode [ 83.516669][ T7182] pim6reg1: entered allmulticast mode [ 83.579533][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 83.619499][ T7193] net_ratelimit: 6 callbacks suppressed [ 83.619513][ T7193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.633603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.966801][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'. [ 84.021522][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.021937][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.079286][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.158818][ T7222] loop3: detected capacity change from 0 to 527 [ 84.199985][ T7222] EXT4-fs (loop3): failed to parse options in superblock:  [ 84.212913][ T7222] EXT4-fs (loop3): Unsupported encryption level 4 [ 84.321432][ T7229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.380488][ T7229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.459544][ T7229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.532918][ T7229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.600030][ T7229] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.612115][ T7229] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.626487][ T7229] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.638617][ T7229] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.815850][ T7237] vlan0: entered allmulticast mode [ 84.821905][ T7237] bond0: entered allmulticast mode [ 84.827054][ T7237] bond_slave_0: entered allmulticast mode [ 84.832852][ T7237] bond_slave_1: entered allmulticast mode [ 84.907861][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 84.935763][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 84.946621][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 84.964313][ T7249] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1454'. [ 85.063005][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.132479][ T29] audit: type=1400 audit(2000000021.980:1612): avc: denied { connect } for pid=7267 comm="syz.5.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.152588][ T29] audit: type=1400 audit(2000000021.980:1613): avc: denied { write } for pid=7267 comm="syz.5.1464" path="socket:[18548]" dev="sockfs" ino=18548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.221570][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.255920][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 85.345684][ T7293] ip6t_rpfilter: unknown options [ 85.360136][ T7295] vlan0: entered allmulticast mode [ 85.365330][ T7295] bond0: entered allmulticast mode [ 85.370586][ T7295] bond_slave_0: entered allmulticast mode [ 85.376369][ T7295] bond_slave_1: entered allmulticast mode [ 85.607982][ T29] audit: type=1326 audit(2000000022.460:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 85.632201][ T29] audit: type=1326 audit(2000000022.460:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 85.655771][ T29] audit: type=1326 audit(2000000022.460:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 85.761054][ T7324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.769636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.101478][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.370381][ T7341] vlan0: entered allmulticast mode [ 86.375631][ T7341] bond0: entered allmulticast mode [ 86.380771][ T7341] bond_slave_0: entered allmulticast mode [ 86.382139][ T7339] ip6t_rpfilter: unknown options [ 86.386986][ T7341] bond_slave_1: entered allmulticast mode [ 86.458153][ T7346] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 86.469772][ T7345] IPVS: stopping master sync thread 7346 ... [ 86.533857][ T7352] loop3: detected capacity change from 0 to 512 [ 86.542009][ T7352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.554031][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 86.564728][ T7352] EXT4-fs (loop3): 1 truncate cleaned up [ 86.570873][ T7352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.586144][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 86.599863][ T7358] syzkaller1: entered promiscuous mode [ 86.605565][ T7358] syzkaller1: entered allmulticast mode [ 86.620073][ T7354] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1501'. [ 86.642557][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.686050][ T7360] vhci_hcd: invalid port number 96 [ 86.691267][ T7360] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 86.760770][ T7378] vlan0: entered allmulticast mode [ 86.766041][ T7378] bond0: entered allmulticast mode [ 86.771241][ T7378] bond_slave_0: entered allmulticast mode [ 86.777121][ T7378] bond_slave_1: entered allmulticast mode [ 86.784550][ T7380] ip6t_rpfilter: unknown options [ 86.832069][ T7395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 86.832885][ T7390] IPVS: stopping master sync thread 7395 ... [ 86.984807][ T7415] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1517'. [ 87.211511][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.213100][ T7448] vlan0: entered allmulticast mode [ 87.224931][ T7448] bond0: entered allmulticast mode [ 87.230251][ T7448] bond_slave_0: entered allmulticast mode [ 87.236240][ T7448] bond_slave_1: entered allmulticast mode [ 87.327859][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 87.645395][ T7497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.476806][ T7577] tipc: Started in network mode [ 88.481911][ T7577] tipc: Node identity ac14140f, cluster identity 4711 [ 88.489041][ T7577] tipc: New replicast peer: 255.255.255.255 [ 88.495368][ T7577] tipc: Enabled bearer , priority 10 [ 88.508353][ T7579] bond2: entered promiscuous mode [ 88.513579][ T7579] bond2: entered allmulticast mode [ 88.519015][ T7579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.529113][ T7579] bond2 (unregistering): Released all slaves [ 88.701418][ T3390] net_ratelimit: 18 callbacks suppressed [ 88.701450][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.725321][ T7585] loop4: detected capacity change from 0 to 128 [ 88.743548][ T7585] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.755968][ T7585] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.821428][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 88.821447][ T29] audit: type=1326 audit(2000000025.660:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.851285][ T29] audit: type=1326 audit(2000000025.660:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.874778][ T29] audit: type=1326 audit(2000000025.660:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.898346][ T29] audit: type=1326 audit(2000000025.660:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.922081][ T29] audit: type=1326 audit(2000000025.660:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.946357][ T29] audit: type=1326 audit(2000000025.660:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.970212][ T29] audit: type=1326 audit(2000000025.660:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 88.994051][ T29] audit: type=1326 audit(2000000025.660:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 89.017628][ T29] audit: type=1326 audit(2000000025.660:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 89.041404][ T29] audit: type=1326 audit(2000000025.660:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.5.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e852e969 code=0x7ffc0000 [ 89.143306][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.309390][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.324221][ T7614] ip6gre1: entered allmulticast mode [ 89.373443][ T7622] loop4: detected capacity change from 0 to 512 [ 89.407361][ T7622] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1564: Failed to acquire dquot type 1 [ 89.452015][ T7622] EXT4-fs (loop4): 1 truncate cleaned up [ 89.458273][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.472711][ T7622] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.544063][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.631365][ T3392] tipc: Node number set to 2886997007 [ 89.701474][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.731778][ T7633] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.333398][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.350370][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.351670][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.731774][ T7785] __nla_validate_parse: 2 callbacks suppressed [ 90.731792][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 90.747126][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1583'. [ 90.756230][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 90.844814][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1583'. [ 90.854061][ T7785] netlink: 'syz.4.1583': attribute type 6 has an invalid length. [ 90.885071][ T7796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.076680][ T7802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.134548][ T7808] loop1: detected capacity change from 0 to 2048 [ 91.172873][ T7808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.186569][ T7802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.209526][ T7808] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.255328][ T7802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.301312][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.323861][ T7802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.382829][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.408334][ T7802] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.420340][ T7802] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.432612][ T4521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:61: bg 0: block 345: padding at end of block bitmap is not set [ 91.444577][ T7802] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477647][ T7802] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489889][ T4521] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 237 with error 117 [ 91.502637][ T4521] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.502637][ T4521] [ 91.536352][ T7821] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 253 with max blocks 2 with error 117 [ 91.549340][ T7821] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.549340][ T7821] [ 91.655009][ T7831] loop6: detected capacity change from 0 to 512 [ 91.664369][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.673333][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.713048][ T7831] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1601: Failed to acquire dquot type 1 [ 91.745335][ T7831] EXT4-fs (loop6): 1 truncate cleaned up [ 91.759867][ T7831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.805430][ T7831] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.860845][ T5235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.057675][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.318736][ T7901] loop3: detected capacity change from 0 to 512 [ 92.336168][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 92.365076][ T7901] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.404456][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 92.416730][ T7911] loop4: detected capacity change from 0 to 512 [ 92.423236][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.431983][ T7911] EXT4-fs: Ignoring removed orlov option [ 92.441717][ T7911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.467565][ T7911] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.477894][ T7911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1610: bg 0: block 248: padding at end of block bitmap is not set [ 92.517233][ T7911] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1610: Failed to acquire dquot type 1 [ 92.541828][ T7911] EXT4-fs (loop4): 1 truncate cleaned up [ 92.548665][ T7911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.567505][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 92.582270][ T7911] EXT4-fs: Ignoring removed orlov option [ 92.588374][ T7911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.597229][ T7911] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 92.635186][ T7911] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.1610: Abort forced by user [ 92.659216][ T7911] EXT4-fs (loop4): Remounting filesystem read-only [ 92.666284][ T7911] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 92.676461][ T7911] ext4 filesystem being remounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.719995][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.855482][ T7960] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1621'. [ 92.910552][ T7970] loop5: detected capacity change from 0 to 1024 [ 92.948492][ T7970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.044666][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.216866][ T8022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.348412][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 93.360921][ T8038] loop3: detected capacity change from 0 to 512 [ 93.367427][ T8039] loop1: detected capacity change from 0 to 4096 [ 93.367669][ T8038] EXT4-fs: Ignoring removed orlov option [ 93.380107][ T8038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.381823][ T8039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.399872][ T8038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.409336][ T8038] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1640: bg 0: block 248: padding at end of block bitmap is not set [ 93.425360][ T8038] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1640: Failed to acquire dquot type 1 [ 93.437227][ T8038] EXT4-fs (loop3): 1 truncate cleaned up [ 93.444011][ T8038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.461383][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.473114][ T8038] EXT4-fs: Ignoring removed orlov option [ 93.478920][ T8038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.489110][ T8038] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 93.490035][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.511525][ T8038] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.1640: Abort forced by user [ 93.522413][ T8038] EXT4-fs (loop3): Remounting filesystem read-only [ 93.529875][ T8038] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 93.538948][ T8038] ext4 filesystem being remounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.567406][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.576670][ T8048] loop1: detected capacity change from 0 to 1024 [ 93.593007][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.676201][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.698724][ T8060] netlink: 1168 bytes leftover after parsing attributes in process `syz.1.1649'. [ 93.874524][ T8075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.882786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.936764][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.945043][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.955979][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.964295][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.972622][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.980786][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.989129][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.997352][ T8081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.050913][ T8088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.080972][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 94.080990][ T29] audit: type=1400 audit(2000000030.930:1821): avc: denied { write } for pid=8093 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.132410][ T29] audit: type=1400 audit(2000000030.990:1822): avc: denied { create } for pid=8099 comm="syz.1.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.179644][ T29] audit: type=1400 audit(2000000031.020:1823): avc: denied { validate_trans } for pid=8099 comm="syz.1.1664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.262243][ T29] audit: type=1400 audit(2000000031.100:1824): avc: denied { read write } for pid=8114 comm="syz.6.1666" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.286504][ T29] audit: type=1400 audit(2000000031.100:1825): avc: denied { open } for pid=8114 comm="syz.6.1666" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.382820][ T8128] loop6: detected capacity change from 0 to 2048 [ 94.393525][ T29] audit: type=1400 audit(2000000031.250:1826): avc: denied { block_suspend } for pid=8132 comm="syz.3.1675" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.433968][ T29] audit: type=1326 audit(2000000031.290:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d819e969 code=0x7ffc0000 [ 94.457473][ T29] audit: type=1326 audit(2000000031.290:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d819e969 code=0x7ffc0000 [ 94.485626][ T29] audit: type=1326 audit(2000000031.290:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d819e969 code=0x7ffc0000 [ 94.509188][ T29] audit: type=1326 audit(2000000031.290:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8136 comm="syz.1.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d819e969 code=0x7ffc0000 [ 94.535577][ T8128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.548004][ T8128] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.661706][ T8157] loop3: detected capacity change from 0 to 512 [ 94.701831][ T8157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.748833][ T8157] EXT4-fs (loop3): 1 truncate cleaned up [ 94.757824][ T8157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.827864][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.886917][ T4471] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 345: padding at end of block bitmap is not set [ 94.956385][ T4471] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 988 with error 117 [ 94.969194][ T4471] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.969194][ T4471] [ 95.029333][ T8199] loop3: detected capacity change from 0 to 1024 [ 95.052496][ T8202] loop5: detected capacity change from 0 to 128 [ 95.074424][ T8199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.086794][ T8202] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 95.123826][ T4516] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 95.134639][ T4521] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1004 with max blocks 1 with error 28 [ 95.147245][ T4521] EXT4-fs (loop6): This should not happen!! Data will be lost [ 95.147245][ T4521] [ 95.156998][ T4521] EXT4-fs (loop6): Total free blocks count 0 [ 95.163128][ T4521] EXT4-fs (loop6): Free/Dirty block details [ 95.169061][ T4521] EXT4-fs (loop6): free_blocks=0 [ 95.174266][ T4521] EXT4-fs (loop6): dirty_blocks=16 [ 95.179541][ T4521] EXT4-fs (loop6): Block reservation details [ 95.195082][ T8202] bio_check_eod: 53 callbacks suppressed [ 95.195096][ T8202] syz.5.1691: attempt to access beyond end of device [ 95.195096][ T8202] loop5: rw=2049, sector=129, nr_sectors = 13 limit=128 [ 95.243610][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.271662][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 95.320735][ T4521] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 95.394083][ T8226] netlink: 1168 bytes leftover after parsing attributes in process `syz.5.1694'. [ 96.143948][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1699'. [ 96.282985][ T8311] loop6: detected capacity change from 0 to 512 [ 96.302999][ T8311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.315714][ T8311] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.346721][ T5235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.509852][ T8327] random: crng reseeded on system resumption [ 96.516337][ T8326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8326 comm=syz.4.1715 [ 96.806614][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 96.848305][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.855498][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.862887][ T8340] bridge_slave_0: entered allmulticast mode [ 96.869259][ T8340] bridge_slave_0: entered promiscuous mode [ 96.876110][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.883218][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.890511][ T8340] bridge_slave_1: entered allmulticast mode [ 96.897477][ T8340] bridge_slave_1: entered promiscuous mode [ 96.915618][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.926335][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.945923][ T8340] team0: Port device team_slave_0 added [ 96.953622][ T8340] team0: Port device team_slave_1 added [ 96.969061][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.976067][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.003000][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.014710][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.021851][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.047968][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.075667][ T8340] hsr_slave_0: entered promiscuous mode [ 97.081854][ T8340] hsr_slave_1: entered promiscuous mode [ 97.087695][ T8340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.095287][ T8340] Cannot create hsr debugfs directory [ 97.151587][ T8340] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.192732][ T8340] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.232727][ T8340] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.292718][ T8340] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.366967][ T8340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.378512][ T8340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.387692][ T8340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.396577][ T8340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.432194][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.450931][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.463581][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.470741][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.486160][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.493326][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.525704][ T8362] SELinux: failed to load policy [ 97.547811][ T8340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.792283][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.000095][ T8340] veth0_vlan: entered promiscuous mode [ 98.009801][ T8340] veth1_vlan: entered promiscuous mode [ 98.025412][ T8340] veth0_macvtap: entered promiscuous mode [ 98.033206][ T8340] veth1_macvtap: entered promiscuous mode [ 98.053671][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.070396][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.089537][ T8340] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.098426][ T8340] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.107346][ T8340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.116069][ T8340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.230376][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 98.232336][ T8440] netlink: 1168 bytes leftover after parsing attributes in process `syz.6.1729'. [ 98.277671][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.285224][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.293570][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.301045][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.361124][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 98.430927][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.438316][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.445959][ T8365] bridge_slave_0: entered allmulticast mode [ 98.452695][ T8365] bridge_slave_0: entered promiscuous mode [ 98.467256][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.474478][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.482493][ T8365] bridge_slave_1: entered allmulticast mode [ 98.502390][ T8365] bridge_slave_1: entered promiscuous mode [ 98.546628][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.561127][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.596325][ T8365] team0: Port device team_slave_0 added [ 98.611861][ T8365] team0: Port device team_slave_1 added [ 98.633144][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.640145][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.666205][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.680609][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.687667][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.713756][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.762966][ T8365] hsr_slave_0: entered promiscuous mode [ 98.769340][ T8365] hsr_slave_1: entered promiscuous mode [ 98.775475][ T8365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.784383][ T8365] Cannot create hsr debugfs directory [ 99.149260][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1740'. [ 99.150587][ T8365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.172361][ T8365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.181849][ T8365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.190760][ T8365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.206614][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.213762][ T8365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.221209][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.228279][ T8365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.231231][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 99.231309][ T29] audit: type=1400 audit(2000000036.070:1874): avc: denied { mount } for pid=8545 comm="syz.4.1741" name="/" dev="configfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.258864][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.264280][ T29] audit: type=1400 audit(2000000036.070:1875): avc: denied { search } for pid=8545 comm="syz.4.1741" name="/" dev="configfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.264315][ T29] audit: type=1400 audit(2000000036.070:1876): avc: denied { mounton } for pid=8545 comm="syz.4.1741" path="/" dev="configfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.281746][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.293679][ T29] audit: type=1400 audit(2000000036.120:1877): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.343070][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.351156][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.368298][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.375404][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.387128][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.394273][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.480195][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.491881][ T8556] netlink: 'syz.4.1744': attribute type 2 has an invalid length. [ 99.499649][ T8556] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 99.507433][ T8556] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1744'. [ 99.591993][ T8365] veth0_vlan: entered promiscuous mode [ 99.598970][ T29] audit: type=1400 audit(2000000036.440:1878): avc: denied { ioctl } for pid=8567 comm="syz.4.1747" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.627022][ T8365] veth1_vlan: entered promiscuous mode [ 99.651437][ T29] audit: type=1326 audit(2000000036.490:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8571 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 99.674999][ T29] audit: type=1326 audit(2000000036.490:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8571 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 99.698621][ T29] audit: type=1326 audit(2000000036.490:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8571 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 99.705874][ T8365] veth0_macvtap: entered promiscuous mode [ 99.722137][ T29] audit: type=1326 audit(2000000036.490:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8571 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 99.751351][ T29] audit: type=1326 audit(2000000036.490:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8571 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b3bafe969 code=0x7ffc0000 [ 99.779327][ T8365] veth1_macvtap: entered promiscuous mode [ 99.790868][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.816767][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.828563][ T8365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.837554][ T8365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.846597][ T8365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.855616][ T8365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.862812][ T818] net_ratelimit: 124 callbacks suppressed [ 99.862830][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.032160][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1757'. [ 100.240482][ T8642] netlink: 'syz.6.1765': attribute type 10 has an invalid length. [ 100.249358][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1765'. [ 100.362167][ T8642] team0: Port device geneve1 added [ 100.431667][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.463307][ T8670] loop6: detected capacity change from 0 to 512 [ 100.479859][ T8670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.500033][ T8670] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.548457][ T8340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.590767][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1771'. [ 100.636869][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1772'. [ 100.786043][ T8707] netlink: 1168 bytes leftover after parsing attributes in process `syz.4.1776'. [ 100.819049][ T818] IPVS: starting estimator thread 0... [ 100.827778][ T8703] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 100.901321][ T3456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.911266][ T8712] IPVS: using max 2064 ests per chain, 103200 per kthread [ 101.198046][ T8759] loop3: detected capacity change from 0 to 512 [ 101.213530][ T8759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.228221][ T8759] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.268922][ T8759] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 101.278908][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'. [ 101.285748][ T8759] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 101.298710][ T8759] EXT4-fs (loop3): 1 truncate cleaned up [ 101.305233][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.343086][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1786'. [ 101.354443][ T8759] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.375040][ T8779] random: crng reseeded on system resumption [ 101.400883][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.461883][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.881427][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1794'. [ 101.941435][ T3456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.019715][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 102.217603][ T8842] loop4: detected capacity change from 0 to 512 [ 102.233118][ T8842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.262680][ T8842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.277204][ T8842] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.309044][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.363594][ T8862] loop4: detected capacity change from 0 to 1024 [ 102.367723][ T8866] netlink: 1168 bytes leftover after parsing attributes in process `syz.3.1808'. [ 102.373722][ T8862] EXT4-fs: Ignoring removed oldalloc option [ 102.391388][ T8862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.417917][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1811'. [ 102.439311][ T8862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.479047][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.528869][ T8890] syzkaller1: entered promiscuous mode [ 102.534503][ T8890] syzkaller1: entered allmulticast mode [ 102.556127][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 102.565605][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.573145][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.583758][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.591406][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.842322][ T8942] netlink: 'syz.5.1834': attribute type 10 has an invalid length. [ 102.854479][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1834'. [ 102.981682][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.007237][ T8942] geneve1: entered promiscuous mode [ 103.014972][ T8942] geneve1: entered allmulticast mode [ 103.028520][ T8942] team0: Port device geneve1 added [ 103.130019][ T8977] loop5: detected capacity change from 0 to 512 [ 103.143467][ T8977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.164122][ T8977] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.227602][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.346930][ T8989] loop3: detected capacity change from 0 to 512 [ 103.359167][ T8989] EXT4-fs: Ignoring removed orlov option [ 103.373762][ T8989] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 103.399252][ T8989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 103.419904][ T8989] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1828: corrupted in-inode xattr: e_value size too large [ 103.459048][ T8989] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1828: couldn't read orphan inode 15 (err -117) [ 103.482772][ T8989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.555019][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.634242][ T9002] loop5: detected capacity change from 0 to 512 [ 103.649513][ T9002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.697172][ T9004] loop3: detected capacity change from 0 to 8192 [ 103.703655][ T9002] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.714578][ T9002] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 103.723273][ T9002] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 103.740104][ T9002] EXT4-fs (loop5): 1 truncate cleaned up [ 103.746342][ T9002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.759526][ T9004] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.787773][ T9007] loop6: detected capacity change from 0 to 512 [ 103.799401][ T9002] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.807194][ T9007] EXT4-fs: Ignoring removed orlov option [ 103.813622][ T9007] EXT4-fs: inline encryption not supported [ 103.834741][ T9007] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.1837: corrupted in-inode xattr: invalid ea_ino [ 103.865170][ T9007] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1837: couldn't read orphan inode 15 (err -117) [ 103.882203][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.901794][ T9007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.934487][ T9007] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1837: bg 0: block 411: padding at end of block bitmap is not set [ 103.993659][ T9007] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.016433][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'. [ 104.023449][ T9007] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1837: invalid indirect mapped block 234881024 (level 0) [ 104.027142][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.115763][ T8340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.305459][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'. [ 104.352464][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 104.352539][ T29] audit: type=1326 audit(2000000041.210:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.414485][ T29] audit: type=1326 audit(2000000041.210:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.438233][ T29] audit: type=1326 audit(2000000041.210:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.461815][ T29] audit: type=1326 audit(2000000041.210:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.485381][ T29] audit: type=1326 audit(2000000041.210:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.508864][ T29] audit: type=1326 audit(2000000041.210:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.530173][ T1067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.532261][ T29] audit: type=1326 audit(2000000041.210:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.532290][ T29] audit: type=1326 audit(2000000041.210:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.587356][ T29] audit: type=1326 audit(2000000041.210:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.610906][ T29] audit: type=1326 audit(2000000041.210:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae08b9e969 code=0x7ffc0000 [ 104.613158][ T9071] loop6: detected capacity change from 0 to 8192 [ 104.652234][ T9071] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.061972][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.352823][ T9113] loop4: detected capacity change from 0 to 8192 [ 105.377843][ T9113] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.426518][ T9139] batadv0: entered allmulticast mode [ 105.433520][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.442447][ T9139] bridge0: port 3(batadv0) entered blocking state [ 105.448930][ T9139] bridge0: port 3(batadv0) entered disabled state [ 105.449004][ T9138] loop5: detected capacity change from 0 to 512 [ 105.458317][ T9139] batadv0: entered promiscuous mode [ 105.467485][ T9139] bridge0: port 3(batadv0) entered blocking state [ 105.473981][ T9139] bridge0: port 3(batadv0) entered forwarding state [ 105.482887][ T9138] EXT4-fs: Ignoring removed orlov option [ 105.497379][ T9138] EXT4-fs: inline encryption not supported [ 105.513653][ T9138] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.1891: corrupted in-inode xattr: invalid ea_ino [ 105.574699][ T9146] tipc: Started in network mode [ 105.579705][ T9146] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.586776][ T9146] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 105.593675][ T9146] tipc: Enabled bearer , priority 10 [ 105.614040][ T9138] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1891: couldn't read orphan inode 15 (err -117) [ 105.627073][ T9138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.637158][ T9146] tipc: Disabling bearer [ 105.642828][ T9138] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1891: bg 0: block 411: padding at end of block bitmap is not set [ 105.660943][ T9138] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 105.670815][ T9138] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1891: invalid indirect mapped block 234881024 (level 0) [ 105.703653][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.932149][ T4471] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 105.941591][ T4471] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 105.974088][ T9172] loop4: detected capacity change from 0 to 512 [ 105.983256][ T9172] EXT4-fs: Ignoring removed orlov option [ 105.989103][ T9172] EXT4-fs: inline encryption not supported [ 106.044217][ T9172] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.1905: corrupted in-inode xattr: invalid ea_ino [ 106.088693][ T9172] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1905: couldn't read orphan inode 15 (err -117) [ 106.101720][ T9172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.103475][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.134705][ T9172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1905: bg 0: block 411: padding at end of block bitmap is not set [ 106.217251][ T9172] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 106.227424][ T9172] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1905: invalid indirect mapped block 234881024 (level 0) [ 106.334815][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.380078][ T9196] __nla_validate_parse: 7 callbacks suppressed [ 106.380099][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1916'. [ 106.542589][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1920'. [ 106.690357][ T9213] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.748397][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 106.788052][ T9213] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.801922][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'. [ 106.853022][ T9213] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.867016][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 106.922703][ T9213] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.997341][ T9213] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.044788][ T9213] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.095007][ T9213] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.113949][ T9213] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.175718][ T3456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.541509][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.597504][ T9263] tipc: Started in network mode [ 107.602507][ T9263] tipc: Node identity ac14140f, cluster identity 4711 [ 107.634054][ T9263] tipc: New replicast peer: 255.255.255.255 [ 107.640187][ T9263] tipc: Enabled bearer , priority 10 [ 108.089242][ T3390] kernel read not supported for file inotify (pid: 3390 comm: kworker/0:4) [ 108.126947][ T9341] loop5: detected capacity change from 0 to 1024 [ 108.133790][ T9341] EXT4-fs: Ignoring removed bh option [ 108.139453][ T9341] EXT4-fs: inline encryption not supported [ 108.173317][ T9345] loop6: detected capacity change from 0 to 512 [ 108.181318][ T3456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.190786][ T9341] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.210413][ T9356] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 108.214348][ T9345] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1958: invalid indirect mapped block 256 (level 2) [ 108.253588][ T9345] EXT4-fs (loop6): 2 truncates cleaned up [ 108.259893][ T9345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.259949][ T9341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 108.261061][ T9341] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.1957: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.298464][ T9345] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1958: bg 0: block 5: invalid block bitmap [ 108.331311][ T9341] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.1957: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.346157][ T9341] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1957: Failed to acquire dquot type 0 [ 108.369183][ T9341] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 108.379898][ T8340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.389232][ T9341] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #11: comm syz.5.1957: mark_inode_dirty error [ 108.402995][ T9341] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 108.413926][ T9341] EXT4-fs (loop5): 1 orphan inode deleted [ 108.437684][ T9341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.450645][ T4486] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.466788][ T4486] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 0 [ 108.500879][ T9341] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.516292][ T9382] dummy0: entered promiscuous mode [ 108.524866][ T9382] macsec1: entered allmulticast mode [ 108.530184][ T9382] dummy0: entered allmulticast mode [ 108.566460][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.763456][ T3389] tipc: Node number set to 2886997007 [ 108.832394][ T9416] SELinux: failed to load policy [ 108.872263][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1974'. [ 108.893907][ T9430] loop4: detected capacity change from 0 to 512 [ 108.921975][ T9430] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1975: invalid indirect mapped block 256 (level 2) [ 108.942491][ T9430] EXT4-fs (loop4): 2 truncates cleaned up [ 108.948872][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.968470][ T9430] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1975: bg 0: block 5: invalid block bitmap [ 109.004606][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.056612][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.065901][ T9455] loop5: detected capacity change from 0 to 764 [ 109.075492][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.083406][ T9452] ================================================================== [ 109.091516][ T9452] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 109.099266][ T9452] [ 109.101593][ T9452] write to 0xffffffff86a1d408 of 8 bytes by task 9455 on cpu 1: [ 109.109241][ T9452] console_flush_all+0x35a/0x730 [ 109.114283][ T9452] console_unlock+0xa1/0x330 [ 109.118883][ T9452] vprintk_emit+0x388/0x650 [ 109.123396][ T9452] vprintk_default+0x26/0x30 [ 109.127996][ T9452] vprintk+0x1d/0x30 [ 109.131915][ T9452] _printk+0x79/0xa0 [ 109.135950][ T9452] isofs_fill_super+0x125e/0x1280 [ 109.141011][ T9452] get_tree_bdev_flags+0x291/0x300 [ 109.146144][ T9452] get_tree_bdev+0x1f/0x30 [ 109.150662][ T9452] isofs_get_tree+0x1c/0x30 [ 109.155279][ T9452] vfs_get_tree+0x54/0x1d0 [ 109.159709][ T9452] do_new_mount+0x207/0x680 [ 109.164242][ T9452] path_mount+0x4a4/0xb20 [ 109.168602][ T9452] __se_sys_mount+0x28f/0x2e0 [ 109.173338][ T9452] __x64_sys_mount+0x67/0x80 [ 109.178000][ T9452] x64_sys_call+0xd36/0x2fb0 [ 109.182606][ T9452] do_syscall_64+0xd0/0x1a0 [ 109.187153][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.193318][ T9452] [ 109.195649][ T9452] read to 0xffffffff86a1d408 of 8 bytes by task 9452 on cpu 0: [ 109.203194][ T9452] console_flush_all+0x563/0x730 [ 109.208146][ T9452] console_unlock+0xa1/0x330 [ 109.212747][ T9452] vprintk_emit+0x388/0x650 [ 109.217261][ T9452] dev_vprintk_emit+0x242/0x2a0 [ 109.222120][ T9452] dev_printk_emit+0x84/0xb0 [ 109.226722][ T9452] __dev_printk+0xf3/0x110 [ 109.231154][ T9452] _dev_err+0x9b/0xd0 [ 109.235148][ T9452] raw_ioctl+0x1ad7/0x1dc0 [ 109.239581][ T9452] __se_sys_ioctl+0xcb/0x140 [ 109.244179][ T9452] __x64_sys_ioctl+0x43/0x50 [ 109.248779][ T9452] x64_sys_call+0x19a8/0x2fb0 [ 109.253469][ T9452] do_syscall_64+0xd0/0x1a0 [ 109.257985][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.263893][ T9452] [ 109.266218][ T9452] value changed: 0x0000000000000d6d -> 0x0000000000000d6e [ 109.273326][ T9452] [ 109.275648][ T9452] Reported by Kernel Concurrency Sanitizer on: [ 109.281814][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.4.1981 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 109.294239][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.304302][ T9452] ================================================================== [ 109.322505][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.330939][ T9458] loop6: detected capacity change from 0 to 512 [ 109.341143][ T9458] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1980: bg 0: block 5: invalid block bitmap [ 109.359320][ T9458] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.369119][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 109.369130][ T29] audit: type=1400 audit(2000000046.220:2161): avc: denied { unmount } for pid=4027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 109.369613][ T9458] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1980: invalid indirect mapped block 3 (level 2) [ 109.409930][ T9458] EXT4-fs (loop6): 2 truncates cleaned up [ 109.416369][ T9458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.457521][ T8340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.341525][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.591434][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.381423][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.711832][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.422140][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.461458][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.502042][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.741404][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.542504][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.581838][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.621434][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.781585][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.661488][ T818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog