last executing test programs: 1m24.678857708s ago: executing program 2 (id=4256): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x5, 0x5, 0x7}]}}]}, 0x98}}, 0x0) 1m24.660347989s ago: executing program 2 (id=4259): r0 = io_uring_setup(0x150, &(0x7f0000000a40)={0x0, 0x46a0, 0x40, 0x7, 0x248}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_flags_allowed={0x2, 0xa}, @ioring_restriction_register_op={0x0, 0x1d}, @ioring_restriction_register_op={0x0, 0x4}, @ioring_restriction_sqe_flags_allowed={0x2, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_op={0x1, 0x9}, @ioring_restriction_sqe_flags_allowed={0x2, 0x22}], 0x56) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 1m24.636237941s ago: executing program 2 (id=4261): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}, 0x40c0) 1m24.593908774s ago: executing program 2 (id=4266): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1m24.539010299s ago: executing program 2 (id=4269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1m24.02154152s ago: executing program 2 (id=4288): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) 1m24.011686031s ago: executing program 32 (id=4288): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) 21.877496475s ago: executing program 5 (id=7271): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) listxattr(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 21.788669332s ago: executing program 5 (id=7268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 21.724313597s ago: executing program 5 (id=7274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 21.678418461s ago: executing program 5 (id=7277): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 21.550660011s ago: executing program 5 (id=7285): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xec) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 21.263729924s ago: executing program 5 (id=7299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 21.263582735s ago: executing program 33 (id=7299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 662.976617ms ago: executing program 3 (id=8205): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 628.78143ms ago: executing program 3 (id=8209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 604.560502ms ago: executing program 3 (id=8211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000070000000000010005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000fd687bbd18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 522.133398ms ago: executing program 0 (id=8212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae091f75cd9701ffa62891f686bfbb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003875c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9e"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 504.935359ms ago: executing program 3 (id=8214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) 500.13447ms ago: executing program 0 (id=8216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 480.865112ms ago: executing program 3 (id=8217): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 473.115182ms ago: executing program 4 (id=8218): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x6000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x2, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 418.785617ms ago: executing program 4 (id=8220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 416.872397ms ago: executing program 3 (id=8221): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 386.312299ms ago: executing program 0 (id=8222): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 378.9389ms ago: executing program 4 (id=8233): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0) 331.471204ms ago: executing program 0 (id=8226): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) 317.920845ms ago: executing program 4 (id=8228): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 286.213667ms ago: executing program 0 (id=8231): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x400007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_bp={0x0}, 0x2d4ca3afed545052, 0x10000, 0x0, 0x1, 0x8, 0x2a, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001a00010029bd70000000000002"], 0x3c}}, 0x0) 273.022398ms ago: executing program 4 (id=8232): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 246.03315ms ago: executing program 0 (id=8235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_usbip_server_init(0x2) 190.520165ms ago: executing program 1 (id=8236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) 163.976047ms ago: executing program 1 (id=8238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) 161.029127ms ago: executing program 6 (id=8239): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc) 138.169169ms ago: executing program 1 (id=8240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003c80)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xb, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast1]}]}}}], 0x20}}], 0x1, 0x0) 137.787609ms ago: executing program 6 (id=8241): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffff6eb, 0x7}, 0x100410, 0x1fc, 0x2, 0x4, 0x400, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 120.634631ms ago: executing program 1 (id=8242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 103.415922ms ago: executing program 6 (id=8243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 88.029423ms ago: executing program 6 (id=8244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000022000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 67.374255ms ago: executing program 6 (id=8246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x5022}, {}, {}, {0x0, 0x5}, {}, {}, {0x0, 0x100, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {0xffff}, {}, {0x3, 0x0, 0x4, 0x0, 0x0, 0xfffffff9}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x43}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000000}, {0x1, 0xb}, {}, {}, {}, {0x6, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {0x7}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x721a}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xffffffff, 0x0, 0x508}, {}, {0x8001, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x3}, {}, {}, {0x2}, {}, {}, {0x0, 0xc053}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x2}, {0x401}, {}, {0x20000000, 0x0, 0xfffffffd}], [{}, {0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 54.011306ms ago: executing program 1 (id=8247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 39.654808ms ago: executing program 1 (id=8248): syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) 39.000537ms ago: executing program 6 (id=8258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 0s ago: executing program 4 (id=8249): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.1.6225'. [ 170.084213][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6225'. [ 170.183650][T19057] bridge0: port 3(syz_tun) entered blocking state [ 170.190287][T19057] bridge0: port 3(syz_tun) entered forwarding state [ 170.201309][T19057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.210520][T19057] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.222090][T19057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.402649][T19091] loop1: detected capacity change from 0 to 128 [ 170.549553][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b33ca00: rx timeout, send abort [ 170.557825][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b33ca00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 170.753808][T19122] binfmt_misc: register: failed to install interpreter file ./file2 [ 170.798745][T19130] SELinux: policydb version 0 does not match my version range 15-35 [ 170.807840][T19130] SELinux: failed to load policy [ 170.910400][T19148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6270'. [ 171.117418][T19173] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 171.157153][T19177] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 171.205658][T19183] loop0: detected capacity change from 0 to 128 [ 171.437540][T19207] loop3: detected capacity change from 0 to 512 [ 171.446769][T19207] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6292: corrupted in-inode xattr: invalid ea_ino [ 171.460709][T19207] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6292: couldn't read orphan inode 15 (err -117) [ 171.474306][T19207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.500749][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.751583][T19229] loop3: detected capacity change from 0 to 512 [ 171.766191][T19229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.790136][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 171.852979][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 171.911929][T19241] binfmt_misc: register: failed to install interpreter file ./file2 [ 171.912675][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 171.963089][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 171.991199][ T1036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1036 comm=kworker/0:2 [ 172.005429][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 172.005509][ T29] audit: type=1400 audit(657.040:8413): avc: denied { mounton } for pid=19247 comm="syz.1.6308" path="/1239/file0" dev="tmpfs" ino=6354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.039244][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 172.063862][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 172.090508][T19252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.106458][T19229] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.6301: lblock 23 mapped to illegal pblock 18 (length 1) [ 172.122411][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 172.146595][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 20: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 172.168275][T19229] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 21: comm syz.3.6301: path /699/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 172.196899][T19260] loop5: detected capacity change from 0 to 1024 [ 172.206750][T19260] EXT4-fs: Ignoring removed nobh option [ 172.255315][T19260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.287448][ T29] audit: type=1400 audit(657.330:8414): avc: denied { setattr } for pid=19259 comm="syz.5.6313" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.322082][T13270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.376701][T19282] loop5: detected capacity change from 0 to 512 [ 172.386719][T19282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.606199][T13270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.714816][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.747326][ T29] audit: type=1326 audit(657.790:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.770300][ T29] audit: type=1326 audit(657.790:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.793729][ T29] audit: type=1326 audit(657.790:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.826310][ T29] audit: type=1326 audit(657.790:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.849389][ T29] audit: type=1326 audit(657.850:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.874411][ T29] audit: type=1326 audit(657.850:8420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.897592][ T29] audit: type=1326 audit(657.850:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 172.920631][ T29] audit: type=1326 audit(657.850:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.5.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 173.274864][T19371] loop1: detected capacity change from 0 to 164 [ 173.289484][T19371] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.300429][T19371] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.311975][T19371] Symlink component flag not implemented [ 173.317689][T19371] Symlink component flag not implemented [ 173.329709][T19378] loop4: detected capacity change from 0 to 512 [ 173.336403][T19371] Symlink component flag not implemented (7) [ 173.342406][T19371] Symlink component flag not implemented (116) [ 173.350469][T19378] EXT4-fs: Ignoring removed oldalloc option [ 173.356774][T19378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.379537][T19378] EXT4-fs (loop4): 1 truncate cleaned up [ 173.387028][T19378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.422660][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.503816][T19395] tap0: tun_chr_ioctl cmd 1074025677 [ 173.509249][T19395] tap0: linktype set to 823 [ 173.759550][T19435] loop1: detected capacity change from 0 to 1024 [ 173.783712][T19435] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.804830][T19443] tap0: tun_chr_ioctl cmd 1074025677 [ 173.810289][T19443] tap0: linktype set to 823 [ 173.827816][T19435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.958059][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.538204][T19544] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 174.577046][T19551] program syz.3.6429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.626010][T17811] hid_parser_main: 96 callbacks suppressed [ 174.626083][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.639477][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.646963][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.654744][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.662196][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.669746][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.677315][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.684772][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.692415][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.699821][T17811] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 174.708308][T17811] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.725421][T19571] __nla_validate_parse: 12 callbacks suppressed [ 174.725435][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6436'. [ 174.741130][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6436'. [ 174.941379][T19604] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 175.043102][T19646] program syz.0.6454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.150504][T19656] loop4: detected capacity change from 0 to 164 [ 175.176313][T19656] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 175.248871][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6473'. [ 175.273731][T19683] netlink: 'syz.4.6466': attribute type 12 has an invalid length. [ 175.324649][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6473'. [ 175.501636][T19722] loop1: detected capacity change from 0 to 512 [ 175.510516][T19722] EXT4-fs: Ignoring removed oldalloc option [ 175.526082][T19722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.584902][T19722] EXT4-fs (loop1): 1 truncate cleaned up [ 175.591061][T19722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.607061][T19736] loop0: detected capacity change from 0 to 512 [ 175.612172][T19737] loop3: detected capacity change from 0 to 256 [ 175.618826][T19738] loop4: detected capacity change from 0 to 512 [ 175.634700][T19736] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 175.643425][T19736] EXT4-fs (loop0): orphan cleanup on readonly fs [ 175.660978][T19736] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6493: Failed to acquire dquot type 1 [ 175.682216][T19743] lo speed is unknown, defaulting to 1000 [ 175.689336][T19736] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6493: bg 0: block 40: padding at end of block bitmap is not set [ 175.714120][T19736] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 175.716559][T19738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.737735][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.756143][T19736] EXT4-fs (loop0): 1 truncate cleaned up [ 175.763533][T19736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.806771][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.819725][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.883043][T17837] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.950498][T19820] netlink: 'syz.3.6507': attribute type 12 has an invalid length. [ 176.054276][T19839] netlink: 'syz.5.6515': attribute type 5 has an invalid length. [ 176.062142][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6515'. [ 176.131500][T19857] loop0: detected capacity change from 0 to 512 [ 176.141997][T19857] EXT4-fs: Ignoring removed oldalloc option [ 176.153071][T19857] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.169585][T19857] EXT4-fs (loop0): 1 truncate cleaned up [ 176.180088][T19857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.267448][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.805824][T19939] loop4: detected capacity change from 0 to 512 [ 176.961827][T19962] program syz.4.6559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.203306][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 177.203323][ T29] audit: type=1326 audit(663.256:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20007 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.232647][ T29] audit: type=1326 audit(663.256:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20007 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.255564][ T29] audit: type=1326 audit(663.256:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20007 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.278910][ T29] audit: type=1326 audit(663.256:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20007 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.312982][T20014] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.6584'. [ 177.327347][T20017] loop4: detected capacity change from 0 to 512 [ 177.334720][T20017] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.343167][T20017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.366540][T20017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.375117][T20017] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.438443][T20017] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6585: Allocating blocks 41-42 which overlap fs metadata [ 177.478390][T20017] Quota error (device loop4): write_blk: dquota write failed [ 177.485948][T20017] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 177.487449][T20038] program syz.5.6594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.505197][T20017] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 177.516650][T20017] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6585: Failed to acquire dquot type 1 [ 177.530593][T20017] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 177.594612][T20017] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6585: corrupted inode contents [ 177.629550][T20017] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.6585: mark_inode_dirty error [ 177.643752][T20053] loop0: detected capacity change from 0 to 1024 [ 177.656937][T20017] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6585: corrupted inode contents [ 177.670164][T20017] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6585: mark_inode_dirty error [ 177.691989][T20017] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6585: corrupted inode contents [ 177.712639][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6601'. [ 177.728678][T20017] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 177.778449][T20017] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.6585: corrupted inode contents [ 177.800500][T20017] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.6585: mark_inode_dirty error [ 177.847408][ T29] audit: type=1326 audit(663.897:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.5.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.870588][ T29] audit: type=1326 audit(663.897:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.5.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.898582][T20017] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 177.911418][ T29] audit: type=1326 audit(663.947:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.5.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6ef710ebe9 code=0x7ffc0000 [ 177.922256][T20017] EXT4-fs (loop4): 1 truncate cleaned up [ 177.964420][T20017] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 178.050504][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'. [ 178.063215][T20087] lo speed is unknown, defaulting to 1000 [ 178.084054][T20097] netlink: 'syz.5.6615': attribute type 4 has an invalid length. [ 178.103584][T20091] bridge0: entered promiscuous mode [ 178.109860][T20091] bridge0: port 4(macvlan4) entered blocking state [ 178.116594][T20091] bridge0: port 4(macvlan4) entered disabled state [ 178.128987][T20091] macvlan4: entered allmulticast mode [ 178.134651][T20091] bridge0: entered allmulticast mode [ 178.144734][T20091] macvlan4: left allmulticast mode [ 178.149911][T20091] bridge0: left allmulticast mode [ 178.155622][T20091] bridge0: left promiscuous mode [ 178.239686][T20133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6622'. [ 178.284129][T20135] bridge2: entered allmulticast mode [ 178.317572][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6628'. [ 178.362238][T20149] netlink: 'syz.1.6629': attribute type 4 has an invalid length. [ 178.433904][T20161] netlink: 'syz.0.6632': attribute type 3 has an invalid length. [ 178.499671][T20177] lo speed is unknown, defaulting to 1000 [ 178.608075][T20219] macvtap1: entered allmulticast mode [ 178.613651][T20219] hsr0: entered allmulticast mode [ 178.619006][T20219] hsr_slave_0: entered allmulticast mode [ 178.624805][T20219] hsr_slave_1: entered allmulticast mode [ 178.630151][T20223] loop3: detected capacity change from 0 to 512 [ 178.652467][T20223] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 178.661010][T20223] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.669253][T20223] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6650: Failed to acquire dquot type 1 [ 178.682388][T20223] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6650: bg 0: block 40: padding at end of block bitmap is not set [ 178.705738][T20223] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 178.715428][T20223] EXT4-fs (loop3): 1 truncate cleaned up [ 178.741577][T20239] loop5: detected capacity change from 0 to 128 [ 178.815316][T20256] loop5: detected capacity change from 0 to 1024 [ 178.823943][T20256] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.832265][T20258] loop3: detected capacity change from 0 to 1764 [ 178.851707][T20256] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.6671: Invalid block bitmap block 0 in block_group 0 [ 178.863517][T20262] lo speed is unknown, defaulting to 1000 [ 178.865914][T20256] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6671: Failed to acquire dquot type 0 [ 178.911217][T20256] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.6671: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.928829][T20256] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6671: Invalid inode bitmap blk 0 in block_group 0 [ 178.941781][ T3589] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0 [ 178.965702][T20256] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 178.976969][T20256] EXT4-fs (loop5): 1 orphan inode deleted [ 178.987150][T20256] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6671: Failed to acquire dquot type 0 [ 179.010396][T20297] loop3: detected capacity change from 0 to 1024 [ 179.032462][ T3589] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0 [ 179.063212][T20305] loop5: detected capacity change from 0 to 512 [ 179.072013][T20305] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 179.080783][T20305] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.081284][T20305] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6667: Failed to acquire dquot type 1 [ 179.082182][T20305] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6667: bg 0: block 40: padding at end of block bitmap is not set [ 179.082393][T20305] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 179.082830][T20305] EXT4-fs (loop5): 1 truncate cleaned up [ 179.189270][T20335] netlink: 'syz.3.6680': attribute type 3 has an invalid length. [ 179.237669][T20344] loop5: detected capacity change from 0 to 1024 [ 179.284787][T20352] loop0: detected capacity change from 0 to 1024 [ 179.315808][T20352] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 179.346617][T20364] loop5: detected capacity change from 0 to 1024 [ 179.353474][T20360] loop3: detected capacity change from 0 to 8192 [ 179.360947][T20364] EXT4-fs: Ignoring removed orlov option [ 179.367270][T20364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.466780][T20385] bridge1: entered allmulticast mode [ 179.596527][T20414] loop5: detected capacity change from 0 to 1024 [ 179.603707][T20414] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.610243][T20414] EXT4-fs: dax option not supported [ 179.686654][T20430] bridge0: entered promiscuous mode [ 179.701109][T20430] bridge0: port 3(macvlan3) entered blocking state [ 179.707815][T20430] bridge0: port 3(macvlan3) entered disabled state [ 179.722688][T20430] macvlan3: entered allmulticast mode [ 179.728170][T20430] bridge0: entered allmulticast mode [ 179.738958][T20437] loop1: detected capacity change from 0 to 512 [ 179.745617][T20430] macvlan3: left allmulticast mode [ 179.750780][T20430] bridge0: left allmulticast mode [ 179.757220][T20430] bridge0: left promiscuous mode [ 179.772140][T20437] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 179.793698][T20437] System zones: 0-2, 18-18, 34-35 [ 179.870616][T20451] loop4: detected capacity change from 0 to 512 [ 179.876371][T20455] bridge1: entered allmulticast mode [ 179.883588][T20451] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 179.947673][T20483] loop4: detected capacity change from 0 to 512 [ 179.960838][T20483] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6723: bg 0: block 248: padding at end of block bitmap is not set [ 179.977346][T20483] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6723: Failed to acquire dquot type 1 [ 179.995910][T20495] loop5: detected capacity change from 0 to 4096 [ 180.000872][T20483] EXT4-fs (loop4): 1 truncate cleaned up [ 180.012321][T20483] EXT4-fs (loop4): shut down requested (1) [ 180.040864][T20504] __nla_validate_parse: 5 callbacks suppressed [ 180.040883][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6727'. [ 180.064654][T20504] bridge0: entered promiscuous mode [ 180.076922][T20504] bridge0: port 4(macvlan3) entered blocking state [ 180.083580][T20504] bridge0: port 4(macvlan3) entered disabled state [ 180.095493][T20512] loop0: detected capacity change from 0 to 1024 [ 180.095911][T20504] macvlan3: entered allmulticast mode [ 180.103013][T20512] EXT4-fs: Ignoring removed orlov option [ 180.107386][T20504] bridge0: entered allmulticast mode [ 180.114624][T20512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.119757][T20516] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6729'. [ 180.134319][T20504] macvlan3: left allmulticast mode [ 180.139663][T20504] bridge0: left allmulticast mode [ 180.151830][T20504] bridge0: left promiscuous mode [ 180.227081][T20533] bridge2: entered allmulticast mode [ 180.304771][T20549] loop1: detected capacity change from 0 to 512 [ 180.322340][T20551] loop4: detected capacity change from 0 to 1024 [ 180.332054][T20551] EXT4-fs: Ignoring removed orlov option [ 180.339332][T20549] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.350967][T20549] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 180.361257][T20549] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6742: Corrupt directory, running e2fsck is recommended [ 180.369429][T20551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.381417][T20549] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 180.390836][T20549] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.6742: corrupted in-inode xattr: invalid ea_ino [ 180.404446][T20549] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6742: couldn't read orphan inode 15 (err -117) [ 180.421518][T20549] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.433259][T20549] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 180.443440][T20549] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6742: Corrupt directory, running e2fsck is recommended [ 180.459086][T20549] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.6742: path /1325/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 180.465587][T20562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20562 comm=syz.3.6746 [ 180.509287][T20549] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 64: comm syz.1.6742: path /1325/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 180.533281][T20567] loop5: detected capacity change from 0 to 512 [ 180.540614][T20569] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.552685][T20569] bond0: (slave lo): Error: Device can not be enslaved while up [ 180.553970][T20567] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.578107][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6749'. [ 180.604688][T20567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.613090][T20567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.621691][T20567] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.648351][T20567] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.6747: Allocating blocks 41-42 which overlap fs metadata [ 180.669250][T20567] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.6747: Allocating blocks 41-42 which overlap fs metadata [ 180.688268][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 180.707250][T20567] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6747: Failed to acquire dquot type 1 [ 180.737822][T20567] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 180.777496][T20567] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.6747: corrupted inode contents [ 180.804569][T20567] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #12: comm syz.5.6747: mark_inode_dirty error [ 180.846931][T20567] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.6747: corrupted inode contents [ 180.880135][T20567] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.6747: mark_inode_dirty error [ 180.895652][T20567] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.6747: corrupted inode contents [ 180.913337][T20567] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 180.927869][T20567] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.6747: corrupted inode contents [ 180.953856][T20567] EXT4-fs error (device loop5): ext4_truncate:4666: inode #12: comm syz.5.6747: mark_inode_dirty error [ 180.965419][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6766'. [ 180.978293][T20616] bridge0: entered promiscuous mode [ 180.990454][T20567] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 181.001219][T20616] bridge0: port 3(macvlan4) entered blocking state [ 181.007778][T20616] bridge0: port 3(macvlan4) entered disabled state [ 181.015163][T20567] EXT4-fs (loop5): 1 truncate cleaned up [ 181.022547][T20616] macvlan4: entered allmulticast mode [ 181.027973][T20616] bridge0: entered allmulticast mode [ 181.040355][T20567] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 181.058005][T20616] macvlan4: left allmulticast mode [ 181.063352][T20616] bridge0: left allmulticast mode [ 181.071259][T20616] bridge0: left promiscuous mode [ 181.152522][T20647] loop1: detected capacity change from 0 to 4096 [ 181.162068][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6779'. [ 181.223227][T20664] io-wq is not configured for unbound workers [ 181.253076][T20670] loop1: detected capacity change from 0 to 512 [ 181.267895][T20670] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.274870][T20670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.282666][T20670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.291427][T20670] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.311237][T20676] loop3: detected capacity change from 0 to 512 [ 181.332127][T20676] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 181.340494][T20670] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6783: Allocating blocks 41-42 which overlap fs metadata [ 181.354822][T20676] System zones: 0-2, 18-18, 34-35 [ 181.360628][T20670] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6783: Allocating blocks 41-42 which overlap fs metadata [ 181.378499][T20670] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6783: Failed to acquire dquot type 1 [ 181.395493][T20670] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 181.410169][T20670] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.6783: corrupted inode contents [ 181.426690][T20670] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.6783: mark_inode_dirty error [ 181.434380][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6790'. [ 181.447078][T20687] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6790'. [ 181.456870][T20670] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.6783: corrupted inode contents [ 181.474766][T20670] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.6783: mark_inode_dirty error [ 181.487144][T20670] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.6783: corrupted inode contents [ 181.503801][T20670] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 181.513261][T20670] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.6783: corrupted inode contents [ 181.525708][T20670] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.6783: mark_inode_dirty error [ 181.538416][T20670] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 181.555161][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6792'. [ 181.564632][T20670] EXT4-fs (loop1): 1 truncate cleaned up [ 181.582693][T20693] bridge0: entered promiscuous mode [ 181.588663][T20693] bridge0: port 3(macvlan4) entered blocking state [ 181.588791][T20670] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 181.595238][T20693] bridge0: port 3(macvlan4) entered disabled state [ 181.610463][T20693] macvlan4: entered allmulticast mode [ 181.615974][T20693] bridge0: entered allmulticast mode [ 181.621978][T20693] macvlan4: left allmulticast mode [ 181.627109][T20693] bridge0: left allmulticast mode [ 181.633042][T20693] bridge0: left promiscuous mode [ 181.642551][T20701] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.654660][T20701] bond0: (slave lo): Error: Device can not be enslaved while up [ 181.768272][T20727] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 181.791368][T20731] loop5: detected capacity change from 0 to 1024 [ 181.798309][T20731] EXT4-fs: Ignoring removed orlov option [ 181.854884][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6813'. [ 181.855820][T20749] loop5: detected capacity change from 0 to 512 [ 181.872188][T20749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.882510][T20748] netlink: 'syz.1.6813': attribute type 6 has an invalid length. [ 181.885446][T20749] EXT4-fs (loop5): 1 truncate cleaned up [ 181.902304][T20752] bridge0: entered promiscuous mode [ 181.908742][T20752] bridge0: port 3(macvlan4) entered blocking state [ 181.915305][T20752] bridge0: port 3(macvlan4) entered disabled state [ 181.922169][T20752] macvlan4: entered allmulticast mode [ 181.927567][T20752] bridge0: entered allmulticast mode [ 181.933791][T20752] macvlan4: left allmulticast mode [ 181.939079][T20752] bridge0: left allmulticast mode [ 181.945276][T20752] bridge0: left promiscuous mode [ 182.270445][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 182.270462][ T29] audit: type=1400 audit(668.329:8621): avc: denied { read write } for pid=20804 comm="syz.4.6837" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.300021][ T29] audit: type=1400 audit(668.329:8622): avc: denied { open } for pid=20804 comm="syz.4.6837" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.345089][T20810] bridge0: entered promiscuous mode [ 182.351815][T20810] bridge0: port 4(macvlan3) entered blocking state [ 182.358487][T20810] bridge0: port 4(macvlan3) entered disabled state [ 182.365607][T20810] macvlan3: entered allmulticast mode [ 182.371054][T20810] bridge0: entered allmulticast mode [ 182.387042][ T29] audit: type=1326 audit(668.389:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.0.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 182.396784][T20810] macvlan3: left allmulticast mode [ 182.410085][ T29] audit: type=1326 audit(668.389:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.0.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 182.410112][ T29] audit: type=1326 audit(668.389:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.0.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 182.415236][T20810] bridge0: left allmulticast mode [ 182.438046][ T29] audit: type=1400 audit(668.399:8626): avc: denied { open } for pid=20809 comm="syz.4.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.470767][T20810] bridge0: left promiscuous mode [ 182.484834][ T29] audit: type=1400 audit(668.399:8627): avc: denied { kernel } for pid=20809 comm="syz.4.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.511731][ T29] audit: type=1400 audit(668.569:8628): avc: denied { create } for pid=20815 comm="syz.1.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.531553][T20817] loop1: detected capacity change from 0 to 512 [ 182.538569][T20817] EXT4-fs: Ignoring removed bh option [ 182.544413][T20817] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.553578][T20817] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 182.554104][ T29] audit: type=1400 audit(668.599:8629): avc: denied { mounton } for pid=20815 comm="syz.1.6841" path="/1344/file0" dev="tmpfs" ino=6896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.588018][ T29] audit: type=1400 audit(668.649:8630): avc: denied { mount } for pid=20822 comm="syz.0.6842" name="/" dev="hugetlbfs" ino=55446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 182.595071][T20817] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 182.637515][T20817] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 182.652765][T20817] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 182.911976][T20871] loop1: detected capacity change from 0 to 1024 [ 182.920160][T20871] EXT4-fs: Ignoring removed orlov option [ 183.040998][T20887] vhci_hcd: invalid port number 96 [ 183.046147][T20887] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 183.146925][T20905] loop1: detected capacity change from 0 to 512 [ 183.157860][T20905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.172413][T20905] EXT4-fs (loop1): 1 truncate cleaned up [ 183.230582][T20921] loop5: detected capacity change from 0 to 512 [ 183.323181][T20937] netlink: 'syz.4.6885': attribute type 6 has an invalid length. [ 183.834704][T20990] loop5: detected capacity change from 0 to 512 [ 183.846178][T20990] EXT4-fs: Ignoring removed bh option [ 183.870297][T20990] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.879578][T20990] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 183.921252][T20990] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 183.946047][T20990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 183.984935][T20990] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 184.038875][T21004] loop4: detected capacity change from 0 to 8192 [ 184.164040][T21038] loop0: detected capacity change from 0 to 2048 [ 184.182182][T21043] loop1: detected capacity change from 0 to 512 [ 184.189203][T21043] EXT4-fs: Ignoring removed oldalloc option [ 184.197047][T21043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.217776][T21043] EXT4-fs (loop1): 1 truncate cleaned up [ 184.284997][T21059] loop0: detected capacity change from 0 to 512 [ 184.472527][T21086] loop1: detected capacity change from 0 to 4096 [ 184.496492][T21094] loop3: detected capacity change from 0 to 256 [ 184.516486][T21090] loop4: detected capacity change from 0 to 2048 [ 184.580259][T21108] loop1: detected capacity change from 0 to 164 [ 184.598557][T21108] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 184.726961][T21138] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 185.047501][T21181] bridge0: port 3(syz_tun) entered disabled state [ 185.378205][T21209] __nla_validate_parse: 13 callbacks suppressed [ 185.378223][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6999'. [ 185.565781][T21218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7002'. [ 185.692511][T21232] loop5: detected capacity change from 0 to 164 [ 185.704015][T21232] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 185.788797][T21244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7014'. [ 185.820711][T21241] loop5: detected capacity change from 0 to 4096 [ 185.994552][T21273] pimreg: tun_chr_ioctl cmd 1074025677 [ 186.000382][T21273] pimreg: linktype set to 786 [ 186.021254][T21281] loop4: detected capacity change from 0 to 164 [ 186.031151][T21281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.043232][T21284] loop5: detected capacity change from 0 to 256 [ 186.117548][T21299] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.7035'. [ 186.170095][T21316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7043'. [ 186.203783][T21321] loop5: detected capacity change from 0 to 512 [ 186.211816][T21321] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7045: casefold flag without casefold feature [ 186.225364][T21321] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7045: couldn't read orphan inode 15 (err -117) [ 186.247529][T21325] wireguard0: entered promiscuous mode [ 186.253065][T21325] wireguard0: entered allmulticast mode [ 186.304840][T21339] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7049'. [ 186.451845][T21368] netlink: 'syz.3.7060': attribute type 9 has an invalid length. [ 186.459748][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7060'. [ 186.470493][T21371] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.7062'. [ 186.483030][T21368] macvlan3: entered promiscuous mode [ 186.488424][T21368] team0: entered promiscuous mode [ 186.493469][T21368] team_slave_0: entered promiscuous mode [ 186.499408][T21368] team_slave_1: entered promiscuous mode [ 186.505193][T21368] macvlan3: entered allmulticast mode [ 186.510603][T21368] team0: entered allmulticast mode [ 186.515798][T21368] team_slave_0: entered allmulticast mode [ 186.521790][T21368] team_slave_1: entered allmulticast mode [ 186.527982][T21368] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 186.539809][T21378] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.609094][T21389] dummy0: entered promiscuous mode [ 186.614325][T21389] macsec2: entered allmulticast mode [ 186.634970][T21389] dummy0: entered allmulticast mode [ 186.640529][T21397] loop5: detected capacity change from 0 to 512 [ 186.647943][T21397] EXT4-fs: Ignoring removed i_version option [ 186.655318][T21397] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.667882][T21389] dummy0: left allmulticast mode [ 186.668999][T21397] EXT4-fs (loop5): 1 truncate cleaned up [ 186.672945][T21389] dummy0: left promiscuous mode [ 186.816679][T21415] netlink: 'syz.5.7076': attribute type 1 has an invalid length. [ 186.906100][T21429] loop1: detected capacity change from 0 to 1024 [ 186.939680][T21429] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.7083: reserved inode found cleared - inode=1 [ 186.972533][T21429] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 187.030733][T21448] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7092'. [ 187.168487][T21464] loop0: detected capacity change from 0 to 4096 [ 187.219326][T21481] loop1: detected capacity change from 0 to 512 [ 187.234783][T21481] EXT4-fs: Ignoring removed i_version option [ 187.262691][T21482] wireguard0: entered promiscuous mode [ 187.268407][T21482] wireguard0: entered allmulticast mode [ 187.277359][T21481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.291716][T21481] EXT4-fs (loop1): 1 truncate cleaned up [ 187.329856][T21506] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.7110'. [ 187.354355][T21510] netlink: 'syz.1.7109': attribute type 9 has an invalid length. [ 187.372972][T21510] macvlan4: entered promiscuous mode [ 187.378422][T21510] team0: entered promiscuous mode [ 187.383531][T21510] team_slave_0: entered promiscuous mode [ 187.389370][T21510] team_slave_1: entered promiscuous mode [ 187.395189][T21510] macvlan4: entered allmulticast mode [ 187.396976][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 187.396993][ T29] audit: type=1400 audit(673.452:8855): avc: denied { read } for pid=21511 comm="syz.4.7112" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.400598][T21510] team0: entered allmulticast mode [ 187.431446][T21510] team_slave_0: entered allmulticast mode [ 187.437244][T21510] team_slave_1: entered allmulticast mode [ 187.447356][T21510] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 187.466318][T21523] loop3: detected capacity change from 0 to 1024 [ 187.490351][T21523] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 187.525061][T21523] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 187.537470][T21523] EXT4-fs (loop3): This should not happen!! Data will be lost [ 187.537470][T21523] [ 187.547152][T21523] EXT4-fs (loop3): Total free blocks count 0 [ 187.553335][T21523] EXT4-fs (loop3): Free/Dirty block details [ 187.559323][T21523] EXT4-fs (loop3): free_blocks=20480 [ 187.564631][T21523] EXT4-fs (loop3): dirty_blocks=16 [ 187.569806][T21523] EXT4-fs (loop3): Block reservation details [ 187.575920][T21523] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 187.687026][T21542] loop3: detected capacity change from 0 to 4096 [ 187.770657][T21562] loop0: detected capacity change from 0 to 1024 [ 187.778481][T21564] netlink: 'syz.5.7130': attribute type 16 has an invalid length. [ 187.804018][T21562] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 187.823668][ T29] audit: type=1400 audit(673.872:8856): avc: denied { connect } for pid=21568 comm="syz.5.7131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.845620][T21562] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 187.857991][T21562] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.857991][T21562] [ 187.867747][T21562] EXT4-fs (loop0): Total free blocks count 0 [ 187.873768][T21562] EXT4-fs (loop0): Free/Dirty block details [ 187.879888][T21562] EXT4-fs (loop0): free_blocks=20480 [ 187.885237][T21562] EXT4-fs (loop0): dirty_blocks=16 [ 187.890370][T21562] EXT4-fs (loop0): Block reservation details [ 187.896402][T21562] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 187.937449][T21578] dummy0: entered promiscuous mode [ 187.942756][T21578] macsec2: entered allmulticast mode [ 187.949310][T21578] dummy0: entered allmulticast mode [ 187.965373][T21578] dummy0: left allmulticast mode [ 187.970379][T21578] dummy0: left promiscuous mode [ 188.019987][ T29] audit: type=1400 audit(674.072:8857): avc: denied { create } for pid=21592 comm="syz.0.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.087637][T21609] loop1: detected capacity change from 0 to 512 [ 188.097004][T21609] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7144: casefold flag without casefold feature [ 188.111085][T21609] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7144: couldn't read orphan inode 15 (err -117) [ 188.127811][ T29] audit: type=1400 audit(674.182:8858): avc: denied { block_suspend } for pid=21616 comm="syz.0.7155" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.249055][T21641] loop5: detected capacity change from 0 to 1024 [ 188.259712][T21641] EXT4-fs: inline encryption not supported [ 188.271181][ T29] audit: type=1400 audit(674.322:8859): avc: denied { write } for pid=21648 comm="syz.4.7161" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.275599][T21641] EXT4-fs: Ignoring removed bh option [ 188.293938][ T29] audit: type=1400 audit(674.322:8860): avc: denied { open } for pid=21648 comm="syz.4.7161" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.329872][ T29] audit: type=1400 audit(674.372:8861): avc: denied { ioctl } for pid=21648 comm="syz.4.7161" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.359224][ T29] audit: type=1400 audit(674.412:8862): avc: denied { create } for pid=21647 comm="syz.3.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.388817][T21660] loop1: detected capacity change from 0 to 1024 [ 188.389972][ T29] audit: type=1400 audit(674.412:8863): avc: denied { quotaon } for pid=21640 comm="syz.5.7157" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.417455][ T29] audit: type=1400 audit(674.432:8864): avc: denied { connect } for pid=21647 comm="syz.3.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.424231][T21660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.443179][T21660] EXT4-fs: Ignoring removed bh option [ 188.481300][T21660] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 188.496534][T21660] EXT4-fs (loop1): Remounting filesystem read-only [ 188.569175][T21690] loop1: detected capacity change from 0 to 1024 [ 188.591491][T21690] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 188.611586][T21690] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 188.623872][T21690] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.623872][T21690] [ 188.633622][T21690] EXT4-fs (loop1): Total free blocks count 0 [ 188.639872][T21690] EXT4-fs (loop1): Free/Dirty block details [ 188.645932][T21690] EXT4-fs (loop1): free_blocks=20480 [ 188.651327][T21690] EXT4-fs (loop1): dirty_blocks=16 [ 188.656755][T21690] EXT4-fs (loop1): Block reservation details [ 188.662956][T21690] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 188.919010][T21756] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 189.436907][T21808] loop4: detected capacity change from 0 to 1024 [ 189.444327][T21808] EXT4-fs: inline encryption not supported [ 189.450594][T21808] EXT4-fs: Ignoring removed bh option [ 189.633429][T21826] program syz.5.7225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.873618][T21834] loop5: detected capacity change from 0 to 1024 [ 189.894662][T21834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.901352][T21834] EXT4-fs: Ignoring removed bh option [ 189.970555][T21834] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 190.005653][T21834] EXT4-fs (loop5): Remounting filesystem read-only [ 190.205354][T21875] netlink: 'syz.3.7245': attribute type 13 has an invalid length. [ 190.213251][T21875] netlink: 'syz.3.7245': attribute type 17 has an invalid length. [ 190.300634][T21875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.349870][T21905] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 190.349870][T21905] program syz.4.7255 not setting count and/or reply_len properly [ 190.451722][T21924] loop5: detected capacity change from 0 to 1024 [ 190.463640][T21924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.472091][T21912] loop0: detected capacity change from 0 to 8192 [ 190.521269][T21939] __nla_validate_parse: 7 callbacks suppressed [ 190.521288][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7265'. [ 190.615487][T21961] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 190.615487][T21961] program syz.3.7273 not setting count and/or reply_len properly [ 190.668746][T21965] loop5: detected capacity change from 0 to 512 [ 190.730625][T21965] loop5: detected capacity change from 512 to 64 [ 190.752408][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7283'. [ 190.764832][T13270] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Out of memory [ 190.774387][T21983] loop1: detected capacity change from 0 to 2048 [ 190.782608][T13270] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 190.826139][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7287'. [ 190.835777][T21983] loop1: p1 < > p4 [ 190.840708][T21983] loop1: p4 size 8388608 extends beyond EOD, truncated [ 190.856143][T14678] EXT4-fs unmount: 97 callbacks suppressed [ 190.856158][T14678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.896106][T21996] loop0: detected capacity change from 0 to 512 [ 190.905333][T21996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.928552][T22006] netlink: 'syz.4.7292': attribute type 13 has an invalid length. [ 190.936459][T22006] netlink: 'syz.4.7292': attribute type 17 has an invalid length. [ 190.949443][T21996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.997848][T22006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.031261][ T3568] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.043279][T22023] netlink: 'syz.1.7298': attribute type 21 has an invalid length. [ 191.056488][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.106065][ T3568] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.133817][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7302'. [ 191.144526][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7303'. [ 191.168227][ T3568] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.211986][T22052] loop4: detected capacity change from 0 to 512 [ 191.220558][T22052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.230691][ T3568] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.254524][T22058] loop1: detected capacity change from 0 to 1024 [ 191.254875][T22052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.285980][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7311'. [ 191.301436][T22058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.311815][T22065] vlan2: entered promiscuous mode [ 191.318574][T22065] gretap0: entered promiscuous mode [ 191.330536][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.330624][T22058] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 191.360781][T22058] EXT4-fs (loop1): Remounting filesystem read-only [ 191.361182][T22030] lo speed is unknown, defaulting to 1000 [ 191.432540][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.450580][ T3568] bridge_slave_1: left allmulticast mode [ 191.456408][ T3568] bridge_slave_1: left promiscuous mode [ 191.462146][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.488082][ T3568] bridge_slave_0: left allmulticast mode [ 191.493778][ T3568] bridge_slave_0: left promiscuous mode [ 191.499681][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.520333][T22197] program syz.1.7314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.535199][T22192] SELinux: Context system_u:object is not valid (left unmapped). [ 191.575374][ T3568] team0: Port device geneve1 removed [ 191.602126][T22207] loop0: detected capacity change from 0 to 1024 [ 191.616803][T22207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.634716][T22207] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 191.649938][T22207] EXT4-fs (loop0): Remounting filesystem read-only [ 191.671103][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.685745][ T3568] bond0 (unregistering): (slave c1ÿ): Releasing backup interface [ 191.694794][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.705861][ T3568] bond0 (unregistering): Released all slaves [ 191.719568][T22203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7322'. [ 191.728628][T22203] dummy0: entered promiscuous mode [ 191.767343][T22030] chnl_net:caif_netlink_parms(): no params data found [ 191.800761][ T3568] hsr_slave_0: left promiscuous mode [ 191.813844][ T3568] hsr_slave_1: left promiscuous mode [ 191.824040][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.834847][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.843788][ T3568] batman_adv: batadv0: Interface deactivated: macvlan0 [ 191.850792][ T3568] batman_adv: batadv0: Removing interface: macvlan0 [ 191.862031][ T3568] hsr0: left allmulticast mode [ 191.868680][T22257] netlink: 'syz.1.7335': attribute type 13 has an invalid length. [ 191.876766][T22257] netlink: 'syz.1.7335': attribute type 17 has an invalid length. [ 191.883819][T22259] loop3: detected capacity change from 0 to 1024 [ 191.900387][T22259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.916197][T22259] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 191.932077][T22259] EXT4-fs (loop3): Remounting filesystem read-only [ 191.938937][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 191.951238][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 191.959395][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.061485][T22257] bridge0: port 3(syz_tun) entered blocking state [ 192.068082][T22257] bridge0: port 3(syz_tun) entered forwarding state [ 192.105593][T22257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.185122][T22030] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.192354][T22030] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.200511][T22315] loop0: detected capacity change from 0 to 1024 [ 192.207672][T22030] bridge_slave_0: entered allmulticast mode [ 192.214609][T22030] bridge_slave_0: entered promiscuous mode [ 192.214790][T22327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7350'. [ 192.221584][T22030] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.236726][T22030] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.244199][T22030] bridge_slave_1: entered allmulticast mode [ 192.250924][T22030] bridge_slave_1: entered promiscuous mode [ 192.264174][T22315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.291215][T22327] vlan3: entered promiscuous mode [ 192.296340][T22327] gretap0: entered promiscuous mode [ 192.315180][T22030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.326597][T22030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.329803][T22315] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 192.366747][T22315] EXT4-fs (loop0): Remounting filesystem read-only [ 192.375691][T22030] team0: Port device team_slave_0 added [ 192.393988][T22030] team0: Port device team_slave_1 added [ 192.403131][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.424807][T22030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.431874][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.458014][T22030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.461729][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 192.461747][ T29] audit: type=1400 audit(524966.469:8998): avc: denied { bind } for pid=22422 comm="syz.4.7357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.493860][ T29] audit: type=1400 audit(524966.469:8999): avc: denied { name_bind } for pid=22422 comm="syz.4.7357" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 192.515622][ T29] audit: type=1400 audit(524966.469:9000): avc: denied { node_bind } for pid=22422 comm="syz.4.7357" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 192.516489][T22030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.544799][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.570981][T22030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.598382][ T29] audit: type=1400 audit(524966.628:9001): avc: denied { append } for pid=22408 comm="syz.1.7356" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.624903][T22030] hsr_slave_0: entered promiscuous mode [ 192.631046][T22030] hsr_slave_1: entered promiscuous mode [ 192.643244][T22030] debugfs: 'hsr0' already exists in 'hsr' [ 192.649111][T22030] Cannot create hsr debugfs directory [ 192.654752][ T29] audit: type=1400 audit(524966.638:9002): avc: denied { name_bind } for pid=22427 comm="syz.0.7355" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 192.693031][ T29] audit: type=1400 audit(524966.708:9003): avc: denied { read } for pid=22460 comm="syz.1.7359" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 192.716877][ T29] audit: type=1400 audit(524966.708:9004): avc: denied { open } for pid=22460 comm="syz.1.7359" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 192.741241][ T29] audit: type=1400 audit(524966.708:9005): avc: denied { block_suspend } for pid=22460 comm="syz.1.7359" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.764424][T22479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7360'. [ 192.799750][T22494] netlink: 'syz.0.7361': attribute type 13 has an invalid length. [ 192.807726][T22494] netlink: 'syz.0.7361': attribute type 17 has an invalid length. [ 192.811592][T22501] loop4: detected capacity change from 0 to 256 [ 192.825086][ T29] audit: type=1400 audit(524966.856:9006): avc: denied { mount } for pid=22500 comm="syz.4.7362" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 192.848469][ T29] audit: type=1400 audit(524966.866:9007): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 192.899265][T22494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.973878][T22543] loop4: detected capacity change from 0 to 1024 [ 192.983440][T22030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.987345][T22543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.992572][T22534] usb usb8: usbfs: process 22534 (syz.0.7374) did not claim interface 0 before use [ 193.008833][T22543] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 193.029266][T22030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.037499][T22543] EXT4-fs (loop4): Remounting filesystem read-only [ 193.058326][T22030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.078666][T22030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 193.097933][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.143874][T22573] loop4: detected capacity change from 0 to 2048 [ 193.153989][T22030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.167618][T22030] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.177871][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.184971][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.193814][T22573] loop4: p1 < > p4 [ 193.200448][T22573] loop4: p4 size 8388608 extends beyond EOD, truncated [ 193.208952][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.216057][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.331159][T22030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.353021][T22599] usb usb8: usbfs: process 22599 (syz.4.7377) did not claim interface 0 before use [ 193.485391][T22628] loop0: detected capacity change from 0 to 2048 [ 193.542548][T22030] veth0_vlan: entered promiscuous mode [ 193.549620][T22628] loop0: p1 < > p4 [ 193.557837][T22628] loop0: p4 size 8388608 extends beyond EOD, truncated [ 193.564463][T22030] veth1_vlan: entered promiscuous mode [ 193.602442][T22646] loop1: detected capacity change from 0 to 256 [ 193.609712][T22030] veth0_macvtap: entered promiscuous mode [ 193.620775][T22030] veth1_macvtap: entered promiscuous mode [ 193.653143][T22030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.658729][T22655] loop4: detected capacity change from 0 to 1024 [ 193.683704][T22030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.703668][ T3568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.725982][ T3568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.747312][ T3568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.786449][T22655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.798643][ T3568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.053743][T22688] loop0: detected capacity change from 0 to 128 [ 194.111502][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.275543][T22719] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7417'. [ 194.321072][T22728] loop1: detected capacity change from 0 to 512 [ 194.346362][T22728] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 194.367693][T22728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 194.376511][T22728] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.7421: Block bitmap for bg 0 marked uninitialized [ 194.407133][T22728] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 194.462891][T22728] EXT4-fs (loop1): 1 orphan inode deleted [ 194.469948][T22728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.538500][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.760332][T22802] loop6: detected capacity change from 0 to 1024 [ 194.780995][T22802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.851741][T22030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.889104][T22818] netlink: 'syz.3.7460': attribute type 21 has an invalid length. [ 195.092009][T22844] loop3: detected capacity change from 0 to 1024 [ 195.113638][T22844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.192624][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.162770][T22951] loop1: detected capacity change from 0 to 512 [ 196.176601][T22951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.203627][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.258412][T22973] __nla_validate_parse: 2 callbacks suppressed [ 196.258443][T22973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7523'. [ 196.369850][T23021] loop1: detected capacity change from 0 to 512 [ 196.383935][T23021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.424870][T23030] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 196.478231][T23036] macvlan4: entered promiscuous mode [ 196.483640][T23036] macvlan4: entered allmulticast mode [ 196.489068][T23036] gretap0: entered allmulticast mode [ 196.528549][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7542'. [ 196.538941][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.659011][T23064] SELinux: policydb version 0 does not match my version range 15-35 [ 196.668552][T23064] SELinux: failed to load policy [ 196.848260][T23093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7564'. [ 196.917089][T23107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7571'. [ 196.930293][T23109] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7572'. [ 196.963738][T23111] SELinux: failed to load policy [ 196.979844][T23115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7575'. [ 197.011256][T23119] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 197.646878][T23134] pimreg: tun_chr_ioctl cmd 1074812118 [ 197.690529][T23146] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 197.737489][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 197.737504][ T29] audit: type=1400 audit(524971.722:9131): avc: denied { bind } for pid=23149 comm="syz.3.7588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.763007][ T29] audit: type=1400 audit(524971.722:9132): avc: denied { name_bind } for pid=23149 comm="syz.3.7588" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 197.783661][ T29] audit: type=1400 audit(524971.722:9133): avc: denied { node_bind } for pid=23149 comm="syz.3.7588" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 197.859514][T23156] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 197.916582][ T29] audit: type=1400 audit(524971.900:9134): avc: denied { create } for pid=23162 comm="syz.1.7596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.955899][ T29] audit: type=1400 audit(524971.900:9135): avc: denied { setopt } for pid=23161 comm="syz.6.7595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.975261][ T29] audit: type=1400 audit(524971.930:9136): avc: denied { ioctl } for pid=23162 comm="syz.1.7596" path="socket:[61499]" dev="sockfs" ino=61499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.000020][ T29] audit: type=1400 audit(524971.930:9137): avc: denied { bind } for pid=23162 comm="syz.1.7596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.019137][ T29] audit: type=1400 audit(524971.930:9138): avc: denied { write } for pid=23162 comm="syz.1.7596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.083841][ T29] audit: type=1400 audit(524972.039:9139): avc: denied { create } for pid=23167 comm="syz.3.7599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.104535][ T29] audit: type=1400 audit(524972.039:9140): avc: denied { append } for pid=23167 comm="syz.3.7599" name="file0" dev="tmpfs" ino=4801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.164199][T23195] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7609'. [ 198.340573][T23212] netlink: 748 bytes leftover after parsing attributes in process `syz.3.7616'. [ 198.349723][T23212] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 198.456523][T23209] syz.1.7608(23209): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 198.489283][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7621'. [ 198.529434][T23229] hub 9-0:1.0: USB hub found [ 198.534312][T23229] hub 9-0:1.0: 8 ports detected [ 198.584269][T23234] loop1: detected capacity change from 0 to 2048 [ 198.640767][T23234] loop1: p2 p3 p7 [ 198.666540][T23258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7633'. [ 198.704056][T23268] loop4: detected capacity change from 0 to 512 [ 198.750581][T23268] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 198.764718][T23268] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.775211][T23268] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.7636: corrupted inode contents [ 198.789254][T23268] EXT4-fs (loop4): Remounting filesystem read-only [ 198.796622][T23268] EXT4-fs (loop4): 1 truncate cleaned up [ 198.802498][T23288] loop0: detected capacity change from 0 to 256 [ 198.802504][ T3565] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.819419][ T3565] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.831131][ T3565] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.842710][T23268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.855831][T23293] loop6: detected capacity change from 0 to 128 [ 198.875161][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.892217][T23293] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 198.900151][T23293] FAT-fs (loop6): Filesystem has been set read-only [ 198.929174][T23293] syz.6.7644: attempt to access beyond end of device [ 198.929174][T23293] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 198.966864][T23313] 9pnet: Could not find request transport: t [ 198.967815][T23293] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 198.981634][T23293] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 199.000333][T23308] syz.6.7644: attempt to access beyond end of device [ 199.000333][T23308] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 199.013624][T23308] Buffer I/O error on dev loop6, logical block 2065, async page read [ 199.048402][T23308] syz.6.7644: attempt to access beyond end of device [ 199.048402][T23308] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 199.061698][T23308] Buffer I/O error on dev loop6, logical block 2066, async page read [ 199.070272][T23308] syz.6.7644: attempt to access beyond end of device [ 199.070272][T23308] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 199.083675][T23308] Buffer I/O error on dev loop6, logical block 2067, async page read [ 199.092015][T23308] syz.6.7644: attempt to access beyond end of device [ 199.092015][T23308] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 199.105338][T23308] Buffer I/O error on dev loop6, logical block 2068, async page read [ 199.113517][T23308] syz.6.7644: attempt to access beyond end of device [ 199.113517][T23308] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 199.126795][T23308] Buffer I/O error on dev loop6, logical block 2069, async page read [ 199.135043][T23308] syz.6.7644: attempt to access beyond end of device [ 199.135043][T23308] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 199.148322][T23308] Buffer I/O error on dev loop6, logical block 2070, async page read [ 199.187888][T23332] random: crng reseeded on system resumption [ 199.210039][T23308] syz.6.7644: attempt to access beyond end of device [ 199.210039][T23308] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 199.223375][T23308] Buffer I/O error on dev loop6, logical block 2071, async page read [ 199.237892][T23308] syz.6.7644: attempt to access beyond end of device [ 199.237892][T23308] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 199.251372][T23308] Buffer I/O error on dev loop6, logical block 2072, async page read [ 199.259959][T23293] syz.6.7644: attempt to access beyond end of device [ 199.259959][T23293] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 199.273231][T23293] Buffer I/O error on dev loop6, logical block 2065, async page read [ 199.281706][T23293] Buffer I/O error on dev loop6, logical block 2066, async page read [ 199.340933][T23340] loop4: detected capacity change from 0 to 2048 [ 199.350120][T23346] loop0: detected capacity change from 0 to 128 [ 199.462572][T23369] loop0: detected capacity change from 0 to 1024 [ 199.483493][T23369] EXT4-fs: Ignoring removed bh option [ 199.496622][T23369] EXT4-fs: inline encryption not supported [ 199.509713][T23369] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.536829][T23369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 199.561193][T23369] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.7672: lblock 2 mapped to illegal pblock 2 (length 1) [ 199.577082][T23369] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.7672: lblock 0 mapped to illegal pblock 48 (length 1) [ 199.602197][T23369] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7672: Failed to acquire dquot type 0 [ 199.619399][T23369] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 199.643890][T23369] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.7672: mark_inode_dirty error [ 199.655865][T23394] loop1: detected capacity change from 0 to 2048 [ 199.680187][T23369] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 199.696371][T23369] EXT4-fs (loop0): 1 orphan inode deleted [ 199.702620][T23369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.716088][ T3544] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 199.732501][T23369] EXT4-fs (loop0): shut down requested (1) [ 199.750808][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.793452][T23394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 199.794159][T23401] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.901913][T23394] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 199.918279][T23394] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1254 with error 28 [ 199.930839][T23394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.930839][T23394] [ 199.940820][T23394] EXT4-fs (loop1): Total free blocks count 0 [ 199.946907][T23394] EXT4-fs (loop1): Free/Dirty block details [ 199.952816][T23394] EXT4-fs (loop1): free_blocks=2415919104 [ 199.958718][T23394] EXT4-fs (loop1): dirty_blocks=1264 [ 199.964173][T23394] EXT4-fs (loop1): Block reservation details [ 199.970271][T23394] EXT4-fs (loop1): i_reserved_data_blocks=79 [ 200.000070][T23441] vhci_hcd: invalid port number 23 [ 200.051742][T23451] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 200.058310][T23451] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.066060][T23451] vhci_hcd vhci_hcd.0: Device attached [ 200.073382][T23452] vhci_hcd: connection closed [ 200.079338][ T3544] vhci_hcd: stop threads [ 200.088633][ T3544] vhci_hcd: release socket [ 200.093243][ T3544] vhci_hcd: disconnect device [ 200.128567][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 200.259795][T23468] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.383541][T23498] netlink: 'syz.3.7721': attribute type 4 has an invalid length. [ 200.392792][T23500] SELinux: failed to load policy [ 201.337941][T23575] __nla_validate_parse: 3 callbacks suppressed [ 201.337954][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7757'. [ 201.370631][T23577] loop1: detected capacity change from 0 to 1024 [ 201.379375][T23577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.457686][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.682123][T23622] rtc_cmos 00:00: Alarms can be up to one day in the future [ 201.826044][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7788'. [ 201.842059][T23648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7790'. [ 201.887287][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7794'. [ 201.896476][T23656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7794'. [ 201.910415][T23656] vlan3: entered allmulticast mode [ 202.115526][T23686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23686 comm=syz.1.7805 [ 202.206803][T23688] loop1: detected capacity change from 0 to 4096 [ 202.222818][T23688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.265010][T23699] program syz.3.7810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.278607][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.325624][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7816'. [ 202.446126][T23739] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 202.476138][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7826'. [ 202.485961][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7826'. [ 202.495586][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7826'. [ 202.505023][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7826'. [ 202.635929][T23774] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.648479][T23774] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 202.660495][T23774] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 202.715662][T23786] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 202.815342][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 202.815355][ T29] audit: type=1326 audit(524976.778:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23803 comm="syz.3.7851" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc79450ebe9 code=0x0 [ 202.852800][T23808] netlink: 'syz.1.7853': attribute type 4 has an invalid length. [ 202.949583][T23825] tap0: tun_chr_ioctl cmd 1074025681 [ 202.999019][ T29] audit: type=1326 audit(524976.957:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.041901][T23837] random: crng reseeded on system resumption [ 203.052985][ T29] audit: type=1326 audit(524976.957:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.076254][ T29] audit: type=1326 audit(524976.957:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.099845][ T29] audit: type=1326 audit(524976.957:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.123198][ T29] audit: type=1326 audit(524976.957:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.146621][ T29] audit: type=1326 audit(524976.957:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.169956][ T29] audit: type=1326 audit(524976.987:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.193139][ T29] audit: type=1326 audit(524976.987:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.216325][ T29] audit: type=1326 audit(524976.987:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23834 comm="syz.0.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f722821ebe9 code=0x7ffc0000 [ 203.319303][T23860] loop1: detected capacity change from 0 to 128 [ 203.329506][T23862] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 203.651205][T23921] atomic_op ffff88811ac54528 conn xmit_atomic 0000000000000000 [ 203.691879][T23927] loop3: detected capacity change from 0 to 128 [ 203.706161][T23927] EXT4-fs: Ignoring removed nobh option [ 203.720071][T23927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.783324][ T9942] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.008317][T23969] loop6: detected capacity change from 0 to 1024 [ 204.024070][T23969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.038574][T23975] loop3: detected capacity change from 0 to 2048 [ 204.039387][T23969] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.6.7919: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 204.064991][T23969] EXT4-fs error (device loop6) in ext4_delete_entry:2739: Corrupt filesystem [ 204.074060][T23969] EXT4-fs warning (device loop6): ext4_rename_delete:3735: inode #2: comm syz.6.7919: Deleting old file: nlink 4, error=-117 [ 204.099029][T22030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.109064][T23975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 204.270238][ T9947] bridge0: port 3(syz_tun) entered disabled state [ 204.287629][ T9947] syz_tun (unregistering): left allmulticast mode [ 204.294153][ T9947] syz_tun (unregistering): left promiscuous mode [ 204.300532][ T9947] bridge0: port 3(syz_tun) entered disabled state [ 204.355549][ T3544] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.470236][T23975] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.485880][ T3544] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.496715][T23975] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 204.509331][T23975] EXT4-fs (loop3): This should not happen!! Data will be lost [ 204.509331][T23975] [ 204.519034][T23975] EXT4-fs (loop3): Total free blocks count 0 [ 204.525083][T23975] EXT4-fs (loop3): Free/Dirty block details [ 204.531019][T23975] EXT4-fs (loop3): free_blocks=2415919104 [ 204.536828][T23975] EXT4-fs (loop3): dirty_blocks=8208 [ 204.542129][T23975] EXT4-fs (loop3): Block reservation details [ 204.548173][T23975] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 204.586388][ T3544] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.626105][ T3544] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.663010][ T3530] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 204.701762][T24045] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 204.709037][T24019] lo speed is unknown, defaulting to 1000 [ 204.743587][T24068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 204.750197][T24068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.757916][T24068] vhci_hcd vhci_hcd.0: Device attached [ 204.758045][ T3544] bridge_slave_1: left allmulticast mode [ 204.769638][ T3544] bridge_slave_1: left promiscuous mode [ 204.775571][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.783659][ T3544] bridge_slave_0: left promiscuous mode [ 204.784810][T24068] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.789534][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.805095][T24068] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 204.811631][T24068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.819170][T24068] vhci_hcd vhci_hcd.0: Device attached [ 204.838869][T24068] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 204.845557][T24068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.853593][T24068] vhci_hcd vhci_hcd.0: Device attached [ 204.862859][T24083] vhci_hcd: connection closed [ 204.863069][ T3589] vhci_hcd: stop threads [ 204.863099][T24081] vhci_hcd: connection closed [ 204.867886][ T3589] vhci_hcd: release socket [ 204.877037][T24089] loop3: detected capacity change from 0 to 512 [ 204.881236][ T3589] vhci_hcd: disconnect device [ 204.881621][T24071] vhci_hcd: connection closed [ 204.889606][T24089] EXT4-fs: Ignoring removed oldalloc option [ 204.892877][ T3589] vhci_hcd: stop threads [ 204.907237][ T3589] vhci_hcd: release socket [ 204.911759][ T3589] vhci_hcd: disconnect device [ 204.916841][ T3589] vhci_hcd: stop threads [ 204.921192][ T3589] vhci_hcd: release socket [ 204.925654][T24089] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.7948: Parent and EA inode have the same ino 15 [ 204.925670][ T3589] vhci_hcd: disconnect device [ 204.944406][T24089] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.7948: Parent and EA inode have the same ino 15 [ 204.959431][T24089] EXT4-fs (loop3): 1 orphan inode deleted [ 204.965560][T24089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.991309][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.020514][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.030081][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.039159][ T3544] bond0 (unregistering): Released all slaves [ 205.048747][ T3544] bond1 (unregistering): Released all slaves [ 205.119167][ T3544] hsr_slave_0: left promiscuous mode [ 205.132859][ T3544] hsr_slave_1: left promiscuous mode [ 205.138907][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.146694][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.154557][ T3544] batman_adv: batadv0: Interface deactivated: dummy0 [ 205.161373][ T3544] batman_adv: batadv0: Removing interface: dummy0 [ 205.169247][ T3544] team0: left allmulticast mode [ 205.174141][ T3544] team_slave_0: left allmulticast mode [ 205.179753][ T3544] team_slave_1: left allmulticast mode [ 205.185242][ T3544] team0: left promiscuous mode [ 205.190077][ T3544] team_slave_0: left promiscuous mode [ 205.195570][ T3544] team_slave_1: left promiscuous mode [ 205.234663][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 205.247236][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 205.302673][ T1036] lo speed is unknown, defaulting to 1000 [ 205.305508][T24019] chnl_net:caif_netlink_parms(): no params data found [ 205.308499][ T1036] infiniband syz0: ib_query_port failed (-19) [ 205.348233][T24193] binfmt_misc: register: failed to install interpreter file ./bus [ 205.405297][T24019] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.412477][T24019] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.420260][T24019] bridge_slave_0: entered allmulticast mode [ 205.426935][T24019] bridge_slave_0: entered promiscuous mode [ 205.434279][T24019] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.441537][T24019] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.449026][T24019] bridge_slave_1: entered allmulticast mode [ 205.455665][T24019] bridge_slave_1: entered promiscuous mode [ 205.522719][T24019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.545634][T24019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.561173][T24280] loop0: detected capacity change from 0 to 512 [ 205.580127][T24280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.604447][T24280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.618444][T24019] team0: Port device team_slave_0 added [ 205.631689][T24019] team0: Port device team_slave_1 added [ 205.655168][ T3544] ------------[ cut here ]------------ [ 205.660787][ T3544] WARNING: CPU: 1 PID: 3544 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 205.670954][ T3544] Modules linked in: [ 205.674900][ T3544] CPU: 1 UID: 0 PID: 3544 Comm: kworker/u8:21 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 205.687732][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.697886][ T3544] Workqueue: netns cleanup_net [ 205.702750][ T3544] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 205.708810][ T3544] Code: 95 57 ab fc 4b 83 3c 3e 00 75 19 e8 49 86 90 fc 49 81 ff f8 07 00 00 74 1d e8 3b 86 90 fc 49 83 c7 08 eb d7 e8 30 86 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 205.713601][T24280] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7962: corrupted xattr block 19: overlapping e_value [ 205.728545][ T3544] RSP: 0018:ffffc90002f43c78 EFLAGS: 00010293 [ 205.744946][T24280] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 205.748295][ T3544] RAX: ffffffff84c77330 RBX: ffff888103328000 RCX: ffff88811b2d4200 [ 205.748311][ T3544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810956e000 [ 205.748326][ T3544] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 205.757391][T24280] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7962: corrupted xattr block 19: overlapping e_value [ 205.765347][ T3544] R10: ffffc90002f43bf8 R11: 0001c90002f43bf8 R12: ffffffff86c93940 [ 205.803039][ T3544] R13: ffff888103328028 R14: ffff88810956e000 R15: 0000000000000000 [ 205.809603][T24334] loop6: detected capacity change from 0 to 256 [ 205.811024][ T3544] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 205.826271][ T3544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.827101][T24334] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.832951][ T3544] CR2: 0000200000002780 CR3: 000000011cacc000 CR4: 00000000003506f0 [ 205.833004][ T3544] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 205.833019][ T3544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 205.833035][ T3544] Call Trace: [ 205.833043][ T3544] [ 205.873954][ T3544] ops_undo_list+0x27b/0x410 [ 205.878582][ T3544] cleanup_net+0x2de/0x4d0 [ 205.883064][ T3544] process_scheduled_works+0x4cb/0x9d0 [ 205.888850][ T3544] worker_thread+0x582/0x770 [ 205.893499][ T3544] kthread+0x489/0x510 [ 205.897663][ T3544] ? finish_task_switch+0xad/0x2b0 [ 205.902823][ T3544] ? __pfx_worker_thread+0x10/0x10 [ 205.903373][T24280] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 205.907975][ T3544] ? __pfx_kthread+0x10/0x10 [ 205.918052][T24280] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.7962: corrupted xattr block 19: overlapping e_value [ 205.921566][ T3544] ret_from_fork+0xda/0x150 [ 205.937251][T24280] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 205.939890][ T3544] ? __pfx_kthread+0x10/0x10 [ 205.953486][ T3544] ret_from_fork_asm+0x1a/0x30 [ 205.958308][ T3544] [ 205.961429][ T3544] ---[ end trace 0000000000000000 ]--- [ 205.967699][ T3544] ------------[ cut here ]------------ [ 205.973203][ T3544] WARNING: CPU: 1 PID: 3544 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 205.983414][ T3544] Modules linked in: [ 205.987383][ T3544] CPU: 1 UID: 0 PID: 3544 Comm: kworker/u8:21 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 206.001813][ T3544] Tainted: [W]=WARN [ 206.005667][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.015774][ T3544] Workqueue: netns cleanup_net [ 206.020593][ T3544] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 206.026651][ T3544] Code: 51 57 ab fc 49 83 3c 1e 00 75 19 e8 05 86 90 fc 48 81 fb f8 07 00 00 74 1d e8 f7 85 90 fc 48 83 c3 08 eb d7 e8 ec 85 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 da 85 90 fc 5b 41 5e 41 5f [ 206.046345][ T3544] RSP: 0018:ffffc90002f43c78 EFLAGS: 00010293 [ 206.052443][ T3544] RAX: ffffffff84c77374 RBX: 0000000000000008 RCX: ffff88811b2d4200 [ 206.060488][ T3544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810956e808 [ 206.068601][ T3544] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 206.076658][ T3544] R10: ffffc90002f43bf8 R11: 0001c90002f43bf8 R12: ffffffff86c93940 [ 206.084704][ T3544] R13: ffff888103328028 R14: ffff88810956e800 R15: 00000000000007f8 [ 206.092702][ T3544] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 206.101695][ T3544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.108300][ T3544] CR2: 0000200000002780 CR3: 000000011cacc000 CR4: 00000000003506f0 [ 206.116358][ T3544] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 206.124416][ T3544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 206.132481][ T3544] Call Trace: [ 206.135859][ T3544] [ 206.138806][ T3544] ops_undo_list+0x27b/0x410 [ 206.143508][ T3544] cleanup_net+0x2de/0x4d0 [ 206.147956][ T3544] process_scheduled_works+0x4cb/0x9d0 [ 206.153563][ T3544] worker_thread+0x582/0x770 [ 206.158170][ T3544] kthread+0x489/0x510 [ 206.162247][ T3544] ? finish_task_switch+0xad/0x2b0 [ 206.167474][ T3544] ? __pfx_worker_thread+0x10/0x10 [ 206.172639][ T3544] ? __pfx_kthread+0x10/0x10 [ 206.177272][ T3544] ret_from_fork+0xda/0x150 [ 206.181780][ T3544] ? __pfx_kthread+0x10/0x10 [ 206.186412][ T3544] ret_from_fork_asm+0x1a/0x30 [ 206.191268][ T3544] [ 206.194311][ T3544] ---[ end trace 0000000000000000 ]--- [ 206.211063][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.228932][ T3544] IPVS: stop unused estimator thread 0... [ 206.235373][T24019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.242358][T24019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.268492][T24019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.284400][T24370] smc: net device bond0 applied user defined pnetid SYZ0 [ 206.298377][ T3544] ------------[ cut here ]------------ [ 206.303891][ T3544] WARNING: CPU: 1 PID: 3544 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 206.313555][ T3544] Modules linked in: [ 206.315792][T24370] smc: net device bond0 erased user defined pnetid SYZ0 [ 206.317528][ T3544] CPU: 1 UID: 0 PID: 3544 Comm: kworker/u8:21 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 206.338767][ T3544] Tainted: [W]=WARN [ 206.342591][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.352884][ T3544] Workqueue: netns cleanup_net [ 206.357739][ T3544] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 206.363367][ T3544] Code: 48 8d bb 30 0e 00 00 e8 b5 03 bd fc 48 8b bb 30 0e 00 00 e8 79 84 c9 fc 5b 41 5e 41 5f 5d e9 ce 86 b3 00 cc e8 08 46 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 fa 45 a2 fc 90 0f 0b 90 4c 89 f7 e8 7e [ 206.383141][ T3544] RSP: 0018:ffffc90002f43c60 EFLAGS: 00010293 [ 206.389288][ T3544] RAX: ffffffff84b5b358 RBX: ffff888103328000 RCX: ffff88811b2d4200 [ 206.397336][ T3544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103328e00 [ 206.405380][ T3544] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 206.413384][ T3544] R10: ffffc90002f43be8 R11: 0001c90002f43be8 R12: ffffffff86c8b7c0 [ 206.421427][ T3544] R13: ffff888103328028 R14: ffff888103328e00 R15: ffff888103328000 [ 206.429477][ T3544] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 206.438461][ T3544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.445071][ T3544] CR2: 0000555592bcb7d0 CR3: 0000000006834000 CR4: 00000000003506f0 [ 206.453536][ T3544] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 206.461562][ T3544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 206.469650][ T3544] Call Trace: [ 206.472947][ T3544] [ 206.475920][ T3544] xfrm_net_exit+0x2d/0x60 [ 206.476323][T24019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.480376][ T3544] ops_undo_list+0x27b/0x410 [ 206.487448][T24019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.492077][ T3544] cleanup_net+0x2de/0x4d0 [ 206.518018][T24019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.522410][ T3544] process_scheduled_works+0x4cb/0x9d0 [ 206.538534][ T3544] worker_thread+0x582/0x770 [ 206.543188][ T3544] kthread+0x489/0x510 [ 206.547344][ T3544] ? finish_task_switch+0xad/0x2b0 [ 206.552550][ T3544] ? __pfx_worker_thread+0x10/0x10 [ 206.557745][ T3544] ? __pfx_kthread+0x10/0x10 [ 206.562357][ T3544] ret_from_fork+0xda/0x150 [ 206.567166][ T3544] ? __pfx_kthread+0x10/0x10 [ 206.571781][ T3544] ret_from_fork_asm+0x1a/0x30 [ 206.576831][ T3544] [ 206.579869][ T3544] ---[ end trace 0000000000000000 ]--- [ 206.610468][T24019] hsr_slave_0: entered promiscuous mode [ 206.616852][T24019] hsr_slave_1: entered promiscuous mode [ 206.696073][T24451] __nla_validate_parse: 4 callbacks suppressed [ 206.696091][T24451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7988'. [ 206.877647][T24520] loop6: detected capacity change from 0 to 4096 [ 206.890790][T24520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.991814][T24019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.017472][T24019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.048070][T24019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.065601][T24019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.101968][T22030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.125492][T24019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.138994][T24019] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.155036][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.162140][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.178584][T24596] can0: slcan on ttyS3. [ 207.194583][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.201688][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.216342][T24603] syz_tun: entered promiscuous mode [ 207.223556][T24603] syz_tun: left promiscuous mode [ 207.250514][T24596] can0 (unregistered): slcan off ttyS3. [ 207.256598][T24596] Falling back ldisc for ttyS3. [ 207.312096][T24019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.329819][T24621] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8017'. [ 207.347588][T24621] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8017'. [ 207.359645][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8018'. [ 207.368792][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8018'. [ 207.396844][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8019'. [ 207.438400][T24019] veth0_vlan: entered promiscuous mode [ 207.454086][T24019] veth1_vlan: entered promiscuous mode [ 207.480675][T24019] veth0_macvtap: entered promiscuous mode [ 207.490977][T24019] veth1_macvtap: entered promiscuous mode [ 207.504357][T24019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.532734][T24019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.546963][ T3589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.561202][T24641] loop0: detected capacity change from 0 to 1024 [ 207.574296][T24641] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.585468][T24641] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.599223][ T3589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.615303][ T3589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.634839][ T3589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.645303][T24641] JBD2: no valid journal superblock found [ 207.651078][T24641] EXT4-fs (loop0): Could not load journal inode [ 207.678325][T24647] loop4: detected capacity change from 0 to 8192 [ 207.726211][T24661] netlink: 748 bytes leftover after parsing attributes in process `syz.1.8029'. [ 207.735392][T24661] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 207.760960][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8032'. [ 207.770012][T24665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8032'. [ 207.867985][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 207.868011][ T29] audit: type=1400 audit(524981.797:9381): avc: denied { execute } for pid=24686 comm="syz.4.8040" name="file0" dev="tmpfs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.920802][T24689] loop6: detected capacity change from 0 to 512 [ 207.932489][T24689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.942801][ T29] audit: type=1400 audit(524981.827:9382): avc: denied { execute_no_trans } for pid=24686 comm="syz.4.8040" path="/1557/file0" dev="tmpfs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.966077][T24696] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 207.994126][T24689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.021096][ T29] audit: type=1400 audit(524981.936:9383): avc: denied { write } for pid=24688 comm="syz.6.8041" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.043541][ T29] audit: type=1400 audit(524981.936:9384): avc: denied { open } for pid=24688 comm="syz.6.8041" path="/128/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.069758][T22030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.098232][ T29] audit: type=1400 audit(524982.016:9385): avc: denied { create } for pid=24708 comm="syz.3.8060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.117523][ T29] audit: type=1400 audit(524982.016:9386): avc: denied { write } for pid=24708 comm="syz.3.8060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.158158][ T29] audit: type=1400 audit(524982.085:9387): avc: denied { read } for pid=24720 comm="syz.1.8054" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.181175][ T29] audit: type=1400 audit(524982.085:9388): avc: denied { open } for pid=24720 comm="syz.1.8054" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.221369][ T29] audit: type=1400 audit(524982.145:9389): avc: denied { open } for pid=24745 comm="syz.3.8055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 208.240491][ T29] audit: type=1400 audit(524982.145:9390): avc: denied { kernel } for pid=24745 comm="syz.3.8055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 208.340462][T24761] syz_tun: entered promiscuous mode [ 208.347206][T24761] syz_tun: left promiscuous mode [ 208.504197][T24784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8071'. [ 208.513375][T24784] netem: change failed [ 208.539437][T24786] loop6: detected capacity change from 0 to 2048 [ 208.548488][T24786] EXT4-fs (loop6): failed to initialize system zone (-117) [ 208.555881][T24786] EXT4-fs (loop6): mount failed [ 208.610453][T24795] loop6: detected capacity change from 0 to 8192 [ 208.983613][T24813] can0: slcan on ttyS3. [ 209.020619][T24813] can0 (unregistered): slcan off ttyS3. [ 209.026390][T24813] Falling back ldisc for ttyS3. [ 209.216586][T24853] loop4: detected capacity change from 0 to 128 [ 209.317343][T24877] can0: slcan on ttyS3. [ 209.362745][T24877] can0 (unregistered): slcan off ttyS3. [ 209.371617][T24877] Falling back ldisc for ttyS3. [ 209.377069][T24891] loop3: detected capacity change from 0 to 512 [ 209.389302][T24891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.406663][T24891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.456421][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.553670][T24919] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 209.594401][T24925] vhci_hcd: invalid port number 23 [ 209.726527][T24943] loop3: detected capacity change from 0 to 1024 [ 209.744121][T24943] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.755962][T24943] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 209.789241][T24943] JBD2: no valid journal superblock found [ 209.796152][T24943] EXT4-fs (loop3): Could not load journal inode [ 209.854530][T24971] loop4: detected capacity change from 0 to 1024 [ 209.861648][T24971] EXT4-fs: Ignoring removed bh option [ 209.861940][T24973] syz_tun: entered promiscuous mode [ 209.867738][T24971] EXT4-fs: inline encryption not supported [ 209.876135][T24973] syz_tun: left promiscuous mode [ 209.885444][T24971] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.899875][T24971] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 209.909442][T24971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.8138: lblock 2 mapped to illegal pblock 2 (length 1) [ 209.924092][T24971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.8138: lblock 0 mapped to illegal pblock 48 (length 1) [ 209.940293][T24971] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8138: Failed to acquire dquot type 0 [ 209.952334][T24971] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 209.963137][T24971] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.8138: mark_inode_dirty error [ 209.981115][T24983] loop3: detected capacity change from 0 to 4096 [ 209.988578][T24971] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 209.999326][T24971] EXT4-fs (loop4): 1 orphan inode deleted [ 210.005591][T24971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.018935][ T3589] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.040344][T24971] EXT4-fs (loop4): shut down requested (1) [ 210.040933][T24983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.072035][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.141167][T24999] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 210.147822][T24999] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.155565][T24999] vhci_hcd vhci_hcd.0: Device attached [ 210.183044][T25000] vhci_hcd: connection closed [ 210.183301][ T3589] vhci_hcd: stop threads [ 210.192388][ T3589] vhci_hcd: release socket [ 210.196838][ T3589] vhci_hcd: disconnect device [ 210.226560][T25007] loop4: detected capacity change from 0 to 128 [ 210.245320][T25007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 210.253233][T25007] FAT-fs (loop4): Filesystem has been set read-only [ 210.268919][T25007] bio_check_eod: 18143 callbacks suppressed [ 210.268936][T25007] syz.4.8152: attempt to access beyond end of device [ 210.268936][T25007] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 210.288743][T25007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 210.296676][T25007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 210.306330][T25007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 210.327941][T25007] syz.4.8152: attempt to access beyond end of device [ 210.327941][T25007] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 210.344429][T25007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 210.352431][T25007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 210.363759][ T9942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.370369][T25007] syz.4.8152: attempt to access beyond end of device [ 210.370369][T25007] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.386346][T25013] syz.4.8152: attempt to access beyond end of device [ 210.386346][T25013] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 210.399739][T25013] buffer_io_error: 18142 callbacks suppressed [ 210.399756][T25013] Buffer I/O error on dev loop4, logical block 2065, async page read [ 210.415804][T25013] syz.4.8152: attempt to access beyond end of device [ 210.415804][T25013] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 210.429423][T25013] Buffer I/O error on dev loop4, logical block 2066, async page read [ 210.437875][T25013] syz.4.8152: attempt to access beyond end of device [ 210.437875][T25013] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 210.451269][T25013] Buffer I/O error on dev loop4, logical block 2067, async page read [ 210.485349][T25013] syz.4.8152: attempt to access beyond end of device [ 210.485349][T25013] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 210.498709][T25013] Buffer I/O error on dev loop4, logical block 2068, async page read [ 210.509162][T25027] vhci_hcd: invalid port number 23 [ 210.522281][T25013] syz.4.8152: attempt to access beyond end of device [ 210.522281][T25013] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 210.535683][T25013] Buffer I/O error on dev loop4, logical block 2069, async page read [ 210.545238][T25013] syz.4.8152: attempt to access beyond end of device [ 210.545238][T25013] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 210.558661][T25013] Buffer I/O error on dev loop4, logical block 2070, async page read [ 210.568080][T25013] syz.4.8152: attempt to access beyond end of device [ 210.568080][T25013] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 210.581494][T25013] Buffer I/O error on dev loop4, logical block 2071, async page read [ 210.591569][T25013] Buffer I/O error on dev loop4, logical block 2072, async page read [ 210.601836][T25013] Buffer I/O error on dev loop4, logical block 2065, async page read [ 210.611125][T25013] Buffer I/O error on dev loop4, logical block 2066, async page read [ 210.797666][T25051] loop1: detected capacity change from 0 to 4096 [ 210.811162][T25051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.151025][T24019] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.182354][T25088] vhci_hcd: invalid port number 23 [ 211.212878][T25095] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 211.219523][T25095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.227270][T25095] vhci_hcd vhci_hcd.0: Device attached [ 211.236744][T25095] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.255766][T25095] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 211.262398][T25095] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.269921][T25095] vhci_hcd vhci_hcd.0: Device attached [ 211.283361][T25095] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 211.289990][T25095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.297633][T25095] vhci_hcd vhci_hcd.0: Device attached [ 211.299131][T25108] netlink: 'syz.1.8188': attribute type 5 has an invalid length. [ 211.314767][T25103] vhci_hcd: connection closed [ 211.314835][T25096] vhci_hcd: connection closed [ 211.314919][T25106] vhci_hcd: connection closed [ 211.327960][T25111] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 211.334957][ T3568] vhci_hcd: stop threads [ 211.343792][ T3568] vhci_hcd: release socket [ 211.348319][ T3568] vhci_hcd: disconnect device [ 211.359141][ T3568] vhci_hcd: stop threads [ 211.364004][ T3568] vhci_hcd: release socket [ 211.368490][ T3568] vhci_hcd: disconnect device [ 211.373794][ T3568] vhci_hcd: stop threads [ 211.378130][ T3568] vhci_hcd: release socket [ 211.382573][ T3568] vhci_hcd: disconnect device [ 211.424060][T17798] vhci_hcd: vhci_device speed not set [ 211.454237][T25127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25127 comm=syz.3.8195 [ 211.491103][T25131] vlan2: entered allmulticast mode [ 211.879131][T25183] __nla_validate_parse: 9 callbacks suppressed [ 211.879172][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8219'. [ 211.973094][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8225'. [ 212.031551][T25207] netlink: 'syz.6.8230': attribute type 4 has an invalid length. [ 212.075302][T25219] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 212.081865][T25219] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.089561][T25219] vhci_hcd vhci_hcd.0: Device attached [ 212.096028][T25221] vhci_hcd: connection closed [ 212.096175][ T3566] vhci_hcd: stop threads [ 212.105278][ T3566] vhci_hcd: release socket [ 212.109792][ T3566] vhci_hcd: disconnect device [ 212.131244][T25226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8237'. [ 212.204233][T25236] tap0: tun_chr_ioctl cmd 1074025681 [ 212.281247][T25252] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 212.287841][T25252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.295574][T25252] vhci_hcd vhci_hcd.0: Device attached [ 212.305196][T25252] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.314389][T25252] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 212.320949][T25252] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.328492][T25252] vhci_hcd vhci_hcd.0: Device attached [ 212.336225][T25252] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 212.342773][T25252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.350447][T25252] vhci_hcd vhci_hcd.0: Device attached [ 212.357905][T25257] vhci_hcd: connection closed [ 212.358203][ T3572] vhci_hcd: stop threads [ 212.367384][ T3572] vhci_hcd: release socket [ 212.368872][T25260] loop4: detected capacity change from 0 to 4096 [ 212.371900][ T3572] vhci_hcd: disconnect device [ 212.373742][T25255] vhci_hcd: connection closed [ 212.383620][ T3566] vhci_hcd: stop threads [ 212.383783][T25253] vhci_hcd: connection closed [ 212.388316][ T3566] vhci_hcd: release socket [ 212.388329][ T3566] vhci_hcd: disconnect device [ 212.392278][T25260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.393374][ T3566] vhci_hcd: stop threads [ 212.423251][ T3566] vhci_hcd: release socket [ 212.427677][ T3566] vhci_hcd: disconnect device [ 212.532630][T25260] ================================================================== [ 212.540769][T25260] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 212.548166][T25260] [ 212.550488][T25260] read-write to 0xffff888106ef36b8 of 8 bytes by task 3566 on cpu 0: [ 212.558548][T25260] __xa_clear_mark+0xf5/0x1e0 [ 212.563241][T25260] __folio_end_writeback+0x177/0x470 [ 212.568553][T25260] folio_end_writeback+0x71/0x3d0 [ 212.573682][T25260] ext4_finish_bio+0x459/0x8c0 [ 212.578453][T25260] ext4_release_io_end+0x9f/0x1f0 [ 212.583493][T25260] ext4_end_io_end+0x18d/0x240 [ 212.588268][T25260] ext4_end_io_rsv_work+0x151/0x1e0 [ 212.593477][T25260] process_scheduled_works+0x4cb/0x9d0 [ 212.598967][T25260] worker_thread+0x582/0x770 [ 212.603583][T25260] kthread+0x489/0x510 [ 212.607655][T25260] ret_from_fork+0xda/0x150 [ 212.612258][T25260] ret_from_fork_asm+0x1a/0x30 [ 212.617059][T25260] [ 212.619390][T25260] read to 0xffff888106ef36b8 of 8 bytes by task 25260 on cpu 1: [ 212.627030][T25260] xas_find_marked+0x218/0x620 [ 212.631807][T25260] find_get_entry+0x5d/0x380 [ 212.636416][T25260] filemap_get_folios_tag+0x13b/0x210 [ 212.641787][T25260] file_write_and_wait_range+0x1ea/0x2c0 [ 212.647462][T25260] generic_buffers_fsync_noflush+0x45/0x120 [ 212.653360][T25260] ext4_sync_file+0x1ab/0x690 [ 212.658093][T25260] vfs_fsync_range+0x10d/0x130 [ 212.662858][T25260] ext4_buffered_write_iter+0x34f/0x3c0 [ 212.668418][T25260] ext4_file_write_iter+0xdbf/0xf00 [ 212.674225][T25260] do_iter_readv_writev+0x49c/0x540 [ 212.679437][T25260] vfs_writev+0x2df/0x8b0 [ 212.683803][T25260] __se_sys_pwritev2+0xfc/0x1c0 [ 212.688680][T25260] __x64_sys_pwritev2+0x67/0x80 [ 212.693537][T25260] x64_sys_call+0x2c55/0x2ff0 [ 212.698227][T25260] do_syscall_64+0xd2/0x200 [ 212.702750][T25260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.709177][T25260] [ 212.711498][T25260] value changed: 0xffffffff00000000 -> 0xfffffff800000000 [ 212.718597][T25260] [ 212.720915][T25260] Reported by Kernel Concurrency Sanitizer on: [ 212.727076][T25260] CPU: 1 UID: 0 PID: 25260 Comm: syz.4.8249 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 212.741167][T25260] Tainted: [W]=WARN [ 212.745024][T25260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.755090][T25260] ================================================================== [ 212.815934][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.