last executing test programs: 1m35.908084239s ago: executing program 3 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1m35.87044146s ago: executing program 3 (id=257): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @local}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.771496151s ago: executing program 3 (id=259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 1m35.712701252s ago: executing program 3 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) 1m35.658531373s ago: executing program 3 (id=262): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r2, 0x0, r2, 0x0, 0x39ea, 0x0) 1m35.426703796s ago: executing program 3 (id=270): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x4, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m35.414238016s ago: executing program 32 (id=270): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x4, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m32.658366478s ago: executing program 5 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) listxattr(0x0, 0x0, 0x0) 1m32.634378768s ago: executing program 5 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 1m32.608822508s ago: executing program 5 (id=386): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 1m31.170332739s ago: executing program 5 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000002000000}, 0x0) 1m31.16279324s ago: executing program 33 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000002000000}, 0x0) 1.469212688s ago: executing program 2 (id=4492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000500), 0x66) 1.450056948s ago: executing program 2 (id=4482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.398559469s ago: executing program 2 (id=4486): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) 1.141742402s ago: executing program 2 (id=4501): openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xba, &(0x7f0000000040)) 1.093788283s ago: executing program 2 (id=4505): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_disconnect(r0) 551.459801ms ago: executing program 6 (id=4544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$eJzs3V1v3FgZB/D/mZnMTLLQjQBVq6rbnKaslIoy9Uy2qUYBCeM5MzHMjEe2A4mEtCo0WUWddKEtEp2bNje8SMsHgLu94YILPsJKXHC13wKuQFqBkBArEDLysT2v9qRD0u6W/n/V7njsx+ccH7t+6sQ+BhEREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREUFYDcOoCrTt7u6ezGY1XKeTfMljZnlU2hKuRxPX59W5FNYLiPA/lMt4I5r9xpdGIRfD/63jcvTtMsrhRxmD1y6ubn+xkEvWn9Pg/wUWLfDh48G9O/3+wYNniM1DFy+wcC2fCuSeIailurbn2B2zpaTtObK+tWXc3Gl6smm3lbfv+aojLVflfMeVG9Z1Wa3XN6Wq7Du73VbDbKtk5u2v1gxjS36rFO1oABXP2rHbbbvb0jHh4jDmtnz/e1GAMjtSHh71DzbH2vMkrXPDoGpK43PjwWFQ7bTNrRm1WrVaq1W3btVv3TaMwswMIySMIcxEnPtBSy+Z8z2BE51Bzmr82/ijANooo4td7EGm/rHQgAsHnYzlsST/v3VTza13PP8nWX5ptPgSdP6/En27EqaFQkr+z2iLhNR5JG2JyJi/2J8lnagkHuIxBriHO+ijjwM8OIeyJeTamUsoGnFPnr01mFNSCwpd2PDgwEYHJlr4PGQ8R6KOLWzBwDvYQRMeJJqw0YaCh3148KHCI6oYlq9gwocDFxIbsHAdElXUUcfrkFCoYB8OdtFFCw2Y+GcQBIc40v2+GbfnaUpbkQRVMzawhEKyjQeozemJrPz//SfR2nH+N5j/X1XRcVCKPj6aF0P0GRDE1/8LWns+rSEiIiIiIiKi50Hon74L/Vv5NwEEaNptZYwtz/S73ItpIhERERERERGdkUBQwuXwMl/fffcmxOT1PxERERERERG9/IR+xk4AWNE39YvR41LP8kOA/AtoIhERERERERGdkb6//0oRCPSgFWsQC13/ExEREREREdFL4OdjY+wX8vEY+0Hya/0cgLU/lcSHfy3BXRInvb0vi2MzXGIexzEzdwD4zUviQjxQr/4oAtDfLHVZxLVJ4B/jowt8fJg+1v/TICKEcKcaUMxnDE8w3gAR1rxViL/hfVyNVrkajzN/d5CDXhKNKLzStNuqYjnt7SpM80LOV3v+j+8f/QRwh9t5eNQ/qPzgvf5d3ZaTcNbJcVjok4nm5NI7Y9SWR3q8Bf3MRdrbDZbRTKr8RbezInS9RrL9eZjHufGKMnfAr1a3t5aBaCt/ivVon60HUezKYDjivgDW9OAP1YreZRNb7y6JUSuq01uetiMytrysW3Etirm2cS36SPokLCcnyl/JA7XK7D6YaEVtvBWn94X421T/z28FRDnsi82wFb8PC5pqxXc/jFbe7O3Fo73Ob0XwejQ5fRQQEX1aDkdZSA9iPjPGfpIekpPas+adi6soAPFZLiO7j2oJ4vyRZPdHvw6iDJUHCvHvJtJrSfIKwjP6htDlFKMB3QuXUs7oRuWTIAjMC2WMn9H/EwTJBhkLZLeTIAimz+i/Hb0DKW72TCv+FQTBdlVnkl9OZdUPwhU+yKzXa9fyKKOER8c/1APgh949ePfgfq22uWW8bRi3aljS/1SIP/LI/BcIERG9uibfsZP2jj0dkZsTId7G1aiMq3f/8lY0NZHxvhDfUqDdBPp6qIH4FQJr6aWu4BBf/3t0G8KN6KoVWF+JPlcG8uLqdnhVO4w9EgX9hpcbmVd1OpdGsfr2htowNnnv0PQV4Ch28/nuBCIiohdsPSMPAxP5H5P5vzyR/29gI4rYuJR63b0ydkvhjeTqeHhJP3jtJDW2enrjv3HOnUFERPSKUO7HYsX/mXBdu/dOtV6vmv6Okq5jfVu6dqOlpN31lWvtmN2Wkj3X8R3Lacuei5K9rDzp7fZ6juvLpuPKnuPZe/rN7zJ+9bunOmbXty2v11amp6TldH3T8mXD9izZ2/1m2/Z2lKtX9nrKspu2Zfq205Wes+taqiKlp9RYoN1QXd9u2uFkV/Zcu2O6+/I7Tnu3o2RDeZZr93wnKjCpy+42Hbeji60gWPhFh0RERP+PHj4e3LvT7x88mJ5YDi/NozknyIiZnSimFJgHAo4TRERE9BkyStcLrFR+jg0iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqIZpz/St+DEUtrDgsBwzo8uxHPwFKNHDGfKEThrez5x/6AH9kuLKQKYt3pu0UqTRyIG9z6aE7w8nJN0/3jMySKVYhWYH/Ne9qI/fw54Tc9BNKdwjgfA7POj536MpU187TDq0awYvTB1UWm4Lwrn/9chnLj/m9lFIuz5IAiC+auXJvuwOGcDpyYKAB4U5+yC5VOOn9POHDPjfxPRS+a/AQAA//+63zmW") futimesat(r2, &(0x7f0000000000)='./file1\x00', 0x0) 546.073041ms ago: executing program 0 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000000, &(0x7f0000000640)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[], [{@fowner_gt}, {@subj_type={'subj_type', 0x3d, '#/'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kfree\x00'}}, {@uid_gt}, {@dont_hash}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '\\].'}}]}}) 515.619692ms ago: executing program 0 (id=4546): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4112, 0x1010}) 397.479703ms ago: executing program 6 (id=4547): unshare(0x400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 396.541474ms ago: executing program 0 (id=4548): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 325.956535ms ago: executing program 4 (id=4549): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r0, 0xc, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 305.408545ms ago: executing program 2 (id=4550): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000feffffff0000000004000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008004000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 305.162235ms ago: executing program 4 (id=4551): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa2c0739963b0e8f1, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x4, 0xff, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x766, 0x7}, 0xb3d8c41eb80db927, 0x1, 0x8007, 0x0, 0x81, 0xf, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 290.240595ms ago: executing program 4 (id=4552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa14001980"], 0x44}}, 0x0) 284.898556ms ago: executing program 1 (id=4553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 261.918166ms ago: executing program 6 (id=4554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 261.483066ms ago: executing program 0 (id=4555): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, 0x0, 0x0) 241.119586ms ago: executing program 4 (id=4556): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2aaa12fb1c658c08}, 0x4000041) 240.150176ms ago: executing program 1 (id=4566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 156.055997ms ago: executing program 0 (id=4557): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 155.480837ms ago: executing program 1 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000b95"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020300030e0000000007000000000000040009"], 0x70}, 0x1, 0x7}, 0x0) 128.341287ms ago: executing program 1 (id=4559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) 97.143418ms ago: executing program 6 (id=4560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 94.078168ms ago: executing program 1 (id=4561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 84.591598ms ago: executing program 4 (id=4562): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 76.121128ms ago: executing program 6 (id=4563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0xc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="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"], 0x2258}}], 0x2, 0x0) 64.152199ms ago: executing program 1 (id=4564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[]) 52.009279ms ago: executing program 4 (id=4565): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 49.814799ms ago: executing program 6 (id=4567): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10200, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x1276, 0x13500, 0xfffffffe, 0x304, 0x0, r0}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 0s ago: executing program 0 (id=4568): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) lsetxattr$security_selinux(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): attribute type 1 has an invalid length. [ 83.098868][ T8815] ALSA: seq fatal error: cannot create timer (-19) [ 83.113821][ T8822] loop2: detected capacity change from 0 to 128 [ 83.296643][ T8842] 9p: Unknown Cache mode or invalid value m [ 83.638142][ T8852] loop6: detected capacity change from 0 to 1024 [ 83.646324][ T8854] loop2: detected capacity change from 0 to 2048 [ 83.653203][ T8854] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.663225][ T8854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.664508][ T8852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.688409][ T8854] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.708483][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.718969][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.755015][ T8863] loop6: detected capacity change from 0 to 2048 [ 83.783961][ T8863] Alternate GPT is invalid, using primary GPT. [ 83.790303][ T8863] loop6: p1 p2 p3 [ 83.915697][ T8886] ALSA: seq fatal error: cannot create timer (-19) [ 84.187342][ T8920] loop0: detected capacity change from 0 to 1024 [ 84.202669][ T8920] EXT4-fs: Ignoring removed nobh option [ 84.210848][ T8920] EXT4-fs: Ignoring removed bh option [ 84.230048][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.252359][ T8920] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 84.267272][ T8920] EXT4-fs (loop0): Remounting filesystem read-only [ 84.288049][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.366886][ T8943] xt_hashlimit: max too large, truncated to 1048576 [ 84.498535][ T8961] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2071'. [ 84.574996][ T8973] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 84.588171][ T8973] hsr_slave_0 (unregistering): left promiscuous mode [ 84.626501][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.635695][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.726717][ T9004] random: crng reseeded on system resumption [ 84.749436][ T9004] Restarting kernel threads ... [ 84.755572][ T9004] Done restarting kernel threads. [ 84.758142][ T9008] loop2: detected capacity change from 0 to 2048 [ 84.783568][ T9008] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.809484][ T3312] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 84.871339][ T9028] loop0: detected capacity change from 0 to 256 [ 85.011451][ T9046] loop0: detected capacity change from 0 to 1024 [ 85.018496][ T9046] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.029654][ T9046] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.041436][ T9046] JBD2: no valid journal superblock found [ 85.047303][ T9046] EXT4-fs (loop0): Could not load journal inode [ 85.220851][ T9072] loop6: detected capacity change from 0 to 512 [ 85.235877][ T9072] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2120: corrupted in-inode xattr: invalid ea_ino [ 85.251086][ T9072] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2120: couldn't read orphan inode 15 (err -117) [ 85.265120][ T9072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.285742][ T9083] xt_hashlimit: max too large, truncated to 1048576 [ 85.296198][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.354361][ T9097] random: crng reseeded on system resumption [ 85.364571][ T9097] Restarting kernel threads ... [ 85.369567][ T9097] Done restarting kernel threads. [ 85.397069][ T9105] loop2: detected capacity change from 0 to 1024 [ 85.404010][ T9105] EXT4-fs: Ignoring removed nobh option [ 85.409838][ T9105] EXT4-fs: Ignoring removed bh option [ 85.423589][ T9105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.444397][ T9105] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 85.460689][ T9105] EXT4-fs (loop2): Remounting filesystem read-only [ 85.480300][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.993769][ T9224] loop4: detected capacity change from 0 to 2048 [ 86.024036][ T9224] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.072891][ T3313] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 86.096978][ T9250] netlink: 'syz.4.2142': attribute type 10 has an invalid length. [ 86.109457][ T9250] hsr_slave_0 (unregistering): left promiscuous mode [ 86.213581][ T9267] loop1: detected capacity change from 0 to 1024 [ 86.220594][ T9267] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.231725][ T9267] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.243641][ T9267] JBD2: no valid journal superblock found [ 86.249475][ T9267] EXT4-fs (loop1): Could not load journal inode [ 86.316706][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2157'. [ 86.370250][ T9288] program syz.6.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.425714][ T9298] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 86.435520][ T9298] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 86.467299][ T9304] loop1: detected capacity change from 0 to 256 [ 86.500437][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2170'. [ 86.579338][ T9319] program syz.4.2175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.644631][ T9325] netlink: 'syz.6.2177': attribute type 10 has an invalid length. [ 86.674786][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 86.678547][ T9325] hsr_slave_0 (unregistering): left promiscuous mode [ 86.696067][ T9329] vlan2: entered promiscuous mode [ 86.701144][ T9329] batadv0: entered promiscuous mode [ 86.717845][ T9333] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 86.727533][ T9333] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 86.765531][ T9335] loop1: detected capacity change from 0 to 512 [ 86.774924][ T9335] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2182: casefold flag without casefold feature [ 86.788499][ T9335] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2182: couldn't read orphan inode 15 (err -117) [ 86.801819][ T9335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.833763][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.875867][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2189'. [ 86.885069][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2189'. [ 86.927914][ T9358] netlink: 'syz.6.2193': attribute type 1 has an invalid length. [ 86.935782][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2193'. [ 86.945894][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.955956][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.179616][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 87.179632][ T29] audit: type=1326 audit(2000000028.770:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d1fe929 code=0x7ffc0000 [ 87.213220][ T29] audit: type=1326 audit(2000000028.770:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d1fe929 code=0x7ffc0000 [ 87.236942][ T29] audit: type=1326 audit(2000000028.770:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb94d1fe929 code=0x7ffc0000 [ 87.260386][ T29] audit: type=1326 audit(2000000028.770:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d1fe929 code=0x7ffc0000 [ 87.284092][ T29] audit: type=1326 audit(2000000028.770:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9387 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94d1fe929 code=0x7ffc0000 [ 87.345057][ T9398] loop2: detected capacity change from 0 to 1024 [ 87.363604][ T9398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.377410][ T9398] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.393226][ T9398] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 87.409526][ T9398] EXT4-fs (loop2): Remounting filesystem read-only [ 87.426786][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.437821][ T29] audit: type=1326 audit(2000000029.030:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.6.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 87.461605][ T29] audit: type=1326 audit(2000000029.030:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.6.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 87.485188][ T29] audit: type=1326 audit(2000000029.030:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.6.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 87.508988][ T29] audit: type=1326 audit(2000000029.030:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.6.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 87.532568][ T29] audit: type=1326 audit(2000000029.030:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.6.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 87.636135][ T9426] loop2: detected capacity change from 0 to 512 [ 87.660827][ T9426] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2225: casefold flag without casefold feature [ 87.677237][ T9426] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2225: couldn't read orphan inode 15 (err -117) [ 87.699895][ T9426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.744936][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2231'. [ 87.865058][ T9464] netlink: 'syz.4.2244': attribute type 1 has an invalid length. [ 87.921931][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2248'. [ 88.263845][ T9529] syzkaller1: entered promiscuous mode [ 88.269367][ T9529] syzkaller1: entered allmulticast mode [ 88.292718][ T9539] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 88.414729][ T9559] SELinux: policydb version 0 does not match my version range 15-34 [ 88.426516][ T9559] SELinux: failed to load policy [ 88.443306][ T9565] syz_tun: entered allmulticast mode [ 88.449261][ T9564] syz_tun: left allmulticast mode [ 88.551253][ T9585] syzkaller1: entered promiscuous mode [ 88.556804][ T9585] syzkaller1: entered allmulticast mode [ 88.897935][ T9627] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 89.228515][ T9686] syz_tun: entered allmulticast mode [ 89.234742][ T9685] syz_tun: left allmulticast mode [ 89.272117][ T9694] loop0: detected capacity change from 0 to 512 [ 89.279320][ T9694] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.288562][ T9694] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (800) [ 89.304302][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.313490][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.323737][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.341375][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.350431][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.364155][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.405773][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.414821][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 89.555705][ T9723] loop6: detected capacity change from 0 to 1024 [ 89.565801][ T9727] syz_tun: entered allmulticast mode [ 89.574083][ T9725] syz_tun: left allmulticast mode [ 89.582303][ T9723] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.606611][ T9723] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.2357: Freeing blocks not in datazone - block = 0, count = 16 [ 89.612301][ T10] IPVS: starting estimator thread 0... [ 89.666541][ T9740] loop4: detected capacity change from 0 to 1024 [ 89.706644][ T9749] loop0: detected capacity change from 0 to 1024 [ 89.732999][ T9735] IPVS: using max 2640 ests per chain, 132000 per kthread [ 89.748211][ T9740] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 89.770479][ T9749] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.784636][ T9740] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 89.797440][ T9740] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.797440][ T9740] [ 89.807315][ T9740] EXT4-fs (loop4): Total free blocks count 0 [ 89.811054][ T9765] syz_tun: entered allmulticast mode [ 89.813328][ T9740] EXT4-fs (loop4): Free/Dirty block details [ 89.824946][ T9740] EXT4-fs (loop4): free_blocks=68451041280 [ 89.830916][ T9740] EXT4-fs (loop4): dirty_blocks=32 [ 89.836080][ T9740] EXT4-fs (loop4): Block reservation details [ 89.837158][ T9766] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.842169][ T9740] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 89.854304][ T9764] syz_tun: left allmulticast mode [ 89.854518][ T9766] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.854518][ T9766] [ 90.038061][ T10] IPVS: starting estimator thread 0... [ 90.045417][ T9777] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 90.115878][ T9796] loop0: detected capacity change from 0 to 128 [ 90.132114][ T9786] IPVS: using max 2976 ests per chain, 148800 per kthread [ 90.155067][ T9796] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.163071][ T9796] FAT-fs (loop0): Filesystem has been set read-only [ 90.169772][ T9796] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.190585][ T9796] bio_check_eod: 28 callbacks suppressed [ 90.190600][ T9796] syz.0.2383: attempt to access beyond end of device [ 90.190600][ T9796] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 90.273549][ T9811] loop0: detected capacity change from 0 to 1024 [ 90.289206][ T9811] EXT4-fs: Ignoring removed orlov option [ 90.295126][ T9811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.337337][ T9811] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 90.352427][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.361751][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.438371][ T9825] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 90.446796][ T10] IPVS: starting estimator thread 0... [ 90.542158][ T9829] IPVS: using max 2688 ests per chain, 134400 per kthread [ 90.573980][ T9852] loop0: detected capacity change from 0 to 1024 [ 90.575409][ T9850] loop4: detected capacity change from 0 to 1024 [ 90.587122][ T9850] EXT4-fs: Ignoring removed bh option [ 90.592603][ T9850] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.597478][ T9852] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 90.615530][ T9852] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 90.627910][ T9852] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.627910][ T9852] [ 90.637899][ T9852] EXT4-fs (loop0): Total free blocks count 0 [ 90.644070][ T9852] EXT4-fs (loop0): Free/Dirty block details [ 90.650057][ T9852] EXT4-fs (loop0): free_blocks=68451041280 [ 90.650445][ T9857] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 90.655990][ T9852] EXT4-fs (loop0): dirty_blocks=32 [ 90.656007][ T9852] EXT4-fs (loop0): Block reservation details [ 90.668363][ T9857] EXT4-fs (loop0): This should not happen!! Data will be lost [ 90.668363][ T9857] [ 90.673560][ T9852] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 90.749563][ T9865] loop4: detected capacity change from 0 to 1024 [ 90.763443][ T9865] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.971668][ T9890] loop2: detected capacity change from 0 to 1024 [ 90.987367][ T9890] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 91.003568][ T9890] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 91.015970][ T9890] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.015970][ T9890] [ 91.025750][ T9890] EXT4-fs (loop2): Total free blocks count 0 [ 91.031823][ T9890] EXT4-fs (loop2): Free/Dirty block details [ 91.037941][ T9890] EXT4-fs (loop2): free_blocks=68451041280 [ 91.038594][ T9897] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.043810][ T9890] EXT4-fs (loop2): dirty_blocks=32 [ 91.056419][ T9897] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.056419][ T9897] [ 91.061550][ T9890] EXT4-fs (loop2): Block reservation details [ 91.061568][ T9890] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 91.119987][ T9903] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.119987][ T9903] The task syz.0.2422 (9903) triggered the difference, watch for misbehavior. [ 91.154350][ T9907] loop2: detected capacity change from 0 to 1024 [ 91.164258][ T9907] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.284773][ T9921] loop6: detected capacity change from 0 to 2048 [ 91.316948][ T9921] EXT4-fs (loop6): shut down requested (0) [ 91.324543][ T9921] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 91.335237][ T9921] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 91.456217][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 91.464494][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.580423][ T9960] loop2: detected capacity change from 0 to 256 [ 91.587821][ T9960] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.600824][ T9960] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 91.609592][ T9960] FAT-fs (loop2): Filesystem has been set read-only [ 91.893572][ T9996] loop0: detected capacity change from 0 to 2048 [ 91.903962][ T9996] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.947338][T10003] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.979379][T10005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10005 comm=syz.4.2472 [ 91.992054][T10005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10005 comm=syz.4.2472 [ 92.047307][T10009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.155617][T10017] program syz.2.2477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.254730][ T58] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 92.270929][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 92.270942][ T29] audit: type=1400 audit(2000000033.860:2168): avc: denied { connect } for pid=10025 comm="syz.6.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.308886][ T29] audit: type=1400 audit(2000000033.890:2169): avc: denied { write } for pid=10025 comm="syz.6.2483" path="socket:[22365]" dev="sockfs" ino=22365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.312765][ T58] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 92.345495][ T58] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.345495][ T58] [ 92.385001][ T29] audit: type=1400 audit(2000000033.980:2170): avc: denied { create } for pid=10033 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 92.399074][ T58] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 92.417548][ T58] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.417548][ T58] [ 92.424720][ T29] audit: type=1400 audit(2000000034.000:2171): avc: denied { ioctl } for pid=10033 comm="syz.1.2488" path="socket:[22375]" dev="sockfs" ino=22375 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 92.427229][ T58] EXT4-fs (loop0): Total free blocks count 0 [ 92.427241][ T58] EXT4-fs (loop0): Free/Dirty block details [ 92.427251][ T58] EXT4-fs (loop0): free_blocks=0 [ 92.427261][ T58] EXT4-fs (loop0): dirty_blocks=2048 [ 92.427271][ T58] EXT4-fs (loop0): Block reservation details [ 92.427282][ T58] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 92.487159][T10032] SELinux: syz.2.2484 (10032) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.603057][ T29] audit: type=1326 audit(2000000034.200:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081591e929 code=0x7ffc0000 [ 92.626785][ T29] audit: type=1326 audit(2000000034.200:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081591e929 code=0x7ffc0000 [ 92.698127][ T29] audit: type=1326 audit(2000000034.240:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f081591e929 code=0x7ffc0000 [ 92.721758][ T29] audit: type=1326 audit(2000000034.240:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081591e929 code=0x7ffc0000 [ 92.745586][ T29] audit: type=1326 audit(2000000034.240:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081591e929 code=0x7ffc0000 [ 92.769421][ T29] audit: type=1326 audit(2000000034.240:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10047 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f081591e929 code=0x7ffc0000 [ 92.816839][T10057] __nla_validate_parse: 5 callbacks suppressed [ 92.816854][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2498'. [ 92.917504][T10072] syzkaller1: entered promiscuous mode [ 92.923125][T10072] syzkaller1: entered allmulticast mode [ 92.988005][T10081] netlink: 'syz.0.2510': attribute type 3 has an invalid length. [ 93.021241][T10085] SELinux: Context system_u:object is not valid (left unmapped). [ 93.028660][T10090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10090 comm=syz.0.2513 [ 93.042052][T10090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10090 comm=syz.0.2513 [ 93.060701][T10091] sg_write: data in/out 200724829/1 bytes for SCSI command 0x0-- guessing data in; [ 93.060701][T10091] program syz.6.2514 not setting count and/or reply_len properly [ 93.271317][T10121] hub 6-0:1.0: USB hub found [ 93.277298][T10121] hub 6-0:1.0: 8 ports detected [ 93.494932][T10167] loop2: detected capacity change from 0 to 2048 [ 93.622844][T10190] loop2: detected capacity change from 0 to 128 [ 93.645980][T10190] ext4 filesystem being mounted at /559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.706615][T10190] EXT4-fs (loop2): shut down requested (0) [ 93.754866][T10198] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 94.032261][T10249] loop6: detected capacity change from 0 to 512 [ 94.044589][T10249] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.074733][T10249] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2587'. [ 94.128262][T10266] loop0: detected capacity change from 0 to 256 [ 94.136468][T10263] loop6: detected capacity change from 0 to 164 [ 94.136828][T10266] FAT-fs (loop0): bogus number of FAT sectors [ 94.148873][T10266] FAT-fs (loop0): Can't find a valid FAT filesystem [ 94.156036][T10263] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.189143][T10263] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.208914][T10263] Symlink component flag not implemented [ 94.214647][T10263] Symlink component flag not implemented [ 94.225031][T10263] Symlink component flag not implemented (7) [ 94.231089][T10263] Symlink component flag not implemented (116) [ 94.265077][T10280] program syz.0.2600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.274731][T10280] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 94.314451][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 94.323880][T10289] SELinux: policydb version 1248755213 does not match my version range 15-34 [ 94.334193][T10289] SELinux: failed to load policy [ 94.336649][T10291] futex_wake_op: syz.6.2606 tries to shift op by -1; fix this program [ 94.382545][T10298] veth0_to_bond: entered allmulticast mode [ 94.387689][T10299] loop0: detected capacity change from 0 to 1024 [ 94.411162][T10301] loop1: detected capacity change from 0 to 128 [ 94.420395][T10299] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.431407][T10299] EXT4-fs (loop0): group descriptors corrupted! [ 94.438840][T10301] EXT4-fs: Ignoring removed nobh option [ 94.448238][T10301] ext4 filesystem being mounted at /509/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.462580][T10299] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 94.541812][T10319] wireguard0: entered promiscuous mode [ 94.547391][T10319] wireguard0: entered allmulticast mode [ 94.604363][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 94.613582][T10334] netlink: 'syz.2.2626': attribute type 7 has an invalid length. [ 94.621305][T10334] netlink: 'syz.2.2626': attribute type 8 has an invalid length. [ 94.629234][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'. [ 94.878545][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 95.015406][T10409] loop4: detected capacity change from 0 to 1024 [ 95.055112][T10415] loop0: detected capacity change from 0 to 1024 [ 95.071531][T10415] EXT4-fs: Ignoring removed bh option [ 95.075833][T10409] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.077041][T10415] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.087955][T10409] EXT4-fs (loop4): group descriptors corrupted! [ 95.091578][T10417] loop2: detected capacity change from 0 to 128 [ 95.120875][T10417] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.128892][T10417] FAT-fs (loop2): Filesystem has been set read-only [ 95.153353][T10417] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 95.161422][T10417] syz.2.2665: attempt to access beyond end of device [ 95.161422][T10417] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 95.196447][T10424] binfmt_misc: register: failed to install interpreter file ./file2 [ 95.198336][T10409] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 95.249374][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2670'. [ 95.276808][T10432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2672'. [ 95.279277][T10434] loop4: detected capacity change from 0 to 736 [ 95.367851][T10447] loop4: detected capacity change from 0 to 512 [ 95.375407][T10447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.393854][T10447] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.502319][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2688'. [ 95.512141][T10468] tipc: Enabling of bearer rejected, failed to enable media [ 95.566761][T10479] smc: net device bond0 applied user defined pnetid SYZ2 [ 95.584491][T10479] smc: net device bond0 erased user defined pnetid SYZ2 [ 95.611904][T10487] loop4: detected capacity change from 0 to 128 [ 95.619863][T10487] EXT4-fs: Ignoring removed nobh option [ 95.636103][T10489] pimreg: entered allmulticast mode [ 95.648344][T10489] pimreg: left allmulticast mode [ 95.663600][T10487] EXT4-fs mount: 33 callbacks suppressed [ 95.663616][T10487] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.689533][T10487] ext4 filesystem being mounted at /529/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.773905][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.912697][T10518] loop1: detected capacity change from 0 to 128 [ 95.923334][T10518] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.931280][T10518] FAT-fs (loop1): Filesystem has been set read-only [ 95.962073][T10518] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 95.976138][T10518] syz.1.2711: attempt to access beyond end of device [ 95.976138][T10518] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 96.029129][T10536] netlink: 'syz.4.2718': attribute type 10 has an invalid length. [ 96.039853][T10536] ipvlan0: entered allmulticast mode [ 96.045262][T10536] veth0_vlan: entered allmulticast mode [ 96.053379][T10536] team0: Device ipvlan0 failed to register rx_handler [ 96.081548][T10537] loop2: detected capacity change from 0 to 512 [ 96.118396][T10537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.135724][T10546] netlink: 'syz.4.2724': attribute type 10 has an invalid length. [ 96.143757][T10546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2724'. [ 96.155462][T10537] EXT4-fs (loop2): 1 truncate cleaned up [ 96.161708][T10537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.175574][T10537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.203188][T10546] team0: Port device geneve1 added [ 96.245047][T10560] usb usb1: usbfs: process 10560 (syz.2.2729) did not claim interface 0 before use [ 96.266710][T10563] wireguard0: entered promiscuous mode [ 96.272451][T10563] wireguard0: entered allmulticast mode [ 96.343860][T10570] vhci_hcd: invalid port number 96 [ 96.349108][T10570] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 96.594453][T10607] wireguard0: entered promiscuous mode [ 96.600377][T10607] wireguard0: entered allmulticast mode [ 96.616198][T10611] smc: net device bond0 applied user defined pnetid SYZ2 [ 96.624138][T10611] smc: net device bond0 erased user defined pnetid SYZ2 [ 96.650983][T10616] loop4: detected capacity change from 0 to 512 [ 96.663683][T10616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.676398][T10616] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.695544][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.717490][T10620] loop4: detected capacity change from 0 to 2048 [ 96.734273][T10620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.753135][T10620] EXT4-fs (loop4): shut down requested (0) [ 96.769697][T10620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 96.780463][T10620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 96.807443][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.866792][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.876524][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.060181][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.068764][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.197896][T10673] netlink: 'syz.4.2774': attribute type 1 has an invalid length. [ 97.346856][T10684] loop2: detected capacity change from 0 to 2048 [ 97.363338][T10684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.376214][T10684] ext4 filesystem being mounted at /628/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.409929][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 97.409944][ T29] audit: type=1400 audit(2000000039.000:2405): avc: denied { setattr } for pid=10688 comm="GPL" name="NETLINK" dev="sockfs" ino=24560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.472857][ T29] audit: type=1326 audit(2000000039.060:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.496454][ T29] audit: type=1326 audit(2000000039.060:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.520354][ T29] audit: type=1326 audit(2000000039.060:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.544364][ T29] audit: type=1326 audit(2000000039.070:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.568408][ T29] audit: type=1326 audit(2000000039.070:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.593723][ T29] audit: type=1326 audit(2000000039.070:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.618320][ T29] audit: type=1326 audit(2000000039.070:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.642695][ T29] audit: type=1326 audit(2000000039.070:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.676880][ T29] audit: type=1326 audit(2000000039.150:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.6.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 97.929237][ T41] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 97.949263][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 97.962480][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.962480][ T41] [ 97.978027][T10720] loop6: detected capacity change from 0 to 128 [ 97.985960][T10720] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.010270][T10720] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.029278][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 98.042199][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.042199][ T41] [ 98.051840][ T41] EXT4-fs (loop2): Total free blocks count 0 [ 98.057918][ T41] EXT4-fs (loop2): Free/Dirty block details [ 98.063968][ T41] EXT4-fs (loop2): free_blocks=0 [ 98.069004][ T41] EXT4-fs (loop2): dirty_blocks=2048 [ 98.074371][ T41] EXT4-fs (loop2): Block reservation details [ 98.284271][T10753] syzkaller1: entered promiscuous mode [ 98.289840][T10753] syzkaller1: entered allmulticast mode [ 98.526612][T10776] hub 6-0:1.0: USB hub found [ 98.540925][T10776] hub 6-0:1.0: 8 ports detected [ 98.674668][T10805] loop6: detected capacity change from 0 to 512 [ 98.702708][T10805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.716145][T10811] loop4: detected capacity change from 0 to 512 [ 98.722973][T10805] ext4 filesystem being mounted at /469/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.756418][T10811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.770914][T10811] EXT4-fs (loop4): 1 truncate cleaned up [ 98.777344][T10811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.795104][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.819681][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.836046][T10820] __nla_validate_parse: 3 callbacks suppressed [ 98.836059][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2843'. [ 98.921921][T10832] loop4: detected capacity change from 0 to 512 [ 98.971400][T10832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.985776][T10832] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.033265][T10848] loop1: detected capacity change from 0 to 1024 [ 99.053693][T10848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.080803][T10848] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.114187][T10848] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 99.131598][T10848] EXT4-fs (loop1): Remounting filesystem read-only [ 99.142149][T10858] loop0: detected capacity change from 0 to 164 [ 99.151244][T10858] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.163314][T10858] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.178718][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.192512][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.314881][T10876] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2869'. [ 99.357984][T10876] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2869'. [ 99.433480][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2875'. [ 99.443135][T10888] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2875'. [ 99.489184][T10892] random: crng reseeded on system resumption [ 99.497085][T10890] hub 2-0:1.0: USB hub found [ 99.504685][T10890] hub 2-0:1.0: 8 ports detected [ 99.540500][T10899] veth0_to_bond: entered allmulticast mode [ 99.576037][T10903] loop6: detected capacity change from 0 to 1024 [ 99.586732][T10907] tap0: tun_chr_ioctl cmd 1074025675 [ 99.592088][T10907] tap0: persist enabled [ 99.599478][T10907] tap0: tun_chr_ioctl cmd 1074025675 [ 99.600211][T10903] EXT4-fs: Ignoring removed nobh option [ 99.604919][T10907] tap0: persist disabled [ 99.610421][T10903] EXT4-fs: Ignoring removed bh option [ 99.651009][T10903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.690282][T10903] EXT4-fs (loop6): shut down requested (2) [ 99.720236][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.739243][T10929] syzkaller1: entered promiscuous mode [ 99.744815][T10929] syzkaller1: entered allmulticast mode [ 99.768752][T10937] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 99.823208][T10947] loop2: detected capacity change from 0 to 164 [ 99.833149][T10947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.833562][T10950] debugfs: Invalid uid '0x00000000ffffffff' [ 99.864480][T10947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.882051][T10947] Symlink component flag not implemented [ 99.887844][T10947] Symlink component flag not implemented [ 99.894416][T10947] Symlink component flag not implemented (7) [ 99.900736][T10947] Symlink component flag not implemented (116) [ 99.933999][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 100.140283][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'. [ 100.269823][T11005] atomic_op ffff888104545d28 conn xmit_atomic 0000000000000000 [ 100.324484][T11017] loop0: detected capacity change from 0 to 164 [ 100.360106][T11014] netdevsim netdevsim1: Direct firmware load for À failed with error -2 [ 100.604310][T10987] Set syz1 is full, maxelem 65536 reached [ 100.611760][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2943'. [ 100.668401][T11045] program syz.1.2947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.785433][T11057] loop0: detected capacity change from 0 to 1024 [ 100.820538][T11057] EXT4-fs: Ignoring removed orlov option [ 100.826433][T11057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.872460][T11057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.910694][T11069] loop2: detected capacity change from 0 to 512 [ 100.926773][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.953785][T11069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.982718][T11069] ext4 filesystem being mounted at /654/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.088660][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.142208][T11111] macsec1: entered promiscuous mode [ 101.147456][T11111] bridge0: entered promiscuous mode [ 101.161681][T11111] bridge0: port 2(macsec1) entered blocking state [ 101.168554][T11111] bridge0: port 2(macsec1) entered disabled state [ 101.177793][T11111] macsec1: entered allmulticast mode [ 101.183260][T11111] bridge0: entered allmulticast mode [ 101.190676][T11111] macsec1: left allmulticast mode [ 101.196459][T11111] bridge0: left allmulticast mode [ 101.204461][T11111] bridge0: left promiscuous mode [ 101.235256][T11122] Cannot find add_set index 0 as target [ 101.313662][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 101.375564][T11153] loop0: detected capacity change from 0 to 512 [ 101.399691][T11153] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.433376][T11153] EXT4-fs (loop0): 1 truncate cleaned up [ 101.439358][T11153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.459135][T11153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.601614][T11188] loop0: detected capacity change from 0 to 2048 [ 101.652790][T11196] netlink: 'syz.6.3018': attribute type 298 has an invalid length. [ 101.667672][T11188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.696939][T11188] EXT4-fs (loop0): shut down requested (0) [ 101.709640][T11188] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 101.726703][T11206] syzkaller1: entered promiscuous mode [ 101.727013][T11188] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 101.732269][T11206] syzkaller1: entered allmulticast mode [ 101.822013][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.857230][T11213] batadv_slave_1: entered promiscuous mode [ 101.870667][T11212] batadv_slave_1: left promiscuous mode [ 101.904804][T11223] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 101.948852][T11221] ALSA: seq fatal error: cannot create timer (-19) [ 101.962596][T11218] loop0: detected capacity change from 0 to 8192 [ 101.989364][T11230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11230 comm=syz.6.3042 [ 102.002330][T11230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11230 comm=syz.6.3042 [ 102.036542][T11235] futex_wake_op: syz.2.3034 tries to shift op by -1; fix this program [ 102.139404][T11249] loop2: detected capacity change from 0 to 512 [ 102.158940][T11249] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.180449][T11249] EXT4-fs (loop2): 1 truncate cleaned up [ 102.187465][T11249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.217875][T11257] macvlan0 (unregistering): left promiscuous mode [ 102.245214][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.435838][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 102.435851][ T29] audit: type=1326 audit(2000000044.030:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.465763][ T29] audit: type=1326 audit(2000000044.030:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.490326][ T29] audit: type=1326 audit(2000000044.030:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.513989][ T29] audit: type=1326 audit(2000000044.030:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.537662][ T29] audit: type=1326 audit(2000000044.030:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.6.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.589613][T11288] loop4: detected capacity change from 0 to 2048 [ 102.603695][T11288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.616037][T11288] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.683187][ T29] audit: type=1326 audit(2000000044.280:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.724435][ T29] audit: type=1326 audit(2000000044.300:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.748738][ T29] audit: type=1326 audit(2000000044.300:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.772658][ T29] audit: type=1326 audit(2000000044.300:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.796461][ T29] audit: type=1326 audit(2000000044.300:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.6.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 102.939828][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 102.955301][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 102.968522][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.968522][ T51] [ 102.992594][ T58] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 103.005633][ T58] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.005633][ T58] [ 103.015387][ T58] EXT4-fs (loop4): Total free blocks count 0 [ 103.021854][ T58] EXT4-fs (loop4): Free/Dirty block details [ 103.028041][ T58] EXT4-fs (loop4): free_blocks=0 [ 103.033121][ T58] EXT4-fs (loop4): dirty_blocks=2048 [ 103.038466][ T58] EXT4-fs (loop4): Block reservation details [ 103.083116][T11320] loop1: detected capacity change from 0 to 2048 [ 103.115229][T11324] loop6: detected capacity change from 0 to 512 [ 103.132275][T11320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.148534][T11324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.150260][T11327] dvmrp1: entered allmulticast mode [ 103.168317][T11324] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.174616][T11327] dvmrp1: left allmulticast mode [ 103.190189][T11320] EXT4-fs (loop1): shut down requested (0) [ 103.197197][T11336] loop0: detected capacity change from 0 to 128 [ 103.207461][T11336] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 103.215390][T11336] FAT-fs (loop0): Filesystem has been set read-only [ 103.224249][T11336] syz.0.3077: attempt to access beyond end of device [ 103.224249][T11336] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 103.238561][T11336] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 103.246449][T11336] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 103.255083][T11337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 103.264939][T11337] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 103.316109][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.411182][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.558754][T11377] atomic_op ffff88811a86fd28 conn xmit_atomic 0000000000000000 [ 103.578407][T11383] loop0: detected capacity change from 0 to 512 [ 103.604309][T11383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.624299][T11383] ext4 filesystem being mounted at /611/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.653092][T11386] loop1: detected capacity change from 0 to 512 [ 103.661545][T11386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.670608][T11386] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 103.746730][T11386] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 103.904917][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.006897][T11429] loop6: detected capacity change from 0 to 128 [ 104.044459][T11429] syz.6.3114: attempt to access beyond end of device [ 104.044459][T11429] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 104.065547][T11429] syz.6.3114: attempt to access beyond end of device [ 104.065547][T11429] loop6: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 104.067505][T11438] __nla_validate_parse: 2 callbacks suppressed [ 104.067519][T11438] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3118'. [ 104.094686][T11438] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 104.110520][T11429] syz.6.3114: attempt to access beyond end of device [ 104.110520][T11429] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 104.131378][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3122'. [ 104.140410][T11429] syz.6.3114: attempt to access beyond end of device [ 104.140410][T11429] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 104.179201][T11429] syz.6.3114: attempt to access beyond end of device [ 104.179201][T11429] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 104.224485][T11429] syz.6.3114: attempt to access beyond end of device [ 104.224485][T11429] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 104.262093][T11429] syz.6.3114: attempt to access beyond end of device [ 104.262093][T11429] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 104.278198][T11429] syz.6.3114: attempt to access beyond end of device [ 104.278198][T11429] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 104.291828][T11429] syz.6.3114: attempt to access beyond end of device [ 104.291828][T11429] loop6: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 104.325063][T11471] loop0: detected capacity change from 0 to 512 [ 104.344780][T11471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.364251][T11471] EXT4-fs (loop0): 1 truncate cleaned up [ 104.371695][T11471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.395425][T11480] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.407985][T11480] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 104.422062][T11480] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 104.431353][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.448490][T11485] syzkaller1: entered promiscuous mode [ 104.454121][T11485] syzkaller1: entered allmulticast mode [ 104.461013][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 104.613069][T11508] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 104.624448][T11507] IPVS: stopping master sync thread 11508 ... [ 104.651624][T11510] loop2: detected capacity change from 0 to 1024 [ 104.667606][T11510] EXT4-fs: Ignoring removed nobh option [ 104.673315][T11510] EXT4-fs: Ignoring removed bh option [ 104.695315][T11510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.709780][T11510] EXT4-fs (loop2): shut down requested (2) [ 104.738684][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.749276][T11520] atomic_op ffff888124dfa928 conn xmit_atomic 0000000000000000 [ 104.778228][T11526] veth0: entered promiscuous mode [ 104.784694][T11524] veth0: left promiscuous mode [ 104.934799][T11547] loop4: detected capacity change from 0 to 256 [ 104.957638][T11547] FAT-fs (loop4): bogus number of FAT sectors [ 104.963971][T11547] FAT-fs (loop4): Can't find a valid FAT filesystem [ 105.140787][T11555] loop2: detected capacity change from 0 to 128 [ 105.150198][T11555] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.210718][T11555] ext4 filesystem being mounted at /687/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.349873][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.413605][T11588] loop1: detected capacity change from 0 to 128 [ 105.421082][T11588] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.461400][T11588] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.672901][T11615] loop4: detected capacity change from 0 to 8192 [ 105.739489][T11628] loop2: detected capacity change from 0 to 1024 [ 105.757449][T11628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.770331][T11628] ext4 filesystem being mounted at /690/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.822989][T11628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 105.840493][T11628] EXT4-fs (loop2): Remounting filesystem read-only [ 105.894678][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.964146][T11651] loop2: detected capacity change from 0 to 512 [ 105.970937][T11651] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 105.992830][T11651] EXT4-fs (loop2): invalid journal inode [ 105.998661][T11651] EXT4-fs (loop2): can't get journal size [ 106.023956][T11651] EXT4-fs (loop2): 1 truncate cleaned up [ 106.031673][T11651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.095724][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.159608][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3229'. [ 106.168675][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3229'. [ 106.198671][T11678] loop4: detected capacity change from 0 to 512 [ 106.212423][T11678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.230419][T11678] EXT4-fs (loop4): 1 truncate cleaned up [ 106.236543][T11678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.286821][T11688] ipvlan3: entered promiscuous mode [ 106.308970][T11688] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 106.317515][T11688] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.324965][T11694] loop2: detected capacity change from 0 to 512 [ 106.375188][T11694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.388862][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.399980][T11694] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.582742][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.613931][T11712] loop2: detected capacity change from 0 to 128 [ 106.627480][T11712] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 106.635410][T11712] FAT-fs (loop2): Filesystem has been set read-only [ 106.645789][T11714] vhci_hcd: invalid port number 0 [ 106.662332][T11712] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 106.670448][T11712] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 106.894549][T11741] Invalid ELF header magic: != ELF [ 107.006571][T11756] netlink: 'syz.4.3267': attribute type 21 has an invalid length. [ 107.038246][T11760] netem: change failed [ 107.097355][T11762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.229374][T11776] netlink: 'syz.1.3275': attribute type 1 has an invalid length. [ 107.245685][T11779] loop4: detected capacity change from 0 to 2048 [ 107.271557][T11779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.288982][T11779] EXT4-fs (loop4): shut down requested (2) [ 107.316702][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.329385][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 107.391838][ T3370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3370 comm=kworker/1:2 [ 107.419340][T11798] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 107.476998][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 107.477014][ T29] audit: type=1400 audit(2000000049.070:2897): avc: denied { read } for pid=11815 comm="syz.6.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.512171][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 107.520815][ T29] audit: type=1326 audit(2000000049.070:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.4.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 107.545015][ T29] audit: type=1326 audit(2000000049.070:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.4.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 107.568851][ T29] audit: type=1326 audit(2000000049.070:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.4.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 107.582868][T11826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.592452][ T29] audit: type=1400 audit(2000000049.070:2901): avc: denied { prog_load } for pid=11821 comm="syz.4.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.598984][T11826] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 107.618363][ T29] audit: type=1400 audit(2000000049.070:2902): avc: denied { bpf } for pid=11821 comm="syz.4.3295" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.625822][T11826] audit: backlog limit exceeded [ 107.651627][ T29] audit: type=1400 audit(2000000049.070:2903): avc: denied { perfmon } for pid=11821 comm="syz.4.3295" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.757668][T11837] bond1: entered promiscuous mode [ 107.762908][T11837] bond1: entered allmulticast mode [ 107.773910][T11837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.793357][T11856] loop0: detected capacity change from 0 to 256 [ 107.823567][T11837] bond1 (unregistering): Released all slaves [ 107.846366][T11860] syzkaller1: entered promiscuous mode [ 107.852129][T11860] syzkaller1: entered allmulticast mode [ 108.312899][T11927] usb usb1: usbfs: process 11927 (syz.4.3345) did not claim interface 63 before use [ 108.373229][T11932] loop6: detected capacity change from 0 to 8192 [ 108.382733][T11942] loop4: detected capacity change from 0 to 512 [ 108.389380][T11942] EXT4-fs: Ignoring removed nobh option [ 108.422934][T11942] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 108.443378][T11947] loop2: detected capacity change from 0 to 1024 [ 108.450607][T11947] EXT4-fs: Ignoring removed orlov option [ 108.458036][T11947] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 108.485966][T11947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.549219][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.587642][T11969] loop1: detected capacity change from 0 to 1024 [ 108.605558][T11966] sctp: [Deprecated]: syz.0.3364 (pid 11966) Use of int in max_burst socket option. [ 108.605558][T11966] Use struct sctp_assoc_value instead [ 108.624495][T11969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.648965][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 108.662057][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.671150][T11980] loop0: detected capacity change from 0 to 2048 [ 108.673097][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.690428][T11985] loop4: detected capacity change from 0 to 512 [ 108.712152][T11985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.728285][T11980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.756026][T11985] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.763071][T11989] IPv6: sit1: Disabled Multicast RS [ 108.769194][T11989] sit1: entered allmulticast mode [ 108.772921][T11980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.776318][T11985] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 108.798400][T11985] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 108.805012][T11985] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.3371: bad orphan inode 768 [ 108.822616][T11985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.869896][T12000] loop6: detected capacity change from 0 to 2048 [ 108.882048][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.922442][T12000] loop6: p1 < > p4 [ 108.931680][T12000] loop6: p4 size 8388608 extends beyond EOD, truncated [ 109.259532][T12056] netlink: 'syz.0.3401': attribute type 21 has an invalid length. [ 109.264421][T12055] loop2: detected capacity change from 0 to 1024 [ 109.267539][T12056] netlink: 'syz.0.3401': attribute type 1 has an invalid length. [ 109.274591][T12055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.281477][T12056] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3401'. [ 109.291240][T12055] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.319941][T12055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e01c, mo2=0000] [ 109.329607][T12055] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3400: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.344670][T12055] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.3400: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.361320][T12055] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3400: Failed to acquire dquot type 0 [ 109.375968][T12061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12061 comm=syz.4.3402 [ 109.388821][T12061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12061 comm=syz.4.3402 [ 109.402533][T12055] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 109.413618][T12055] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3400: mark_inode_dirty error [ 109.427647][T12055] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 109.438155][T12055] EXT4-fs (loop2): 1 orphan inode deleted [ 109.447365][T12055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.459817][ T51] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.490431][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 109.507660][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.517620][ T3312] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 109.534887][ T3312] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 109.545479][ T3312] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 109.908254][T12119] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 109.908254][T12119] program syz.4.3430 not setting count and/or reply_len properly [ 110.035838][T12142] netlink: 'syz.6.3437': attribute type 21 has an invalid length. [ 110.057547][T12142] netlink: 'syz.6.3437': attribute type 1 has an invalid length. [ 110.065487][T12142] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3437'. [ 110.114683][T12154] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 110.129444][T12156] syzkaller1: entered promiscuous mode [ 110.135008][T12156] syzkaller1: entered allmulticast mode [ 110.172361][T12164] IPv6: Can't replace route, no match found [ 110.210112][T12168] loop1: detected capacity change from 0 to 256 [ 110.235195][T12170] hub 4-0:1.0: USB hub found [ 110.239966][T12170] hub 4-0:1.0: 8 ports detected [ 110.293443][T12186] loop1: detected capacity change from 0 to 512 [ 110.305557][T12186] ext4 filesystem being mounted at /663/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.400759][T12207] loop0: detected capacity change from 0 to 512 [ 110.413855][T12207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.425175][T12207] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.433167][T12207] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.447039][T12207] EXT4-fs (loop0): 1 truncate cleaned up [ 110.455197][T12216] loop4: detected capacity change from 0 to 764 [ 110.468135][T12216] rock: directory entry would overflow storage [ 110.474355][T12216] rock: sig=0x4654, size=5, remaining=4 [ 110.487769][T12216] rock: directory entry would overflow storage [ 110.493979][T12216] rock: sig=0x4f50, size=4, remaining=3 [ 110.499570][T12216] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.501300][T12221] loop0: detected capacity change from 0 to 2048 [ 110.552508][T12221] loop0: p1 < > p4 [ 110.558493][T12221] loop0: p4 size 8388608 extends beyond EOD, truncated [ 110.625818][T12236] sd 0:0:1:0: device reset [ 110.660952][T12249] loop2: detected capacity change from 0 to 512 [ 110.685098][T12249] EXT4-fs: Ignoring removed nobh option [ 110.723222][T12249] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 110.781043][T12263] wireguard0: entered promiscuous mode [ 110.918363][T12288] netlink: 'syz.6.3501': attribute type 3 has an invalid length. [ 110.935031][T12293] random: crng reseeded on system resumption [ 111.281772][T12342] rdma_op ffff88810330d980 conn xmit_rdma 0000000000000000 [ 111.311748][T12345] loop0: detected capacity change from 0 to 512 [ 111.324337][T12345] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.339620][T12345] EXT4-fs (loop0): mount failed [ 111.355298][T12352] loop4: detected capacity change from 0 to 164 [ 111.364959][T12352] Unable to read rock-ridge attributes [ 111.426110][T12366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12366 comm=syz.4.3538 [ 111.438710][T12366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12366 comm=syz.4.3538 [ 111.473786][T12373] loop6: detected capacity change from 0 to 512 [ 111.480750][T12373] EXT4-fs: Ignoring removed nobh option [ 111.487060][T12373] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 111.584803][T12385] sd 0:0:1:0: device reset [ 111.587071][T12384] loop0: detected capacity change from 0 to 1024 [ 111.596328][T12384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.604975][T12384] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.616064][T12384] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e01c, mo2=0000] [ 111.627180][T12384] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3554: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.642939][T12384] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.3554: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.660044][T12384] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3554: Failed to acquire dquot type 0 [ 111.709525][T12384] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 111.726548][T12384] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3554: mark_inode_dirty error [ 111.730810][T12399] random: crng reseeded on system resumption [ 111.740506][T12403] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3552'. [ 111.755253][T12384] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 111.767430][T12384] EXT4-fs (loop0): 1 orphan inode deleted [ 111.784024][ T12] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.823501][T12407] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 111.823501][T12407] program syz.1.3555 not setting count and/or reply_len properly [ 111.832235][T12409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.848614][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 111.873883][ T3304] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.902972][ T3304] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 111.916050][ T3304] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 111.916629][T12417] netlink: 'syz.6.3560': attribute type 3 has an invalid length. [ 111.947116][T12421] netlink: 'syz.2.3563': attribute type 6 has an invalid length. [ 112.058884][T12450] loop0: detected capacity change from 0 to 128 [ 112.063675][T12446] loop4: detected capacity change from 0 to 2048 [ 112.076057][T12446] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 9: comm syz.4.3574: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 112.094419][T12446] EXT4-fs (loop4): Remounting filesystem read-only [ 112.117805][T12454] loop1: detected capacity change from 0 to 164 [ 112.120736][T12450] ext4 filesystem being mounted at /721/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.138303][T12454] Unable to read rock-ridge attributes [ 112.177192][T12450] EXT4-fs warning (device loop0): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 112.210305][T12464] SELinux: syz.6.3582 (12464) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.258520][T12474] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.372552][T12499] loop6: detected capacity change from 0 to 512 [ 112.381316][T12499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 112.429681][T12499] EXT4-fs (loop6): 1 truncate cleaned up [ 112.498728][T12521] loop2: detected capacity change from 0 to 512 [ 112.534419][T12521] __quota_error: 598 callbacks suppressed [ 112.534433][T12521] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 112.554368][T12536] pim6reg1: entered promiscuous mode [ 112.559739][T12536] pim6reg1: entered allmulticast mode [ 112.567202][T12521] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.581858][ T29] audit: type=1326 audit(2000000054.161:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.605563][ T29] audit: type=1326 audit(2000000054.161:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.629150][ T29] audit: type=1326 audit(2000000054.161:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.652733][ T29] audit: type=1326 audit(2000000054.161:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.676335][ T29] audit: type=1326 audit(2000000054.161:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.699838][ T29] audit: type=1326 audit(2000000054.161:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.723323][ T29] audit: type=1326 audit(2000000054.161:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.724522][T12521] EXT4-fs (loop2): mount failed [ 112.746806][ T29] audit: type=1326 audit(2000000054.161:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.763092][T12540] loop0: detected capacity change from 0 to 1024 [ 112.775987][ T29] audit: type=1326 audit(2000000054.341:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.6.3615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 112.806006][T12540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.847314][T12543] random: crng reseeded on system resumption [ 112.927492][T12562] Invalid logical block size (41471) [ 113.001508][T12577] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 113.009782][T12577] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 113.251128][T12604] syz_tun: entered promiscuous mode [ 113.271765][T12604] macsec1: entered promiscuous mode [ 113.277195][T12604] macsec1: entered allmulticast mode [ 113.282564][T12604] syz_tun: entered allmulticast mode [ 113.295761][T12604] syz_tun: left allmulticast mode [ 113.300975][T12604] syz_tun: left promiscuous mode [ 113.467629][T12613] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 113.674841][T12643] loop0: detected capacity change from 0 to 512 [ 113.681774][T12643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.707527][T12643] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 113.725856][T12643] EXT4-fs (loop0): 1 truncate cleaned up [ 113.735548][T12643] EXT4-fs error (device loop0): __ext4_iget:5379: inode #12: block 2: comm syz.0.3660: invalid block [ 113.747553][T12643] EXT4-fs (loop0): Remounting filesystem read-only [ 113.785272][T12659] xt_bpf: check failed: parse error [ 113.860640][T12667] loop1: detected capacity change from 0 to 1024 [ 113.865389][T12673] loop4: detected capacity change from 0 to 1024 [ 113.877950][T12667] EXT4-fs: Ignoring removed orlov option [ 113.920617][T12671] loop0: detected capacity change from 0 to 8192 [ 114.242287][T12725] vhci_hcd: invalid port number 65 [ 114.247463][T12725] vhci_hcd: invalid port number 65 [ 114.281104][T12734] loop6: detected capacity change from 0 to 256 [ 114.344120][T12734] FAT-fs (loop6): Directory bread(block 64) failed [ 114.350815][T12734] FAT-fs (loop6): Directory bread(block 65) failed [ 114.358473][T12734] FAT-fs (loop6): Directory bread(block 66) failed [ 114.365178][T12734] FAT-fs (loop6): Directory bread(block 67) failed [ 114.371904][T12734] FAT-fs (loop6): Directory bread(block 68) failed [ 114.379948][T12734] FAT-fs (loop6): Directory bread(block 69) failed [ 114.386891][T12734] FAT-fs (loop6): Directory bread(block 70) failed [ 114.395792][T12734] FAT-fs (loop6): Directory bread(block 71) failed [ 114.403294][T12734] FAT-fs (loop6): Directory bread(block 72) failed [ 114.409974][T12734] FAT-fs (loop6): Directory bread(block 73) failed [ 114.439771][T12734] bio_check_eod: 1 callbacks suppressed [ 114.439787][T12734] syz.6.3700: attempt to access beyond end of device [ 114.439787][T12734] loop6: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 114.463268][T12734] syz.6.3700: attempt to access beyond end of device [ 114.463268][T12734] loop6: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 114.643705][T12784] loop0: detected capacity change from 0 to 128 [ 114.656602][T12784] ext4 filesystem being mounted at /759/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.010044][T12812] netlink: 'syz.0.3736': attribute type 3 has an invalid length. [ 115.084712][T12820] futex_wake_op: syz.0.3740 tries to shift op by -1; fix this program [ 115.124916][T12828] netlink: 'syz.0.3744': attribute type 10 has an invalid length. [ 115.132877][T12828] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3744'. [ 115.417870][T12879] loop1: detected capacity change from 0 to 256 [ 115.449042][T12879] FAT-fs (loop1): Directory bread(block 64) failed [ 115.458143][T12879] FAT-fs (loop1): Directory bread(block 65) failed [ 115.473558][T12879] FAT-fs (loop1): Directory bread(block 66) failed [ 115.480691][T12879] FAT-fs (loop1): Directory bread(block 67) failed [ 115.487419][T12879] FAT-fs (loop1): Directory bread(block 68) failed [ 115.494506][T12879] FAT-fs (loop1): Directory bread(block 69) failed [ 115.502752][T12879] FAT-fs (loop1): Directory bread(block 70) failed [ 115.513087][T12879] FAT-fs (loop1): Directory bread(block 71) failed [ 115.519818][T12879] FAT-fs (loop1): Directory bread(block 72) failed [ 115.528045][T12879] FAT-fs (loop1): Directory bread(block 73) failed [ 115.551369][T12879] syz.1.3765: attempt to access beyond end of device [ 115.551369][T12879] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 115.628698][T12905] loop1: detected capacity change from 0 to 1024 [ 115.642467][T12905] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 115.663077][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 115.809183][T12922] netlink: 'syz.1.3786': attribute type 3 has an invalid length. [ 116.043690][T12934] loop0: detected capacity change from 0 to 1024 [ 116.098865][T12934] EXT4-fs (loop0): shut down requested (1) [ 116.226179][T12943] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3790'. [ 116.255726][T12945] @: renamed from vlan0 (while UP) [ 116.570443][T12973] loop1: detected capacity change from 0 to 128 [ 116.710821][T12990] netlink: 'wÞ£ÿ': attribute type 10 has an invalid length. [ 116.738725][T12990] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 116.750419][T12992] macvtap0: entered promiscuous mode [ 116.760758][T12992] macvtap0: left promiscuous mode [ 117.242979][T13041] loop6: detected capacity change from 0 to 2048 [ 117.285283][T13041] Alternate GPT is invalid, using primary GPT. [ 117.291745][T13041] loop6: p2 p3 p7 [ 117.413889][T13062] loop1: detected capacity change from 0 to 128 [ 117.486861][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3854'. [ 117.502432][T13070] bridge0: port 3(batadv1) entered blocking state [ 117.509045][T13070] bridge0: port 3(batadv1) entered disabled state [ 117.517956][T13070] batadv1: entered allmulticast mode [ 117.524008][T13070] batadv1: entered promiscuous mode [ 117.558323][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 117.558336][ T29] audit: type=1400 audit(2000000315.143:3656): avc: denied { load_policy } for pid=13076 comm="syz.6.3858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.558410][T13077] SELinux: failed to load policy [ 117.698784][ T29] audit: type=1400 audit(2000000315.283:3657): avc: denied { create } for pid=13095 comm="syz.1.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.742029][ T29] audit: type=1400 audit(2000000315.283:3658): avc: denied { write } for pid=13095 comm="syz.1.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.861698][T13116] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3877'. [ 117.913621][T13120] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 117.966072][T13129] loop2: detected capacity change from 0 to 512 [ 118.003200][ T51] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 118.012643][ T51] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 118.023280][T13129] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 118.033374][T13129] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 118.043377][T13129] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3884: Failed to acquire dquot type 1 [ 118.059067][T13129] EXT4-fs (loop2): 1 truncate cleaned up [ 118.065589][T13129] ext4 filesystem being mounted at /799/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.225773][ T29] audit: type=1400 audit(2000000315.813:3659): avc: denied { write } for pid=13159 comm="syz.2.3898" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.258226][T13163] macsec1: entered allmulticast mode [ 118.345598][T13180] netlink: 'syz.6.3906': attribute type 21 has an invalid length. [ 118.353725][ T29] audit: type=1326 audit(2000000315.923:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 118.377461][ T29] audit: type=1326 audit(2000000315.933:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 118.401192][ T29] audit: type=1326 audit(2000000315.933:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 118.424898][ T29] audit: type=1326 audit(2000000315.933:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cfe5e929 code=0x7ffc0000 [ 118.443104][T13180] netlink: 'syz.6.3906': attribute type 1 has an invalid length. [ 118.456179][T13180] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3906'. [ 118.550917][T13195] loop4: detected capacity change from 0 to 512 [ 118.561223][T13195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.593373][T13201] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 118.601592][T13201] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 118.610572][T13195] EXT4-fs (loop4): 1 truncate cleaned up [ 118.624543][T13203] loop6: detected capacity change from 0 to 512 [ 118.631988][T13203] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.644775][T13203] EXT4-fs (loop6): 1 truncate cleaned up [ 118.653452][T13203] EXT4-fs error (device loop6): __ext4_iget:5379: inode #12: block 2: comm syz.6.3918: invalid block [ 118.665851][T13203] EXT4-fs (loop6): Remounting filesystem read-only [ 118.691753][T13208] loop4: detected capacity change from 0 to 164 [ 118.707945][T13213] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3921'. [ 118.708516][T13208] Unsupported NM flag settings (8) [ 118.743711][T13216] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 118.752066][T13216] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 118.764946][T13218] program syz.2.3926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.844928][T13230] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3930'. [ 118.900887][T13232] loop4: detected capacity change from 0 to 2048 [ 118.909561][T13241] loop2: detected capacity change from 0 to 1024 [ 118.945058][T13232] Alternate GPT is invalid, using primary GPT. [ 118.951452][T13232] loop4: p2 p3 p7 [ 119.005891][T13258] loop4: detected capacity change from 0 to 512 [ 119.040953][T13258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.074788][T13258] ext4 filesystem being mounted at /799/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.255006][T13286] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 119.262041][T13283] IPVS: stopping master sync thread 13286 ... [ 119.371765][T13302] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 119.379734][T13302] netlink: 'syz.4.3963': attribute type 3 has an invalid length. [ 119.387535][T13302] netlink: 'syz.4.3963': attribute type 4 has an invalid length. [ 119.395317][T13302] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3963'. [ 119.461048][T13308] loop1: detected capacity change from 0 to 2048 [ 119.471023][T13317] loop2: detected capacity change from 0 to 512 [ 119.480703][T13317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.491297][T13316] loop0: detected capacity change from 0 to 164 [ 119.500800][T13316] Unsupported NM flag settings (8) [ 119.501701][T13317] EXT4-fs (loop2): 1 truncate cleaned up [ 119.523847][T13308] Alternate GPT is invalid, using primary GPT. [ 119.530404][T13308] loop1: p2 p3 p7 [ 119.706260][T13350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.827700][T13373] syz_tun: entered promiscuous mode [ 119.833407][T13373] macsec1: entered promiscuous mode [ 119.838682][T13373] macsec1: entered allmulticast mode [ 119.844188][T13373] syz_tun: entered allmulticast mode [ 119.851255][T13373] syz_tun: left allmulticast mode [ 119.856622][T13373] syz_tun: left promiscuous mode [ 119.901289][T13385] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 119.901410][T13384] IPVS: stopping master sync thread 13385 ... [ 119.971294][T13393] loop6: detected capacity change from 0 to 1024 [ 119.994310][T13393] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.4003: Allocating blocks 385-513 which overlap fs metadata [ 120.009604][T13392] EXT4-fs (loop6): pa ffff888106e15850: logic 16, phys. 129, len 24 [ 120.017735][T13392] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 120.116011][T13417] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 120.147451][T13419] syz_tun: entered promiscuous mode [ 120.154316][T13424] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 120.154932][T13419] macsec2: entered promiscuous mode [ 120.167478][T13419] macsec2: entered allmulticast mode [ 120.172844][T13419] syz_tun: entered allmulticast mode [ 120.181856][T13425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.192717][T13419] syz_tun: left allmulticast mode [ 120.198035][T13419] syz_tun: left promiscuous mode [ 120.213981][T13429] serio: Serial port ptm1 [ 120.455744][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'. [ 120.501866][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4033'. [ 120.548302][T13467] bridge0: port 4(vlan0) entered blocking state [ 120.554924][T13467] bridge0: port 4(vlan0) entered disabled state [ 120.561332][T13467] vlan0: entered allmulticast mode [ 120.566597][T13467] dummy0: entered allmulticast mode [ 120.572599][T13467] vlan0: entered promiscuous mode [ 120.577646][T13467] dummy0: entered promiscuous mode [ 120.583488][T13467] bridge0: port 4(vlan0) entered blocking state [ 120.589902][T13467] bridge0: port 4(vlan0) entered forwarding state [ 121.033658][T13478] loop0: detected capacity change from 0 to 512 [ 121.040642][T13478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.055215][T13478] EXT4-fs (loop0): 1 truncate cleaned up [ 121.186620][T13510] netlink: 'syz.4.4055': attribute type 1 has an invalid length. [ 121.194560][T13510] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4055'. [ 121.219222][T13512] serio: Serial port ptm0 [ 121.306099][T13527] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 121.421564][T13546] random: crng reseeded on system resumption [ 121.481503][T13558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4075'. [ 121.558499][T13567] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 121.569795][T13566] IPVS: stopping master sync thread 13567 ... [ 121.675733][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4084'. [ 121.846184][T13589] netlink: 'syz.2.4090': attribute type 1 has an invalid length. [ 121.854045][T13589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4090'. [ 121.960488][T13599] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 121.960916][T13598] IPVS: stopping master sync thread 13599 ... [ 122.148091][T13615] bridge0: port 3(vlan0) entered blocking state [ 122.154578][T13615] bridge0: port 3(vlan0) entered disabled state [ 122.163415][T13615] vlan0: entered allmulticast mode [ 122.168679][T13615] dummy0: entered allmulticast mode [ 122.175678][T13615] vlan0: entered promiscuous mode [ 122.180714][T13615] dummy0: entered promiscuous mode [ 122.186952][T13615] bridge0: port 3(vlan0) entered blocking state [ 122.193297][T13615] bridge0: port 3(vlan0) entered forwarding state [ 122.201014][T13619] loop6: detected capacity change from 0 to 512 [ 122.209161][T13619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.235212][T13619] ext4 filesystem being mounted at /718/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.284590][T13632] loop2: detected capacity change from 0 to 128 [ 122.294724][T13632] ext4 filesystem being mounted at /845/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.341634][T13632] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.4107: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 122.362834][T13632] EXT4-fs (loop2): Remounting filesystem read-only [ 122.390908][T13639] loop6: detected capacity change from 0 to 512 [ 122.398825][T13639] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 122.410606][T13639] EXT4-fs (loop6): orphan cleanup on readonly fs [ 122.417757][T13639] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4111: Block bitmap for bg 0 marked uninitialized [ 122.432798][T13639] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 122.442731][T13639] EXT4-fs (loop6): 1 orphan inode deleted [ 122.460678][T13644] loop4: detected capacity change from 0 to 256 [ 122.478312][T13644] FAT-fs (loop4): Directory bread(block 64) failed [ 122.485470][T13644] FAT-fs (loop4): Directory bread(block 65) failed [ 122.493311][T13644] FAT-fs (loop4): Directory bread(block 66) failed [ 122.499957][T13644] FAT-fs (loop4): Directory bread(block 67) failed [ 122.523692][T13644] FAT-fs (loop4): Directory bread(block 68) failed [ 122.530895][T13644] FAT-fs (loop4): Directory bread(block 69) failed [ 122.534297][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 122.548143][T13644] FAT-fs (loop4): Directory bread(block 70) failed [ 122.555881][T13644] FAT-fs (loop4): Directory bread(block 71) failed [ 122.564888][T13644] FAT-fs (loop4): Directory bread(block 72) failed [ 122.571812][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 122.571825][ T29] audit: type=1326 audit(2000000320.153:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.584704][T13644] FAT-fs (loop4): Directory bread(block 73) failed [ 122.631234][T13663] loop6: detected capacity change from 0 to 512 [ 122.638346][ T29] audit: type=1326 audit(2000000320.193:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.661995][ T29] audit: type=1326 audit(2000000320.193:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.685516][ T29] audit: type=1326 audit(2000000320.193:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.709110][ T29] audit: type=1326 audit(2000000320.193:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.732689][ T29] audit: type=1326 audit(2000000320.193:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.756184][ T29] audit: type=1326 audit(2000000320.193:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.774472][T13644] syz.4.4113: attempt to access beyond end of device [ 122.774472][T13644] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 122.779769][ T29] audit: type=1326 audit(2000000320.203:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.793816][T13663] EXT4-fs: Ignoring removed orlov option [ 122.816448][ T29] audit: type=1326 audit(2000000320.203:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.845734][ T29] audit: type=1326 audit(2000000320.203:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f62d3d3e929 code=0x7ffc0000 [ 122.882121][T13663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.891137][T13663] EXT4-fs (loop6): orphan cleanup on readonly fs [ 122.898023][T13663] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4122: bg 0: block 248: padding at end of block bitmap is not set [ 122.932347][T13663] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4122: Failed to acquire dquot type 1 [ 122.982340][T13663] EXT4-fs (loop6): 1 truncate cleaned up [ 123.004410][T13684] netlink: 'syz.1.4131': attribute type 1 has an invalid length. [ 123.055249][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4133'. [ 123.432423][T13735] xt_hashlimit: max too large, truncated to 1048576 [ 124.026207][T13765] netlink: 'syz.6.4168': attribute type 1 has an invalid length. [ 124.061580][T13767] loop0: detected capacity change from 0 to 256 [ 124.090546][T13767] FAT-fs (loop0): Directory bread(block 64) failed [ 124.107522][T13767] FAT-fs (loop0): Directory bread(block 65) failed [ 124.116155][T13767] FAT-fs (loop0): Directory bread(block 66) failed [ 124.124075][T13767] FAT-fs (loop0): Directory bread(block 67) failed [ 124.130836][T13771] loop4: detected capacity change from 0 to 512 [ 124.130992][T13767] FAT-fs (loop0): Directory bread(block 68) failed [ 124.147045][T13767] FAT-fs (loop0): Directory bread(block 69) failed [ 124.154382][T13767] FAT-fs (loop0): Directory bread(block 70) failed [ 124.167266][T13771] EXT4-fs: Ignoring removed i_version option [ 124.173862][T13767] FAT-fs (loop0): Directory bread(block 71) failed [ 124.180641][T13767] FAT-fs (loop0): Directory bread(block 72) failed [ 124.189851][T13767] FAT-fs (loop0): Directory bread(block 73) failed [ 124.197959][T13771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.247597][T13771] EXT4-fs (loop4): 1 truncate cleaned up [ 124.252842][T13767] syz.0.4169: attempt to access beyond end of device [ 124.252842][T13767] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 124.353934][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4178'. [ 124.468456][T13821] loop6: detected capacity change from 0 to 512 [ 124.486648][T13821] EXT4-fs: Ignoring removed i_version option [ 124.522728][T13821] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 124.534158][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4197'. [ 124.563153][T13821] EXT4-fs (loop6): 1 truncate cleaned up [ 124.654587][T13848] loop6: detected capacity change from 0 to 1024 [ 124.674771][T13848] EXT4-fs: inline encryption not supported [ 124.724641][T13848] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 124.840273][T13866] loop0: detected capacity change from 0 to 512 [ 124.901297][T13866] EXT4-fs: Ignoring removed i_version option [ 124.910982][T13866] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.922122][T13872] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 124.929320][T13866] EXT4-fs (loop0): 1 truncate cleaned up [ 125.372135][T13914] loop1: detected capacity change from 0 to 1024 [ 125.468635][T13914] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 125.498280][T13932] loop2: detected capacity change from 0 to 512 [ 125.515197][T13932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.604844][T13914] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.617343][T13914] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.617343][T13914] [ 125.627092][T13914] EXT4-fs (loop1): Total free blocks count 0 [ 125.633076][T13914] EXT4-fs (loop1): Free/Dirty block details [ 125.639086][T13914] EXT4-fs (loop1): free_blocks=20480 [ 125.644372][T13914] EXT4-fs (loop1): dirty_blocks=80 [ 125.649615][T13914] EXT4-fs (loop1): Block reservation details [ 125.655685][T13914] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 125.817534][T13932] EXT4-fs mount: 57 callbacks suppressed [ 125.817548][T13932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.839111][ T382] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 125.851417][ T382] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.851417][ T382] [ 125.884737][T13932] ext4 filesystem being mounted at /863/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.016730][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.529176][T13986] loop0: detected capacity change from 0 to 256 [ 126.542827][T13986] FAT-fs (loop0): Directory bread(block 64) failed [ 126.558912][T13986] FAT-fs (loop0): Directory bread(block 65) failed [ 126.565502][T13986] FAT-fs (loop0): Directory bread(block 66) failed [ 126.596366][T13986] FAT-fs (loop0): Directory bread(block 67) failed [ 126.603030][T13986] FAT-fs (loop0): Directory bread(block 68) failed [ 126.614630][T13995] 9pnet_fd: Insufficient options for proto=fd [ 126.641645][T13986] FAT-fs (loop0): Directory bread(block 69) failed [ 126.669641][T13986] FAT-fs (loop0): Directory bread(block 70) failed [ 126.695178][T13986] FAT-fs (loop0): Directory bread(block 71) failed [ 126.707615][T13986] FAT-fs (loop0): Directory bread(block 72) failed [ 126.716945][T13986] FAT-fs (loop0): Directory bread(block 73) failed [ 126.769803][T13986] syz.0.4277: attempt to access beyond end of device [ 126.769803][T13986] loop0: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 126.796148][T13986] syz.0.4277: attempt to access beyond end of device [ 126.796148][T13986] loop0: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 126.819473][T14008] loop2: detected capacity change from 0 to 512 [ 126.850456][T14011] __nla_validate_parse: 2 callbacks suppressed [ 126.850476][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4279'. [ 127.041500][T14049] loop0: detected capacity change from 0 to 512 [ 127.064809][T14049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.100295][T14049] ext4 filesystem being mounted at /896/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.201311][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 127.211969][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.229250][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4303'. [ 127.239177][T14066] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4303'. [ 127.248365][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4303'. [ 127.496407][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 127.496464][ T29] audit: type=1400 audit(2000000325.302:4187): avc: denied { write } for pid=14100 comm="syz.4.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 127.540464][ T29] audit: type=1326 audit(2000000325.356:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.0.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.564328][ T29] audit: type=1326 audit(2000000325.356:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.0.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.590039][ T29] audit: type=1326 audit(2000000325.388:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.0.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.613714][ T29] audit: type=1326 audit(2000000325.388:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.0.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.637350][ T29] audit: type=1326 audit(2000000325.388:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14102 comm="syz.0.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.675725][ T29] audit: type=1326 audit(2000000325.495:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.699335][ T29] audit: type=1326 audit(2000000325.495:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.725940][T14105] loop0: detected capacity change from 0 to 512 [ 127.739500][T14108] program syz.1.4320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.749916][T14108] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 127.802627][ T29] audit: type=1326 audit(2000000325.495:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13d949e929 code=0x7ffc0000 [ 127.827074][ T29] audit: type=1326 audit(2000000325.495:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13d949e963 code=0x7ffc0000 [ 127.852347][T14121] random: crng reseeded on system resumption [ 127.957074][T14139] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.978980][T14145] loop1: detected capacity change from 0 to 512 [ 127.987837][T14139] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 128.014063][T14145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.028450][T14145] ext4 filesystem being mounted at /854/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.052759][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.163536][T14174] netlink: 'syz.0.4350': attribute type 280 has an invalid length. [ 128.205808][T14181] loop6: detected capacity change from 0 to 512 [ 128.251396][T14191] netlink: 'syz.2.4358': attribute type 13 has an invalid length. [ 128.253690][T14181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.279403][T14181] ext4 filesystem being mounted at /754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.325864][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.347543][T14191] bridge0: port 1(batadv0) entered blocking state [ 128.354178][T14191] bridge0: port 1(batadv0) entered listening state [ 128.368025][T14191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.506848][T14217] loop1: detected capacity change from 0 to 2048 [ 128.535374][T14217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.771847][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.994789][T14237] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4376'. [ 129.033246][T14245] loop1: detected capacity change from 0 to 1024 [ 129.038429][T14247] loop6: detected capacity change from 0 to 512 [ 129.041287][T14245] EXT4-fs: inline encryption not supported [ 129.054128][T14247] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.066786][T14247] EXT4-fs (loop6): 1 truncate cleaned up [ 129.072888][T14247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.097957][T14247] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.4381: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 129.149245][T14247] EXT4-fs error (device loop6) in ext4_delete_entry:2739: Corrupt filesystem [ 129.149732][T14245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.176824][T14247] EXT4-fs warning (device loop6): ext4_rename_delete:3726: inode #2: comm syz.6.4381: Deleting old file: nlink 5, error=-117 [ 129.244335][T14245] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 129.276257][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.416384][T14283] loop6: detected capacity change from 0 to 4096 [ 129.426046][T14283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.472083][ T4545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.548553][T14294] 9pnet_fd: Insufficient options for proto=fd [ 129.583183][T14298] loop2: detected capacity change from 0 to 512 [ 129.592036][T14298] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.610812][T14298] EXT4-fs (loop2): 1 truncate cleaned up [ 129.619990][T14298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.637479][T14298] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.4404: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 129.660551][T14298] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 129.670494][T14298] EXT4-fs warning (device loop2): ext4_rename_delete:3726: inode #2: comm syz.2.4404: Deleting old file: nlink 5, error=-117 [ 129.717025][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.758122][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.819409][T14315] loop2: detected capacity change from 0 to 164 [ 129.831391][T14315] Unsupported NM flag settings (8) [ 130.179996][T14350] syzkaller1: entered promiscuous mode [ 130.185696][T14350] syzkaller1: entered allmulticast mode [ 130.205450][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4432'. [ 130.214483][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4432'. [ 130.223686][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4432'. [ 130.242842][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4432'. [ 130.251986][T14355] netlink: 'syz.6.4432': attribute type 6 has an invalid length. [ 130.502994][T14394] loop0: detected capacity change from 0 to 256 [ 130.517348][T14394] FAT-fs (loop0): Directory bread(block 64) failed [ 130.526654][T14394] FAT-fs (loop0): Directory bread(block 65) failed [ 130.533472][T14394] FAT-fs (loop0): Directory bread(block 66) failed [ 130.541373][T14394] FAT-fs (loop0): Directory bread(block 67) failed [ 130.548853][T14394] FAT-fs (loop0): Directory bread(block 68) failed [ 130.557269][T14394] FAT-fs (loop0): Directory bread(block 69) failed [ 130.565589][T14394] FAT-fs (loop0): Directory bread(block 70) failed [ 130.573578][T14394] FAT-fs (loop0): Directory bread(block 71) failed [ 130.587894][T14394] FAT-fs (loop0): Directory bread(block 72) failed [ 130.596542][T14394] FAT-fs (loop0): Directory bread(block 73) failed [ 130.715146][T14417] netlink: 'syz.0.4459': attribute type 7 has an invalid length. [ 130.722933][T14417] netlink: 'syz.0.4459': attribute type 8 has an invalid length. [ 130.747497][T14423] loop0: detected capacity change from 0 to 256 [ 130.787543][T14427] loop0: detected capacity change from 0 to 1024 [ 130.794729][T14427] EXT4-fs: inline encryption not supported [ 130.811720][T14427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.855714][T14427] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 130.885668][T14441] loop4: detected capacity change from 0 to 512 [ 130.892891][T14441] EXT4-fs: Ignoring removed nobh option [ 130.899875][T14441] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.4471: iget: bad i_size value: 38620345925642 [ 130.914638][T14441] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4471: couldn't read orphan inode 15 (err -117) [ 130.930538][T14441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.063307][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.094246][T14452] netlink: 'syz.2.4475': attribute type 21 has an invalid length. [ 131.124488][T14457] hub 9-0:1.0: USB hub found [ 131.129790][T14457] hub 9-0:1.0: 8 ports detected [ 131.142021][T14459] loop4: detected capacity change from 0 to 2048 [ 131.171702][T14459] loop4: p1 < > p4 [ 131.176691][T14459] loop4: p4 size 8388608 extends beyond EOD, truncated [ 131.318197][T14488] loop1: detected capacity change from 0 to 512 [ 131.326079][T14488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.340090][T14488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 131.374070][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.384175][T14488] EXT4-fs (loop1): 1 truncate cleaned up [ 131.393422][T14488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.463063][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.560500][T14517] futex_wake_op: syz.6.4503 tries to shift op by -1; fix this program [ 131.672531][T14536] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.736950][T14542] loop6: detected capacity change from 0 to 2048 [ 131.768851][T14542] loop6: p1 < > p4 [ 131.773207][T14542] loop6: p4 size 8388608 extends beyond EOD, truncated [ 131.777892][T14546] 9pnet: p9_errstr2errno: server reported unknown error [ 131.821420][T14548] netlink: 'syz.0.4518': attribute type 280 has an invalid length. [ 131.922498][T14566] loop0: detected capacity change from 0 to 1024 [ 131.947899][T14566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.975355][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.026940][T14587] __nla_validate_parse: 5 callbacks suppressed [ 132.026954][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4536'. [ 132.129751][T14603] loop6: detected capacity change from 0 to 164 [ 132.138433][T14603] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 132.150647][T14603] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 132.159163][T14603] Symlink component flag not implemented [ 132.164901][T14603] Symlink component flag not implemented [ 132.166612][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 132.166625][ T29] audit: type=1400 audit(2000000330.323:4468): avc: denied { read } for pid=14607 comm="syz.0.4546" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.172294][T14603] Symlink component flag not implemented (7) [ 132.176796][ T29] audit: type=1400 audit(2000000330.323:4469): avc: denied { open } for pid=14607 comm="syz.0.4546" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.200242][T14603] Symlink component flag not implemented (116) [ 132.247730][ T29] audit: type=1400 audit(2000000330.366:4470): avc: denied { ioctl } for pid=14607 comm="syz.0.4546" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.273525][ T29] audit: type=1400 audit(2000000330.409:4471): avc: denied { unmount } for pid=4545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 132.297705][ T29] audit: type=1400 audit(2000000330.463:4472): avc: denied { read write } for pid=14609 comm="syz.0.4548" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.321265][ T29] audit: type=1400 audit(2000000330.463:4473): avc: denied { open } for pid=14609 comm="syz.0.4548" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.395370][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4552'. [ 132.434897][ T29] audit: type=1400 audit(2000000330.602:4474): avc: denied { read write } for pid=14624 comm="syz.0.4555" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.459243][ T29] audit: type=1400 audit(2000000330.602:4475): avc: denied { open } for pid=14624 comm="syz.0.4555" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.532769][ T29] audit: type=1400 audit(2000000330.709:4476): avc: denied { write } for pid=14635 comm="syz.1.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.625079][ T29] audit: type=1400 audit(2000000330.785:4477): avc: denied { mount } for pid=14644 comm="syz.4.4562" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 132.652700][T14652] sd 0:0:1:0: device reset [ 132.662331][T14649] program syz.1.4564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.689979][ T3304] ================================================================== [ 132.698458][ T3304] BUG: KCSAN: data-race in pollwake / pollwake [ 132.704641][ T3304] [ 132.706984][ T3304] write to 0xffffc900015af9e0 of 4 bytes by task 3313 on cpu 1: [ 132.714619][ T3304] pollwake+0xb6/0x100 [ 132.718686][ T3304] __wake_up_sync_key+0x4f/0x80 [ 132.723530][ T3304] anon_pipe_write+0x8ba/0xaa0 [ 132.728287][ T3304] vfs_write+0x49d/0x8e0 [ 132.732542][ T3304] ksys_write+0xda/0x1a0 [ 132.736787][ T3304] __x64_sys_write+0x40/0x50 [ 132.741382][ T3304] x64_sys_call+0x2cdd/0x2fb0 [ 132.746065][ T3304] do_syscall_64+0xd2/0x200 [ 132.750662][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.756563][ T3304] [ 132.758884][ T3304] write to 0xffffc900015af9e0 of 4 bytes by task 3304 on cpu 0: [ 132.766509][ T3304] pollwake+0xb6/0x100 [ 132.770576][ T3304] __wake_up_sync_key+0x4f/0x80 [ 132.775421][ T3304] anon_pipe_write+0x8ba/0xaa0 [ 132.780178][ T3304] vfs_write+0x49d/0x8e0 [ 132.784423][ T3304] ksys_write+0xda/0x1a0 [ 132.788666][ T3304] __x64_sys_write+0x40/0x50 [ 132.793244][ T3304] x64_sys_call+0x2cdd/0x2fb0 [ 132.797915][ T3304] do_syscall_64+0xd2/0x200 [ 132.802408][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.808307][ T3304] [ 132.810637][ T3304] value changed: 0x00000000 -> 0x00000001 [ 132.816359][ T3304] [ 132.818678][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 132.825015][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 132.837698][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.847756][ T3304] ================================================================== [ 133.193236][ T382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.265439][ T382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.326648][ T382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.412333][ T382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.487764][ T382] vlan0: left allmulticast mode [ 133.492655][ T382] dummy0: left allmulticast mode [ 133.498021][ T382] vlan0: left promiscuous mode [ 133.502977][ T382] dummy0: left promiscuous mode [ 133.508018][ T382] bridge0: port 3(vlan0) entered disabled state [ 133.515806][ T382] bridge_slave_1: left allmulticast mode [ 133.521890][ T382] bridge_slave_1: left promiscuous mode [ 133.527489][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.535257][ T382] bridge_slave_0: left allmulticast mode [ 133.540997][ T382] bridge_slave_0: left promiscuous mode [ 133.546772][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.587210][ T382] team0: Port device geneve1 removed [ 133.634935][ T382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.643698][ T382] bond_slave_0: left promiscuous mode [ 133.650052][ T382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.658987][ T382] bond_slave_1: left promiscuous mode [ 133.665215][ T382] bond0 (unregistering): Released all slaves [ 133.673491][ T382] bond1 (unregistering): (slave bond2): Releasing backup interface [ 133.681463][ T382] bond2 (unregistering): left promiscuous mode [ 133.688041][ T382] bond1 (unregistering): Released all slaves [ 133.696455][ T382] bond2 (unregistering): Released all slaves [ 133.740943][ T382] hsr_slave_1: left promiscuous mode [ 133.746547][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.754009][ T382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.761528][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.768978][ T382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.778768][ T382] veth1_macvtap: left promiscuous mode [ 133.784339][ T382] veth0_macvtap: left promiscuous mode [ 133.821278][ T382] team0 (unregistering): Port device team_slave_1 removed [ 133.830291][ T382] team0 (unregistering): Port device team_slave_0 removed [ 133.840239][ T41] smc: removing ib device syz! [ 133.860875][ T4282] infiniband syz1: ib_query_port failed (-19) [ 134.017303][ T382] IPVS: stop unused estimator thread 0... [ 134.055230][ T382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.110823][ T382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.147959][ T382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.184737][ T382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.242399][ T382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.252768][ T382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.286925][ T382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.297321][ T382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.334186][ T382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.344545][ T382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.371047][ T382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.381431][ T382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.427481][ T382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.464170][ T382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.520163][ T382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.576676][ T382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.633048][ T382] bridge0: port 1(batadv0) entered disabled state [ 134.640767][ T382] bridge_slave_1: left allmulticast mode [ 134.646397][ T382] bridge_slave_1: left promiscuous mode [ 134.652198][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.659988][ T382] bridge_slave_0: left allmulticast mode [ 134.665673][ T382] bridge_slave_0: left promiscuous mode [ 134.671331][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.679549][ T382] batadv1: left allmulticast mode [ 134.684573][ T382] batadv1: left promiscuous mode [ 134.689642][ T382] bridge0: port 3(batadv1) entered disabled state [ 134.696762][ T382] bridge_slave_1: left allmulticast mode [ 134.702419][ T382] bridge_slave_1: left promiscuous mode [ 134.708093][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.715718][ T382] bridge_slave_0: left allmulticast mode [ 134.721359][ T382] bridge_slave_0: left promiscuous mode [ 134.727380][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.845694][ T382] bond0 (unregistering): Released all slaves [ 134.884099][ T382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.893787][ T382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.903312][ T382] bond0 (unregistering): Released all slaves [ 134.949727][ T382]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.959069][ T382]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.968333][ T382]  (unregistering): Released all slaves [ 135.033664][ T382] tipc: Disabling bearer [ 135.038912][ T382] tipc: Left network mode [ 135.045161][ T382] IPVS: stopping backup sync thread 7124 ... [ 135.053086][ T382] hsr_slave_0: left promiscuous mode [ 135.058799][ T382] hsr_slave_1: left promiscuous mode [ 135.064521][ T382] batadv_slave_1: left promiscuous mode [ 135.070687][ T382] hsr_slave_1: left promiscuous mode [ 135.076281][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.083998][ T382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.091804][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.099345][ T382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.108833][ T382] hsr_slave_0: left promiscuous mode [ 135.114594][ T382] hsr_slave_1: left promiscuous mode [ 135.120097][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.127537][ T382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.135105][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.142610][ T382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.155010][ T382] veth1_macvtap: left promiscuous mode [ 135.160579][ T382] veth0_macvtap: left promiscuous mode [ 135.166094][ T382] veth1_vlan: left promiscuous mode [ 135.171332][ T382] veth0_vlan: left promiscuous mode [ 135.177037][ T382] veth1_macvtap: left promiscuous mode [ 135.182580][ T382] veth0_macvtap: left promiscuous mode [ 135.188523][ T382] veth1_macvtap: left promiscuous mode [ 135.194068][ T382] veth0_macvtap: left promiscuous mode [ 135.199731][ T382] veth1_vlan: left promiscuous mode [ 135.204932][ T382] veth0_vlan: left promiscuous mode [ 135.958912][ T382] IPVS: stop unused estimator thread 0... [ 135.965058][ T382] IPVS: stop unused estimator thread 0... [ 135.971038][ T382] IPVS: stop unused estimator thread 0...