last executing test programs: 3m52.3057142s ago: executing program 32 (id=8645): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 3m50.520875355s ago: executing program 33 (id=8695): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000005c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB=',wid=', @ANYRESDEC, @ANYRES32], 0x5, 0xa51, &(0x7f0000001cc0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) chown(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 3m42.798262744s ago: executing program 34 (id=8974): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x10, 0x7}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x6, 0x5}, 0x28) 3m30.637794779s ago: executing program 35 (id=9454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x0, 0xfffffffa, {0x7, 0x0, 0xa, 0x6, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0xffffff81}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0xb, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x1, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x6, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x8003, 0x0, 0x0, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x7, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x8, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x6, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x2, 0x9, 0x2, 0x1000, 0x812, 0x0, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x0, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0x6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x8, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x800, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0x4, 0x1, 0xfffffffe, 0x1ff, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x80000003, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0xd020, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0xffffffff, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x12, 0x69, 0x0, 0xffff, 0x7, 0x1800, 0xc, 0x8, 0x271, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x3, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 3m2.350862714s ago: executing program 7 (id=10718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x3) 3m2.274540466s ago: executing program 7 (id=10719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 3m2.233980017s ago: executing program 7 (id=10721): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x6, 0xcb49}, &(0x7f0000000040)=0x18) unlink(&(0x7f0000000180)='./file1\x00') 3m2.100979569s ago: executing program 7 (id=10724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m2.06881328s ago: executing program 7 (id=10726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 3m1.846481715s ago: executing program 7 (id=10728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x10, 0x0}, 0x8001) 3m1.846200994s ago: executing program 36 (id=10728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x10, 0x0}, 0x8001) 2m53.81324109s ago: executing program 9 (id=10948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT], 0xfdef) 2m53.757977671s ago: executing program 9 (id=10954): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000240)={[{@errors_remount}, {@nomblk_io_submit}]}, 0xfd, 0x4c3, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) 2m53.373337008s ago: executing program 9 (id=10969): syz_read_part_table(0x5d6, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x4d3f, 0xfffffffd, 0x3ff, 0x6, 0xffffffffffffffff}) 2m53.095785374s ago: executing program 9 (id=10978): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYzv283MSxzbh87Ge3/3zu+f8zrv33SNfv3dP+CZrNpvV4x7nL/xmO5Nl9zk7/tWnn31cPn50I3vSk1eKL5L+JPWkN8mhJGPjc7PTXQq6nlxKcjMpkuxN63lTLqX4WfYtz99M8auq3tKFe2wYm9LkW22njz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiNirHx4eGRIlOTMxfeqHdWDQHeaWVtubwvq1G/iy+71psU5SP9/UtDfR86uLz6yfLX0Tzdmnu6GpA8/fnokScPvPZEb21p+w0Svht/bw+GfNcbvvfhR9ffWly88m6H9T3t5tx3hrvUucbM5Pzs5PSZc4365Pxs/fSpU8Mnzk/M1ycmpxrzF+cXGtP1sbnGmYXZufrg2Iv1kdOnT9YbQxdnL8ycGx+aaiwtfPXfR4eHT9VfH/qfxpm5+dmZE68PzY+dn5yampw5V8WUq8uYV8sD8b8nF+oLjTPT9frVa4tXTq7KaJ2Xugwa6daSMmi0W9Do8OjoyMjo6MipV06/8urwcO/ygp5UC4bvkDWb3D5os+/hPS6+hT6pbSKoPDnWt/DsDfen1u7/M5XJzORC3kh93Z+xjGcus5nusL5tqf8/dqKxYb0r+/+lXv7Q8uqnUvX/z7bmnu3U/3fIZft+3suH+SjX81YWs5greXfV2r33UGKzuX6rfv2H1mux0y1e/XMujcxkMvOZzWSmc6ZaUm8vqed0TuVUhvNmzmci86lnIpOZSiPzuZj5LKRRHVFjmUsjZ7LQ22rjYMbyYuoZyemczsnU08hQLmY2FzKTcxnPmaqUq7lWve4nN8jxdtDIZoJGNwjaoP9vL7iL/p9vqa0+hcM9a7b7/z13LK+tDR0c266kAAAAgC31r7/P/oOP/+7PSV+eqa6xAwAAAA+b6uN6T5dPfeXUMykmJqcaw2sD39/+3AAAAICtUVTfsSuSDORwa2rpm1DrXAQAAAAAvomq//8/Wz4NlFOHU/j7HwAAAB423e+x3zWiOJ56bpSr6pdbkZfbEe37/A5MTE41hsZmp14byfPVXQaqbxqsKa0nB5Lq6wcv5Ugr6shA63lgdYn9ZdTI0Gsj6c/RdkMGnyufnhtcJ3K0jHwpL7QiX1iK7M+ayJNlJAA87I5u0B9vtv9/KcdbEcefqm7f3vvUOn3wcKtn/eEOtRMAWNZ9jJ2uEcV/LA3/0+Hv/55cPdz6SMFQ3s47WczlHK++bVB94qBdam4WWS51YMXHEI53uRowsGKEl+NL1wMO71v3esDAioFejq+5ItAp9uS6r12x5XsDALbH0TX98Ab9f7PZmlpz/X/jv/8HfKQQAHaV2yPYP8CJO+vs25mmAgBtnXvpDfQ8wIQAAAAAAAAAAAAAAAAAAAAAAAAAAADgIfAg7/9fS/JgRxa4j4kbSXZBGts88Zf2bl+zqr38xo5nuGJib+6/nP5tGeHiw//bs4sP9Xub2MGTEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANumSHrWW15L9ia9w0lObH9WD86NnU5ghxW3cisfZP9O5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LBp3/+/ltbzI61F6a0lx5JcSvK/O53jVrq10wnssBX3/y/3eZpFelu7PUXf2Pjc7HS5+7O3XP/Vp599XD7upZ6ygLKGVYNLtGvovNVj1VYD41feu/79d75XHz9bJXl2YWJqfPrc3H8tBz5ZfJ7U03osWcr3B0X7KF7d8s/Llnavt6xloqp3fG29/7Le1rfrPfbbn3du27LlNK4tXhkta1povLHw/nevfbAi6PEcSZ4bTAZX1/Sd8tGhpiPp26je4uviJ8X+/DKXqv1fplE0i3IXPZrsSe2frl5bvDL09juLlzvkdCCHk1xO+jef0+G1e2JJddTV+spah6ug8tfBLuVt6JGe/c1mq8SRDm14rDpkBu6qDfXObah0ed3bbTzZIaMn8vxd7+nnu9TY9rdmS2uu+Lr4U3E+f8yPV4z/USv3/7Fs5t1ZxlSRK46Uzm0+ttzy0ZUr3rwzsuO7kgfgp/n//Oft/V9bcf5v76vtOR+tqPGBvS+KVi/UVk0fvKNHap99OmXZzvNgK6pDnv+cl9du1yXPl7ucUbbo/b9a8XXxSTGYv+aG8X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdr0h61lteS44lOZDk0XK+njS3or7aQLEVxWzSnjVLbmxj7btH7fZUcSu38kH272g6AAAAAAAAAGyZs+NfffrZx+Wj+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVlO999dDuV22bc8f7OcO3T3bQEANucfAQAA//+INm5i") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 2m52.891686097s ago: executing program 9 (id=10981): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2040400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, 0x0, 0x1000, 0x80, &(0x7f0000000540)) 2m52.633822272s ago: executing program 9 (id=10995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m52.604681963s ago: executing program 37 (id=10995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m39.144892353s ago: executing program 0 (id=11574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x31) 2m39.103995423s ago: executing program 0 (id=11576): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket(0x3, 0x800, 0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000940)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000080)={r1, 0x3, r0, 0x120000}) 2m38.270082149s ago: executing program 0 (id=11624): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) 2m38.24194654s ago: executing program 0 (id=11627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m38.176154391s ago: executing program 0 (id=11629): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 2m38.116804083s ago: executing program 0 (id=11634): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 2m23.838436958s ago: executing program 38 (id=11634): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1m3.036525526s ago: executing program 5 (id=15982): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f000003a000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xff, 0x2) 1m2.935541008s ago: executing program 5 (id=15989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffffffff55286990914593186dd6087fb00000000000000000000000001fc020000000000000000000000000000000200000000000004010001"], 0x0) 1m2.87726691s ago: executing program 5 (id=15992): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x20, 0x10d, 0x5, "ece538e8b62831eafcd9"}], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m2.657058553s ago: executing program 5 (id=16000): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/27) 1m2.605872385s ago: executing program 5 (id=16002): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 1m2.385201119s ago: executing program 5 (id=16010): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0xb06, 0x1}, &(0x7f0000000280)=0x8) 1m2.30860263s ago: executing program 8 (id=16021): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYBLOB="e452e995d21822ad2908bc53b1eee5c91d58ff79db72ee73a3e3d070e14b096e9e42c315786ee2d798ef1954d87d7ab7b26d51ae2625b5b12ae4132e201622bfc52953909cd0aba5b57dfe9c6869905d7c86f68821eaa3de803bbf9929969cf93650fe523e9a1f37"], 0x1, 0x2c7, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1m1.82490475s ago: executing program 8 (id=16029): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 1m1.80642139s ago: executing program 8 (id=16030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000000c0a090000000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1m1.78942137s ago: executing program 8 (id=16031): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 1m1.77311585s ago: executing program 8 (id=16032): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 1m1.756285921s ago: executing program 8 (id=16033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) ioperm(0x3c, 0x1, 0x8) 48.051310565s ago: executing program 39 (id=16010): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0xb06, 0x1}, &(0x7f0000000280)=0x8) 47.437241497s ago: executing program 40 (id=16033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) ioperm(0x3c, 0x1, 0x8) 1.770346316s ago: executing program 1 (id=18045): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x4000000) 1.642303949s ago: executing program 1 (id=18050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.499812151s ago: executing program 1 (id=18061): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}}, 0x0, 0x0, 0x13a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc01005ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 754.576916ms ago: executing program 4 (id=18073): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") 754.321126ms ago: executing program 1 (id=18075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x108000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 621.943268ms ago: executing program 2 (id=18082): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 609.254778ms ago: executing program 4 (id=18084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 587.626639ms ago: executing program 2 (id=18086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 531.31119ms ago: executing program 2 (id=18089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005780)=ANY=[], 0x1110}}], 0x2, 0x4004081) 530.9753ms ago: executing program 6 (id=18090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x29064778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x37, 0x5, 0x1, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x5, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x563, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 530.74911ms ago: executing program 4 (id=18091): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 528.64732ms ago: executing program 1 (id=18092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 450.677032ms ago: executing program 3 (id=18093): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 450.377172ms ago: executing program 6 (id=18094): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) mlockall(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) getgroups(0x0, 0x0) 450.266342ms ago: executing program 2 (id=18095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x1001, &(0x7f00000024c0)=""/4097, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd}, 0x94) 450.110012ms ago: executing program 4 (id=18096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 449.932392ms ago: executing program 2 (id=18097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010100, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 437.930362ms ago: executing program 6 (id=18098): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000340)={[{@dioread_lock}, {@nolazytime}, {@discard}]}, 0x4, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 429.088332ms ago: executing program 4 (id=18099): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x101, 0x8) 416.196022ms ago: executing program 2 (id=18100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) 407.079943ms ago: executing program 1 (id=18101): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x29c500a, 0x0, 0x4, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 385.020233ms ago: executing program 3 (id=18102): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x92}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 298.576534ms ago: executing program 4 (id=18103): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e3a", 0x2}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 280.844555ms ago: executing program 3 (id=18104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) close(r0) 258.319155ms ago: executing program 6 (id=18105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x40}}, 0x0) 193.912196ms ago: executing program 6 (id=18106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 157.084067ms ago: executing program 3 (id=18107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 146.047917ms ago: executing program 6 (id=18108): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x10}}, 0x40044) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 50.237969ms ago: executing program 3 (id=18109): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="f700000023"], 0x48) 0s ago: executing program 3 (id=18110): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/73, 0x49}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): yz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6536a9eec9 code=0x7ffc0000 [ 400.262792][ T29] audit: type=1326 audit(2000000031.170:11833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.4.16253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 400.288292][ T29] audit: type=1326 audit(2000000031.180:11834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9309 comm="syz.4.16253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 400.439929][ T9328] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 400.459653][ T9331] loop3: detected capacity change from 0 to 512 [ 400.477579][ T9332] loop4: detected capacity change from 0 to 1024 [ 400.492095][ T9332] EXT4-fs: inline encryption not supported [ 400.498076][ T9332] EXT4-fs: Ignoring removed i_version option [ 400.504155][ T9332] EXT4-fs: Ignoring removed bh option [ 400.531271][ T9331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.544445][ T9331] ext4 filesystem being mounted at /3255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.559761][ T9332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.597855][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.639243][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.651217][ T9339] loop4: detected capacity change from 0 to 512 [ 400.686510][ T9339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.710106][ T9339] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.758829][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.948245][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16277'. [ 401.175154][ T9374] loop3: detected capacity change from 0 to 1024 [ 401.183333][ T9374] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.194536][ T9374] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 401.205516][ T9374] JBD2: no valid journal superblock found [ 401.211324][ T9374] EXT4-fs (loop3): Could not load journal inode [ 401.328485][ T9386] hub 9-0:1.0: USB hub found [ 401.339357][ T9386] hub 9-0:1.0: 8 ports detected [ 401.639136][ T9398] 9pnet_fd: Insufficient options for proto=fd [ 401.765343][ T9406] loop4: detected capacity change from 0 to 1024 [ 401.772455][ T9406] EXT4-fs: inline encryption not supported [ 401.798273][ T9406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.813914][ T9406] SELinux: security_context_str_to_sid (unt-ro,) failed with errno=-22 [ 401.836126][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.940817][ T9417] program syz.4.16301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.169359][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16304'. [ 402.178681][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16304'. [ 402.329655][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16304'. [ 402.338774][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16304'. [ 402.441898][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16304'. [ 402.451043][ T9424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16304'. [ 402.961881][ T9454] lo speed is unknown, defaulting to 1000 [ 403.006371][T32590] bond0: (slave syz_tun): Releasing backup interface [ 403.078587][ T9454] chnl_net:caif_netlink_parms(): no params data found [ 403.144533][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.151657][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.159293][ T9454] bridge_slave_0: entered allmulticast mode [ 403.166106][ T9454] bridge_slave_0: entered promiscuous mode [ 403.173416][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.180658][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.188309][ T9454] bridge_slave_1: entered allmulticast mode [ 403.194833][ T9454] bridge_slave_1: entered promiscuous mode [ 403.216394][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.227744][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.250873][ T9454] team0: Port device team_slave_0 added [ 403.257974][ T9454] team0: Port device team_slave_1 added [ 403.286598][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.293640][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.319588][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.337240][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.344336][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.370395][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.449750][ T9454] hsr_slave_0: entered promiscuous mode [ 403.456411][ T9454] hsr_slave_1: entered promiscuous mode [ 403.462489][ T9454] debugfs: 'hsr0' already exists in 'hsr' [ 403.468367][ T9454] Cannot create hsr debugfs directory [ 403.607179][ T9500] netlink: 'syz.4.16326': attribute type 10 has an invalid length. [ 403.617869][ T9500] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.722644][ T9484] lo speed is unknown, defaulting to 1000 [ 403.826638][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 403.964479][ T9454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.975859][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.983147][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.025962][ T9484] bridge_slave_0: entered allmulticast mode [ 404.034696][ T9545] __nla_validate_parse: 9 callbacks suppressed [ 404.034715][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16343'. [ 404.050053][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16343'. [ 404.060269][ T9484] bridge_slave_0: entered promiscuous mode [ 404.070320][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.077459][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.084930][ T9484] bridge_slave_1: entered allmulticast mode [ 404.092674][ T9484] bridge_slave_1: entered promiscuous mode [ 404.099087][ T9454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.114324][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16343'. [ 404.123476][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16343'. [ 404.137812][ T9454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.141116][ T9552] program syz.3.16346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.163717][ T9454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.192410][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.215170][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.235694][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16343'. [ 404.244829][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16343'. [ 404.261765][ T9484] team0: Port device team_slave_0 added [ 404.279567][ T9484] team0: Port device team_slave_1 added [ 404.306212][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.313306][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.339297][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.373837][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.380922][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.395473][ T9583] loop3: detected capacity change from 0 to 512 [ 404.407032][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.425390][ T9583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.432403][ T9583] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 404.438359][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.461157][ T9583] EXT4-fs (loop3): 1 truncate cleaned up [ 404.467343][ T9583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.485357][ T9484] hsr_slave_0: entered promiscuous mode [ 404.491874][ T9484] hsr_slave_1: entered promiscuous mode [ 404.497850][ T9484] debugfs: 'hsr0' already exists in 'hsr' [ 404.503687][ T9484] Cannot create hsr debugfs directory [ 404.510616][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.547424][ T9454] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.563448][T16871] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.570557][T16871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.589057][T16871] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.596195][T16871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.619644][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16361'. [ 404.646031][ T9579] lo speed is unknown, defaulting to 1000 [ 404.688475][ T9454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.796251][ T9454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.860221][ T9619] loop4: detected capacity change from 0 to 512 [ 404.866982][ T9619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.874440][ T9619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 404.910310][ T9619] EXT4-fs (loop4): 1 truncate cleaned up [ 404.934627][ T9619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.994475][ T9618] lo speed is unknown, defaulting to 1000 [ 405.083867][ T9484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.101547][ T9484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.122587][ T9484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.130695][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.143201][ T9484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.214524][ T9454] veth0_vlan: entered promiscuous mode [ 405.249034][ T9454] veth1_vlan: entered promiscuous mode [ 405.268121][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.279953][ T9644] loop4: detected capacity change from 0 to 512 [ 405.300410][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.310253][ T9454] veth0_macvtap: entered promiscuous mode [ 405.310489][ T9644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.329486][ T9454] veth1_macvtap: entered promiscuous mode [ 405.335497][ T9644] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.352232][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.360542][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.367610][T16857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.398162][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.416087][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.437205][T16857] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.444408][T16857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.481503][T16857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.497726][ T9655] program syz.4.16376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.510852][T16857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.521313][T16837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.530047][T16837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.592998][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.610215][ T9660] loop4: detected capacity change from 0 to 512 [ 405.627448][ T9660] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 405.636307][ T9660] EXT4-fs (loop4): orphan cleanup on readonly fs [ 405.658661][ T9660] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.16378: corrupted inode contents [ 405.704733][ T9660] EXT4-fs (loop4): Remounting filesystem read-only [ 405.716200][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 405.716216][ T29] audit: type=1400 audit(2000000037.897:11903): avc: denied { cpu } for pid=9670 comm="syz.3.16379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 405.761389][ T9660] EXT4-fs (loop4): 1 truncate cleaned up [ 405.768680][T16838] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 405.779274][T16838] Quota error (device loop4): write_blk: dquota write failed [ 405.786678][T16838] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 405.796888][T16838] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 405.807913][T16838] Quota error (device loop4): write_blk: dquota write failed [ 405.815390][T16838] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 405.864061][T16838] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 405.874306][T16838] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 405.892825][T16838] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 405.904427][ T9687] loop6: detected capacity change from 0 to 128 [ 405.909823][ T9484] veth0_vlan: entered promiscuous mode [ 405.923333][ T9484] veth1_vlan: entered promiscuous mode [ 405.929532][ T9660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.960859][ T9484] veth0_macvtap: entered promiscuous mode [ 405.967318][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.977435][ T9484] veth1_macvtap: entered promiscuous mode [ 405.990657][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.008341][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.015930][ T29] audit: type=1400 audit(2000000038.202:11904): avc: denied { shutdown } for pid=9692 comm="syz.6.16387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.037540][ T9696] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 406.051688][T16838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.062770][ T9694] loop4: detected capacity change from 0 to 128 [ 406.074108][T16838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.082971][T16838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.106310][T16838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.107326][ T9698] loop6: detected capacity change from 0 to 512 [ 406.140188][ T9698] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.178012][ T9698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.219120][ T9698] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.274974][ T9698] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.16389: corrupted xattr block 33: e_value out of bounds [ 406.320421][ T29] audit: type=1400 audit(2000000038.527:11905): avc: denied { audit_write } for pid=9710 comm="syz.4.16394" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 406.344010][ T9698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 406.357751][ T29] audit: type=1107 audit(2000000038.527:11906): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 406.371182][ T9698] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.16389: corrupted xattr block 33: e_value out of bounds [ 406.398895][ T9698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 406.421948][ T9698] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 406.440766][ T9698] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2967: inode #15: comm syz.6.16389: corrupted xattr block 33: e_value out of bounds [ 406.464090][ T9698] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 406.470910][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16397'. [ 406.528096][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.643406][ T9724] loop2: detected capacity change from 0 to 8192 [ 406.893948][ T9749] loop3: detected capacity change from 0 to 512 [ 406.901372][ T9745] lo speed is unknown, defaulting to 1000 [ 406.928512][ T9749] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.027888][ T9749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.084104][ T9749] ext4 filesystem being mounted at /3309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.084550][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16413'. [ 407.103880][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16413'. [ 407.197838][ T9749] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16409: corrupted xattr block 33: e_value out of bounds [ 407.236689][ T9749] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 407.259237][ T9749] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16409: corrupted xattr block 33: e_value out of bounds [ 407.285083][ T9749] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 407.295027][ T9749] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 407.331146][ T9749] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #15: comm syz.3.16409: corrupted xattr block 33: e_value out of bounds [ 407.359445][ T9749] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 407.441057][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.487295][ T9795] loop2: detected capacity change from 0 to 512 [ 407.522176][ T9795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.570577][ T9795] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.631144][ T9808] program syz.6.16436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.643316][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.784994][ T9818] loop2: detected capacity change from 0 to 512 [ 407.797656][ T9818] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.832760][ T9818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.846476][ T9818] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.864805][ T9818] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.16439: corrupted xattr block 33: e_value out of bounds [ 407.882562][ T9818] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 407.891632][ T9818] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.16439: corrupted xattr block 33: e_value out of bounds [ 407.906312][ T9818] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 407.923027][ T9818] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 407.941805][ T9818] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #15: comm syz.2.16439: corrupted xattr block 33: e_value out of bounds [ 407.963047][ T9829] SELinux: policydb version 0 does not match my version range 15-35 [ 407.971512][ T9829] SELinux: failed to load policy [ 407.971516][ T9818] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 408.004037][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.081500][ T9843] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 572 [ 408.135890][ T9838] loop3: detected capacity change from 0 to 8192 [ 408.447146][ T9847] lo speed is unknown, defaulting to 1000 [ 408.617922][ T9872] bond1: option ad_user_port_key: invalid value (34504) [ 408.625041][ T9872] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 408.633382][ T9872] bond1 (unregistering): Released all slaves [ 408.732223][ T9888] loop3: detected capacity change from 0 to 512 [ 408.758141][ T9888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.779939][ T9894] program syz.6.16472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.789598][ T9888] ext4 filesystem being mounted at /3316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 408.854465][ T9897] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.867633][ T9888] team_slave_0: left promiscuous mode [ 408.873099][ T9888] team_slave_1: left promiscuous mode [ 408.882908][ T9899] loop2: detected capacity change from 0 to 1024 [ 408.903427][ T9899] EXT4-fs: Ignoring removed nobh option [ 408.909035][ T9899] EXT4-fs: Ignoring removed bh option [ 408.917735][ T9888] __nla_validate_parse: 2 callbacks suppressed [ 408.917754][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16468'. [ 408.939317][ T9899] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 408.970287][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.981031][ T9899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.053447][ T9911] netlink: 164 bytes leftover after parsing attributes in process `syz.6.16481'. [ 409.071694][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.214517][ T9931] loop3: detected capacity change from 0 to 512 [ 409.249189][ T9927] lo speed is unknown, defaulting to 1000 [ 409.250032][ T9931] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.16490: EA inode hash validation failed [ 409.272145][ T9931] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.16490: corrupted inode contents [ 409.285072][ T9931] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.16490: mark_inode_dirty error [ 409.297682][ T9931] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.16490: corrupted inode contents [ 409.310246][ T9931] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.16490: mark_inode_dirty error [ 409.323380][ T9931] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.16490: mark inode dirty (error -117) [ 409.346137][ T9931] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 409.355385][ T9931] EXT4-fs (loop3): 1 orphan inode deleted [ 409.363052][ T9931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.510457][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.524341][ T9950] lo speed is unknown, defaulting to 1000 [ 409.645137][ T9964] program syz.6.16502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.646765][ T9959] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16499'. [ 409.863592][ T9981] 9pnet: Could not find request transport: 0xffffffffffffffff [ 410.117507][T10000] lo speed is unknown, defaulting to 1000 [ 410.748590][T10026] 9pnet: Could not find request transport: 0xffffffffffffffff [ 410.757140][T10030] bridge0: port 3(dummy0) entered disabled state [ 410.763663][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.875813][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 410.875897][ T29] audit: type=1400 audit(2000000043.315:11937): avc: denied { unmount } for pid=10035 comm="syz.4.16532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 411.088214][ T29] audit: type=1400 audit(2000000043.535:11938): avc: denied { kexec_image_load } for pid=10047 comm="syz.2.16538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 411.108657][ T29] audit: type=1400 audit(2000000043.535:11939): avc: denied { read write } for pid=10049 comm="syz.4.16540" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 411.133168][ T29] audit: type=1400 audit(2000000043.535:11940): avc: denied { open } for pid=10049 comm="syz.4.16540" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 411.179924][T10052] program syz.3.16539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.340868][ T29] audit: type=1400 audit(2000000043.724:11941): avc: denied { create } for pid=10054 comm="syz.3.16542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.360798][ T29] audit: type=1400 audit(2000000043.724:11942): avc: denied { write } for pid=10054 comm="syz.3.16542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.380629][ T29] audit: type=1400 audit(2000000043.735:11943): avc: denied { bind } for pid=10054 comm="syz.3.16542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.417048][ T29] audit: type=1400 audit(2000000043.850:11944): avc: denied { map } for pid=10058 comm="syz.4.16543" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 411.441323][ T29] audit: type=1400 audit(2000000043.850:11945): avc: denied { execute } for pid=10058 comm="syz.4.16543" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 411.481315][T10062] SELinux: failed to load policy [ 411.493253][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16547'. [ 411.517721][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16547'. [ 411.626757][ T29] audit: type=1326 audit(2000000044.018:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.16548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 411.715536][T10086] loop6: detected capacity change from 0 to 512 [ 411.740611][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16557'. [ 412.047817][T10111] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16567'. [ 412.117798][T10115] loop2: detected capacity change from 0 to 512 [ 412.160520][T10115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.207912][T10115] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.279866][T10115] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.16569: corrupted inode contents [ 412.312567][T10115] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.16569: mark_inode_dirty error [ 412.319518][T10130] loop3: detected capacity change from 0 to 512 [ 412.365577][T10115] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.16569: corrupted inode contents [ 412.404395][T10133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.16569: corrupted inode contents [ 412.418692][T10130] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 412.439593][T10130] EXT4-fs (loop3): orphan cleanup on readonly fs [ 412.464553][T10130] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.16576: corrupted inode contents [ 412.499339][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.558570][T10130] EXT4-fs (loop3): Remounting filesystem read-only [ 412.578667][T10130] EXT4-fs (loop3): 1 truncate cleaned up [ 412.588537][T16871] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 412.599283][T16871] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 412.611269][T16871] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 412.656157][T10130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.709928][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.758948][T10158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10158 comm=syz.6.16589 [ 412.924077][T10176] loop4: detected capacity change from 0 to 512 [ 412.962858][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 412.970360][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 412.977882][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 412.985333][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 412.992766][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 413.000235][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 413.007661][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 413.015156][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 413.046970][T10176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 413.074150][T10176] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.122144][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 413.129589][ T9] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 413.150933][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 413.217569][ T9] hid-generic 00A0:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 413.581633][T10227] loop2: detected capacity change from 0 to 8192 [ 414.058715][T10305] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16657'. [ 414.245937][T10323] syzkaller1: entered promiscuous mode [ 414.251465][T10323] syzkaller1: entered allmulticast mode [ 414.337718][T10326] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16667'. [ 414.495793][T10336] netlink: 'syz.3.16672': attribute type 3 has an invalid length. [ 414.610490][T10346] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16677'. [ 414.650511][T10348] SELinux: failed to load policy [ 414.768984][T10360] sd 0:0:1:0: device reset [ 414.840760][T10368] loop3: detected capacity change from 0 to 512 [ 414.894271][T10368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.906932][T10368] ext4 filesystem being mounted at /3375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.930836][T10368] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.16689: bg 0: block 328: padding at end of block bitmap is not set [ 414.968517][T10384] bond0: entered promiscuous mode [ 414.973681][T10384] bond_slave_0: entered promiscuous mode [ 414.979519][T10384] bond_slave_1: entered promiscuous mode [ 414.994021][T10386] loop4: detected capacity change from 0 to 512 [ 415.011160][T10386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.029589][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.030156][T10386] EXT4-fs (loop4): 1 orphan inode deleted [ 415.054127][T16857] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:34: Failed to release dquot type 1 [ 415.076408][T10386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.095189][T10386] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.156570][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.170676][T10398] loop3: detected capacity change from 0 to 1024 [ 415.194009][T10398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.227728][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.264161][T10411] loop4: detected capacity change from 0 to 512 [ 415.287036][T10417] loop3: detected capacity change from 0 to 512 [ 415.289077][T10411] EXT4-fs: Ignoring removed nobh option [ 415.302401][T10417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.310370][T10420] vcan0: tx drop: invalid da for name 0x0000000020000004 [ 415.315968][T10417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.324176][T10411] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.16706: iget: bad i_size value: 38620345925642 [ 415.350926][T10411] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.16706: couldn't read orphan inode 15 (err -117) [ 415.372998][T10411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.402331][T10425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 415.437891][T10429] SELinux: policydb version 4376 does not match my version range 15-35 [ 415.456369][T10427] netlink: 7 bytes leftover after parsing attributes in process `syz.2.16713'. [ 415.473371][T10429] SELinux: failed to load policy [ 415.483248][T10427] netlink: 7 bytes leftover after parsing attributes in process `syz.2.16713'. [ 415.494680][T10432] loop6: detected capacity change from 0 to 1024 [ 415.534066][T10432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.557119][T10432] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.636757][T10432] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 415.687561][T10446] loop2: detected capacity change from 0 to 512 [ 415.703002][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.717841][T10446] EXT4-fs: Ignoring removed bh option [ 415.736005][T10446] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 415.752690][T10446] EXT4-fs (loop2): 1 truncate cleaned up [ 415.758938][T10446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.771559][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 415.771577][ T29] audit: type=1326 audit(2000000048.459:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 415.784141][T16871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:47: bg 0: block 5: invalid block bitmap [ 415.803336][ T29] audit: type=1326 audit(2000000048.459:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 415.838087][ T29] audit: type=1326 audit(2000000048.459:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 415.861778][ T29] audit: type=1326 audit(2000000048.459:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 415.886303][ T29] audit: type=1326 audit(2000000048.501:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 415.910061][ T29] audit: type=1400 audit(2000000048.554:12073): avc: denied { append } for pid=10445 comm="syz.2.16720" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 415.941871][T16871] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 415.954398][T16871] EXT4-fs (loop4): This should not happen!! Data will be lost [ 415.954398][T16871] [ 415.964108][T16871] EXT4-fs (loop4): Total free blocks count 0 [ 415.970162][T16871] EXT4-fs (loop4): Free/Dirty block details [ 415.976079][T16871] EXT4-fs (loop4): free_blocks=0 [ 415.981050][T16871] EXT4-fs (loop4): dirty_blocks=16000 [ 415.986428][T16871] EXT4-fs (loop4): Block reservation details [ 415.992438][T16871] EXT4-fs (loop4): i_reserved_data_blocks=16000 [ 416.009412][ T29] audit: type=1326 audit(2000000048.711:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 416.033364][ T29] audit: type=1326 audit(2000000048.711:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 416.060288][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.093375][ T29] audit: type=1326 audit(2000000048.732:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 416.117147][ T29] audit: type=1326 audit(2000000048.732:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.6.16721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d232eec9 code=0x7ffc0000 [ 416.144196][T10457] loop3: detected capacity change from 0 to 512 [ 416.158640][T16871] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 416.186127][T10457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.198873][T10457] ext4 filesystem being mounted at /3384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.224682][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.482911][T10482] loop6: detected capacity change from 0 to 1024 [ 416.500719][T10482] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 416.523578][T10482] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.16735: lblock 1 mapped to illegal pblock 1 (length 1) [ 416.537883][T10482] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.16735: Failed to acquire dquot type 0 [ 416.569121][T10482] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.16735: Freeing blocks not in datazone - block = 0, count = 4096 [ 416.603715][T10482] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.16735: Invalid inode bitmap blk 0 in block_group 0 [ 416.621554][T10490] loop4: detected capacity change from 0 to 1024 [ 416.633398][T16871] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 416.657473][T10482] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 416.666364][T16871] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:47: Failed to release dquot type 0 [ 416.693702][T10482] EXT4-fs (loop6): 1 orphan inode deleted [ 416.734671][T10490] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.16738: Allocating blocks 449-513 which overlap fs metadata [ 416.782229][T10489] EXT4-fs (loop4): pa ffff8881042cf850: logic 48, phys. 177, len 21 [ 416.790319][T10489] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 416.968594][T10509] netlink: 160 bytes leftover after parsing attributes in process `syz.2.16746'. [ 417.138771][T10522] lo speed is unknown, defaulting to 1000 [ 417.776179][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16770'. [ 417.808542][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16770'. [ 418.636739][ T3395] IPVS: starting estimator thread 0... [ 418.692694][T10636] syzkaller1: entered promiscuous mode [ 418.698399][T10636] syzkaller1: entered allmulticast mode [ 418.734640][T10628] IPVS: using max 1872 ests per chain, 93600 per kthread [ 418.838460][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16809'. [ 418.937568][T10669] pim6reg1: entered allmulticast mode [ 418.998130][T10674] netlink: 'syz.2.16818': attribute type 1 has an invalid length. [ 419.088068][T10680] loop2: detected capacity change from 0 to 512 [ 419.117620][T10680] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.301976][T10716] pim6reg1: entered allmulticast mode [ 419.381781][T10727] netlink: 'syz.1.16839': attribute type 1 has an invalid length. [ 419.405534][T10722] lo speed is unknown, defaulting to 1000 [ 419.576076][T10740] SELinux: failed to load policy [ 419.586988][T10741] loop6: detected capacity change from 0 to 1024 [ 419.610043][T10741] EXT4-fs mount: 6 callbacks suppressed [ 419.610133][T10741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.708982][T10741] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.16847: Allocating blocks 449-513 which overlap fs metadata [ 419.759294][T10738] EXT4-fs (loop6): pa ffff88810401ccb0: logic 48, phys. 177, len 21 [ 419.767462][T10738] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 419.845116][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.884109][T10764] netlink: 76 bytes leftover after parsing attributes in process `syz.6.16867'. [ 419.897579][T10763] pim6reg1: entered allmulticast mode [ 419.959518][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16860'. [ 419.971590][T10772] loop3: detected capacity change from 0 to 512 [ 419.991364][T10772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.012091][T10772] ext4 filesystem being mounted at /3406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.029086][T10780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 420.079482][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.236986][T10809] loop6: detected capacity change from 0 to 512 [ 420.248557][T10809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.261910][T10809] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.277286][T10809] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.16878: corrupted inode contents [ 420.290355][T10809] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.16878: mark_inode_dirty error [ 420.332158][T10809] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.16878: corrupted inode contents [ 420.348139][T10818] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.16878: corrupted inode contents [ 420.391396][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.497133][T10832] loop3: detected capacity change from 0 to 128 [ 420.509679][T10830] Non-string source [ 420.545010][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 420.545026][ T29] audit: type=1326 audit(2000000053.467:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.1.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6536a9eec9 code=0x7ffc0000 [ 420.576178][ T29] audit: type=1326 audit(2000000053.498:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.1.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f6536a9eec9 code=0x7ffc0000 [ 420.601847][ T29] audit: type=1326 audit(2000000053.530:12263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10833 comm="syz.1.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6536a9eec9 code=0x7ffc0000 [ 420.646429][T10836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10836 comm=syz.1.16889 [ 420.659993][ T29] audit: type=1400 audit(2000000053.572:12264): avc: denied { nlmsg_write } for pid=10835 comm="syz.1.16889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 420.695681][ T29] audit: type=1400 audit(2000000053.624:12265): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 420.773549][T10842] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 420.933396][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16893'. [ 420.942516][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16893'. [ 421.061377][ T29] audit: type=1400 audit(2000000054.002:12266): avc: denied { setopt } for pid=10855 comm="syz.1.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.115650][ T29] audit: type=1400 audit(2000000054.002:12267): avc: denied { bind } for pid=10855 comm="syz.1.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.120315][T10861] loop2: detected capacity change from 0 to 736 [ 421.135323][ T29] audit: type=1400 audit(2000000054.002:12268): avc: denied { write } for pid=10855 comm="syz.1.16897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.262801][ T29] audit: type=1400 audit(2000000054.118:12269): avc: denied { mount } for pid=10860 comm="syz.2.16910" name="/" dev="loop2" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 421.285698][ T29] audit: type=1400 audit(2000000054.128:12270): avc: denied { unmount } for pid=9484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 421.374769][T10881] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16909'. [ 421.383994][T10881] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 421.437866][T10885] loop4: detected capacity change from 0 to 2048 [ 421.466316][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16914'. [ 421.477739][T10879] loop3: detected capacity change from 0 to 8192 [ 421.546572][T10885] loop4: unable to read partition table [ 421.575044][T10885] loop4: partition table beyond EOD, truncated [ 421.581288][T10885] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 421.863090][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.870450][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.888760][T10937] loop2: detected capacity change from 0 to 128 [ 421.934729][T10928] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 422.005164][T10945] loop3: detected capacity change from 0 to 512 [ 422.025141][T10945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.040595][T10945] ext4 filesystem being mounted at /3427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.070578][T10943] loop6: detected capacity change from 0 to 8192 [ 422.091274][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.119722][T10961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10961 comm=syz.1.16947 [ 422.132543][T10961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10961 comm=syz.1.16947 [ 422.146358][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.155848][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.335271][T10981] loop6: detected capacity change from 0 to 512 [ 422.345293][T10981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.345852][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16958'. [ 422.358200][T10981] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.396464][T10969] loop4: detected capacity change from 0 to 512 [ 422.413834][T10969] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.16952: bad orphan inode 11862016 [ 422.426118][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.428115][T10969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 422.448096][T10969] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.500452][T10993] sd 0:0:1:0: device reset [ 422.575014][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 422.589269][T11002] netlink: 256 bytes leftover after parsing attributes in process `syz.1.16974'. [ 422.769846][T11027] loop6: detected capacity change from 0 to 736 [ 422.813225][T11028] netlink: 'syz.1.16975': attribute type 4 has an invalid length. [ 422.903682][T11038] loop6: detected capacity change from 0 to 1024 [ 422.920699][T11038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.953159][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.003048][T11052] loop3: detected capacity change from 0 to 512 [ 423.076622][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16994'. [ 423.092675][T16871] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.114812][T16871] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.126703][T16871] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.135687][T16871] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.198934][T11073] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.206242][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.216598][T11073] bond0: left promiscuous mode [ 423.221505][T11073] bond_slave_0: left promiscuous mode [ 423.227000][T11073] bond_slave_1: left promiscuous mode [ 423.254504][T11073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 423.973466][T11118] IPv6: NLM_F_CREATE should be specified when creating new route [ 423.995689][T11121] hub 9-0:1.0: USB hub found [ 424.000570][T11121] hub 9-0:1.0: 8 ports detected [ 424.027538][T11125] loop6: detected capacity change from 0 to 1024 [ 424.034817][T11125] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 424.045752][T11125] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 424.056693][T11125] JBD2: no valid journal superblock found [ 424.062450][T11125] EXT4-fs (loop6): Could not load journal inode [ 424.071749][T11125] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 424.133298][T11136] loop4: detected capacity change from 0 to 512 [ 424.147861][T11136] EXT4-fs: Ignoring removed i_version option [ 424.155135][T11136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 424.168636][T11136] EXT4-fs (loop4): 1 truncate cleaned up [ 424.176519][T11138] loop6: detected capacity change from 0 to 164 [ 424.177118][T11136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.197781][T11138] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 424.208371][T11138] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 424.217988][T11138] Symlink component flag not implemented [ 424.223725][T11138] Symlink component flag not implemented [ 424.229790][T11138] Symlink component flag not implemented (7) [ 424.235840][T11138] Symlink component flag not implemented (116) [ 424.251118][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.408722][T11159] __nla_validate_parse: 1 callbacks suppressed [ 424.408793][T11159] netlink: 7 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.425431][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.434523][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.465722][T11159] netlink: 7 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.474959][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.484199][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.511078][T11159] netlink: 7 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.520464][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.529567][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17038'. [ 424.669744][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.677029][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.719173][T11174] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 424.891587][T11196] netlink: 'syz.6.17053': attribute type 6 has an invalid length. [ 424.924752][T11198] hub 9-0:1.0: USB hub found [ 424.929633][T11198] hub 9-0:1.0: 8 ports detected [ 425.074703][T11214] loop6: detected capacity change from 0 to 512 [ 425.081947][T11214] EXT4-fs: Ignoring removed nobh option [ 425.089835][T11214] EXT4-fs (loop6): failed to initialize system zone (-117) [ 425.097195][T11214] EXT4-fs (loop6): mount failed [ 425.273348][T11239] netlink: 332 bytes leftover after parsing attributes in process `syz.3.17073'. [ 425.293269][T11239] netlink: 'syz.3.17073': attribute type 9 has an invalid length. [ 425.328405][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 425.328420][ T29] audit: type=1400 audit(2000000058.485:12483): avc: denied { ioctl } for pid=11241 comm="syz.1.17074" path="socket:[133284]" dev="sockfs" ino=133284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.387374][ T29] audit: type=1400 audit(2000000058.485:12484): avc: denied { read write } for pid=11218 comm="syz.2.17063" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 425.411304][ T29] audit: type=1400 audit(2000000058.485:12485): avc: denied { open } for pid=11218 comm="syz.2.17063" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 425.435107][ T29] audit: type=1400 audit(2000000058.485:12486): avc: denied { ioctl } for pid=11218 comm="syz.2.17063" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 425.530672][ T29] audit: type=1400 audit(2000000058.695:12487): avc: denied { name_bind } for pid=11255 comm="syz.3.17081" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 425.613388][T11262] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 425.624481][T11262] bond2 (unregistering): Released all slaves [ 425.643054][T11265] ALSA: seq fatal error: cannot create timer (-19) [ 425.665594][ T29] audit: type=1326 audit(2000000058.832:12488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.17087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 425.689388][ T29] audit: type=1326 audit(2000000058.832:12489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.17087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 425.716051][ T29] audit: type=1326 audit(2000000058.895:12490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.17087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 425.739838][ T29] audit: type=1326 audit(2000000058.895:12491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.17087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 425.763613][ T29] audit: type=1326 audit(2000000058.895:12492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.4.17087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 425.849156][T11280] loop3: detected capacity change from 0 to 512 [ 425.855798][T11280] EXT4-fs: Ignoring removed i_version option [ 425.863226][T11282] netlink: 'syz.2.17093': attribute type 6 has an invalid length. [ 425.886685][T11280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 425.901613][T11280] EXT4-fs (loop3): 1 truncate cleaned up [ 425.907812][T11280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.963852][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.126366][T11310] netlink: 'syz.4.17105': attribute type 6 has an invalid length. [ 426.145858][T11315] loop2: detected capacity change from 0 to 512 [ 426.159201][T11315] EXT4-fs: Ignoring removed i_version option [ 426.166741][T11315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 426.178389][T11315] EXT4-fs (loop2): 1 truncate cleaned up [ 426.184740][T11315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.331319][T11335] loop3: detected capacity change from 0 to 1024 [ 426.358463][T11335] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 426.369439][T11335] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 426.388486][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.407907][T11335] JBD2: no valid journal superblock found [ 426.413724][T11335] EXT4-fs (loop3): Could not load journal inode [ 426.438899][T11335] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 426.504627][ T3396] kernel write not supported for file bpf-prog (pid: 3396 comm: kworker/0:6) [ 426.680490][T11382] loop2: detected capacity change from 0 to 736 [ 426.732490][T11387] loop4: detected capacity change from 0 to 1024 [ 426.743630][T11387] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 426.744577][T11390] loop3: detected capacity change from 0 to 256 [ 426.754764][T11387] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 426.763444][T11387] JBD2: no valid journal superblock found [ 426.776628][T11387] EXT4-fs (loop4): Could not load journal inode [ 426.798143][T11387] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 426.812956][T11390] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 426.823133][T11390] FAT-fs (loop3): Filesystem has been set read-only [ 426.972365][T11416] loop3: detected capacity change from 0 to 736 [ 427.686710][T11434] loop6: detected capacity change from 0 to 512 [ 427.694123][T11434] EXT4-fs: Ignoring removed i_version option [ 427.706169][T11434] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 427.719257][T11434] EXT4-fs (loop6): 1 truncate cleaned up [ 427.725424][T11434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.841532][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.967106][T11485] netlink: 'syz.6.17186': attribute type 3 has an invalid length. [ 428.003378][ T3396] kernel write not supported for file bpf-prog (pid: 3396 comm: kworker/0:6) [ 428.099366][T11503] netlink: 'syz.4.17193': attribute type 7 has an invalid length. [ 428.107327][T11503] netlink: 'syz.4.17193': attribute type 8 has an invalid length. [ 428.213170][T11511] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.220423][T11511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.232574][T11518] loop6: detected capacity change from 0 to 2048 [ 428.256570][T11511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.278081][T11511] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.288178][T11518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.312029][T11511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.332519][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.547182][T11556] netlink: 'syz.4.17218': attribute type 1 has an invalid length. [ 428.594502][T11563] loop4: detected capacity change from 0 to 512 [ 428.605564][T11563] EXT4-fs: Ignoring removed i_version option [ 428.612201][T11563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 428.640307][T11563] EXT4-fs (loop4): 1 truncate cleaned up [ 428.646293][T11567] new mount options do not match the existing superblock, will be ignored [ 428.646630][T11563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.734956][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.925762][T11601] bridge0: entered promiscuous mode [ 428.931201][T11601] macvtap1: entered allmulticast mode [ 428.936612][T11601] bridge0: entered allmulticast mode [ 430.071600][T11613] netlink: 'syz.1.17243': attribute type 2 has an invalid length. [ 430.079542][T11613] netlink: 'syz.1.17243': attribute type 1 has an invalid length. [ 430.087411][T11613] __nla_validate_parse: 10 callbacks suppressed [ 430.087425][T11613] netlink: 144412 bytes leftover after parsing attributes in process `syz.1.17243'. [ 430.171947][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17246'. [ 430.181207][T11625] netlink: 'syz.3.17246': attribute type 2 has an invalid length. [ 430.202300][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 430.202314][ T29] audit: type=1400 audit(2000000063.608:12585): avc: denied { append } for pid=11632 comm="syz.4.17254" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 430.251240][T11639] loop7: detected capacity change from 0 to 7 [ 430.269766][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.274487][ T29] audit: type=1400 audit(2000000063.650:12586): avc: denied { write } for pid=11632 comm="syz.4.17254" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 430.278956][ C1] buffer_io_error: 54374 callbacks suppressed [ 430.278968][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.283360][T11645] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 430.308521][ T29] audit: type=1400 audit(2000000063.692:12587): avc: denied { bind } for pid=11644 comm="syz.2.17260" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 430.345143][ T29] audit: type=1400 audit(2000000063.692:12588): avc: denied { node_bind } for pid=11644 comm="syz.2.17260" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 430.345422][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.367294][ T29] audit: type=1400 audit(2000000063.713:12589): avc: denied { execute_no_trans } for pid=11640 comm="syz.4.17258" path="/335/file0" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 430.376348][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.376817][T11639] loop7: unable to read partition table [ 430.414289][T11639] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 430.468858][T11651] loop2: detected capacity change from 0 to 2048 [ 430.485630][T11653] loop3: detected capacity change from 0 to 512 [ 430.493041][T11653] EXT4-fs: Ignoring removed nobh option [ 430.495191][ T29] audit: type=1400 audit(2000000063.902:12590): avc: denied { create } for pid=11654 comm="syz.1.17264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 430.518972][T11651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.550357][ T29] audit: type=1400 audit(2000000063.944:12591): avc: denied { bind } for pid=11654 comm="syz.1.17264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 430.559588][T11653] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.17263: corrupted inode contents [ 430.570017][ T29] audit: type=1400 audit(2000000063.965:12592): avc: denied { write } for pid=11650 comm="syz.2.17262" path="/195/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 430.608993][ T29] audit: type=1400 audit(2000000064.028:12593): avc: denied { ioctl } for pid=11661 comm="syz.1.17265" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 430.642814][T11653] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.17263: mark_inode_dirty error [ 430.655578][T11653] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.17263: corrupted inode contents [ 430.699251][T11653] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.17263: mark_inode_dirty error [ 430.719724][T11653] Quota error (device loop3): write_blk: dquota write failed [ 430.730362][T11653] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.17263: Failed to acquire dquot type 0 [ 430.753980][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.764085][T11653] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.17263: corrupted inode contents [ 430.784933][T11653] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.17263: mark_inode_dirty error [ 430.797946][T11653] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.17263: corrupted inode contents [ 430.812440][T11653] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.17263: mark_inode_dirty error [ 430.839789][T11653] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.17263: corrupted inode contents [ 430.852736][T11653] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 430.863750][T11653] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.17263: corrupted inode contents [ 430.895679][T11653] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.17263: mark_inode_dirty error [ 430.915429][T11689] loop6: detected capacity change from 0 to 128 [ 430.924687][T11653] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 430.950455][T11653] EXT4-fs (loop3): 1 truncate cleaned up [ 430.966691][T11653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.990804][T11653] ext4 filesystem being mounted at /3483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.009977][T11691] lo speed is unknown, defaulting to 1000 [ 431.123596][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.427336][T11747] netlink: 'syz.3.17305': attribute type 2 has an invalid length. [ 431.435353][T11747] netlink: 'syz.3.17305': attribute type 1 has an invalid length. [ 431.443214][T11747] netlink: 144412 bytes leftover after parsing attributes in process `syz.3.17305'. [ 431.502770][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17309'. [ 431.512037][T11757] netlink: 'syz.4.17309': attribute type 2 has an invalid length. [ 431.525185][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.532449][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.591464][T11754] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 431.608848][T11771] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17317'. [ 431.634734][T11767] loop4: detected capacity change from 0 to 512 [ 431.657819][T11771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.667582][T11771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.678423][T11767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.691468][T11767] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.714339][T11771] veth3: left promiscuous mode [ 431.719867][T11771] vlan2: left promiscuous mode [ 431.739763][T11771] batman_adv: batadv0: Interface deactivated: macsec0 [ 431.748259][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.749442][T11771] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 431.766388][T11771] vlan1: left promiscuous mode [ 431.771197][T11771] bond0: left promiscuous mode [ 431.776227][T11771] bond_slave_0: left promiscuous mode [ 431.781934][T11771] bond_slave_1: left promiscuous mode [ 431.789614][T16837] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.798203][T11775] netlink: 'syz.2.17318': attribute type 3 has an invalid length. [ 431.807907][T16837] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.821528][T16837] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.834928][T16837] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.851190][T11785] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17321'. [ 431.862546][T11781] netlink: 'syz.4.17320': attribute type 2 has an invalid length. [ 431.870573][T11781] netlink: 'syz.4.17320': attribute type 1 has an invalid length. [ 431.878550][T11781] netlink: 144412 bytes leftover after parsing attributes in process `syz.4.17320'. [ 431.927707][T11793] loop6: detected capacity change from 0 to 512 [ 431.953991][T11793] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 431.972588][T11803] syzkaller1: entered promiscuous mode [ 431.978247][T11803] syzkaller1: entered allmulticast mode [ 431.984274][T11793] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 431.998646][T11793] EXT4-fs (loop6): 1 truncate cleaned up [ 432.012956][T11793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.037903][T11793] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 432.057750][T11793] EXT4-fs (loop6): Remounting filesystem read-only [ 432.082150][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.121978][T11822] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 432.128548][T11822] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 432.136283][T11822] vhci_hcd vhci_hcd.0: Device attached [ 432.145953][T11823] vhci_hcd: connection closed [ 432.146134][T16837] vhci_hcd: stop threads [ 432.155218][T16837] vhci_hcd: release socket [ 432.159726][T16837] vhci_hcd: disconnect device [ 432.320268][T11853] netlink: 92 bytes leftover after parsing attributes in process `syz.1.17352'. [ 432.436890][T11867] lo speed is unknown, defaulting to 1000 [ 432.545493][T11878] netlink: 268 bytes leftover after parsing attributes in process `syz.2.17364'. [ 432.763024][T11901] loop2: detected capacity change from 0 to 512 [ 432.769931][T11901] journal_path: Lookup failure for './file0/../file0' [ 432.776808][T11901] EXT4-fs: error: could not find journal device path [ 432.786117][T11901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17373'. [ 432.812150][T11903] loop2: detected capacity change from 0 to 512 [ 432.820582][T11903] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 432.828656][T11903] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 432.837298][T11903] EXT4-fs (loop2): 1 truncate cleaned up [ 432.843478][T11903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.860312][T11903] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 432.875134][T11903] EXT4-fs (loop2): Remounting filesystem read-only [ 432.878674][T11906] loop6: detected capacity change from 0 to 512 [ 432.888646][T11906] EXT4-fs: Ignoring removed nobh option [ 432.898587][T11906] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #3: comm syz.6.17385: corrupted inode contents [ 432.912255][T11906] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #3: comm syz.6.17385: mark_inode_dirty error [ 432.912655][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.924708][T11906] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #3: comm syz.6.17385: corrupted inode contents [ 432.953701][T11906] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.17385: mark_inode_dirty error [ 432.984214][T11906] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.17385: Failed to acquire dquot type 0 [ 432.997546][T11906] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.17385: corrupted inode contents [ 433.013060][T11906] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #16: comm syz.6.17385: mark_inode_dirty error [ 433.025502][T11906] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.17385: corrupted inode contents [ 433.037812][T11906] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.17385: mark_inode_dirty error [ 433.050975][T11906] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.17385: corrupted inode contents [ 433.063605][T11906] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 433.072770][T11906] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #16: comm syz.6.17385: corrupted inode contents [ 433.093873][T11906] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.17385: mark_inode_dirty error [ 433.109452][T11906] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 433.125292][T11906] EXT4-fs (loop6): 1 truncate cleaned up [ 433.126407][T11919] loop4: detected capacity change from 0 to 128 [ 433.134569][T11906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.150384][T11915] lo speed is unknown, defaulting to 1000 [ 433.165025][T11906] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.214834][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.235371][T11923] loop4: detected capacity change from 0 to 2048 [ 433.250440][T11923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.403294][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.628341][T11964] loop3: detected capacity change from 0 to 2048 [ 433.660163][T11964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.672946][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.682273][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.820106][T11972] netlink: 'syz.1.17404': attribute type 4 has an invalid length. [ 433.891083][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.915313][T11982] loop2: detected capacity change from 0 to 512 [ 433.938162][T11982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17418: corrupted inode contents [ 433.959650][T11982] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.17418: mark_inode_dirty error [ 433.974500][T11982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17418: corrupted inode contents [ 433.988418][T11982] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.17418: mark_inode_dirty error [ 434.000034][T11982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17418: corrupted inode contents [ 434.012388][T11982] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 434.021750][T11982] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17418: corrupted inode contents [ 434.034118][T11982] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.17418: mark_inode_dirty error [ 434.045504][T11982] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 434.054980][T11982] EXT4-fs (loop2): 1 truncate cleaned up [ 434.061327][T11982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.075152][T16858] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:35: Failed to release dquot type 1 [ 434.089385][T11982] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.128086][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.170976][T11994] syzkaller1: entered promiscuous mode [ 434.176565][T11994] syzkaller1: entered allmulticast mode [ 434.321773][T12012] loop6: detected capacity change from 0 to 2048 [ 434.340945][T12014] loop2: detected capacity change from 0 to 764 [ 434.349371][T12012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.353285][T12014] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 434.509262][T12027] loop4: detected capacity change from 0 to 512 [ 434.524722][T12027] journal_path: Lookup failure for './file0/../file0' [ 434.531555][T12027] EXT4-fs: error: could not find journal device path [ 434.621660][T12033] lo speed is unknown, defaulting to 1000 [ 434.656192][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.753923][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.774417][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.787877][T12062] SELinux: failed to load policy [ 435.034646][T12054] bridge0: left allmulticast mode [ 435.039908][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 435.039930][ T29] audit: type=1400 audit(2000000068.679:12747): avc: denied { mount } for pid=12069 comm="syz.4.17447" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 435.068933][ T29] audit: type=1400 audit(2000000068.679:12748): avc: denied { unmount } for pid=12069 comm="syz.4.17447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 435.106281][T12054] macvtap1: left allmulticast mode [ 435.165496][T16861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.197874][T16861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.239347][T16861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.280592][T16861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.308297][ T29] audit: type=1400 audit(2000000068.952:12749): avc: denied { getopt } for pid=12077 comm="syz.4.17451" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.365021][ T29] audit: type=1400 audit(2000000069.005:12750): avc: denied { connect } for pid=12080 comm="syz.2.17453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 435.425656][ T29] audit: type=1326 audit(2000000069.089:12751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12089 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4f8c45d67 code=0x7ffc0000 [ 435.449413][ T29] audit: type=1326 audit(2000000069.089:12752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12089 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4f8beaf79 code=0x7ffc0000 [ 435.473257][ T29] audit: type=1326 audit(2000000069.089:12753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12089 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4f8c45d67 code=0x7ffc0000 [ 435.496957][ T29] audit: type=1326 audit(2000000069.089:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12089 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4f8beaf79 code=0x7ffc0000 [ 435.520805][ T29] audit: type=1326 audit(2000000069.089:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12089 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4f8c45d67 code=0x7ffc0000 [ 435.544443][ T29] audit: type=1326 audit(2000000069.089:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12089 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4f8beaf79 code=0x7ffc0000 [ 435.641973][T12101] validate_nla: 2 callbacks suppressed [ 435.641993][T12101] netlink: 'syz.6.17462': attribute type 13 has an invalid length. [ 435.655526][T12101] __nla_validate_parse: 4 callbacks suppressed [ 435.655545][T12101] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.17462'. [ 435.662987][T12103] loop4: detected capacity change from 0 to 764 [ 435.683522][T12103] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 435.741589][T12107] rdma_op ffff88810ca8a580 conn xmit_rdma 0000000000000000 [ 435.804243][T12114] loop3: detected capacity change from 0 to 2048 [ 435.805850][T12120] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17472'. [ 435.819821][T12121] loop2: detected capacity change from 0 to 128 [ 435.839747][T12114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.950826][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.965764][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.981016][T12133] loop2: detected capacity change from 0 to 512 [ 435.998737][T12133] EXT4-fs: Ignoring removed nobh option [ 436.011808][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.022800][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.049697][T12133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.17477: corrupted inode contents [ 436.064319][T12133] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.17477: mark_inode_dirty error [ 436.084264][T12133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.17477: corrupted inode contents [ 436.099295][T12133] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.17477: mark_inode_dirty error [ 436.116083][T12145] netlink: 272 bytes leftover after parsing attributes in process `syz.3.17482'. [ 436.127407][T12130] netlink: 180 bytes leftover after parsing attributes in process `syz.6.17475'. [ 436.144439][T12133] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.17477: Failed to acquire dquot type 0 [ 436.156667][T12131] netlink: 180 bytes leftover after parsing attributes in process `syz.6.17475'. [ 436.174065][T12147] binfmt_misc: register: failed to install interpreter file ./file1 [ 436.186739][T12133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17477: corrupted inode contents [ 436.202416][T16861] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.211535][T16861] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.212342][T12153] sock: sock_set_timeout: `syz.3.17483' (pid 12153) tries to set negative timeout [ 436.240987][T12133] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.17477: mark_inode_dirty error [ 436.252867][T16861] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.261975][T16861] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.273015][T16861] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.282094][T16861] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.291682][T12133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17477: corrupted inode contents [ 436.305672][T16861] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.314765][T16861] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.323716][T12133] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.17477: mark_inode_dirty error [ 436.335876][T12133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17477: corrupted inode contents [ 436.348477][T12133] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 436.361050][T12133] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.17477: corrupted inode contents [ 436.373455][T12133] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.17477: mark_inode_dirty error [ 436.386761][T12133] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 436.398522][T12133] EXT4-fs (loop2): 1 truncate cleaned up [ 436.399238][T12159] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17488'. [ 436.405027][T12133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.426265][T12133] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.466677][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.578591][T12195] netlink: 180 bytes leftover after parsing attributes in process `syz.3.17505'. [ 436.594133][T12199] loop6: detected capacity change from 0 to 128 [ 436.603126][T12199] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.603881][T12198] binfmt_misc: register: failed to install interpreter file ./file0 [ 436.615708][T12199] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.624645][T12195] netlink: 180 bytes leftover after parsing attributes in process `syz.3.17505'. [ 436.690742][ T9454] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.845368][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17521'. [ 436.854569][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17521'. [ 436.885760][T12238] loop2: detected capacity change from 0 to 128 [ 436.942876][T12238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 436.950873][T12238] FAT-fs (loop2): Filesystem has been set read-only [ 436.965815][T12250] loop6: detected capacity change from 0 to 1024 [ 436.972527][T12250] EXT4-fs: Ignoring removed orlov option [ 436.975151][T12238] bio_check_eod: 98 callbacks suppressed [ 436.975169][T12238] syz.2.17524: attempt to access beyond end of device [ 436.975169][T12238] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 436.979267][T12250] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 436.997928][T12238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 437.015455][T12238] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 437.050076][T12238] syz.2.17524: attempt to access beyond end of device [ 437.050076][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.059795][T12253] lo speed is unknown, defaulting to 1000 [ 437.071379][T12250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.078797][T12238] syz.2.17524: attempt to access beyond end of device [ 437.078797][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.117263][T12238] syz.2.17524: attempt to access beyond end of device [ 437.117263][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.132685][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.146098][T12238] syz.2.17524: attempt to access beyond end of device [ 437.146098][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.161456][T12238] syz.2.17524: attempt to access beyond end of device [ 437.161456][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.180518][T12238] syz.2.17524: attempt to access beyond end of device [ 437.180518][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.195543][T12238] syz.2.17524: attempt to access beyond end of device [ 437.195543][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.242837][T12238] syz.2.17524: attempt to access beyond end of device [ 437.242837][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.258578][T12238] syz.2.17524: attempt to access beyond end of device [ 437.258578][T12238] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 437.457239][T12278] loop3: detected capacity change from 0 to 512 [ 437.531590][T12278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.545600][T12278] ext4 filesystem being mounted at /3533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.661410][T12278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.308435][T12338] syzkaller1: entered promiscuous mode [ 438.313968][T12338] syzkaller1: entered allmulticast mode [ 438.549996][T12379] all (unregistering): Released all slaves [ 438.682783][T12407] loop6: detected capacity change from 0 to 512 [ 438.703850][T12407] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.17603: EA inode hash validation failed [ 438.703885][T12409] 9pnet: Could not find request transport: r [ 438.734803][T12407] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.17603: corrupted inode contents [ 438.760675][T12407] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.17603: mark_inode_dirty error [ 438.830114][T12407] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.17603: corrupted inode contents [ 438.842494][T12407] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.17603: mark_inode_dirty error [ 438.854835][T12407] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.17603: mark inode dirty (error -117) [ 438.869768][T12407] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 438.880223][T12407] EXT4-fs (loop6): 1 orphan inode deleted [ 438.886460][T12407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.917970][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.072524][T12441] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 439.081261][T12443] netlink: 'syz.6.17619': attribute type 1 has an invalid length. [ 439.138696][T12447] pim6reg1: entered promiscuous mode [ 439.144025][T12447] pim6reg1: entered allmulticast mode [ 439.243053][T12456] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 439.365310][T12464] loop2: detected capacity change from 0 to 7 [ 439.549134][T12477] lo speed is unknown, defaulting to 1000 [ 439.591831][T12481] loop6: detected capacity change from 0 to 256 [ 439.656404][T12483] all (unregistering): Released all slaves [ 439.682980][T12490] loop3: detected capacity change from 0 to 512 [ 439.735686][T12490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.735833][T12490] ext4 filesystem being mounted at /3546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.744110][T12490] EXT4-fs (loop3): shut down requested (0) [ 439.759107][T12500] vhci_hcd: invalid port number 96 [ 439.759121][T12500] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 439.759587][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.791403][T12504] loop4: detected capacity change from 0 to 128 [ 439.797780][T12504] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 439.797802][T12504] FAT-fs (loop4): Filesystem has been set read-only [ 439.926276][T12524] loop6: detected capacity change from 0 to 512 [ 439.937194][T12524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.937269][T12524] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.947151][T12524] EXT4-fs (loop6): shut down requested (0) [ 439.962012][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.986174][T12530] syzkaller1: entered promiscuous mode [ 439.986197][T12530] syzkaller1: entered allmulticast mode [ 439.998261][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 439.998283][ T29] audit: type=1326 audit(2000000073.887:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.3.17654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 439.999293][ T29] audit: type=1326 audit(2000000073.887:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.3.17654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 440.163063][T12535] loop6: detected capacity change from 0 to 512 [ 440.214765][T12535] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 440.214839][T12535] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 440.214858][T12535] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 440.215082][T12535] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 440.215125][T12535] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 440.215147][T12535] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 440.228262][T12535] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 440.228478][T12535] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 440.228787][T12535] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 440.228837][T12535] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 440.228863][T12535] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 440.229074][T12535] EXT4-fs (loop6): 1 orphan inode deleted [ 440.229474][T12535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.229587][T12535] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.255514][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.312173][ T29] audit: type=1400 audit(2000000074.212:12910): avc: denied { setcheckreqprot } for pid=12542 comm="syz.3.17663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 440.372301][T12545] 9pnet: Could not find request transport: r [ 440.617093][T12560] atomic_op ffff888119979d28 conn xmit_atomic 0000000000000000 [ 440.668604][ T29] audit: type=1326 audit(2000000074.579:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12562 comm="syz.3.17672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 440.778868][T12569] sd 0:0:1:0: device reset [ 440.892291][T12580] __nla_validate_parse: 9 callbacks suppressed [ 440.892309][T12580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17680'. [ 441.519311][T12631] sd 0:0:1:0: device reset [ 441.605285][T12649] hub 6-0:1.0: USB hub found [ 441.613185][T12649] hub 6-0:1.0: 8 ports detected [ 441.692059][T12661] ref_ctr_offset mismatch. inode: 0x8a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 441.698271][T12663] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17718'. [ 441.712314][T12663] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17718'. [ 441.951053][T12689] lo speed is unknown, defaulting to 1000 [ 442.057839][T12698] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 442.064388][T12698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.072001][T12698] vhci_hcd vhci_hcd.0: Device attached [ 442.099466][T12702] loop6: detected capacity change from 0 to 512 [ 442.106731][T12702] journal_path: Lookup failure for './file0/../file0' [ 442.113624][T12702] EXT4-fs: error: could not find journal device path [ 442.126717][T12699] vhci_hcd: connection closed [ 442.126916][T16838] vhci_hcd: stop threads [ 442.135923][T16838] vhci_hcd: release socket [ 442.140357][T16838] vhci_hcd: disconnect device [ 442.277536][T12706] loop2: detected capacity change from 0 to 512 [ 442.299042][T12706] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 442.310264][T12706] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 442.322055][T12706] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 442.336570][T12706] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 442.345824][T12706] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 442.358268][T12706] EXT4-fs (loop2): 1 orphan inode deleted [ 442.365095][T12706] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.439823][T16830] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 442.449571][T16830] ref_tracker: netdev@ffff888118e76550 has 1/1 users at [ 442.449571][T16830] batadv_hard_if_event+0x6c1/0xf10 [ 442.449571][T16830] raw_notifier_call_chain+0x6f/0x1b0 [ 442.449571][T16830] call_netdevice_notifiers_info+0xae/0x100 [ 442.449571][T16830] register_netdevice+0xd48/0xf00 [ 442.449571][T16830] veth_newlink+0x49b/0x770 [ 442.449571][T16830] rtnl_newlink_create+0x1bc/0x620 [ 442.449571][T16830] rtnl_newlink+0xf29/0x12d0 [ 442.449571][T16830] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 442.449571][T16830] netlink_rcv_skb+0x123/0x220 [ 442.449571][T16830] rtnetlink_rcv+0x1c/0x30 [ 442.449571][T16830] netlink_unicast+0x5c0/0x690 [ 442.449571][T16830] netlink_sendmsg+0x58b/0x6b0 [ 442.449571][T16830] __sock_sendmsg+0x142/0x180 [ 442.449571][T16830] __sys_sendto+0x268/0x330 [ 442.449571][T16830] __x64_sys_sendto+0x76/0x90 [ 442.449571][T16830] x64_sys_call+0x2d14/0x3000 [ 442.449571][T16830] [ 442.795324][T12746] netlink: 'syz.2.17751': attribute type 2 has an invalid length. [ 442.803386][T12746] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17751'. [ 443.018717][T12780] ref_ctr_offset mismatch. inode: 0x483e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 443.171364][T12792] loop4: detected capacity change from 0 to 512 [ 443.199399][T12792] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.201382][T12795] syzkaller1: entered promiscuous mode [ 443.215578][T12795] syzkaller1: entered allmulticast mode [ 443.262980][T12798] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.361236][T12815] loop4: detected capacity change from 0 to 512 [ 443.374709][T12815] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 443.385929][T12815] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 443.400350][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17782'. [ 443.403218][T12815] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 443.424205][T12815] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 443.433699][T12815] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 443.444876][T12815] EXT4-fs (loop4): 1 orphan inode deleted [ 443.451464][T12815] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.481360][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17785'. [ 443.550081][T12834] loop2: detected capacity change from 0 to 2048 [ 443.557855][T12839] tap0: tun_chr_ioctl cmd 1074025675 [ 443.563234][T12839] tap0: persist enabled [ 443.567743][T12839] tap0: tun_chr_ioctl cmd 1074025675 [ 443.573311][T12839] tap0: persist enabled [ 443.608085][T12834] loop2: p2 p3 p7 [ 443.735025][T12863] sctp: [Deprecated]: syz.1.17800 (pid 12863) Use of int in max_burst socket option deprecated. [ 443.735025][T12863] Use struct sctp_assoc_value instead [ 443.785922][T12869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.794711][T12869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.156340][T12876] loop3: detected capacity change from 0 to 2048 [ 444.208129][T12876] loop3: p2 p3 p7 [ 444.452534][T12891] bond1: entered promiscuous mode [ 444.457681][T12891] bond1: entered allmulticast mode [ 444.463227][T12891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.472851][T12891] bond1 (unregistering): Released all slaves [ 444.605363][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17824'. [ 444.614809][T12910] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 444.614978][T12914] syzkaller1: entered promiscuous mode [ 444.629034][T12914] syzkaller1: entered allmulticast mode [ 444.656443][T12916] loop4: detected capacity change from 0 to 1024 [ 444.663850][T12916] EXT4-fs: Ignoring removed orlov option [ 444.933464][T12944] loop4: detected capacity change from 0 to 512 [ 444.941024][T12944] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.952397][T12944] EXT4-fs (loop4): 1 truncate cleaned up [ 444.963272][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 444.963289][ T29] audit: type=1400 audit(2000000079.094:13035): avc: denied { rename } for pid=12942 comm="syz.4.17839" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.991990][ T29] audit: type=1400 audit(2000000079.094:13036): avc: denied { rmdir } for pid=12942 comm="syz.4.17839" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 445.002460][T12944] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.17839: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 445.071155][ T29] audit: type=1326 audit(2000000079.220:13037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.073601][T12944] EXT4-fs (loop4): Remounting filesystem read-only [ 445.094864][ T29] audit: type=1326 audit(2000000079.220:13038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.101481][T12944] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.17839: Deleting old file: nlink 5, error=-117 [ 445.135953][ T29] audit: type=1326 audit(2000000079.220:13039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.162229][ T29] audit: type=1326 audit(2000000079.220:13040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.185967][ T29] audit: type=1326 audit(2000000079.220:13041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.224551][ T29] audit: type=1326 audit(2000000079.293:13042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.248274][ T29] audit: type=1326 audit(2000000079.293:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.271989][ T29] audit: type=1326 audit(2000000079.293:13044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12950 comm="syz.3.17841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9483eec9 code=0x7ffc0000 [ 445.311607][T12959] loop2: detected capacity change from 0 to 512 [ 445.327834][T12959] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 445.350635][T12959] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.17845: corrupted xattr entries [ 445.362669][T12959] EXT4-fs (loop2): Remounting filesystem read-only [ 445.370964][T12959] EXT4-fs (loop2): 1 truncate cleaned up [ 445.510811][T12990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 445.778865][T13026] netlink: 830 bytes leftover after parsing attributes in process `syz.4.17876'. [ 445.890944][T13043] netlink: 'syz.6.17884': attribute type 12 has an invalid length. [ 445.899454][T13043] netlink: 'syz.6.17884': attribute type 29 has an invalid length. [ 445.907504][T13043] netlink: 148 bytes leftover after parsing attributes in process `syz.6.17884'. [ 445.916640][T13043] netlink: 43 bytes leftover after parsing attributes in process `syz.6.17884'. [ 446.024104][T13054] netlink: 165 bytes leftover after parsing attributes in process `syz.4.17889'. [ 446.063435][T13058] loop6: detected capacity change from 0 to 512 [ 446.120545][T13064] netlink: 176 bytes leftover after parsing attributes in process `syz.1.17894'. [ 446.319816][T13086] loop2: detected capacity change from 0 to 512 [ 446.335260][T13086] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.366333][T13086] EXT4-fs (loop2): 1 truncate cleaned up [ 446.388037][T13086] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.17901: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 446.414610][T13085] lo speed is unknown, defaulting to 1000 [ 446.449285][T13086] EXT4-fs (loop2): Remounting filesystem read-only [ 446.455897][T13086] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.17901: Deleting old file: nlink 5, error=-117 [ 446.499749][T13095] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.17903'. [ 446.634422][T13106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17907'. [ 446.719890][T13114] loop3: detected capacity change from 0 to 512 [ 446.726972][T13112] syzkaller1: entered promiscuous mode [ 446.732496][T13112] syzkaller1: entered allmulticast mode [ 446.746215][T13114] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 446.765060][T13114] EXT4-fs (loop3): orphan cleanup on readonly fs [ 446.772046][T13114] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.17912: Failed to acquire dquot type 1 [ 446.785775][T13114] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.17912: bg 0: block 40: padding at end of block bitmap is not set [ 446.800739][T13114] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 446.809733][T13114] EXT4-fs (loop3): 1 truncate cleaned up [ 446.846118][T13119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17914'. [ 446.963575][T13140] geneve2: entered promiscuous mode [ 446.969789][T16858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 45022 - 0 [ 446.979078][T16858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 45022 - 0 [ 446.988512][T16858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 45022 - 0 [ 446.997738][T16858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 45022 - 0 [ 447.079787][T13148] vhci_hcd: invalid port number 96 [ 447.085039][T13148] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 447.099588][T13156] netlink: 'syz.2.17928': attribute type 1 has an invalid length. [ 447.116355][T13156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.351137][T13193] loop6: detected capacity change from 0 to 164 [ 447.428958][T13206] rdma_op ffff88810c79e580 conn xmit_rdma 0000000000000000 [ 447.498283][T13216] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 447.506561][T13216] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 447.577265][T13228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17963'. [ 447.607383][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17965'. [ 447.751542][T13254] netlink: 'syz.2.17975': attribute type 29 has an invalid length. [ 447.784637][T13254] netlink: 'syz.2.17975': attribute type 29 has an invalid length. [ 447.928675][T13285] loop4: detected capacity change from 0 to 512 [ 447.948301][T13288] loop2: detected capacity change from 0 to 512 [ 447.957653][T13288] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 447.972375][T13288] EXT4-fs (loop2): orphan cleanup on readonly fs [ 447.983463][T13285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17990: error while reading EA inode 32 err=-116 [ 447.996567][T13288] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.18001: Failed to acquire dquot type 1 [ 448.011426][T13300] loop6: detected capacity change from 0 to 256 [ 448.018130][T13285] EXT4-fs (loop4): Remounting filesystem read-only [ 448.025739][T13288] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.18001: bg 0: block 40: padding at end of block bitmap is not set [ 448.040323][T13285] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 448.046204][T13288] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 448.057737][T13300] FAT-fs (loop6): Directory bread(block 64) failed [ 448.060042][T13288] EXT4-fs (loop2): 1 truncate cleaned up [ 448.072211][T13285] EXT4-fs (loop4): 1 orphan inode deleted [ 448.075822][T13300] FAT-fs (loop6): Directory bread(block 65) failed [ 448.094908][T13300] FAT-fs (loop6): Directory bread(block 66) failed [ 448.104016][T13304] vhci_hcd: invalid port number 96 [ 448.109302][T13304] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 448.116785][T13300] FAT-fs (loop6): Directory bread(block 67) failed [ 448.123466][T13300] FAT-fs (loop6): Directory bread(block 68) failed [ 448.141960][T13300] FAT-fs (loop6): Directory bread(block 69) failed [ 448.157031][T13300] FAT-fs (loop6): Directory bread(block 70) failed [ 448.168791][T13300] FAT-fs (loop6): Directory bread(block 71) failed [ 448.175842][T13300] FAT-fs (loop6): Directory bread(block 72) failed [ 448.183814][T13300] FAT-fs (loop6): Directory bread(block 73) failed [ 448.294753][T13316] lo speed is unknown, defaulting to 1000 [ 448.315505][T13332] loop6: detected capacity change from 0 to 512 [ 448.331232][T13332] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 448.339662][T13332] EXT4-fs (loop6): orphan cleanup on readonly fs [ 448.346471][T13332] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.18011: Failed to acquire dquot type 1 [ 448.358967][T13332] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.18011: bg 0: block 40: padding at end of block bitmap is not set [ 448.373653][T13332] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 448.384492][T13332] EXT4-fs (loop6): 1 truncate cleaned up [ 448.390855][T13332] EXT4-fs mount: 20 callbacks suppressed [ 448.390875][T13332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 448.432754][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.547970][T13361] loop3: detected capacity change from 0 to 1024 [ 448.554847][T13361] EXT4-fs: Ignoring removed bh option [ 448.571646][T13361] EXT4-fs: inline encryption not supported [ 448.586977][T13361] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 448.611224][T13361] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 448.626591][T13361] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.18024: lblock 2 mapped to illegal pblock 2 (length 1) [ 448.641991][T13361] EXT4-fs (loop3): Remounting filesystem read-only [ 448.649732][T13361] EXT4-fs (loop3): 1 orphan inode deleted [ 448.656268][T13361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.683579][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.716296][T13374] geneve2: entered promiscuous mode [ 448.748097][T16871] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 47277 - 0 [ 448.766283][T16871] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 47277 - 0 [ 448.775022][T16871] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 47277 - 0 [ 448.783840][T16871] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 47277 - 0 [ 448.804714][T13380] loop2: detected capacity change from 0 to 512 [ 448.824155][T13380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.840575][T13380] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.879841][ T9484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.903653][T13392] netlink: 'syz.2.18036': attribute type 3 has an invalid length. [ 448.974436][T13402] loop2: detected capacity change from 0 to 512 [ 449.035983][T13406] syzkaller1: entered promiscuous mode [ 449.041632][T13406] syzkaller1: entered allmulticast mode [ 449.126942][T13421] usb usb8: usbfs: process 13421 (syz.3.18048) did not claim interface 0 before use [ 449.156702][T13427] netlink: 'syz.3.18051': attribute type 29 has an invalid length. [ 449.174825][T13427] netlink: 'syz.3.18051': attribute type 29 has an invalid length. [ 449.400254][T13451] loop4: detected capacity change from 0 to 512 [ 449.434234][T13451] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 449.476372][T13451] EXT4-fs (loop4): mount failed [ 449.531498][T13456] lo speed is unknown, defaulting to 1000 [ 449.606980][T13465] loop6: detected capacity change from 0 to 512 [ 449.650626][T13465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.697938][T13465] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.748398][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.783978][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 449.783995][ T29] audit: type=1326 audit(2000000852.158:13224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.814167][ T29] audit: type=1326 audit(2000000852.158:13225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.849302][ T29] audit: type=1326 audit(2000000852.221:13226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.873087][ T29] audit: type=1326 audit(2000000852.221:13227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.904307][ T29] audit: type=1326 audit(2000000852.263:13228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.928223][ T29] audit: type=1326 audit(2000000852.263:13229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.951932][ T29] audit: type=1326 audit(2000000852.263:13230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.975906][ T29] audit: type=1326 audit(2000000852.263:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 449.999627][ T29] audit: type=1326 audit(2000000852.263:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 450.023489][ T29] audit: type=1326 audit(2000000852.263:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13470 comm="syz.4.18079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f8c4eec9 code=0x7ffc0000 [ 450.055975][T13484] loop4: detected capacity change from 0 to 512 [ 450.072217][T13484] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 450.080826][T13484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 450.092087][T13484] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.18073: Failed to acquire dquot type 1 [ 450.106086][T13484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.18073: bg 0: block 40: padding at end of block bitmap is not set [ 450.135112][T13484] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 450.147650][T13484] EXT4-fs (loop4): 1 truncate cleaned up [ 450.154102][T13484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.174903][T13496] loop2: detected capacity change from 0 to 164 [ 450.217050][ T8540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.243744][T13492] vhci_hcd: invalid port number 96 [ 450.248957][T13492] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 450.336421][T13524] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 450.336421][T13524] program syz.1.18092 not setting count and/or reply_len properly [ 450.381075][T13527] loop3: detected capacity change from 0 to 164 [ 450.399114][T13536] loop6: detected capacity change from 0 to 1024 [ 450.423098][T13536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.495691][T13536] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 450.568753][ T9454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.768923][T13560] loop6: detected capacity change from 0 to 8192 [ 451.036637][T13560] ================================================================== [ 451.044776][T13560] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 451.052200][T13560] [ 451.054540][T13560] read-write to 0xffff8881040b2230 of 8 bytes by interrupt on cpu 0: [ 451.062616][T13560] __xa_clear_mark+0xf5/0x1e0 [ 451.067355][T13560] __folio_end_writeback+0xf7/0x3b0 [ 451.072568][T13560] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 451.078827][T13560] folio_end_writeback+0x1c/0x70 [ 451.083798][T13560] mpage_write_end_io+0x274/0x390 [ 451.088854][T13560] bio_endio+0x37e/0x420 [ 451.093120][T13560] blk_update_request+0x336/0x730 [ 451.098174][T13560] blk_mq_end_request+0x26/0x50 [ 451.103053][T13560] lo_complete_rq+0x98/0x140 [ 451.107654][T13560] blk_done_softirq+0x77/0xb0 [ 451.112347][T13560] handle_softirqs+0xb7/0x290 [ 451.117038][T13560] run_ksoftirqd+0x1c/0x30 [ 451.121471][T13560] smpboot_thread_fn+0x32b/0x530 [ 451.126418][T13560] kthread+0x489/0x510 [ 451.130540][T13560] ret_from_fork+0x122/0x1b0 [ 451.135145][T13560] ret_from_fork_asm+0x1a/0x30 [ 451.139941][T13560] [ 451.142278][T13560] read to 0xffff8881040b2230 of 8 bytes by task 13560 on cpu 1: [ 451.149926][T13560] xas_find_marked+0x218/0x620 [ 451.154715][T13560] find_get_entry+0x5d/0x380 [ 451.159337][T13560] filemap_get_folios_tag+0x13b/0x210 [ 451.164745][T13560] file_write_and_wait_range+0x1ea/0x2c0 [ 451.170424][T13560] __generic_file_fsync+0x46/0x140 [ 451.175732][T13560] fat_file_fsync+0x49/0x100 [ 451.180360][T13560] vfs_fsync_range+0x10d/0x130 [ 451.185151][T13560] generic_file_write_iter+0x1b8/0x2f0 [ 451.190637][T13560] do_iter_readv_writev+0x49e/0x540 [ 451.195862][T13560] vfs_writev+0x2df/0x8b0 [ 451.200222][T13560] __se_sys_pwritev2+0xfc/0x1c0 [ 451.205184][T13560] __x64_sys_pwritev2+0x67/0x80 [ 451.210151][T13560] x64_sys_call+0x2c59/0x3000 [ 451.214851][T13560] do_syscall_64+0xd2/0x200 [ 451.219387][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.225302][T13560] [ 451.227998][T13560] value changed: 0x000000000001fff8 -> 0x000000000001ffe0 [ 451.235136][T13560] [ 451.237488][T13560] Reported by Kernel Concurrency Sanitizer on: [ 451.243658][T13560] CPU: 1 UID: 0 PID: 13560 Comm: syz.6.18108 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 451.255143][T13560] Tainted: [W]=WARN [ 451.258963][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.269039][T13560] ==================================================================