last executing test programs: 5.404916039s ago: executing program 4 (id=2695): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = add_key$keyring(0x0, &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) munlock(&(0x7f0000f5c000/0x3000)=nil, 0x3000) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000001000)="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", 0x1000, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffff"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}}, 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r9, 0x0, 0x0, 0x88c0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x801}, 0x1c) sendto$inet6(r9, &(0x7f0000000440)='\r', 0x1, 0x4000080, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 5.33147815s ago: executing program 4 (id=2700): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x18}, 0x0) 5.165784492s ago: executing program 4 (id=2703): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESOCT, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000fbff00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.314573974s ago: executing program 4 (id=2711): socket$key(0xf, 0x3, 0x2) getgroups(0x2, &(0x7f00000026c0)=[0x0, 0x0]) setresgid(0x0, 0x0, r0) setfsgid(r0) setfsgid(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x2, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r3}, 0x38) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) 2.069650803s ago: executing program 2 (id=2747): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 2.049815713s ago: executing program 2 (id=2748): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0xb, 0x8509) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x5000000, r4, 0x0, 0x0, 0xfba2, 0x8}) 1.970795984s ago: executing program 2 (id=2749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYBLOB="25d5662368891a71814b3070a926beda4f7ab72dda8b53ce7209022e04c78a3e85ef903b554903ba36636862af0ccec4e9", @ANYRES8, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r3, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.679722458s ago: executing program 2 (id=2750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_alloc_extfrag\x00', r1, 0x0, 0xf}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb000018000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00!', 0x2}], 0x1, 0x7, 0x0) 1.55102652s ago: executing program 2 (id=2752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.298814903s ago: executing program 0 (id=2760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@rodir}, {@numtail}, {@shortname_mixed}, {@fat=@nfs_nostale_ro}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x2) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES32=0x0], 0x1, 0x2f4, &(0x7f0000000900)="$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") (async, rerun: 32) mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async, rerun: 32) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') 1.091501136s ago: executing program 3 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/21, 0xb}], 0x3e8) 1.075842976s ago: executing program 0 (id=2763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x9, 0x2, 'pptp\x00', {0xfffffffffffffff7}}}}, {{@ip={@loopback, @remote, 0xffffffff, 0xff000000, 'veth0_to_bond\x00', 'veth1\x00', {}, {0x1fe}, 0x89, 0x1, 0x31}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0x3, 0x2, 0x1, 0x6], 0x2, 0x2}, {0x4, [0x2, 0x6, 0x2, 0x4, 0x1, 0x2], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 1.022327407s ago: executing program 3 (id=2764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xa7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xff, 0x7ffc0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.021709887s ago: executing program 0 (id=2765): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(0x0, &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000000)) 1.021312157s ago: executing program 3 (id=2766): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18524, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}, {@mmap}, {@posixacl}, {@afid={'afid', 0x3d, 0x6}}, {@posixacl}, {@ignoreqv}, {@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x65, 0x65, 0x65, 0x39, 0x0, 0x37], 0x2d, [0x64, 0x62, 0x66, 0x39], 0x2d, [0x61, 0x62, 0x38, 0x66], 0x2d, [0x35, 0x62, 0x66, 0x32], 0x2d, [0x31, 0x5c, 0x34, 0x66, 0x66, 0x39, 0x63, 0x61]}}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r2}}, {@fowner_gt={'fowner>', r4}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x35, 0x50, 0x31, 0x33, 0x39], 0x2d, [0x61, 0x66, 0x39, 0x66], 0x2d, [0x62, 0x31, 0x6, 0x63], 0x2d, [0x66, 0x2c, 0x37, 0x39], 0x2d, [0x61, 0x33, 0x0, 0x32, 0x63, 0x64, 0x64, 0x37]}}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) unshare(0x66000080) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x0, 0x207, &(0x7f0000000a40)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @private2, 0x47c070f5}, {0xa, 0x4e24, 0x7, @private0, 0x62337cfb}, r6, 0x8}}, 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_hwaddr=@remote}) 962.884218ms ago: executing program 0 (id=2768): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 936.597088ms ago: executing program 0 (id=2769): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4092, 0xffc}, {&(0x7f00000046c0)=""/4100, 0x1004}, {&(0x7f0000001400)=""/215, 0xd7}, {&(0x7f00000012c0)=""/175, 0xaf}], 0x5}, 0x0) 748.84796ms ago: executing program 2 (id=2772): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @local, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) alarm(0xa72) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xfffffff9, @private1, 0xa2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r8, 0x9, 0xf39, 0x7, 0x6, 0x1}, &(0x7f0000000100)=0x14) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xe, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xf61}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x1}, @jmp={0x5, 0x0, 0x6, 0x8, 0x2, 0x4, 0xffffffffffffffff}, @generic={0xda, 0x3, 0x7, 0x6, 0x58}, @jmp={0x5, 0x1, 0x7, 0x6, 0x1, 0x77, 0x4}, @ldst={0x3, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x81, &(0x7f0000000540)=""/129, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0xe8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ac, @void, @value}, 0x94) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 520.101313ms ago: executing program 1 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200"], 0x50) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0xff, @empty, 0x4}, 0x1c) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0xffffffffffffffff) r8 = getuid() sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x8, 0x70bd2b, 0x25dfdbfb, {0x2, 0x80, 0x14, 0x3, 0xfd, 0x0, 0x0, 0x9, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0xaafa, 0x2, 0x3, r1}}, @RTA_UID={0x8, 0x19, r8}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x0) 517.397163ms ago: executing program 1 (id=2776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xa7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xff, 0x7ffc0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 497.181494ms ago: executing program 1 (id=2777): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0xb, 0x8509) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x5000000, r3, 0x0, 0x0, 0xfba2, 0x8}) 420.615495ms ago: executing program 1 (id=2778): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) (fail_nth: 1) 183.203448ms ago: executing program 3 (id=2779): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 158.454218ms ago: executing program 3 (id=2780): acct(&(0x7f00000008c0)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 157.888028ms ago: executing program 1 (id=2781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$eJzs3U9vG2kZAPBnJnY2abPrLHBYVmJ3xS5KIqjTbOhuhNACEoLTSgvlHkLiRlGcuIqdtokqSMUHQEIIkLjAiQsSHwAJ9SMgpEpwR4BAFbRw4FAYZHuchtROU+LY3eT3k97MO//8PK/jGc87M/IEcG69ERHTEZFlWTYTEaV8epqX2GuX5nIPH9xebpYksuzq35JI8mmd13ohH17MVxuLiK9/NeJbyZNx6zu760vVamUrH59tbCSPsmz30trG0mpltbI5/1K8s/DuwpWFy31p52REvPflP//wez//ynu//szNPyz+dfrb7Qa2HWxHP7WbXmy9Fx2FiNg6jWBDUmi1sO3KkHMBAOBozeP9j0TEJyNiJkox0jqaa5kZbmYAAABAv2RfmIhHSfv6HwAAAHA2pRExER+MlvP7fSciTcvl9j28H4sLabVWb3w6K+2fL5iMYnptrVq5nN87MBnFpDk+l99j2xl/+9D4fES8HBE/KI23xsvLterKUM98AAAAwPlxsdXnT9JO//+fpXb/HwAAADhjJoedAAAAAHDq9P8BAADg7NP/BwAAgDPtg/ffb5as8/zrlRs72+u1G5dWKvX18sb2cnm5tnW9vFqrrd4vRNQ2nvZ61Vrt+mdjc/vWbKNSb8zWd3YXN2rbm43Ftf95BDYAAAAwQC+/fvf3SUTsfW48jYgsOTCvGJGNHFy4MPj8gNOTPsvCfzq9PIDBGxl2AsDQOKSH86s47ASAoXvafqDnzTu/6X8uAADA6Zj6+P71/1ZpGs3nJd1X2RtcdsBpyq//Jz22deAMc/0fzq/OeX/3AcD5UzzqCECnAM689Bib+smv/2fZMyUFAAD03USrJGk57wdMRJqWyxEvth4L8Pis4EsR8btS8YVra9XKXGtK4vQAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWR9dB+GmCM9poPAAAAfDhEpH9J8ud/TZXemjh8fmA0+VepNYyImz+5+qNbS43G1lxz+t/3pzd+nE9/e+CnLwAAAIAuOv30Tj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrp4YPby50yyLj3vxQRk93iF2KsNRyLYkRc+EcShQPrJREx0of4e3ci4pVu8ZNmWjGZZ3E4fhoR40OOf7EP8eE8u9vc/3yx2/aXxhutYfftr5CXk2rv/0a6xu/s/0Z67P9e7PaC6ZOTXr33y9me8e9EvFrovv/pxE/yN6FwIHazvHnMNn7zG7u7veZlP4uY6vr9k+wv06zNJoXrs/Wd3UtrG0urldXK5vz83DsL7y5cWbg8e22tWsn/do3x/U/86j9Htf9Cj/iTj9vf9f1/65jt//e9Ww8+2q4WD80qxk+zbPrN7p+/V9rxP794KH7nu+9T+b+7OT7Vqe+16we99ovfvvb6Ee1f6dH+sae0f/qY7Z/52nf/eMxFAYABqO/sri9Vq5WtZ6skEXsnWP0ElcgPPgYadHCV8Xgu0uhzZTwGGHTpyM9G5yB2APl8Jw/1XPwL/q8NDQAAOEuS/YP+YWcCAAAAAAAAAAAAAAAAAAAA51d9Z/TI3yc75s/RPczaui5zOObecJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wYAAP//2f7FUg==") 128.482899ms ago: executing program 3 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 110.138109ms ago: executing program 4 (id=2783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004"], 0x64}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) (async) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000040)=0x7, 0x4) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async) r9 = socket(0x1e, 0x4, 0x0) (async) r10 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0x7, 0x7, 0x3, 0x1, 0xc7, 0x4}, 0x1c) (async) dup3(r10, r9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) ioctl$TIOCSTI(r2, 0x5412, 0x0) (async) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fchmod(r12, 0x88) 28.77292ms ago: executing program 0 (id=2784): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4092, 0xffc}, {&(0x7f00000046c0)=""/4100, 0x1004}, {&(0x7f0000001140)=""/122, 0x7a}, {&(0x7f0000001400)=""/215, 0xd7}, {0x0}], 0x6}, 0x0) 7.82442ms ago: executing program 4 (id=2785): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 0s ago: executing program 1 (id=2786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): unted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.423260][T12632] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.197965][T12755] sit0: left promiscuous mode [ 195.231728][T12755] sit0: entered promiscuous mode [ 195.370739][T12761] 9pnet_fd: Insufficient options for proto=fd [ 195.403438][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 195.403527][ T29] audit: type=1326 audit(1746119847.548:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 195.453606][ T29] audit: type=1326 audit(1746119847.588:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 195.477355][ T29] audit: type=1326 audit(1746119847.588:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 195.508463][T12769] loop2: detected capacity change from 0 to 256 [ 195.529596][T12769] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.534196][T12768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2142'. [ 195.566268][T12769] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 195.671074][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 196.375325][T12791] 9pnet_fd: Insufficient options for proto=fd [ 196.436005][T12792] loop3: detected capacity change from 0 to 256 [ 196.445291][T12792] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.481252][ T29] audit: type=1326 audit(1746119848.628:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.504835][ T29] audit: type=1326 audit(1746119848.628:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.529532][ T29] audit: type=1326 audit(1746119848.678:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.553236][ T29] audit: type=1326 audit(1746119848.678:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.576851][ T29] audit: type=1326 audit(1746119848.678:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.609739][ T29] audit: type=1326 audit(1746119848.748:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.633434][ T29] audit: type=1326 audit(1746119848.748:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 196.702156][T12796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12796 comm=syz.4.2151 [ 196.715061][T12796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12796 comm=syz.4.2151 [ 196.851075][T12807] 9pnet_fd: Insufficient options for proto=fd [ 196.861906][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 196.902517][T12811] netlink: '+}[@': attribute type 3 has an invalid length. [ 196.925574][T12811] loop3: detected capacity change from 0 to 2048 [ 196.982754][T12815] loop4: detected capacity change from 0 to 256 [ 197.001970][T12811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.017498][T12815] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.030409][T12811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.078721][T12815] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 197.628088][T12831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12831 comm=syz.2.2164 [ 197.640993][T12831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12831 comm=syz.2.2164 [ 197.845565][T12837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2166'. [ 197.874794][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 197.902220][T12841] loop0: detected capacity change from 0 to 512 [ 197.920171][T12841] EXT4-fs (loop0): 1 orphan inode deleted [ 197.926348][T12841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.939096][T12841] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.950828][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 197.967319][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.989108][T12846] loop0: detected capacity change from 0 to 512 [ 198.010417][T12846] EXT4-fs (loop0): 1 orphan inode deleted [ 198.016563][T12846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.029415][T12846] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.029489][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 198.072944][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.096445][T12853] netlink: '+}[@': attribute type 3 has an invalid length. [ 198.116159][T12853] loop0: detected capacity change from 0 to 2048 [ 198.139272][T12853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.152068][T12853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.227580][T12865] netlink: '+}[@': attribute type 3 has an invalid length. [ 198.244846][T12865] loop4: detected capacity change from 0 to 2048 [ 198.259227][T12865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.271890][T12865] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.328352][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2178'. [ 199.071599][T12878] loop0: detected capacity change from 0 to 512 [ 199.090295][T12878] EXT4-fs (loop0): 1 orphan inode deleted [ 199.096547][T12878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.109795][T12878] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.110866][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 199.145135][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.182050][T12884] sg_write: data in/out 65501/200 bytes for SCSI command 0x93-- guessing data in; [ 199.182050][T12884] program syz.0.2183 not setting count and/or reply_len properly [ 199.316594][T12907] sit0: entered promiscuous mode [ 199.468361][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 199.726959][T12967] loop2: detected capacity change from 0 to 512 [ 199.745323][T12969] loop0: detected capacity change from 0 to 512 [ 199.767873][T12967] EXT4-fs (loop2): 1 orphan inode deleted [ 199.775277][T12967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.789086][ T6156] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 199.801794][T12969] EXT4-fs (loop0): 1 orphan inode deleted [ 199.802072][T12967] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.808798][T12969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.830675][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 199.843548][T12969] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.864200][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.890756][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.905777][T12989] sit0: left promiscuous mode [ 199.941435][T12989] sit0: entered promiscuous mode [ 200.214873][T13032] loop3: detected capacity change from 0 to 512 [ 200.224091][T13032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.237205][T13032] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.251391][T13032] EXT4-fs (loop3): 1 truncate cleaned up [ 200.257731][T13032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.304879][T13025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2195'. [ 200.353525][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.390471][T13047] sit0: entered promiscuous mode [ 200.539318][T13051] loop1: detected capacity change from 0 to 512 [ 200.570191][T13051] EXT4-fs (loop1): 1 orphan inode deleted [ 200.576313][T13051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.589383][T13051] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.590402][ T6160] __quota_error: 70 callbacks suppressed [ 200.590466][ T6160] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.615554][ T6160] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 200.630695][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.670471][T13057] netlink: '+}[@': attribute type 3 has an invalid length. [ 200.687106][T13057] loop1: detected capacity change from 0 to 2048 [ 200.699514][T13057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.721521][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.807006][T13070] loop0: detected capacity change from 0 to 512 [ 200.815809][T13070] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.850027][T13070] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 200.858530][T13070] EXT4-fs (loop0): orphan cleanup on readonly fs [ 200.865153][T13070] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 200.875923][T13070] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.891647][T13070] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 200.899366][T13070] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2207: bg 0: block 40: padding at end of block bitmap is not set [ 200.916024][T13070] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 200.925649][T13070] EXT4-fs (loop0): 1 truncate cleaned up [ 200.932491][T13070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.963803][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.988619][T13108] sit0: left promiscuous mode [ 201.020483][T13108] sit0: entered promiscuous mode [ 201.434396][T13179] sit0: left promiscuous mode [ 201.467799][T13179] sit0: entered promiscuous mode [ 201.671719][T13201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2214'. [ 201.700118][T13203] loop0: detected capacity change from 0 to 512 [ 201.715865][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2216'. [ 201.716283][T13203] EXT4-fs (loop0): 1 orphan inode deleted [ 201.731830][ T6164] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 201.732172][T13203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.741637][ T6164] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 201.766172][T13203] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.801155][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.081122][T13220] sit0: left promiscuous mode [ 202.108710][T13220] sit0: entered promiscuous mode [ 202.300773][T13233] sit0: left promiscuous mode [ 202.333563][T13233] sit0: entered promiscuous mode [ 202.700914][T13295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2226'. [ 202.735636][T13297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13297 comm=syz.2.2227 [ 202.748494][T13297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13297 comm=syz.2.2227 [ 202.771027][T13306] loop1: detected capacity change from 0 to 512 [ 202.795970][T13310] 9pnet_fd: Insufficient options for proto=fd [ 202.824770][T13313] loop2: detected capacity change from 0 to 128 [ 202.859550][T13306] EXT4-fs (loop1): 1 orphan inode deleted [ 202.868738][T13306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.881416][ T6160] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.891274][ T6160] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 202.905189][ T29] audit: type=1326 audit(1746119855.048:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 202.928765][ T29] audit: type=1326 audit(1746119855.048:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 202.952310][ T29] audit: type=1326 audit(1746119855.048:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 202.975916][ T29] audit: type=1326 audit(1746119855.048:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 202.999742][T13306] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.012277][T13330] loop0: detected capacity change from 0 to 256 [ 203.024470][T13330] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.047440][T13330] 9pnet_fd: Insufficient options for proto=fd [ 203.055372][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.081888][ T29] audit: type=1326 audit(1746119855.228:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 203.105631][ T29] audit: type=1326 audit(1746119855.228:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.2.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 203.129666][T13337] loop1: detected capacity change from 0 to 512 [ 203.148301][T13337] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.208776][T13337] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 203.220561][T13352] loop3: detected capacity change from 0 to 512 [ 203.227573][T13337] EXT4-fs (loop1): orphan cleanup on readonly fs [ 203.392299][T13352] EXT4-fs (loop3): 1 orphan inode deleted [ 203.398274][T13337] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.423577][T13352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.445549][T13352] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.457449][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 203.499681][T13359] sit0: left promiscuous mode [ 203.505220][T13337] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 203.539587][T13337] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2232: bg 0: block 40: padding at end of block bitmap is not set [ 203.564790][T13360] sit0: entered promiscuous mode [ 203.573758][T13337] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 203.584444][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.614695][T13337] EXT4-fs (loop1): 1 truncate cleaned up [ 203.645465][T13337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.713467][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.840348][T13368] sit0: left promiscuous mode [ 203.868707][T13372] netlink: '+}[@': attribute type 3 has an invalid length. [ 203.883365][ T12] bio_check_eod: 208 callbacks suppressed [ 203.883380][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.883380][ T12] loop2: rw=1, sector=145, nr_sectors = 32 limit=128 [ 203.907457][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.907457][ T12] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 203.922360][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.922360][ T12] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 203.935897][T13372] loop4: detected capacity change from 0 to 2048 [ 203.943532][T13368] sit0: entered promiscuous mode [ 203.944119][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.944119][ T12] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 203.966355][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.966355][ T12] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 203.983189][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.983189][ T12] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 203.997040][ T12] kworker/u8:0: attempt to access beyond end of device [ 203.997040][ T12] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 204.012234][ T12] kworker/u8:0: attempt to access beyond end of device [ 204.012234][ T12] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 204.026574][ T12] kworker/u8:0: attempt to access beyond end of device [ 204.026574][ T12] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 204.042376][T13372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.055483][T13372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.066037][ T12] kworker/u8:0: attempt to access beyond end of device [ 204.066037][ T12] loop2: rw=1, sector=313, nr_sectors = 8 limit=128 [ 204.262648][T13386] loop1: detected capacity change from 0 to 512 [ 204.303317][T13386] EXT4-fs (loop1): 1 orphan inode deleted [ 204.310929][T13386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.324385][T13386] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.324524][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 204.371979][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.520463][T13420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13420 comm=syz.3.2247 [ 204.533277][T13420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13420 comm=syz.3.2247 [ 204.597530][T13438] sit0: left promiscuous mode [ 204.656571][T13447] loop0: detected capacity change from 0 to 128 [ 204.658874][T13438] sit0: entered promiscuous mode [ 204.988375][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2251'. [ 205.116586][T13491] loop4: detected capacity change from 0 to 512 [ 205.273486][T13491] EXT4-fs (loop4): 1 orphan inode deleted [ 205.282988][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2257'. [ 205.288126][ T6162] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 1 [ 205.321005][T13491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.344796][T13491] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.356522][T13519] loop2: detected capacity change from 0 to 512 [ 205.363317][T13519] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.379998][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.410029][T13519] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 205.419549][T13519] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.430648][T13519] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.462524][T13519] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 205.476773][T13519] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2258: bg 0: block 40: padding at end of block bitmap is not set [ 205.491739][T13519] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 205.500848][T13519] EXT4-fs (loop2): 1 truncate cleaned up [ 205.506874][T13519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.536971][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2262'. [ 205.546976][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.582445][T13536] sit0: left promiscuous mode [ 205.616789][T13536] sit0: entered promiscuous mode [ 206.078439][T13603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13603 comm=syz.3.2267 [ 206.091292][T13603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13603 comm=syz.3.2267 [ 206.163588][T13623] loop3: detected capacity change from 0 to 512 [ 206.190900][T13623] EXT4-fs (loop3): 1 orphan inode deleted [ 206.197274][T13623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.209947][ T6164] __quota_error: 42 callbacks suppressed [ 206.209963][ T6164] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 206.211470][T13623] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.215652][ T6164] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 206.255606][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.295815][T13643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 206.343667][T13650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2272'. [ 206.352763][T13653] loop3: detected capacity change from 0 to 128 [ 206.363251][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 206.445710][ T29] audit: type=1326 audit(1746119858.588:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.471575][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 206.494612][ T29] audit: type=1326 audit(1746119858.588:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.518300][ T29] audit: type=1326 audit(1746119858.638:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.542731][ T29] audit: type=1326 audit(1746119858.638:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.566334][ T29] audit: type=1326 audit(1746119858.638:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.589923][ T29] audit: type=1326 audit(1746119858.638:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.613486][ T29] audit: type=1326 audit(1746119858.638:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.637034][ T29] audit: type=1326 audit(1746119858.638:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.690730][ T29] audit: type=1326 audit(1746119858.688:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.3.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fac6ae969 code=0x7ffc0000 [ 206.721728][T13687] sit0: left promiscuous mode [ 206.822065][T13689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2278'. [ 206.946299][T13701] loop4: detected capacity change from 0 to 512 [ 206.954375][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2283'. [ 206.987200][T13701] EXT4-fs (loop4): 1 orphan inode deleted [ 206.995560][T13701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.008489][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 207.046161][T13701] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.076822][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.242386][T13739] sit0: left promiscuous mode [ 207.740750][T13838] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2293'. [ 207.848131][T13856] loop1: detected capacity change from 0 to 128 [ 207.938892][T13861] loop3: detected capacity change from 0 to 512 [ 207.947531][T13861] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.980017][T13861] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 207.992541][T13861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 208.000679][T13861] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.024326][T13861] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 208.058297][T13861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2300: bg 0: block 40: padding at end of block bitmap is not set [ 208.112066][T13861] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 208.125853][T13861] EXT4-fs (loop3): 1 truncate cleaned up [ 208.133005][T13879] sit0: entered promiscuous mode [ 208.165822][T13861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.244414][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.411982][T13914] sit0: entered promiscuous mode [ 208.944444][ T6162] bio_check_eod: 317 callbacks suppressed [ 208.944464][ T6162] kworker/u8:16: attempt to access beyond end of device [ 208.944464][ T6162] loop1: rw=1, sector=145, nr_sectors = 32 limit=128 [ 208.965787][ T6162] kworker/u8:16: attempt to access beyond end of device [ 208.965787][ T6162] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 208.981085][ T6162] kworker/u8:16: attempt to access beyond end of device [ 208.981085][ T6162] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 208.996162][ T6162] kworker/u8:16: attempt to access beyond end of device [ 208.996162][ T6162] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 209.011353][ T6162] kworker/u8:16: attempt to access beyond end of device [ 209.011353][ T6162] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 209.025425][ T6162] kworker/u8:16: attempt to access beyond end of device [ 209.025425][ T6162] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 209.040025][ T6162] kworker/u8:16: attempt to access beyond end of device [ 209.040025][ T6162] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 209.054172][ T6162] kworker/u8:16: attempt to access beyond end of device [ 209.054172][ T6162] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 209.068509][ T6162] kworker/u8:16: attempt to access beyond end of device [ 209.068509][ T6162] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 209.082530][ T6162] kworker/u8:16: attempt to access beyond end of device [ 209.082530][ T6162] loop1: rw=1, sector=313, nr_sectors = 8 limit=128 [ 209.194041][T14029] loop1: detected capacity change from 0 to 128 [ 209.217840][T14027] loop4: detected capacity change from 0 to 512 [ 209.225680][T14027] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.259769][T14027] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 209.268313][T14027] EXT4-fs (loop4): orphan cleanup on readonly fs [ 209.275031][T14027] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 209.306086][T14027] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 209.313678][T14027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2322: bg 0: block 40: padding at end of block bitmap is not set [ 209.328479][T14027] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 209.337570][T14027] EXT4-fs (loop4): 1 truncate cleaned up [ 209.343822][T14027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.369821][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.436301][T14049] sit0: left promiscuous mode [ 209.491421][T14049] sit0: entered promiscuous mode [ 210.109960][T14136] __nla_validate_parse: 6 callbacks suppressed [ 210.109980][T14136] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2332'. [ 210.227535][T14151] loop4: detected capacity change from 0 to 512 [ 210.265041][T14151] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 210.320628][T14151] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.327497][T14151] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2333: invalid indirect mapped block 256 (level 2) [ 210.342368][T14151] EXT4-fs (loop4): 2 truncates cleaned up [ 210.350996][T14151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.391412][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 210.411724][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.483235][T14188] sit0: left promiscuous mode [ 210.488412][T14182] loop4: detected capacity change from 0 to 512 [ 210.495207][T14182] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.513345][T14182] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 210.521579][T14182] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.523815][T14188] sit0: entered promiscuous mode [ 210.528304][T14182] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.528479][T14182] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 210.528804][T14182] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2336: bg 0: block 40: padding at end of block bitmap is not set [ 210.529040][T14182] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 210.529311][T14182] EXT4-fs (loop4): 1 truncate cleaned up [ 210.529743][T14182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.628473][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.700571][T14198] loop3: detected capacity change from 0 to 128 [ 210.791734][T14193] sit0: left promiscuous mode [ 210.827134][T14195] sit0: left promiscuous mode [ 210.857773][T14196] sit0: entered promiscuous mode [ 211.102982][T14199] sit0: entered promiscuous mode [ 211.310729][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 211.415343][T14247] loop4: detected capacity change from 0 to 2048 [ 211.465635][T14253] 9pnet_fd: Insufficient options for proto=fd [ 211.498542][T14247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.526596][T14260] loop1: detected capacity change from 0 to 256 [ 211.539703][T14247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.557636][T14263] loop3: detected capacity change from 0 to 512 [ 211.569530][T14260] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.596609][T14263] EXT4-fs (loop3): 1 orphan inode deleted [ 211.609542][ T12] __quota_error: 73 callbacks suppressed [ 211.609560][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 211.625047][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 211.648368][T14263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.671759][T14263] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.947855][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.087703][T14306] sit0: left promiscuous mode [ 212.089870][T14308] loop2: detected capacity change from 0 to 512 [ 212.123107][T14308] EXT4-fs (loop2): 1 orphan inode deleted [ 212.131030][T14308] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.143609][ T3426] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 212.153474][ T3426] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 212.179392][T14306] sit0: entered promiscuous mode [ 212.320657][T14321] loop2: detected capacity change from 0 to 128 [ 212.321820][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 212.396693][ T29] audit: type=1326 audit(1746119864.538:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.420415][ T29] audit: type=1326 audit(1746119864.538:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.444132][ T29] audit: type=1326 audit(1746119864.538:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.496615][ T29] audit: type=1326 audit(1746119864.628:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.520195][ T29] audit: type=1326 audit(1746119864.628:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.544949][ T29] audit: type=1326 audit(1746119864.668:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.568576][ T29] audit: type=1326 audit(1746119864.668:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.592201][ T29] audit: type=1326 audit(1746119864.668:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 212.631536][T14330] sit0: left promiscuous mode [ 212.670062][T14331] sit0: entered promiscuous mode [ 212.875618][T14339] loop0: detected capacity change from 0 to 512 [ 212.913329][T14339] EXT4-fs (loop0): 1 orphan inode deleted [ 212.923476][T14339] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.938033][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 213.000690][T14343] 9pnet_fd: Insufficient options for proto=fd [ 213.007636][T14347] sit0: left promiscuous mode [ 213.049001][T14347] sit0: entered promiscuous mode [ 213.097057][T14355] loop4: detected capacity change from 0 to 256 [ 213.130154][T14355] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.162173][T14361] loop0: detected capacity change from 0 to 512 [ 213.198901][T14362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14362 comm=syz.3.2377 [ 213.199288][T14361] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.211756][T14362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14362 comm=syz.3.2377 [ 213.263175][T14361] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 213.271577][T14361] EXT4-fs (loop0): orphan cleanup on readonly fs [ 213.294126][T14361] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.338373][T14361] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 213.346503][T14361] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2379: bg 0: block 40: padding at end of block bitmap is not set [ 213.379903][T14361] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 213.390443][T14361] EXT4-fs (loop0): 1 truncate cleaned up [ 213.490744][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 213.548667][T14380] loop1: detected capacity change from 0 to 512 [ 213.573308][T14380] EXT4-fs (loop1): 1 orphan inode deleted [ 213.579859][T14380] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.585342][T14376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14376 comm=syz.3.2385 [ 213.603123][T14376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14376 comm=syz.3.2385 [ 213.692697][T14392] loop1: detected capacity change from 0 to 128 [ 213.737832][T14390] sit0: left promiscuous mode [ 213.779655][T14393] sit0: entered promiscuous mode [ 213.994307][T14398] sit0: left promiscuous mode [ 214.026448][T14398] sit0: entered promiscuous mode [ 214.237478][T14401] loop4: detected capacity change from 0 to 512 [ 214.247063][T14401] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.280012][T14401] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 214.290363][T14401] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.297975][T14401] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 214.313125][T14401] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 214.320357][T14401] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2393: bg 0: block 40: padding at end of block bitmap is not set [ 214.336056][T14401] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 214.347668][T14401] EXT4-fs (loop4): 1 truncate cleaned up [ 214.400246][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 214.427357][ T6154] bio_check_eod: 426 callbacks suppressed [ 214.427374][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.427374][ T6154] loop1: rw=1, sector=145, nr_sectors = 32 limit=128 [ 214.454786][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.454786][ T6154] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 214.472244][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.472244][ T6154] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 214.492341][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.492341][ T6154] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 214.505346][T14413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14413 comm=syz.2.2398 [ 214.512865][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.512865][ T6154] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 214.518599][T14413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14413 comm=syz.2.2398 [ 214.545606][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.545606][ T6154] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 214.559235][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.559235][ T6154] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 214.573201][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.573201][ T6154] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 214.593008][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.593008][ T6154] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 214.606674][ T6154] kworker/u8:12: attempt to access beyond end of device [ 214.606674][ T6154] loop1: rw=1, sector=313, nr_sectors = 8 limit=128 [ 214.624292][T14423] 9pnet_fd: Insufficient options for proto=fd [ 214.651775][T14425] sit0: left promiscuous mode [ 214.687963][T14427] loop2: detected capacity change from 0 to 256 [ 214.705782][T14425] sit0: entered promiscuous mode [ 214.710440][T14427] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.874456][T14429] sit0: left promiscuous mode [ 214.901879][T14431] sit0: entered promiscuous mode [ 215.087372][T14439] loop3: detected capacity change from 0 to 512 [ 215.130542][T14439] EXT4-fs (loop3): 1 orphan inode deleted [ 215.137140][T14439] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.150073][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 215.201863][T14443] loop3: detected capacity change from 0 to 128 [ 215.281865][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 215.308458][T14448] sit0: left promiscuous mode [ 215.338100][T14448] sit0: entered promiscuous mode [ 215.465153][T14455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14455 comm=syz.0.2413 [ 215.477974][T14455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14455 comm=syz.0.2413 [ 215.541295][T14463] sit0: left promiscuous mode [ 215.572547][T14465] loop2: detected capacity change from 0 to 512 [ 215.580670][T14465] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.592526][T14463] sit0: entered promiscuous mode [ 215.601157][T14465] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 215.611134][T14465] EXT4-fs (loop2): orphan cleanup on readonly fs [ 215.617740][T14465] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.635612][T14465] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 215.659086][T14465] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2417: bg 0: block 40: padding at end of block bitmap is not set [ 215.710435][T14465] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 215.753008][T14470] loop1: detected capacity change from 0 to 512 [ 215.759850][T14465] EXT4-fs (loop2): 1 truncate cleaned up [ 215.831325][T14470] EXT4-fs (loop1): 1 orphan inode deleted [ 215.837832][T14470] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.850578][ T3426] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 215.885305][T14474] 9pnet_fd: Insufficient options for proto=fd [ 215.941491][T14477] 9pnet_fd: Insufficient options for proto=fd [ 215.955081][T14478] loop2: detected capacity change from 0 to 256 [ 215.974546][T14478] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.065034][T14482] loop1: detected capacity change from 0 to 256 [ 216.120215][T14482] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.156260][T14482] 9pnet_fd: Insufficient options for proto=fd [ 216.370109][T14489] loop0: detected capacity change from 0 to 2048 [ 216.623913][T14507] loop1: detected capacity change from 0 to 512 [ 216.655465][T14511] sit0: left promiscuous mode [ 216.661991][T14507] EXT4-fs (loop1): 1 orphan inode deleted [ 216.668542][T14507] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.706625][T14511] sit0: entered promiscuous mode [ 216.882542][T14519] sit0: left promiscuous mode [ 216.913539][T14519] sit0: entered promiscuous mode [ 217.062582][T14522] loop0: detected capacity change from 0 to 128 [ 217.123746][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 217.123762][ T29] audit: type=1326 audit(1746119869.268:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 217.153568][ T29] audit: type=1326 audit(1746119869.268:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 217.183563][ T29] audit: type=1326 audit(1746119869.268:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 217.207211][ T29] audit: type=1326 audit(1746119869.328:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 217.231047][ T29] audit: type=1326 audit(1746119869.328:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 217.256260][ T29] audit: type=1326 audit(1746119869.398:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 217.290832][T14527] 9pnet_fd: Insufficient options for proto=fd [ 217.355329][T14529] loop3: detected capacity change from 0 to 256 [ 217.375476][T14529] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.423153][T14531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14531 comm=syz.2.2439 [ 217.435949][T14531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14531 comm=syz.2.2439 [ 217.573654][T14539] loop4: detected capacity change from 0 to 512 [ 217.580602][T14543] loop2: detected capacity change from 0 to 512 [ 217.586990][ T29] audit: type=1326 audit(1746119869.718:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14541 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 217.588343][T14539] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.610667][ T29] audit: type=1326 audit(1746119869.718:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14541 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 217.640615][ T29] audit: type=1326 audit(1746119869.718:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14541 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 217.664258][ T29] audit: type=1326 audit(1746119869.718:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14541 comm="syz.1.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 217.765105][T14539] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 217.775935][T14543] EXT4-fs (loop2): 1 orphan inode deleted [ 217.782703][T14543] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.795293][ T3426] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 217.810395][T14539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.827672][T14539] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.848115][T14539] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 217.858621][T14539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2442: bg 0: block 40: padding at end of block bitmap is not set [ 217.878162][T14539] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 217.887564][T14539] EXT4-fs (loop4): 1 truncate cleaned up [ 217.902631][T14550] sit0: left promiscuous mode [ 217.964421][T14550] sit0: entered promiscuous mode [ 218.166847][T14558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2449'. [ 218.272847][T14564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14564 comm=syz.4.2451 [ 218.285779][T14564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14564 comm=syz.4.2451 [ 218.331575][T14574] loop4: detected capacity change from 0 to 512 [ 218.351677][T14574] EXT4-fs (loop4): 1 orphan inode deleted [ 218.358023][T14574] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.368848][ T6158] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 218.421177][T14579] 9pnet_fd: Insufficient options for proto=fd [ 218.501875][T14584] loop4: detected capacity change from 0 to 256 [ 218.517546][T14588] loop0: detected capacity change from 0 to 2048 [ 218.527787][T14586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2460'. [ 218.551201][T14584] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.584998][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 218.642386][T14594] sit0: left promiscuous mode [ 218.677589][T14594] sit0: entered promiscuous mode [ 218.851650][T14599] loop2: detected capacity change from 0 to 128 [ 218.915400][T14602] loop3: detected capacity change from 0 to 128 [ 219.000776][T14604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14604 comm=syz.4.2466 [ 219.013589][T14604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14604 comm=syz.4.2466 [ 219.068619][T14610] loop4: detected capacity change from 0 to 512 [ 219.140712][T14610] EXT4-fs (loop4): 1 orphan inode deleted [ 219.148332][T14610] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.158054][ T6158] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 219.597117][ T37] bio_check_eod: 317 callbacks suppressed [ 219.597136][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.597136][ T37] loop3: rw=1, sector=145, nr_sectors = 32 limit=128 [ 219.616579][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.616579][ T37] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 219.630016][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.630016][ T37] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 219.643454][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.643454][ T37] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 219.656883][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.656883][ T37] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 219.670312][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.670312][ T37] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 219.683716][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.683716][ T37] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 219.697207][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.697207][ T37] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 219.710718][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.710718][ T37] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 219.724189][ T37] kworker/u8:2: attempt to access beyond end of device [ 219.724189][ T37] loop3: rw=1, sector=313, nr_sectors = 8 limit=128 [ 219.779372][T14619] netlink: '+}[@': attribute type 3 has an invalid length. [ 219.801112][T14619] loop3: detected capacity change from 0 to 2048 [ 220.625365][T14643] sit0: left promiscuous mode [ 220.653287][T14643] sit0: entered promiscuous mode [ 220.830232][T14651] 9pnet_fd: Insufficient options for proto=fd [ 220.834541][T14648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14648 comm=syz.2.2477 [ 220.849620][T14648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14648 comm=syz.2.2477 [ 220.893613][T14655] loop3: detected capacity change from 0 to 256 [ 220.920710][T14655] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.082100][T14663] loop4: detected capacity change from 0 to 128 [ 221.116143][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 221.171238][T14668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2484'. [ 221.174720][T14666] loop1: detected capacity change from 0 to 2048 [ 221.202211][T14672] loop3: detected capacity change from 0 to 512 [ 221.208995][T14672] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.229531][T14672] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 221.237722][T14672] EXT4-fs (loop3): orphan cleanup on readonly fs [ 221.244577][T14672] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.260226][T14672] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 221.267843][T14672] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2485: bg 0: block 40: padding at end of block bitmap is not set [ 221.285197][T14677] sit0: left promiscuous mode [ 221.316950][T14677] sit0: entered promiscuous mode [ 221.331677][T14672] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 221.353609][T14672] EXT4-fs (loop3): 1 truncate cleaned up [ 221.368016][T14672] EXT4-fs mount: 34 callbacks suppressed [ 221.368034][T14672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.463391][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.613362][T14682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14682 comm=syz.3.2488 [ 221.626188][T14682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14682 comm=syz.3.2488 [ 221.665121][T14686] loop0: detected capacity change from 0 to 2048 [ 221.700828][T14688] 9pnet_fd: Insufficient options for proto=fd [ 221.709066][T14690] netlink: '+}[@': attribute type 3 has an invalid length. [ 221.733963][T14690] loop1: detected capacity change from 0 to 2048 [ 221.754716][T14686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.771733][T14696] loop3: detected capacity change from 0 to 256 [ 221.779058][T14690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.792777][T14694] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 221.810735][T14696] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.825863][T14686] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.839447][T14690] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.071393][T14708] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2495'. [ 222.116203][T14712] loop1: detected capacity change from 0 to 512 [ 222.134610][T14712] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.160323][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 222.160336][ T29] audit: type=1326 audit(1746119874.308:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.196917][ T29] audit: type=1326 audit(1746119874.338:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.220608][ T29] audit: type=1326 audit(1746119874.338:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.244157][ T29] audit: type=1326 audit(1746119874.338:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.267683][ T29] audit: type=1326 audit(1746119874.338:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.291218][ T29] audit: type=1326 audit(1746119874.338:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.294577][T14718] sit0: left promiscuous mode [ 222.315182][ T29] audit: type=1326 audit(1746119874.338:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.343564][ T29] audit: type=1326 audit(1746119874.338:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.361537][T14718] sit0: entered promiscuous mode [ 222.367059][ T29] audit: type=1326 audit(1746119874.338:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.367090][ T29] audit: type=1326 audit(1746119874.338:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.2.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79a990e969 code=0x7ffc0000 [ 222.383219][T14712] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 222.428449][T14712] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.434958][T14712] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.461409][T14712] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 222.469004][T14712] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2498: bg 0: block 40: padding at end of block bitmap is not set [ 222.490407][T14712] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 222.501124][T14723] loop4: detected capacity change from 0 to 2048 [ 222.508984][T14712] EXT4-fs (loop1): 1 truncate cleaned up [ 222.515411][T14712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.531906][T14723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.546819][T14723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.579620][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.823080][T14735] sit0: left promiscuous mode [ 222.852505][T14742] sit0: entered promiscuous mode [ 222.938269][T14758] 9pnet_fd: Insufficient options for proto=fd [ 222.999974][T14759] loop3: detected capacity change from 0 to 256 [ 223.017829][T14759] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.044620][T14749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2509'. [ 223.129500][T14764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2513'. [ 223.173270][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2515'. [ 223.557531][T14791] sit0: left promiscuous mode [ 223.597584][T14791] sit0: entered promiscuous mode [ 223.758797][T14797] 9pnet_fd: Insufficient options for proto=fd [ 223.870893][T14799] loop4: detected capacity change from 0 to 256 [ 223.887511][T14799] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.911961][T14799] 9pnet_fd: Insufficient options for proto=fd [ 223.949697][T14801] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2523'. [ 223.994342][T14804] loop0: detected capacity change from 0 to 2048 [ 224.014248][T14804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.027570][T14804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.072387][T14811] 9pnet_fd: Insufficient options for proto=fd [ 224.133980][T14812] loop0: detected capacity change from 0 to 256 [ 224.143654][T14812] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.351459][T14820] loop1: detected capacity change from 0 to 2048 [ 224.370047][T14820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.383105][T14820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.523573][T14828] 9pnet_fd: Insufficient options for proto=fd [ 224.638844][T14830] loop1: detected capacity change from 0 to 256 [ 224.652648][T14830] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.664566][T14830] 9pnet_fd: Insufficient options for proto=fd [ 224.675143][T14832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2535'. [ 224.709535][T14834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2536'. [ 224.796911][T14842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2540'. [ 224.859339][T14848] loop0: detected capacity change from 0 to 512 [ 224.866101][T14848] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.896439][T14848] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 224.904789][T14848] EXT4-fs (loop0): orphan cleanup on readonly fs [ 224.911811][T14848] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.927410][T14848] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 224.934965][T14848] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2542: bg 0: block 40: padding at end of block bitmap is not set [ 224.950808][T14848] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 224.960154][T14848] EXT4-fs (loop0): 1 truncate cleaned up [ 224.966147][T14848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.991124][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.092642][T14880] loop3: detected capacity change from 0 to 2048 [ 225.132442][T14880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.145319][T14880] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.264244][T14910] 9pnet_fd: Insufficient options for proto=fd [ 225.315841][T14919] 9pnet_fd: Insufficient options for proto=fd [ 225.396697][T14928] loop3: detected capacity change from 0 to 256 [ 225.427066][T14928] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.444537][T14933] loop2: detected capacity change from 0 to 256 [ 225.465320][T14933] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.492081][T14933] 9pnet_fd: Insufficient options for proto=fd [ 225.518189][T14928] 9pnet_fd: Insufficient options for proto=fd [ 225.939842][T15005] loop1: detected capacity change from 0 to 512 [ 225.991565][T15005] EXT4-fs (loop1): 1 orphan inode deleted [ 226.008041][ T6154] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 226.028665][T15005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.044136][T15005] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.102189][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.140961][T15014] FAULT_INJECTION: forcing a failure. [ 226.140961][T15014] name failslab, interval 1, probability 0, space 0, times 0 [ 226.153677][T15014] CPU: 1 UID: 0 PID: 15014 Comm: syz.1.2557 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 226.153711][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 226.153758][T15014] Call Trace: [ 226.153765][T15014] [ 226.153773][T15014] __dump_stack+0x1d/0x30 [ 226.153868][T15014] dump_stack_lvl+0xe8/0x140 [ 226.153893][T15014] dump_stack+0x15/0x1b [ 226.153911][T15014] should_fail_ex+0x265/0x280 [ 226.153946][T15014] should_failslab+0x8c/0xb0 [ 226.153982][T15014] __kmalloc_noprof+0xa5/0x3e0 [ 226.154077][T15014] ? alloc_pipe_info+0x1c9/0x350 [ 226.154103][T15014] alloc_pipe_info+0x1c9/0x350 [ 226.154131][T15014] create_pipe_files+0x67/0x400 [ 226.154156][T15014] __do_pipe_flags+0x4a/0x1a0 [ 226.154331][T15014] do_pipe2+0x61/0x130 [ 226.154364][T15014] ? trace_sys_enter+0xd0/0x110 [ 226.154389][T15014] __x64_sys_pipe+0x21/0x30 [ 226.154416][T15014] x64_sys_call+0x258/0x2fb0 [ 226.154456][T15014] do_syscall_64+0xd0/0x1a0 [ 226.154476][T15014] ? clear_bhb_loop+0x25/0x80 [ 226.154551][T15014] ? clear_bhb_loop+0x25/0x80 [ 226.154578][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.154604][T15014] RIP: 0033:0x7f93ecd5e969 [ 226.154622][T15014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.154651][T15014] RSP: 002b:00007f93eb3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 226.154668][T15014] RAX: ffffffffffffffda RBX: 00007f93ecf85fa0 RCX: 00007f93ecd5e969 [ 226.154746][T15014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 226.154758][T15014] RBP: 00007f93eb3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.154769][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.154819][T15014] R13: 0000000000000000 R14: 00007f93ecf85fa0 R15: 00007ffedb3aec18 [ 226.154839][T15014] [ 226.374268][T15021] loop1: detected capacity change from 0 to 1024 [ 226.415239][T15021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.432940][T15021] __nla_validate_parse: 6 callbacks suppressed [ 226.432957][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2559'. [ 226.457461][T15021] IPVS: Error joining to the multicast group [ 226.465379][T15021] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2559: bg 0: block 88: padding at end of block bitmap is not set [ 226.480535][T15022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=15022 comm=syz.1.2559 [ 226.480551][T15021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=15021 comm=syz.1.2559 [ 226.517265][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.174720][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 227.174733][ T29] audit: type=1326 audit(1746119879.318:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.204711][ T29] audit: type=1326 audit(1746119879.318:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.229908][ T29] audit: type=1326 audit(1746119879.318:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.253507][ T29] audit: type=1326 audit(1746119879.378:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.277333][ T29] audit: type=1326 audit(1746119879.378:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.300980][ T29] audit: type=1326 audit(1746119879.398:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.324558][ T29] audit: type=1326 audit(1746119879.398:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.329482][T15156] sit0: left promiscuous mode [ 227.348161][ T29] audit: type=1326 audit(1746119879.398:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.348199][ T29] audit: type=1326 audit(1746119879.398:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.384708][T15156] sit0: entered promiscuous mode [ 227.405794][ T29] audit: type=1326 audit(1746119879.548:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15153 comm="syz.4.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c7afe969 code=0x7ffc0000 [ 227.470275][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 227.553167][T15162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15162 comm=syz.1.2567 [ 227.566051][T15162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15162 comm=syz.1.2567 [ 227.606622][T15168] loop1: detected capacity change from 0 to 512 [ 227.641353][T15168] EXT4-fs (loop1): 1 orphan inode deleted [ 227.647800][T15168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.661826][ T6154] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 227.673835][T15168] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.705422][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.756965][T15174] loop3: detected capacity change from 0 to 2048 [ 227.774561][T15174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.791823][T15178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2572'. [ 227.798324][T15174] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.866033][T15181] loop3: detected capacity change from 0 to 512 [ 227.873321][T15181] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.882818][T15154] loop4: detected capacity change from 0 to 128 [ 227.905905][T15181] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 227.914295][T15181] EXT4-fs (loop3): orphan cleanup on readonly fs [ 227.920973][T15181] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.937489][T15181] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 227.945043][T15181] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2573: bg 0: block 40: padding at end of block bitmap is not set [ 227.968969][T15181] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 227.983826][T15181] EXT4-fs (loop3): 1 truncate cleaned up [ 227.990312][T15181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.017609][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.072985][T15189] 9pnet_fd: Insufficient options for proto=fd [ 228.130130][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 228.141071][T15194] loop1: detected capacity change from 0 to 256 [ 228.196060][T15194] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.246757][T15196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15196 comm=syz.3.2579 [ 228.259584][T15196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15196 comm=syz.3.2579 [ 228.306672][T15202] loop3: detected capacity change from 0 to 2048 [ 228.366637][T15202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.379596][T15202] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.522243][T15212] loop2: detected capacity change from 0 to 2048 [ 228.586831][T15212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.602795][T15212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.625509][T15218] loop1: detected capacity change from 0 to 256 [ 228.755695][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 228.862956][T15236] loop1: detected capacity change from 0 to 512 [ 228.884105][T15236] EXT4-fs (loop1): 1 orphan inode deleted [ 228.896049][T15236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.909019][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 228.926148][T15236] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.976907][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.020581][T15241] 9pnet_fd: Insufficient options for proto=fd [ 229.095625][T15244] loop4: detected capacity change from 0 to 512 [ 229.103187][T15243] loop1: detected capacity change from 0 to 256 [ 229.154983][T15243] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.171161][T15244] EXT4-fs (loop4): 1 orphan inode deleted [ 229.177582][T15244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.192664][ T6154] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 1 [ 229.209666][T15244] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.265644][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.309438][T15252] FAULT_INJECTION: forcing a failure. [ 229.309438][T15252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.322616][T15252] CPU: 1 UID: 0 PID: 15252 Comm: syz.4.2600 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 229.322651][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 229.322695][T15252] Call Trace: [ 229.322700][T15252] [ 229.322707][T15252] __dump_stack+0x1d/0x30 [ 229.322758][T15252] dump_stack_lvl+0xe8/0x140 [ 229.322783][T15252] dump_stack+0x15/0x1b [ 229.322803][T15252] should_fail_ex+0x265/0x280 [ 229.322835][T15252] should_fail+0xb/0x20 [ 229.322889][T15252] should_fail_usercopy+0x1a/0x20 [ 229.322906][T15252] strncpy_from_user+0x25/0x230 [ 229.322932][T15252] strncpy_from_user_nofault+0x68/0xf0 [ 229.322977][T15252] bpf_probe_read_compat_str+0xb4/0x130 [ 229.323015][T15252] bpf_prog_bfd16910b8af8615+0x41/0x43 [ 229.323036][T15252] bpf_trace_run2+0x104/0x1c0 [ 229.323127][T15252] ? security_context_to_sid_core+0x2fc/0x3b0 [ 229.323210][T15252] ? security_context_to_sid_core+0x2fc/0x3b0 [ 229.323246][T15252] kfree+0x26f/0x310 [ 229.323365][T15252] ? string_to_context_struct+0x2dc/0x2f0 [ 229.323402][T15252] security_context_to_sid_core+0x2fc/0x3b0 [ 229.323454][T15252] security_context_to_sid+0x2e/0x40 [ 229.323482][T15252] selinux_lsm_setattr+0x2dc/0x660 [ 229.323600][T15252] selinux_setprocattr+0x4f/0x70 [ 229.323623][T15252] security_setprocattr+0x1a4/0x1d0 [ 229.323649][T15252] proc_pid_attr_write+0x1eb/0x220 [ 229.323678][T15252] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 229.323762][T15252] vfs_write+0x266/0x8d0 [ 229.323789][T15252] ? __rcu_read_unlock+0x4f/0x70 [ 229.323814][T15252] ? __fget_files+0x184/0x1c0 [ 229.323885][T15252] ksys_write+0xda/0x1a0 [ 229.323908][T15252] __x64_sys_write+0x40/0x50 [ 229.323938][T15252] x64_sys_call+0x2cdd/0x2fb0 [ 229.323964][T15252] do_syscall_64+0xd0/0x1a0 [ 229.324044][T15252] ? clear_bhb_loop+0x25/0x80 [ 229.324065][T15252] ? clear_bhb_loop+0x25/0x80 [ 229.324084][T15252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.324174][T15252] RIP: 0033:0x7f81c7afe969 [ 229.324188][T15252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.324208][T15252] RSP: 002b:00007f81c6167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.324231][T15252] RAX: ffffffffffffffda RBX: 00007f81c7d25fa0 RCX: 00007f81c7afe969 [ 229.324246][T15252] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000005 [ 229.324261][T15252] RBP: 00007f81c6167090 R08: 0000000000000000 R09: 0000000000000000 [ 229.324294][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.324305][T15252] R13: 0000000000000000 R14: 00007f81c7d25fa0 R15: 00007ffeef6dd9b8 [ 229.324325][T15252] [ 229.658217][T15255] loop4: detected capacity change from 0 to 512 [ 229.687775][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.712991][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 229.759837][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'. [ 229.837014][T15270] loop4: detected capacity change from 0 to 512 [ 229.850912][T15266] sit0: left promiscuous mode [ 229.870459][T15268] loop3: detected capacity change from 0 to 128 [ 229.899119][T15268] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.913301][T15273] sit0: entered promiscuous mode [ 229.920641][T15268] ext4 filesystem being mounted at /548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.983201][T15270] EXT4-fs (loop4): 1 orphan inode deleted [ 229.993567][T15270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.007585][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 230.062982][T15270] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.148702][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.192630][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.236709][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2615'. [ 230.254237][T15289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15289 comm=syz.4.2610 [ 230.267074][T15289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15289 comm=syz.4.2610 [ 230.269042][T15297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2614'. [ 230.281823][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 230.379332][T15305] cgroup: subsys name conflicts with all [ 230.391024][T15303] loop0: detected capacity change from 0 to 512 [ 230.405391][T15303] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.407133][T15309] loop4: detected capacity change from 0 to 512 [ 230.414804][T15311] sit0: left promiscuous mode [ 230.451622][T15309] EXT4-fs (loop4): 1 orphan inode deleted [ 230.467806][T15309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.480614][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 230.515359][T15309] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.570176][T15311] sit0: entered promiscuous mode [ 230.575637][T15303] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 230.592618][T15303] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.594430][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.608558][T15303] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.653032][T15303] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 230.665295][T15303] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2617: bg 0: block 40: padding at end of block bitmap is not set [ 230.680438][T15303] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 230.690728][T15303] EXT4-fs (loop0): 1 truncate cleaned up [ 230.696814][T15303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.726632][T15330] sit0: left promiscuous mode [ 230.755894][T15334] sit0: entered promiscuous mode [ 230.758993][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.799490][T15332] loop2: detected capacity change from 0 to 2048 [ 230.820832][T15332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.853784][T15332] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.868484][T15335] sit0: left promiscuous mode [ 230.875228][T15332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.922778][T15332] loop2: detected capacity change from 0 to 2048 [ 230.935873][T15340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.957644][T15344] sit0: entered promiscuous mode [ 230.989739][T15332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.002131][T15332] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.021166][T15332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.089208][T15332] loop2: detected capacity change from 0 to 2048 [ 231.129008][T15358] loop4: detected capacity change from 0 to 512 [ 231.140152][T15332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.162225][T15358] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.2632: inode #15: comm syz.4.2632: iget: illegal inode # [ 231.175522][T15332] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.187607][T15358] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2632: couldn't read orphan inode 15 (err -117) [ 231.201228][T15332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.211371][T15358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.226666][T15358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.275657][T15332] loop2: detected capacity change from 0 to 2048 [ 231.321010][T15332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.333737][T15332] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.345746][T15365] SELinux: Context system_u:object_r:lirc_device_t:s0 is not valid (left unmapped). [ 231.367435][T15340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.372770][T15332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.404763][T15332] loop2: detected capacity change from 0 to 2048 [ 231.407584][T15369] FAULT_INJECTION: forcing a failure. [ 231.407584][T15369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.424409][T15369] CPU: 1 UID: 0 PID: 15369 Comm: syz.3.2633 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 231.424442][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.424457][T15369] Call Trace: [ 231.424462][T15369] [ 231.424471][T15369] __dump_stack+0x1d/0x30 [ 231.424519][T15369] dump_stack_lvl+0xe8/0x140 [ 231.424542][T15369] dump_stack+0x15/0x1b [ 231.424562][T15369] should_fail_ex+0x265/0x280 [ 231.424659][T15369] should_fail+0xb/0x20 [ 231.424760][T15369] should_fail_usercopy+0x1a/0x20 [ 231.424782][T15369] _copy_from_user+0x1c/0xb0 [ 231.424806][T15369] __sys_connect+0xd0/0x2b0 [ 231.424850][T15369] __x64_sys_connect+0x3f/0x50 [ 231.424958][T15369] x64_sys_call+0x1daa/0x2fb0 [ 231.424979][T15369] do_syscall_64+0xd0/0x1a0 [ 231.425087][T15369] ? clear_bhb_loop+0x25/0x80 [ 231.425114][T15369] ? clear_bhb_loop+0x25/0x80 [ 231.425142][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.425169][T15369] RIP: 0033:0x7f5fac6ae969 [ 231.425196][T15369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.425241][T15369] RSP: 002b:00007f5faad17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 231.425265][T15369] RAX: ffffffffffffffda RBX: 00007f5fac8d5fa0 RCX: 00007f5fac6ae969 [ 231.425281][T15369] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000004 [ 231.425309][T15369] RBP: 00007f5faad17090 R08: 0000000000000000 R09: 0000000000000000 [ 231.425324][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.425404][T15369] R13: 0000000000000000 R14: 00007f5fac8d5fa0 R15: 00007ffde205b8c8 [ 231.425424][T15369] [ 231.610311][T15332] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 231.646937][T15340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.691022][T15379] sit0: left promiscuous mode [ 231.745482][T15340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.756182][T15381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15381 comm=syz.2.2638 [ 231.768964][T15381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15381 comm=syz.2.2638 [ 231.782449][T15379] sit0: entered promiscuous mode [ 231.790148][T15387] 9pnet_fd: Insufficient options for proto=fd [ 231.857443][T15393] loop4: detected capacity change from 0 to 256 [ 231.859159][T15340] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.878532][T15393] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.895897][T15340] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.922100][T15340] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.971351][T15340] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.987177][T15399] loop3: detected capacity change from 0 to 512 [ 231.998826][T15399] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.030044][T15401] loop0: detected capacity change from 0 to 2048 [ 232.049399][T15399] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 232.061857][T15403] __nla_validate_parse: 7 callbacks suppressed [ 232.061870][T15403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2647'. [ 232.063388][T15399] EXT4-fs (loop3): orphan cleanup on readonly fs [ 232.082853][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 232.099203][T15399] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.115228][T15401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.145762][T15399] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 232.163518][T15401] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.174650][T15399] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2645: bg 0: block 40: padding at end of block bitmap is not set [ 232.192776][T15399] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 232.202423][T15399] EXT4-fs (loop3): 1 truncate cleaned up [ 232.219679][T15399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.251240][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.276526][T15413] FAULT_INJECTION: forcing a failure. [ 232.276526][T15413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.289681][T15413] CPU: 1 UID: 0 PID: 15413 Comm: syz.3.2650 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 232.289712][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 232.289727][T15413] Call Trace: [ 232.289734][T15413] [ 232.289754][T15413] __dump_stack+0x1d/0x30 [ 232.289780][T15413] dump_stack_lvl+0xe8/0x140 [ 232.289805][T15413] dump_stack+0x15/0x1b [ 232.289825][T15413] should_fail_ex+0x265/0x280 [ 232.289861][T15413] should_fail+0xb/0x20 [ 232.289914][T15413] should_fail_usercopy+0x1a/0x20 [ 232.289937][T15413] _copy_to_user+0x20/0xa0 [ 232.289965][T15413] simple_read_from_buffer+0xb5/0x130 [ 232.289995][T15413] proc_fail_nth_read+0x100/0x140 [ 232.290068][T15413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.290096][T15413] vfs_read+0x19d/0x6f0 [ 232.290132][T15413] ? __rcu_read_unlock+0x4f/0x70 [ 232.290160][T15413] ? __fget_files+0x184/0x1c0 [ 232.290310][T15413] ksys_read+0xda/0x1a0 [ 232.290366][T15413] __x64_sys_read+0x40/0x50 [ 232.290397][T15413] x64_sys_call+0x2d77/0x2fb0 [ 232.290424][T15413] do_syscall_64+0xd0/0x1a0 [ 232.290449][T15413] ? clear_bhb_loop+0x25/0x80 [ 232.290473][T15413] ? clear_bhb_loop+0x25/0x80 [ 232.290693][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.290720][T15413] RIP: 0033:0x7f5fac6ad37c [ 232.290735][T15413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.290758][T15413] RSP: 002b:00007f5faad17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.290831][T15413] RAX: ffffffffffffffda RBX: 00007f5fac8d5fa0 RCX: 00007f5fac6ad37c [ 232.290854][T15413] RDX: 000000000000000f RSI: 00007f5faad170a0 RDI: 0000000000000004 [ 232.290867][T15413] RBP: 00007f5faad17090 R08: 0000000000000000 R09: 0000000000000000 [ 232.290879][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.290971][T15413] R13: 0000000000000000 R14: 00007f5fac8d5fa0 R15: 00007ffde205b8c8 [ 232.290994][T15413] [ 232.526468][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 232.526485][ T29] audit: type=1326 audit(1746119884.668:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.558357][ T29] audit: type=1326 audit(1746119884.708:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.581982][ T29] audit: type=1326 audit(1746119884.708:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.605531][ T29] audit: type=1326 audit(1746119884.708:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.634887][ T29] audit: type=1326 audit(1746119884.778:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.658579][ T29] audit: type=1326 audit(1746119884.778:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.682192][ T29] audit: type=1326 audit(1746119884.778:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.705779][ T29] audit: type=1326 audit(1746119884.778:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.729338][ T29] audit: type=1326 audit(1746119884.778:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.752886][ T29] audit: type=1326 audit(1746119884.778:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15414 comm="syz.1.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ecd5e969 code=0x7ffc0000 [ 232.812685][T15421] sit0: left promiscuous mode [ 232.836737][T15424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15424 comm=syz.3.2656 [ 232.874946][T15429] FAULT_INJECTION: forcing a failure. [ 232.874946][T15429] name failslab, interval 1, probability 0, space 0, times 0 [ 232.887703][T15429] CPU: 0 UID: 0 PID: 15429 Comm: syz.0.2658 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 232.887730][T15429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 232.887751][T15429] Call Trace: [ 232.887758][T15429] [ 232.887767][T15429] __dump_stack+0x1d/0x30 [ 232.887791][T15429] dump_stack_lvl+0xe8/0x140 [ 232.887822][T15429] dump_stack+0x15/0x1b [ 232.887843][T15429] should_fail_ex+0x265/0x280 [ 232.887920][T15429] should_failslab+0x8c/0xb0 [ 232.887952][T15429] kmem_cache_alloc_noprof+0x50/0x310 [ 232.888043][T15429] ? skb_clone+0x151/0x1f0 [ 232.888067][T15429] skb_clone+0x151/0x1f0 [ 232.888139][T15429] __netlink_deliver_tap+0x2c9/0x500 [ 232.888182][T15429] netlink_unicast+0x64c/0x670 [ 232.888219][T15429] netlink_sendmsg+0x58b/0x6b0 [ 232.888261][T15429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.888314][T15429] __sock_sendmsg+0x142/0x180 [ 232.888343][T15429] ____sys_sendmsg+0x31e/0x4e0 [ 232.888365][T15429] ___sys_sendmsg+0x17b/0x1d0 [ 232.888395][T15429] __x64_sys_sendmsg+0xd4/0x160 [ 232.888499][T15429] x64_sys_call+0x2999/0x2fb0 [ 232.888525][T15429] do_syscall_64+0xd0/0x1a0 [ 232.888633][T15429] ? clear_bhb_loop+0x25/0x80 [ 232.888655][T15429] ? clear_bhb_loop+0x25/0x80 [ 232.888717][T15429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.888740][T15429] RIP: 0033:0x7f4a994de969 [ 232.888758][T15429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.888779][T15429] RSP: 002b:00007f4a97b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.888823][T15429] RAX: ffffffffffffffda RBX: 00007f4a99705fa0 RCX: 00007f4a994de969 [ 232.888838][T15429] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 232.888853][T15429] RBP: 00007f4a97b47090 R08: 0000000000000000 R09: 0000000000000000 [ 232.888868][T15429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.888884][T15429] R13: 0000000000000000 R14: 00007f4a99705fa0 R15: 00007ffce6f8eea8 [ 232.888905][T15429] [ 233.104756][T15429] netlink: 'syz.0.2658': attribute type 13 has an invalid length. [ 233.123078][T15427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.137055][T15435] loop2: detected capacity change from 0 to 512 [ 233.154571][T15430] sit0: entered promiscuous mode [ 233.162704][T15435] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.190502][T15435] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 233.199010][T15435] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.205798][T15435] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.223233][T15435] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 233.240087][T15435] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2660: bg 0: block 40: padding at end of block bitmap is not set [ 233.269178][T15435] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 233.279784][T15435] EXT4-fs (loop2): 1 truncate cleaned up [ 233.282944][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.286059][T15435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.292686][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.320642][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.355724][T15445] loop2: detected capacity change from 0 to 512 [ 233.362318][T15429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.364397][T15445] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.374456][T15429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.398843][T15445] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 233.406965][T15445] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.413913][T15445] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.429689][T15445] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 233.436924][T15445] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2662: bg 0: block 40: padding at end of block bitmap is not set [ 233.451598][T15445] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 233.460414][T15429] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.460719][T15445] EXT4-fs (loop2): 1 truncate cleaned up [ 233.468986][T15429] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.476471][T15445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.482888][T15429] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.503768][T15429] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.540831][T15427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.559342][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.575223][T15449] netlink: 'syz.3.2664': attribute type 13 has an invalid length. [ 233.583214][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 233.646033][T15427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.670398][T15459] sit0: left promiscuous mode [ 233.702681][T15459] sit0: entered promiscuous mode [ 233.875036][T15427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.886913][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 233.898071][T15465] veth0_macvtap: left promiscuous mode [ 233.941761][T15427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.945054][T15476] 9pnet_fd: Insufficient options for proto=fd [ 233.954784][T15427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.969633][T15427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.984876][T15427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.014552][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 234.026018][T15479] loop3: detected capacity change from 0 to 256 [ 234.038212][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 234.062577][T15479] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.115035][T15484] sit0: left promiscuous mode [ 234.150922][T15481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15481 comm=syz.2.2675 [ 234.163805][T15481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15481 comm=syz.2.2675 [ 234.218300][T15484] sit0: entered promiscuous mode [ 234.387736][T15498] sit0: left promiscuous mode [ 234.470853][T15498] sit0: entered promiscuous mode [ 234.788596][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 234.877381][T15560] veth0_macvtap: left promiscuous mode [ 234.921962][T15585] sit0: left promiscuous mode [ 234.953056][T15585] sit0: entered promiscuous mode [ 235.300501][T15647] loop1: detected capacity change from 0 to 512 [ 235.307329][T15647] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.339885][T15647] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 235.352512][T15647] EXT4-fs (loop1): orphan cleanup on readonly fs [ 235.372832][T15647] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.392896][T15647] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 235.400071][T15647] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2691: bg 0: block 40: padding at end of block bitmap is not set [ 235.417536][T15647] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 235.427756][T15647] EXT4-fs (loop1): 1 truncate cleaned up [ 235.434406][T15647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.457678][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'. [ 235.478362][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.555556][T15671] loop3: detected capacity change from 0 to 1024 [ 235.597241][T15671] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2693: Failed to acquire dquot type 0 [ 235.609678][T15671] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 235.632930][T15671] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2693: corrupted inode contents [ 235.645641][T15671] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2693: mark_inode_dirty error [ 235.677018][T15690] sit0: left promiscuous mode [ 235.705269][T15671] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2693: corrupted inode contents [ 235.718647][T15690] sit0: entered promiscuous mode [ 235.751071][T15671] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2693: mark_inode_dirty error [ 235.796878][T15671] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2693: corrupted inode contents [ 235.816543][T15671] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 235.830106][T15671] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2693: corrupted inode contents [ 235.849467][T15671] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2693: mark_inode_dirty error [ 235.861436][T15671] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 235.876181][T15671] EXT4-fs (loop3): 1 truncate cleaned up [ 236.650574][T15845] netlink: 'syz.0.2710': attribute type 13 has an invalid length. [ 236.658535][T15845] netlink: 'syz.0.2710': attribute type 27 has an invalid length. [ 236.902447][T15874] loop2: detected capacity change from 0 to 512 [ 236.935243][T15874] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.980526][T15874] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 236.995373][T15874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 237.008292][T15874] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 237.035547][T15874] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 237.062810][T15874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2715: bg 0: block 40: padding at end of block bitmap is not set [ 237.107859][T15874] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 237.125877][T15874] EXT4-fs (loop2): 1 truncate cleaned up [ 237.312891][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2718'. [ 237.321971][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2718'. [ 237.330415][T15910] 9pnet_fd: Insufficient options for proto=fd [ 237.384494][T15914] loop1: detected capacity change from 0 to 764 [ 237.403409][T15914] iso9660: Unknown parameter 'sys_enter' [ 237.415900][T15920] loop0: detected capacity change from 0 to 256 [ 237.463468][T15920] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.590451][T15937] netlink: 'syz.3.2725': attribute type 13 has an invalid length. [ 237.701226][T15941] netlink: 424 bytes leftover after parsing attributes in process `syz.3.2725'. [ 237.762603][T15937] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.769851][T15937] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.834206][T15937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.843817][T15951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15951 comm=syz.1.2727 [ 237.846759][T15937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.856670][T15951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15951 comm=syz.1.2727 [ 237.897310][T15937] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.906305][T15937] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.915362][T15937] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.924476][T15937] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.030300][T15955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2730'. [ 238.075102][T15959] sit0: left promiscuous mode [ 238.106900][T15959] sit0: entered promiscuous mode [ 238.177175][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 238.177192][ T29] audit: type=1326 audit(1746119890.318:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.228435][ T29] audit: type=1326 audit(1746119890.358:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.252191][ T29] audit: type=1326 audit(1746119890.358:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.275767][ T29] audit: type=1326 audit(1746119890.358:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.299384][ T29] audit: type=1326 audit(1746119890.358:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.303078][T15965] loop3: detected capacity change from 0 to 512 [ 238.322965][ T29] audit: type=1326 audit(1746119890.358:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.349205][T15969] loop1: detected capacity change from 0 to 512 [ 238.352646][ T29] audit: type=1326 audit(1746119890.358:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.382491][ T29] audit: type=1326 audit(1746119890.358:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.398901][T15965] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.406104][ T29] audit: type=1326 audit(1746119890.358:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.439732][ T29] audit: type=1326 audit(1746119890.358:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15960 comm="syz.0.2734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a994de969 code=0x7ffc0000 [ 238.481649][T15969] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.533368][ T3515] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 238.540877][ T3515] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 238.548350][ T3515] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 238.548458][ T3515] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 238.548521][ T3515] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 238.548584][ T3515] hid-generic 0021:0009:0000.0001: unknown main item tag 0x0 [ 238.559814][ T3515] hid-generic 0021:0009:0000.0001: hidraw0: HID v0.07 Device [syz0] on syz1 [ 238.581361][T15977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=15977 comm=syz.1.2739 [ 238.597615][T15981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15981 comm=syz.3.2740 [ 238.607643][T15977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15977 comm=syz.1.2739 [ 238.703359][T15990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'. [ 238.783029][T16002] loop2: detected capacity change from 0 to 512 [ 238.813020][T16002] EXT4-fs (loop2): 1 orphan inode deleted [ 238.819850][T16002] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.831826][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 238.872260][T16017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.912100][T16017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.962075][T16017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.011533][T16017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.086840][T16017] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.098326][T16017] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.109682][T16017] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.121019][T16017] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.155094][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 239.187171][T16022] loop0: detected capacity change from 0 to 512 [ 239.194314][T16022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.211867][T16022] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.311274][T16033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2755'. [ 239.320347][T16033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2755'. [ 239.467509][T16041] FAULT_INJECTION: forcing a failure. [ 239.467509][T16041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.480629][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.3.2759 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 239.480664][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.480689][T16041] Call Trace: [ 239.480697][T16041] [ 239.480705][T16041] __dump_stack+0x1d/0x30 [ 239.480756][T16041] dump_stack_lvl+0xe8/0x140 [ 239.480780][T16041] dump_stack+0x15/0x1b [ 239.480800][T16041] should_fail_ex+0x265/0x280 [ 239.480840][T16041] should_fail+0xb/0x20 [ 239.480930][T16041] should_fail_usercopy+0x1a/0x20 [ 239.480973][T16041] _copy_from_user+0x1c/0xb0 [ 239.481002][T16041] do_ipt_set_ctl+0x3a0/0x820 [ 239.481096][T16041] ? _raw_spin_unlock_bh+0x36/0x40 [ 239.481128][T16041] ? tcp_release_cb+0xf1/0x370 [ 239.481165][T16041] nf_setsockopt+0x196/0x1b0 [ 239.481205][T16041] ip_setsockopt+0x102/0x110 [ 239.481273][T16041] tcp_setsockopt+0x95/0xb0 [ 239.481301][T16041] sock_common_setsockopt+0x66/0x80 [ 239.481328][T16041] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 239.481431][T16041] __sys_setsockopt+0x181/0x200 [ 239.481469][T16041] __x64_sys_setsockopt+0x64/0x80 [ 239.481511][T16041] x64_sys_call+0x2bd5/0x2fb0 [ 239.481542][T16041] do_syscall_64+0xd0/0x1a0 [ 239.481579][T16041] ? clear_bhb_loop+0x25/0x80 [ 239.481599][T16041] ? clear_bhb_loop+0x25/0x80 [ 239.481642][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.481668][T16041] RIP: 0033:0x7f5fac6ae969 [ 239.481692][T16041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.481708][T16041] RSP: 002b:00007f5faad17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.481726][T16041] RAX: ffffffffffffffda RBX: 00007f5fac8d5fa0 RCX: 00007f5fac6ae969 [ 239.481737][T16041] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.481802][T16041] RBP: 00007f5faad17090 R08: 0000000000000280 R09: 0000000000000000 [ 239.481817][T16041] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 239.481832][T16041] R13: 0000000000000000 R14: 00007f5fac8d5fa0 R15: 00007ffde205b8c8 [ 239.481872][T16041] [ 239.701408][T16044] loop0: detected capacity change from 0 to 256 [ 239.713431][T16044] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.751485][T16051] loop1: detected capacity change from 0 to 512 [ 239.781890][T16053] x_tables: duplicate underflow at hook 3 [ 239.803047][T16051] EXT4-fs (loop1): 1 orphan inode deleted [ 239.811283][T16051] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.823224][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 239.849970][T16059] 9pnet_fd: Insufficient options for proto=fd [ 239.866522][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 239.893640][T16065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16065 comm=syz.0.2769 [ 239.930834][T16068] loop3: detected capacity change from 0 to 256 [ 239.940148][T16068] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.953681][T16070] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2770'. [ 239.984743][T16072] sit0: left promiscuous mode [ 240.026301][T16072] sit0: entered promiscuous mode [ 240.333932][T16098] loop1: detected capacity change from 0 to 512 [ 240.362084][T16098] EXT4-fs (loop1): 1 orphan inode deleted [ 240.368798][T16098] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.379562][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 240.414786][ T3441] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 240.422876][T16102] FAULT_INJECTION: forcing a failure. [ 240.422876][T16102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.436042][T16102] CPU: 0 UID: 0 PID: 16102 Comm: syz.1.2778 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 240.436075][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.436087][T16102] Call Trace: [ 240.436094][T16102] [ 240.436109][T16102] __dump_stack+0x1d/0x30 [ 240.436182][T16102] dump_stack_lvl+0xe8/0x140 [ 240.436211][T16102] dump_stack+0x15/0x1b [ 240.436232][T16102] should_fail_ex+0x265/0x280 [ 240.436269][T16102] should_fail+0xb/0x20 [ 240.436372][T16102] should_fail_usercopy+0x1a/0x20 [ 240.436396][T16102] _copy_from_user+0x1c/0xb0 [ 240.436470][T16102] uhid_char_write+0xef/0x650 [ 240.436503][T16102] ? __pfx_uhid_char_write+0x10/0x10 [ 240.436533][T16102] vfs_write+0x266/0x8d0 [ 240.436590][T16102] ? __rcu_read_unlock+0x4f/0x70 [ 240.436609][T16102] ? __fget_files+0x184/0x1c0 [ 240.436638][T16102] ksys_write+0xda/0x1a0 [ 240.436675][T16102] __x64_sys_write+0x40/0x50 [ 240.436707][T16102] x64_sys_call+0x2cdd/0x2fb0 [ 240.436734][T16102] do_syscall_64+0xd0/0x1a0 [ 240.436761][T16102] ? clear_bhb_loop+0x25/0x80 [ 240.436861][T16102] ? clear_bhb_loop+0x25/0x80 [ 240.436886][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.436912][T16102] RIP: 0033:0x7f93ecd5e969 [ 240.436934][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.436955][T16102] RSP: 002b:00007f93eb3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.436979][T16102] RAX: ffffffffffffffda RBX: 00007f93ecf85fa0 RCX: 00007f93ecd5e969 [ 240.437001][T16102] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 240.437012][T16102] RBP: 00007f93eb3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.437023][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.437034][T16102] R13: 0000000000000000 R14: 00007f93ecf85fa0 R15: 00007ffedb3aec18 [ 240.437055][T16102] [ 240.630927][ T3441] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.680606][T16106] loop1: detected capacity change from 0 to 512 [ 240.687555][T16106] EXT4-fs: Ignoring removed mblk_io_submit option [ 240.719788][T16106] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 240.728088][T16106] EXT4-fs (loop1): orphan cleanup on readonly fs [ 240.753932][T16106] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 240.771350][T16106] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 240.779909][T16106] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2781: bg 0: block 40: padding at end of block bitmap is not set [ 240.794607][T16106] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 240.805131][T16106] EXT4-fs (loop1): 1 truncate cleaned up [ 240.830182][ T3005] ================================================================== [ 240.838306][ T3005] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 240.845081][ T3005] [ 240.847406][ T3005] write to 0xffff8881021d5a20 of 8 bytes by task 3303 on cpu 0: [ 240.855036][ T3005] inc_diskseq+0x2d/0x40 [ 240.859285][ T3005] disk_force_media_change+0x9e/0xe0 [ 240.864586][ T3005] lo_release+0x2cb/0x400 [ 240.868932][ T3005] bdev_release+0x370/0x3d0 [ 240.873449][ T3005] blkdev_release+0x15/0x20 [ 240.877969][ T3005] __fput+0x298/0x650 [ 240.881959][ T3005] fput_close_sync+0x6e/0x120 [ 240.886641][ T3005] __x64_sys_close+0x56/0xf0 [ 240.891241][ T3005] x64_sys_call+0x2747/0x2fb0 [ 240.895930][ T3005] do_syscall_64+0xd0/0x1a0 [ 240.900443][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.906338][ T3005] [ 240.908663][ T3005] read to 0xffff8881021d5a20 of 8 bytes by task 3005 on cpu 1: [ 240.916208][ T3005] block_uevent+0x31/0x50 [ 240.920542][ T3005] dev_uevent+0x349/0x3d0 [ 240.924886][ T3005] uevent_show+0x117/0x200 [ 240.929313][ T3005] dev_attr_show+0x3c/0xa0 [ 240.933744][ T3005] sysfs_kf_seq_show+0x1a0/0x280 [ 240.938688][ T3005] kernfs_seq_show+0x7f/0xa0 [ 240.943295][ T3005] seq_read_iter+0x316/0x940 [ 240.947889][ T3005] kernfs_fop_read_iter+0xc4/0x300 [ 240.953015][ T3005] vfs_read+0x5ca/0x6f0 [ 240.957180][ T3005] ksys_read+0xda/0x1a0 [ 240.961344][ T3005] __x64_sys_read+0x40/0x50 [ 240.965856][ T3005] x64_sys_call+0x2d77/0x2fb0 [ 240.970538][ T3005] do_syscall_64+0xd0/0x1a0 [ 240.975048][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.980947][ T3005] [ 240.983273][ T3005] value changed: 0x0000000000000519 -> 0x000000000000051a [ 240.990380][ T3005] [ 240.992702][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 240.998851][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 241.010834][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.020894][ T3005] ================================================================== [ 241.043938][T16125] FAULT_INJECTION: forcing a failure. [ 241.043938][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.057140][T16125] CPU: 1 UID: 0 PID: 16125 Comm: syz.1.2786 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 241.057227][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.057240][T16125] Call Trace: [ 241.057247][T16125] [ 241.057262][T16125] __dump_stack+0x1d/0x30 [ 241.057285][T16125] dump_stack_lvl+0xe8/0x140 [ 241.057303][T16125] dump_stack+0x15/0x1b [ 241.057318][T16125] should_fail_ex+0x265/0x280 [ 241.057376][T16125] should_fail+0xb/0x20 [ 241.057412][T16125] should_fail_usercopy+0x1a/0x20 [ 241.057435][T16125] _copy_from_user+0x1c/0xb0 [ 241.057458][T16125] ___sys_sendmsg+0xc1/0x1d0 [ 241.057502][T16125] __x64_sys_sendmsg+0xd4/0x160 [ 241.057536][T16125] x64_sys_call+0x2999/0x2fb0 [ 241.057612][T16125] do_syscall_64+0xd0/0x1a0 [ 241.057637][T16125] ? clear_bhb_loop+0x25/0x80 [ 241.057657][T16125] ? clear_bhb_loop+0x25/0x80 [ 241.057677][T16125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.057775][T16125] RIP: 0033:0x7f93ecd5e969 [ 241.057789][T16125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.057806][T16125] RSP: 002b:00007f93eb3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.057870][T16125] RAX: ffffffffffffffda RBX: 00007f93ecf85fa0 RCX: 00007f93ecd5e969 [ 241.057890][T16125] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 241.057965][T16125] RBP: 00007f93eb3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.057981][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.058019][T16125] R13: 0000000000000000 R14: 00007f93ecf85fa0 R15: 00007ffedb3aec18 [ 241.058037][T16125] [ 249.388018][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 249.397986][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!