last executing test programs: 2.613040349s ago: executing program 1 (id=1495): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20c6ba000000100001002dbd7000fddbdf250000bf8e30176f3ecacad79b41f80e60981d1b49c04c529c3dc293f900067bc40766f4cd0e3437d8e73e442f81c469fbdb0edcfc8ae6ef399406b1165cbdd29ea010b7e4f287b111f4cd33cceb94d0a84dd73edd36a59500dde7886c04b59b69864d969ad6c64fc656deb2617b1b020020dd1047e5b093b8537128f423b66efb60f84a", @ANYRES32=0x0, @ANYBLOB="1807010020000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000020c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xc2, 0xb, 0x4}}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.523195921s ago: executing program 1 (id=1496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x7fffffff, 0x1000) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2210448, &(0x7f0000000640)={[{@commit={'commit', 0x3d, 0x8}}, {@auto_da_alloc_val}], [{@pcr={'pcr', 0x3d, 0x36}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '^'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '.}\'\xed-(('}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syztnl0\x00'}}]}, 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) 2.473078492s ago: executing program 1 (id=1497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) socket(0x11, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.972084071s ago: executing program 1 (id=1500): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) nanosleep(&(0x7f0000000040), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d4509d4992861ac00", "90be885f126752e4f700003f52f322080000bcf66a75fcf700"}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = openat$cgroup(r1, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r2, 0x16, 0x0, @val=@kprobe_multi=@syms={0x1, 0x9, &(0x7f0000000540)=[&(0x7f00000000c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='.#&\xc8\x00', &(0x7f0000000280)='\\\x00', &(0x7f0000000400)='syzkaller\x00', &(0x7f0000000440)='+\x00', &(0x7f0000000480)='+\x00', &(0x7f00000004c0)='syzkaller\x00', &(0x7f0000000500)='\x00'], 0x0, 0x2}}, 0x30) 1.919571602s ago: executing program 1 (id=1503): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.133043058s ago: executing program 2 (id=1516): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f0000000140), 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0069ae26bd7000000000001c"], 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) chmod(&(0x7f00000002c0)='./file0\x00', 0x1b0) 1.00525499s ago: executing program 2 (id=1517): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a300000000008000340000000200c0006"], 0x98}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) flock(r3, 0x2) 733.877246ms ago: executing program 1 (id=1519): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r2, 0x8, r5) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 647.546977ms ago: executing program 2 (id=1522): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='BM\xb86\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x42800, 0x186) getdents64(r2, 0x0, 0x0) 634.005318ms ago: executing program 4 (id=1524): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 585.990969ms ago: executing program 4 (id=1526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pB \x00'}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r3, 0x0, 0x2400c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0xa0000014}) close_range(r4, r5, 0x0) 520.266699ms ago: executing program 2 (id=1530): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r4, &(0x7f0000001100)=[{0x0}], 0x1) shutdown(r4, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 520.02856ms ago: executing program 3 (id=1531): r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x5) 476.661581ms ago: executing program 3 (id=1532): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 476.082541ms ago: executing program 4 (id=1533): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x280) 454.185791ms ago: executing program 3 (id=1534): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="f567612232dde0f00e02549277e0939763175b60645eb066b660f0c95e73d555ab5c55f9de3975901347f24197fc5233f3d360e559807991b28bbb115cbc4c15186aa43d4df4f01e46e8afd7db737ec8177384b348be800981ed794a589ef8889a39bd51bdeffcff14f518fc68d815f4", 0x70}], 0x1}, 0x20000805) recvmsg(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x500000000000000) 389.077662ms ago: executing program 0 (id=1535): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 375.469923ms ago: executing program 0 (id=1536): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 324.897034ms ago: executing program 4 (id=1537): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d0088bacd7f722ff858de4365"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 253.033365ms ago: executing program 4 (id=1538): socket$kcm(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r0) 252.324105ms ago: executing program 2 (id=1539): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x0) 237.736445ms ago: executing program 4 (id=1540): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x18c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_simple={0xec, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}]}, {0x7d, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000080)) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 154.885297ms ago: executing program 2 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) 140.872127ms ago: executing program 3 (id=1542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x25c}}, 0x0) 114.596048ms ago: executing program 0 (id=1543): r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x5) 114.238898ms ago: executing program 3 (id=1544): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000020f00000005002f000000000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 51.229219ms ago: executing program 3 (id=1545): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x6, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21008, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 50.059949ms ago: executing program 0 (id=1555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x25c}}, 0x0) 34.325339ms ago: executing program 0 (id=1546): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 0s ago: executing program 0 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) kernel console output (not intermixed with test programs): d1: (slave macvlan2): failed to get link speed/duplex [ 83.173843][ T5912] loop3: detected capacity change from 0 to 512 [ 83.291580][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 83.431931][ T41] bond1: (slave macvlan2): failed to get link speed/duplex [ 83.448094][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.462103][ T5912] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.482540][ T5921] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 83.535882][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.566216][ T3911] bond1: (slave macvlan2): failed to get link speed/duplex [ 83.622307][ T5924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.635984][ T5924] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.647835][ T5924] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.933325][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.948133][ T5921] ip6erspan0: entered promiscuous mode [ 83.958888][ T5921] bond1: (slave ip6erspan0): making interface the new active one [ 83.970713][ T5921] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 84.014623][ T5930] macvlan2: entered promiscuous mode [ 84.428746][ T5938] loop3: detected capacity change from 0 to 512 [ 84.435537][ T5930] bond1: entered promiscuous mode [ 84.440994][ T5930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.444789][ T5938] journal_path: Non-blockdev passed as './bus' [ 84.454012][ T5938] EXT4-fs: error: could not find journal device path [ 84.455251][ T5935] loop0: detected capacity change from 0 to 8192 [ 84.472284][ T5930] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 84.495053][ T5930] bond1: left promiscuous mode [ 84.539074][ T5942] syzkaller0: entered promiscuous mode [ 84.544635][ T5942] syzkaller0: entered allmulticast mode [ 84.889256][ T5958] loop1: detected capacity change from 0 to 1024 [ 84.918109][ T5958] EXT4-fs: Ignoring removed orlov option [ 84.986261][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 85.039503][ T5958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.105205][ T5960] bridge_slave_1: left allmulticast mode [ 85.111040][ T5960] bridge_slave_1: left promiscuous mode [ 85.116721][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.233466][ T5964] loop0: detected capacity change from 0 to 1024 [ 85.356247][ T5964] __quota_error: 320 callbacks suppressed [ 85.356268][ T5964] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 85.371190][ T5964] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 85.380584][ T5964] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.879: Failed to acquire dquot type 0 [ 85.601812][ T5960] bridge_slave_0: left allmulticast mode [ 85.607508][ T5960] bridge_slave_0: left promiscuous mode [ 85.613532][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.693750][ T5964] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.748029][ T5964] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.879: corrupted inode contents [ 85.786563][ T5964] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.879: mark_inode_dirty error [ 85.841377][ T5964] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.879: corrupted inode contents [ 85.882612][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 85.896446][ T5970] syzkaller0: entered promiscuous mode [ 85.902001][ T5970] syzkaller0: entered allmulticast mode [ 85.909185][ T5964] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.879: mark_inode_dirty error [ 85.922166][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 85.933268][ T5964] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.879: corrupted inode contents [ 85.968747][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.988570][ T5964] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 86.010618][ T5984] loop1: detected capacity change from 0 to 164 [ 86.019526][ T5964] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.879: corrupted inode contents [ 86.034174][ T5984] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 86.044160][ T5964] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.879: mark_inode_dirty error [ 86.056157][ T5964] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 86.065924][ T5964] EXT4-fs (loop0): 1 truncate cleaned up [ 86.073496][ T5964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.106749][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.884'. [ 86.150163][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.225796][ T29] audit: type=1400 audit(1759134717.009:6088): avc: denied { read } for pid=5988 comm="syz.3.886" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.248645][ T29] audit: type=1400 audit(1759134717.009:6089): avc: denied { open } for pid=5988 comm="syz.3.886" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.271761][ T29] audit: type=1400 audit(1759134717.009:6090): avc: denied { ioctl } for pid=5988 comm="syz.3.886" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.273552][ T29] audit: type=1400 audit(1759134717.070:6091): avc: denied { write } for pid=5988 comm="syz.3.886" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.356836][ T6000] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 86.357274][ T5993] loop1: detected capacity change from 0 to 8192 [ 86.378315][ T6000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.396656][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.398641][ T6000] bond3: (slave batadv1): making interface the new active one [ 86.399797][ T6000] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 86.590424][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.892'. [ 86.590455][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.892'. [ 86.726012][ T6014] bond2: (slave erspan0): Releasing active interface [ 86.732744][ T6014] ip6gretap1: entered promiscuous mode [ 86.741653][ T6014] team0: Port device dummy0 removed [ 86.747844][ T6014] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 86.756750][ T6014] bond_slave_0: left promiscuous mode [ 86.816362][ T6014] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 86.838404][ T6014] bond_slave_1: left promiscuous mode [ 86.860868][ T6014] team0: Port device team_slave_0 removed [ 86.936884][ T6014] team0: Port device team_slave_1 removed [ 86.950200][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.008971][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.023070][ T6014] bond2: (slave ip6gretap1): Releasing active interface [ 87.030064][ T6014] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 82:4b:8d:db:41:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 87.050728][ T6014] ip6gretap1: left promiscuous mode [ 87.067485][ T6014] bond2: (slave veth5): Releasing active interface [ 87.077282][ T6014] bond0: (slave geneve2): Releasing active interface [ 87.087679][ T6014] bond3: (slave batadv1): Releasing active interface [ 87.105235][ T999] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.114062][ T12] net_ratelimit: 12 callbacks suppressed [ 87.114077][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.133851][ T51] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.361082][ T6020] syzkaller0: entered promiscuous mode [ 87.366729][ T6020] syzkaller0: entered allmulticast mode [ 87.389950][ T6027] loop1: detected capacity change from 0 to 512 [ 87.409345][ T6029] loop3: detected capacity change from 0 to 1024 [ 87.432791][ T6029] EXT4-fs: Ignoring removed nobh option [ 87.440908][ T6027] journal_path: Non-blockdev passed as './bus' [ 87.447239][ T6027] EXT4-fs: error: could not find journal device path [ 87.472712][ T6029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.516444][ T51] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.528503][ T999] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.537000][ T51] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.546280][ T6033] 9pnet_fd: p9_fd_create_unix (6033): problem connecting socket: ./file0: -2 [ 87.572962][ T6029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.615263][ T29] audit: type=1400 audit(1759134718.384:6092): avc: denied { bind } for pid=6037 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.634459][ T29] audit: type=1400 audit(1759134718.384:6093): avc: denied { write } for pid=6037 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.654174][ T999] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.714997][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.771819][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 87.891238][ T999] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.001198][ T3794] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.053915][ T6054] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 88.111116][ T3794] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.137856][ T6054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.225252][ T999] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.258493][ T6064] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 88.295954][ T6064] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 88.315519][ T6064] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 88.339546][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.350319][ T6077] gretap1: entered promiscuous mode [ 88.357772][ T6077] bond3: (slave gretap1): making interface the new active one [ 88.365788][ T6077] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 88.392890][ T6064] macvlan2: entered promiscuous mode [ 88.398247][ T6064] macvlan2: entered allmulticast mode [ 88.405727][ T6064] bond3: entered promiscuous mode [ 88.411228][ T6064] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.423021][ T6064] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 88.435102][ T6064] bond3: left promiscuous mode [ 88.489205][ T3794] bond1: (slave macvlan2): failed to get link speed/duplex [ 88.563933][ T6095] syzkaller0: entered promiscuous mode [ 88.569599][ T6095] syzkaller0: entered allmulticast mode [ 88.645735][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 88.706994][ T6103] loop0: detected capacity change from 0 to 1024 [ 88.717438][ T6097] loop2: detected capacity change from 0 to 8192 [ 88.729830][ T6103] EXT4-fs: Ignoring removed nobh option [ 88.735646][ T6103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.948754][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.417073][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.608913][ T1104] IPVS: starting estimator thread 0... [ 89.663233][ T29] audit: type=1400 audit(1759134720.461:6094): avc: denied { create } for pid=6124 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.693291][ T6128] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 89.755137][ T6120] IPVS: using max 2352 ests per chain, 117600 per kthread [ 89.833801][ T6128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.884566][ T29] audit: type=1400 audit(1759134720.491:6095): avc: denied { bind } for pid=6124 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.279449][ T6123] loop4: detected capacity change from 0 to 512 [ 90.495060][ T6123] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.924: bad orphan inode 11862016 [ 90.520945][ T6123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.533932][ T6123] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.701180][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 90.701196][ T29] audit: type=1400 audit(1759134721.494:6097): avc: denied { ioctl } for pid=6122 comm="syz.4.924" path="/214/file1/file1" dev="loop4" ino=18 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.828419][ T6157] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 90.836220][ T6157] netlink: 55 bytes leftover after parsing attributes in process `syz.0.939'. [ 91.005256][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.043843][ T6164] loop1: detected capacity change from 0 to 1024 [ 91.060556][ T6164] EXT4-fs: Ignoring removed nobh option [ 91.068080][ T6164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.120735][ T29] audit: type=1400 audit(1759134721.916:6098): avc: denied { read write } for pid=6167 comm="syz.0.931" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.145828][ T29] audit: type=1400 audit(1759134721.916:6099): avc: denied { open } for pid=6167 comm="syz.0.931" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.170380][ T29] audit: type=1400 audit(1759134721.916:6100): avc: denied { ioctl } for pid=6167 comm="syz.0.931" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.423712][ T6180] loop4: detected capacity change from 0 to 1024 [ 91.433771][ T6180] EXT4-fs: Ignoring removed nobh option [ 91.439452][ T6180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.569896][ T4918] IPVS: starting estimator thread 0... [ 91.613655][ T6196] wireguard0: entered promiscuous mode [ 91.619214][ T6196] wireguard0: entered allmulticast mode [ 91.664322][ T6201] loop1: detected capacity change from 0 to 1024 [ 91.679622][ T6190] IPVS: using max 2736 ests per chain, 136800 per kthread [ 91.690536][ T6201] EXT4-fs: Ignoring removed bh option [ 91.710287][ T6201] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 91.801188][ T6209] bond0: (slave dummy0): Releasing backup interface [ 91.849971][ T6209] bond1: (slave geneve2): Releasing active interface [ 91.880246][ T36] IPVS: starting estimator thread 0... [ 91.968828][ T6231] IPVS: using max 2688 ests per chain, 134400 per kthread [ 92.003081][ T29] audit: type=1400 audit(1759134722.808:6101): avc: denied { ioctl } for pid=6238 comm="syz.0.950" path="socket:[14658]" dev="sockfs" ino=14658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.100467][ T6239] $Hÿ: left promiscuous mode [ 92.105295][ T6239] bond_slave_0: left promiscuous mode [ 92.110846][ T6239] bond_slave_1: left promiscuous mode [ 92.169423][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.189393][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.231803][ T6239] gretap1: left promiscuous mode [ 92.261054][ T999] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.272290][ T12] net_ratelimit: 22 callbacks suppressed [ 92.272307][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.287871][ T999] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.303978][ T999] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.322085][ T999] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.337959][ T6234] loop2: detected capacity change from 0 to 512 [ 92.363770][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.948: bad orphan inode 11862016 [ 92.375059][ T6234] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.390881][ T3794] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.406562][ T6254] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 92.435303][ T6254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.455278][ T6254] bond2: (slave ip6gretap1): making interface the new active one [ 92.465822][ T6254] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 92.496270][ T6254] veth1: entered promiscuous mode [ 92.504889][ T6254] bond2: (slave veth1): Enslaving as an active interface with a down link [ 92.517683][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.531598][ T6254] erspan0: entered allmulticast mode [ 92.539142][ T6254] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 92.626962][ T999] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.736730][ T999] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.846492][ T3794] bond1: (slave macvlan2): failed to get link speed/duplex [ 92.956150][ T3914] bond1: (slave macvlan2): failed to get link speed/duplex [ 93.065900][ T3914] bond1: (slave macvlan2): failed to get link speed/duplex [ 93.175625][ T3794] bond1: (slave macvlan2): failed to get link speed/duplex [ 93.295324][ T3911] bond1: (slave macvlan2): failed to get link speed/duplex [ 94.846891][ T6258] 9pnet_fd: p9_fd_create_unix (6258): problem connecting socket: ./file0: -2 [ 94.924127][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.933907][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.962712][ T6262] macvtap1: left promiscuous mode [ 94.967779][ T6262] macvtap1: left allmulticast mode [ 94.973558][ T6262] bridge0: left allmulticast mode [ 94.982410][ T6262] ip6erspan0: left promiscuous mode [ 95.002012][ T6262] gretap1: left promiscuous mode [ 95.015403][ T3911] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.024099][ T3911] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.041916][ T3911] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.050349][ T3911] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.148221][ T29] audit: type=1400 audit(1759134725.965:6102): avc: denied { listen } for pid=6272 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.167710][ T29] audit: type=1400 audit(1759134725.965:6103): avc: denied { accept } for pid=6272 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.217212][ T29] audit: type=1400 audit(1759134726.016:6104): avc: denied { write } for pid=6272 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.426005][ T6243] IPVS: starting estimator thread 0... [ 95.520358][ T6288] IPVS: using max 2448 ests per chain, 122400 per kthread [ 95.579729][ T6307] team0: Port device dummy0 removed [ 95.585684][ T6307] : (slave bond_slave_0): Releasing backup interface [ 95.593739][ T6307] : (slave bond_slave_1): Releasing backup interface [ 95.602689][ T6307] team0: Port device team_slave_0 removed [ 95.609364][ T6307] team0: Port device team_slave_1 removed [ 95.619881][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.628380][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.638015][ T6307] bond0: (slave geneve2): Releasing active interface [ 95.650114][ T6307] bond1: (slave ip6erspan0): Releasing active interface [ 95.658590][ T6307] bond3: (slave gretap1): Releasing active interface [ 95.664255][ T6308] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 95.673215][ T6308] netlink: 55 bytes leftover after parsing attributes in process `syz.1.964'. [ 95.695543][ T6314] wireguard0: entered promiscuous mode [ 95.701215][ T6314] wireguard0: entered allmulticast mode [ 95.712085][ T29] audit: type=1400 audit(1759134726.527:6105): avc: denied { write } for pid=6316 comm="syz.4.967" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.732863][ T29] audit: type=1400 audit(1759134726.527:6106): avc: denied { open } for pid=6316 comm="syz.4.967" path="/221/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.755332][ T6318] loop3: detected capacity change from 0 to 1024 [ 95.762261][ T6318] EXT4-fs: Ignoring removed bh option [ 95.768212][ T6318] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.836522][ T6324] loop4: detected capacity change from 0 to 512 [ 95.843734][ T6324] EXT4-fs: Ignoring removed bh option [ 95.849339][ T6324] EXT4-fs: old and new quota format mixing [ 95.865266][ T29] audit: type=1400 audit(1759134726.677:6107): avc: denied { create } for pid=6323 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.866210][ T6324] lo speed is unknown, defaulting to 1000 [ 95.895460][ T29] audit: type=1400 audit(1759134726.677:6108): avc: denied { write } for pid=6323 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.896782][ T6324] lo speed is unknown, defaulting to 1000 [ 95.922215][ T6324] lo speed is unknown, defaulting to 1000 [ 95.928225][ T6324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.939914][ T6324] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.949662][ T6324] lo speed is unknown, defaulting to 1000 [ 95.955733][ T6324] lo speed is unknown, defaulting to 1000 [ 95.961798][ T6324] lo speed is unknown, defaulting to 1000 [ 95.967900][ T6324] lo speed is unknown, defaulting to 1000 [ 95.974173][ T6324] lo speed is unknown, defaulting to 1000 [ 96.001079][ T6334] loop2: detected capacity change from 0 to 1024 [ 96.007778][ T6334] EXT4-fs: Ignoring removed orlov option [ 96.013532][ T6334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.025962][ T29] audit: type=1400 audit(1759134726.837:6109): avc: denied { create } for pid=6328 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.086015][ T29] audit: type=1400 audit(1759134726.877:6110): avc: denied { append } for pid=6333 comm="syz.2.972" path="/194/file1/cpu.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.109257][ T29] audit: type=1400 audit(1759134726.887:6111): avc: denied { ioctl } for pid=6328 comm="syz.0.971" path="socket:[14791]" dev="sockfs" ino=14791 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.141375][ T6340] loop4: detected capacity change from 0 to 128 [ 96.164528][ T6340] +}[@: attempt to access beyond end of device [ 96.164528][ T6340] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 96.179186][ T6340] +}[@: attempt to access beyond end of device [ 96.179186][ T6340] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 96.192244][ T6340] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 96.204719][ T6340] +}[@: attempt to access beyond end of device [ 96.204719][ T6340] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 96.217617][ T6340] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 96.227469][ T6340] +}[@: attempt to access beyond end of device [ 96.227469][ T6340] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 96.240468][ T6340] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 96.255863][ T6340] +}[@: attempt to access beyond end of device [ 96.255863][ T6340] loop4: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 96.270668][ T6340] +}[@: attempt to access beyond end of device [ 96.270668][ T6340] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 96.283590][ T6340] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 96.437562][ T6329] lo speed is unknown, defaulting to 1000 [ 96.609363][ T6330] team0: Port device dummy0 removed [ 96.627166][ T6330] batman_adv: batadv0: Adding interface: dummy0 [ 96.633519][ T6330] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.658795][ T6330] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 96.894537][ T6344] bond0: (slave dummy0): Releasing backup interface [ 96.905103][ T6344] bond1: (slave macvlan2): Removing an active aggregator [ 96.917690][ T6344] bond1: (slave macvlan2): Releasing backup interface [ 96.935223][ T6344] bond2: (slave geneve2): Releasing active interface [ 96.961375][ T6347] lo speed is unknown, defaulting to 1000 [ 96.974268][ T6359] 9pnet_fd: p9_fd_create_unix (6359): problem connecting socket: ./file0: -2 [ 96.996240][ T51] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.007961][ T51] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.080593][ T6365] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 97.087292][ T51] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.088503][ T6365] netlink: 55 bytes leftover after parsing attributes in process `syz.2.981'. [ 97.145858][ T51] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.168554][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.177927][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.186826][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.195947][ T51] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.294274][ T29] audit: type=1326 audit(1759134728.110:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6383 comm="syz.3.983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2974f3eec9 code=0x0 [ 97.329382][ T6387] wireguard0: entered promiscuous mode [ 97.334880][ T6387] wireguard0: entered allmulticast mode [ 97.385392][ T6394] loop4: detected capacity change from 0 to 1024 [ 97.392280][ T6394] EXT4-fs: Ignoring removed bh option [ 97.446832][ T6394] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 97.470978][ T6394] EXT4-fs mount: 12 callbacks suppressed [ 97.470999][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.515943][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.526855][ T29] audit: type=1400 audit(1759134729.352:6113): avc: denied { connect } for pid=6419 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.203378][ T6428] loop3: detected capacity change from 0 to 1024 [ 100.211007][ T29] audit: type=1400 audit(1759134731.035:6114): avc: denied { read } for pid=6430 comm="syz.4.996" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.215062][ T6428] EXT4-fs: Ignoring removed orlov option [ 100.239735][ T6428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.278318][ T6438] lo speed is unknown, defaulting to 1000 [ 100.285458][ T6428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.350353][ T6444] bond2: (slave erspan0): Releasing active interface [ 100.357187][ T6444] ip6gretap1: entered promiscuous mode [ 100.376747][ T6444] batman_adv: batadv0: Removing interface: dummy0 [ 100.392535][ T6444] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 100.404163][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.411652][ T6444] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 100.422701][ T6444] team0: Port device team_slave_0 removed [ 100.438024][ T6444] team0: Port device team_slave_1 removed [ 100.444356][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.454576][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.464056][ T6444] bond0: (slave gretap1): Releasing active interface [ 100.472546][ T6444] bond1: (slave geneve2): Releasing active interface [ 100.482267][ T6444] bond2: (slave ip6gretap1): Releasing active interface [ 100.489279][ T6444] bond2: (slave ip6gretap1): the permanent HWaddr of slave - ba:1b:a1:6b:b0:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 100.506639][ T6444] ip6gretap1: left promiscuous mode [ 100.520793][ T6444] bond2: (slave veth1): Releasing active interface [ 100.557994][ T6461] wireguard0: entered promiscuous mode [ 100.563531][ T6461] wireguard0: entered allmulticast mode [ 100.590453][ T6464] loop2: detected capacity change from 0 to 1024 [ 100.597308][ T6464] EXT4-fs: Ignoring removed bh option [ 100.604679][ T6464] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 100.629174][ T6464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.670235][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.999'. [ 100.717516][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.825071][ T6478] loop3: detected capacity change from 0 to 1024 [ 100.842627][ T6478] EXT4-fs: Ignoring removed nobh option [ 100.848291][ T6478] EXT4-fs: inline encryption not supported [ 100.897737][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.914117][ T6478] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1002: Allocating blocks 385-513 which overlap fs metadata [ 100.928129][ T6472] loop1: detected capacity change from 0 to 512 [ 100.936603][ T6477] EXT4-fs (loop3): pa ffff8881072112a0: logic 16, phys. 129, len 24 [ 100.944645][ T6477] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 100.956596][ T6472] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1000: bad orphan inode 11862016 [ 100.969758][ T6472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.983835][ T6472] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.114034][ T6486] loop0: detected capacity change from 0 to 512 [ 101.147123][ T6486] EXT4-fs: Ignoring removed bh option [ 101.182721][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.198030][ T6486] EXT4-fs: old and new quota format mixing [ 101.400274][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.417297][ T6486] siw: device registration error -23 [ 101.445307][ T6491] loop0: detected capacity change from 0 to 1024 [ 101.464805][ T6491] EXT4-fs: Ignoring removed orlov option [ 101.470658][ T6491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.481775][ T6495] loop3: detected capacity change from 0 to 128 [ 101.491638][ T6495] +}[@: attempt to access beyond end of device [ 101.491638][ T6495] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 101.506496][ T6495] +}[@: attempt to access beyond end of device [ 101.506496][ T6495] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 101.519482][ T6495] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 101.528337][ T6495] +}[@: attempt to access beyond end of device [ 101.528337][ T6495] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 101.541251][ T6495] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 101.550322][ T6495] +}[@: attempt to access beyond end of device [ 101.550322][ T6495] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 101.563248][ T6495] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 101.572544][ T6491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.577706][ T6495] +}[@: attempt to access beyond end of device [ 101.577706][ T6495] loop3: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 101.621628][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.715251][ T6504] loop2: detected capacity change from 0 to 1024 [ 101.724695][ T6495] +}[@: attempt to access beyond end of device [ 101.724695][ T6495] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 101.737667][ T6495] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 101.781770][ T6504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.850438][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 101.850456][ T29] audit: type=1326 audit(1759134732.527:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 101.879976][ T29] audit: type=1326 audit(1759134732.527:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 101.903468][ T29] audit: type=1326 audit(1759134732.527:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 101.926908][ T29] audit: type=1326 audit(1759134732.537:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 101.950378][ T29] audit: type=1326 audit(1759134732.537:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 101.973912][ T29] audit: type=1326 audit(1759134732.537:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 101.997319][ T29] audit: type=1326 audit(1759134732.537:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f572f31ef03 code=0x7ffc0000 [ 102.020821][ T29] audit: type=1326 audit(1759134732.537:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f572f31d97f code=0x7ffc0000 [ 102.044100][ T29] audit: type=1326 audit(1759134732.537:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f572f31ef57 code=0x7ffc0000 [ 102.067453][ T29] audit: type=1326 audit(1759134732.537:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f572f31d710 code=0x7ffc0000 [ 102.123809][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.160745][ T6514] lo speed is unknown, defaulting to 1000 [ 102.279190][ T6522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.321941][ T6522] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 102.332727][ T6522] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 102.380166][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1018'. [ 103.133949][ T6554] loop3: detected capacity change from 0 to 1024 [ 103.172827][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.232241][ T6565] lo speed is unknown, defaulting to 1000 [ 103.244823][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.339138][ T6568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.390869][ T6568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.421691][ T6568] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 103.485709][ T6571] loop1: detected capacity change from 0 to 1024 [ 103.501707][ T6548] loop0: detected capacity change from 0 to 512 [ 103.510056][ T6571] EXT4-fs: Ignoring removed orlov option [ 103.515809][ T6571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.525007][ T6548] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1023: bad orphan inode 11862016 [ 103.538805][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.552068][ T6548] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.566602][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.619693][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.700339][ T6583] loop1: detected capacity change from 0 to 1024 [ 103.718860][ T6583] EXT4-fs: Ignoring removed orlov option [ 103.724554][ T6583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.759898][ T6583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.819371][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 103.830381][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.830447][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.830461][ T3310] Call Trace: [ 103.830470][ T3310] [ 103.830478][ T3310] __dump_stack+0x1d/0x30 [ 103.830502][ T3310] dump_stack_lvl+0xe8/0x140 [ 103.830589][ T3310] dump_stack+0x15/0x1b [ 103.830609][ T3310] dump_header+0x81/0x220 [ 103.830644][ T3310] oom_kill_process+0x342/0x400 [ 103.830691][ T3310] out_of_memory+0x979/0xb80 [ 103.830728][ T3310] try_charge_memcg+0x5e6/0x9e0 [ 103.830784][ T3310] charge_memcg+0x51/0xc0 [ 103.830827][ T3310] __mem_cgroup_charge+0x28/0xb0 [ 103.830849][ T3310] filemap_add_folio+0x4e/0x1b0 [ 103.830921][ T3310] __filemap_get_folio+0x31e/0x6b0 [ 103.831108][ T3310] filemap_fault+0x41f/0xb40 [ 103.831133][ T3310] __do_fault+0xbc/0x200 [ 103.831208][ T3310] handle_mm_fault+0xf78/0x2c20 [ 103.831241][ T3310] do_user_addr_fault+0x636/0x1090 [ 103.831357][ T3310] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.831463][ T3310] exc_page_fault+0x62/0xa0 [ 103.831501][ T3310] asm_exc_page_fault+0x26/0x30 [ 103.831524][ T3310] RIP: 0033:0x7f61c3465db4 [ 103.831542][ T3310] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 103.831685][ T3310] RSP: 002b:00007ffed6870610 EFLAGS: 00010202 [ 103.831705][ T3310] RAX: 0000001b32e24000 RBX: 0000000000000250 RCX: 0000000000019640 [ 103.831720][ T3310] RDX: 0000000003f57d3b RSI: 00007ffed68706a0 RDI: 0000000000000001 [ 103.831736][ T3310] RBP: 00007ffed687064c R08: 000000000f1a278a R09: 7fffffffffffffff [ 103.831750][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 103.831764][ T3310] R13: 00000000000927c0 R14: 0000000000019566 R15: 00007ffed68706a0 [ 103.831784][ T3310] [ 103.831791][ T3310] memory: usage 307200kB, limit 307200kB, failcnt 365 [ 103.843087][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.851947][ T3310] memory+swap: usage 307684kB, limit 9007199254740988kB, failcnt 0 [ 103.851962][ T3310] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 103.851974][ T3310] Memory cgroup stats for /syz4: [ 104.047836][ T3310] cache 0 [ 104.049195][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.052786][ T3310] rss 0 [ 104.052795][ T3310] shmem 0 [ 104.052804][ T3310] mapped_file 0 [ 104.074088][ T3310] dirty 0 [ 104.077167][ T3310] writeback 0 [ 104.080473][ T3310] workingset_refault_anon 1061 [ 104.085293][ T3310] workingset_refault_file 440 [ 104.090043][ T3310] swap 495616 [ 104.093373][ T3310] swapcached 16384 [ 104.097210][ T3310] pgpgin 136616 [ 104.100689][ T3310] pgpgout 136612 [ 104.104257][ T3310] pgfault 155256 [ 104.107901][ T3310] pgmajfault 152 [ 104.111473][ T3310] inactive_anon 8192 [ 104.115387][ T3310] active_anon 8192 [ 104.119178][ T3310] inactive_file 0 [ 104.122825][ T3310] active_file 0 [ 104.126277][ T3310] unevictable 0 [ 104.129774][ T3310] hierarchical_memory_limit 314572800 [ 104.135150][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 104.141344][ T3310] total_cache 0 [ 104.144824][ T3310] total_rss 0 [ 104.148167][ T3310] total_shmem 0 [ 104.151635][ T3310] total_mapped_file 0 [ 104.155667][ T3310] total_dirty 0 [ 104.159187][ T3310] total_writeback 0 [ 104.163072][ T3310] total_workingset_refault_anon 1061 [ 104.168412][ T3310] total_workingset_refault_file 440 [ 104.173713][ T3310] total_swap 495616 [ 104.177604][ T3310] total_swapcached 16384 [ 104.181878][ T3310] total_pgpgin 136616 [ 104.185978][ T3310] total_pgpgout 136612 [ 104.190142][ T3310] total_pgfault 155256 [ 104.194387][ T3310] total_pgmajfault 152 [ 104.198569][ T3310] total_inactive_anon 8192 [ 104.203052][ T3310] total_active_anon 8192 [ 104.207381][ T3310] total_inactive_file 0 [ 104.211573][ T3310] total_active_file 0 [ 104.215560][ T3310] total_unevictable 0 [ 104.219585][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1027,pid=6546,uid=0 [ 104.234336][ T3310] Memory cgroup out of memory: Killed process 6546 (syz.4.1027) total-vm:96004kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 104.511370][ T6547] syz.4.1027 (6547) used greatest stack depth: 6360 bytes left [ 104.549003][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 104.759709][ T6607] loop2: detected capacity change from 0 to 128 [ 104.769205][ T6607] +}[@: attempt to access beyond end of device [ 104.769205][ T6607] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 104.783844][ T6607] +}[@: attempt to access beyond end of device [ 104.783844][ T6607] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 104.796800][ T6607] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 104.806202][ T6607] +}[@: attempt to access beyond end of device [ 104.806202][ T6607] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 104.819120][ T6607] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 104.828989][ T6607] +}[@: attempt to access beyond end of device [ 104.828989][ T6607] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 104.841909][ T6607] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 104.857096][ T6607] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 105.331106][ T6626] lo speed is unknown, defaulting to 1000 [ 105.875469][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 105.935409][ T6631] loop2: detected capacity change from 0 to 8192 [ 106.096449][ T6635] batman_adv: batadv0: Adding interface: dummy0 [ 106.102745][ T6635] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.127993][ T6635] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 106.251985][ T6641] lo speed is unknown, defaulting to 1000 [ 106.452540][ T6653] syzkaller0: entered promiscuous mode [ 106.458118][ T6653] syzkaller0: entered allmulticast mode [ 107.036142][ T6663] loop4: detected capacity change from 0 to 1024 [ 107.042910][ T6663] EXT4-fs: Ignoring removed orlov option [ 107.052305][ T6663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.194120][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 107.194137][ T29] audit: type=1326 audit(1759134738.033:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.1.1061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fcb55eec9 code=0x0 [ 107.256752][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 107.524035][ T6677] lo speed is unknown, defaulting to 1000 [ 108.079971][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.202232][ T29] audit: type=1400 audit(1759134739.034:6260): avc: denied { create } for pid=6682 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 108.244463][ T6684] vlan0: entered promiscuous mode [ 108.244481][ T6684] : entered promiscuous mode [ 108.270618][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 108.273189][ T29] audit: type=1400 audit(1759134739.115:6261): avc: denied { write } for pid=6683 comm="syz.4.1067" path="socket:[16398]" dev="sockfs" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.276560][ T6689] macvtap1: entered promiscuous mode [ 108.321198][ T6689] bridge0: entered promiscuous mode [ 108.326550][ T6689] macvtap1: entered allmulticast mode [ 108.331959][ T6689] bridge0: entered allmulticast mode [ 108.353439][ T6681] bridge0: left allmulticast mode [ 108.358512][ T6681] bridge0: left promiscuous mode [ 108.383813][ T6694] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 108.390350][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.397796][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 108.406534][ T6694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.415429][ T6694] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 108.421954][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.429474][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 108.442036][ T6694] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 108.448574][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.456177][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 108.465301][ T6694] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 108.471958][ T6694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.479625][ T6694] vhci_hcd vhci_hcd.0: Device attached [ 108.490242][ T6694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.499898][ T6694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.529886][ T6708] vhci_hcd: connection closed [ 108.530084][ T3911] vhci_hcd: stop threads [ 108.539290][ T3911] vhci_hcd: release socket [ 108.543969][ T3911] vhci_hcd: disconnect device [ 108.549984][ T6703] vhci_hcd: connection closed [ 108.550594][ T3911] vhci_hcd: stop threads [ 108.555407][ T6695] vhci_hcd: connection closed [ 108.559948][ T3911] vhci_hcd: release socket [ 108.560737][ T6699] vhci_hcd: connection closed [ 108.564704][ T3911] vhci_hcd: disconnect device [ 108.564996][ T3911] vhci_hcd: stop threads [ 108.575093][ T6715] lo speed is unknown, defaulting to 1000 [ 108.578563][ T3911] vhci_hcd: release socket [ 108.592993][ T3911] vhci_hcd: disconnect device [ 108.601792][ T3911] vhci_hcd: stop threads [ 108.606052][ T3911] vhci_hcd: release socket [ 108.610496][ T3911] vhci_hcd: disconnect device [ 108.676553][ T6717] bond4: (slave macvlan0): Releasing backup interface [ 108.922939][ T6720] syzkaller0: entered promiscuous mode [ 108.928520][ T6720] syzkaller0: entered allmulticast mode [ 109.112599][ T6724] loop3: detected capacity change from 0 to 8192 [ 109.126565][ T6728] netlink: 'syz.2.1081': attribute type 39 has an invalid length. [ 109.231827][ T29] audit: type=1326 audit(1759134740.065:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.255317][ T29] audit: type=1326 audit(1759134740.065:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.278780][ T29] audit: type=1326 audit(1759134740.065:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.278808][ T29] audit: type=1326 audit(1759134740.065:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.278832][ T29] audit: type=1326 audit(1759134740.065:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.278870][ T29] audit: type=1326 audit(1759134740.075:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.372369][ T29] audit: type=1326 audit(1759134740.075:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 109.544011][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 109.600739][ T6753] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 109.607293][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.614868][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 109.624307][ T6753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.634339][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 109.658316][ T6753] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 109.664911][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.672379][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 109.684094][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 109.693375][ T6753] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 109.699920][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.707778][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 109.717117][ T6753] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 109.723736][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.731459][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 109.741184][ T6753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.749868][ T6753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.756795][ T6766] loop4: detected capacity change from 0 to 4096 [ 109.766462][ T6761] vhci_hcd: connection closed [ 109.766516][ T6763] vhci_hcd: connection closed [ 109.766550][ T6757] vhci_hcd: connection closed [ 109.771535][ T3911] vhci_hcd: stop threads [ 109.784978][ T3911] vhci_hcd: release socket [ 109.789396][ T3911] vhci_hcd: disconnect device [ 109.794514][ T6766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.800704][ T1104] vhci_hcd: vhci_device speed not set [ 109.813221][ T6754] vhci_hcd: connection closed [ 109.821633][ T3911] vhci_hcd: stop threads [ 109.830612][ T3911] vhci_hcd: release socket [ 109.835088][ T3911] vhci_hcd: disconnect device [ 109.840679][ T3911] vhci_hcd: stop threads [ 109.844944][ T3911] vhci_hcd: release socket [ 109.849388][ T3911] vhci_hcd: disconnect device [ 109.854775][ T3911] vhci_hcd: stop threads [ 109.859040][ T3911] vhci_hcd: release socket [ 109.863533][ T3911] vhci_hcd: disconnect device [ 109.870700][ T1104] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 109.870803][ T1104] usb 1-1: enqueue for inactive port 0 [ 109.870822][ T1104] usb 1-1: enqueue for inactive port 0 [ 109.870881][ T1104] usb 1-1: enqueue for inactive port 0 [ 109.922634][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.940540][ T1104] vhci_hcd: vhci_device speed not set [ 110.037264][ T6774] loop1: detected capacity change from 0 to 1024 [ 110.055453][ T6774] EXT4-fs: Ignoring removed orlov option [ 110.072814][ T6774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.377315][ T6784] loop0: detected capacity change from 0 to 512 [ 110.394305][ T6784] EXT4-fs: Ignoring removed i_version option [ 110.400404][ T6784] EXT4-fs: Ignoring removed bh option [ 110.411496][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 110.424209][ T6785] macvtap1: entered promiscuous mode [ 110.429535][ T6785] bridge0: entered promiscuous mode [ 110.435125][ T6785] macvtap1: entered allmulticast mode [ 110.440560][ T6785] bridge0: entered allmulticast mode [ 110.449170][ T6784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.466390][ T6785] bridge0: left allmulticast mode [ 110.471511][ T6785] bridge0: left promiscuous mode [ 110.476984][ T6784] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.611347][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.739720][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.809899][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 110.876075][ T6793] loop0: detected capacity change from 0 to 8192 [ 110.888879][ T6800] loop4: detected capacity change from 0 to 512 [ 110.906126][ T6800] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 110.923438][ T6798] loop1: detected capacity change from 0 to 4096 [ 110.943404][ T6800] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.1107: iget: bad i_size value: 12154757448730 [ 110.987099][ T6798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.054155][ T6800] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1107: couldn't read orphan inode 13 (err -117) [ 111.090137][ T6800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.143882][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.220993][ T6810] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 111.237188][ T6810] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 111.317526][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.037452][ T6822] loop2: detected capacity change from 0 to 512 [ 112.045462][ T6822] EXT4-fs: Ignoring removed i_version option [ 112.051521][ T6822] EXT4-fs: Ignoring removed bh option [ 112.075480][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.088219][ T6822] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.129025][ T6832] loop3: detected capacity change from 0 to 256 [ 112.137583][ T6832] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.152041][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.291803][ T6842] loop3: detected capacity change from 0 to 512 [ 112.298761][ T6842] EXT4-fs: Ignoring removed i_version option [ 112.304766][ T6842] EXT4-fs: Ignoring removed bh option [ 112.310974][ T6841] loop4: detected capacity change from 0 to 8192 [ 112.332268][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 112.332285][ T29] audit: type=1400 audit(1759134743.168:6380): avc: denied { ioctl } for pid=6836 comm="syz.2.1122" path="socket:[15845]" dev="sockfs" ino=15845 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.333892][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.377179][ T6842] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.418787][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.435771][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 112.459306][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 112.471970][ T29] audit: type=1326 audit(1759134743.308:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.517105][ T29] audit: type=1326 audit(1759134743.328:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.540671][ T29] audit: type=1326 audit(1759134743.328:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.564105][ T29] audit: type=1326 audit(1759134743.328:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.587546][ T29] audit: type=1326 audit(1759134743.328:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.611021][ T29] audit: type=1326 audit(1759134743.328:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fcb55d710 code=0x7ffc0000 [ 112.634529][ T29] audit: type=1326 audit(1759134743.328:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.658067][ T29] audit: type=1326 audit(1759134743.328:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.681448][ T29] audit: type=1326 audit(1759134743.328:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6854 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 112.779310][ T6861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1142'. [ 112.865674][ T6871] loop1: detected capacity change from 0 to 256 [ 112.878787][ T6871] pim6reg: entered allmulticast mode [ 112.884768][ T6871] pim6reg: left allmulticast mode [ 112.920147][ T6871] batman_adv: batadv0: Removing interface: dummy0 [ 112.954034][ T6877] loop3: detected capacity change from 0 to 1024 [ 112.960830][ T6877] ext4: Unknown parameter 'uid<00000000000000000000' [ 113.059019][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 113.158806][ T6889] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 113.165435][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.172877][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 113.197447][ T6889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.208415][ T6889] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 113.214963][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.216892][ T6895] loop1: detected capacity change from 0 to 8192 [ 113.222469][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 113.236713][ T6889] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 113.243330][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.250990][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 113.269673][ T6889] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 113.276298][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.283953][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 113.293702][ T6889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.302610][ T6889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.319914][ T6900] vhci_hcd: connection closed [ 113.320209][ T999] vhci_hcd: stop threads [ 113.324967][ T6898] vhci_hcd: connection closed [ 113.329242][ T999] vhci_hcd: release socket [ 113.329598][ T6896] vhci_hcd: connection closed [ 113.333983][ T999] vhci_hcd: disconnect device [ 113.338632][ T6890] vhci_hcd: connection closed [ 113.343874][ T999] vhci_hcd: stop threads [ 113.356709][ T999] vhci_hcd: release socket [ 113.361241][ T999] vhci_hcd: disconnect device [ 113.366951][ T999] vhci_hcd: stop threads [ 113.371285][ T999] vhci_hcd: release socket [ 113.375710][ T999] vhci_hcd: disconnect device [ 113.380488][ T1104] vhci_hcd: vhci_device speed not set [ 113.386408][ T999] vhci_hcd: stop threads [ 113.390740][ T999] vhci_hcd: release socket [ 113.395219][ T999] vhci_hcd: disconnect device [ 113.438013][ T1104] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 113.445464][ T1104] usb 5-1: enqueue for inactive port 0 [ 113.450978][ T1104] usb 5-1: enqueue for inactive port 0 [ 113.456478][ T1104] usb 5-1: enqueue for inactive port 0 [ 113.527897][ T1104] vhci_hcd: vhci_device speed not set [ 113.862215][ T6910] loop0: detected capacity change from 0 to 1024 [ 113.871544][ T6910] EXT4-fs: Ignoring removed orlov option [ 113.888592][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.889400][ T6908] syzkaller0: entered promiscuous mode [ 113.906739][ T6908] syzkaller0: entered allmulticast mode [ 114.073357][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 114.088734][ T6923] macvtap2: entered promiscuous mode [ 114.094070][ T6923] bridge0: entered promiscuous mode [ 114.099460][ T6923] macvtap2: entered allmulticast mode [ 114.104921][ T6923] bridge0: entered allmulticast mode [ 114.119311][ T6923] bridge0: left allmulticast mode [ 114.124465][ T6923] bridge0: left promiscuous mode [ 114.338661][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.363478][ T6932] lo speed is unknown, defaulting to 1000 [ 114.404106][ T6934] macvtap1: entered promiscuous mode [ 114.409550][ T6934] batadv0: entered promiscuous mode [ 114.416777][ T6934] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 114.425292][ T6934] batadv0: left promiscuous mode [ 114.440729][ T6936] tipc: Started in network mode [ 114.445638][ T6936] tipc: Node identity ac14140f, cluster identity 4711 [ 114.453210][ T6936] tipc: New replicast peer: 255.255.255.255 [ 114.459344][ T6936] tipc: Enabled bearer , priority 10 [ 114.575194][ T6943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 114.581748][ T6943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.589240][ T6943] vhci_hcd vhci_hcd.0: Device attached [ 114.601156][ T6949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.639164][ T6947] bond3: entered promiscuous mode [ 114.644246][ T6947] bond3: entered allmulticast mode [ 114.677318][ T6947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.683979][ T6943] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 114.690539][ T6943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.698121][ T6943] vhci_hcd vhci_hcd.0: Device attached [ 114.736703][ T6947] bond3 (unregistering): Released all slaves [ 114.768868][ T6949] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 114.775502][ T6949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.783116][ T6949] vhci_hcd vhci_hcd.0: Device attached [ 114.787120][ T4914] vhci_hcd: vhci_device speed not set [ 114.826554][ T6943] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(9) [ 114.833107][ T6943] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.840820][ T6943] vhci_hcd vhci_hcd.0: Device attached [ 114.868219][ T6958] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1162'. [ 114.881866][ T6949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.909317][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 114.920117][ T6943] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.953104][ T6960] lo speed is unknown, defaulting to 1000 [ 114.968960][ T6955] vhci_hcd: connection closed [ 114.969130][ T6951] vhci_hcd: connection closed [ 114.974091][ T6944] vhci_hcd: connection closed [ 114.999628][ T3914] vhci_hcd: stop threads [ 115.008702][ T3914] vhci_hcd: release socket [ 115.013134][ T3914] vhci_hcd: disconnect device [ 115.017922][ T6953] vhci_hcd: connection closed [ 115.053119][ T6961] lo speed is unknown, defaulting to 1000 [ 115.073841][ T3914] vhci_hcd: stop threads [ 115.078146][ T3914] vhci_hcd: release socket [ 115.082589][ T3914] vhci_hcd: disconnect device [ 115.116385][ T3914] vhci_hcd: stop threads [ 115.120744][ T3914] vhci_hcd: release socket [ 115.125180][ T3914] vhci_hcd: disconnect device [ 115.193724][ T3914] vhci_hcd: stop threads [ 115.198081][ T3914] vhci_hcd: release socket [ 115.201412][ T4914] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 115.202546][ T3914] vhci_hcd: disconnect device [ 115.218660][ T4914] usb 3-1: enqueue for inactive port 0 [ 115.230824][ T4914] usb 3-1: enqueue for inactive port 0 [ 115.240762][ T4914] usb 3-1: enqueue for inactive port 0 [ 115.317087][ T4914] vhci_hcd: vhci_device speed not set [ 115.343939][ T6973] loop3: detected capacity change from 0 to 512 [ 115.389562][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.397374][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 115.414338][ T6973] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.430358][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 115.439714][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.456804][ T3480] tipc: Node number set to 2886997007 [ 115.565111][ T6983] syzkaller0: entered promiscuous mode [ 115.570720][ T6983] syzkaller0: entered allmulticast mode [ 115.640543][ T6990] loop2: detected capacity change from 0 to 512 [ 115.669664][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.690564][ T6990] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.705539][ T6981] lo speed is unknown, defaulting to 1000 [ 115.742672][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1178'. [ 115.758718][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.770807][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 115.789482][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 115.803938][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 115.820641][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1179'. [ 115.858475][ T7007] syzkaller0: entered promiscuous mode [ 115.863990][ T7007] syzkaller0: entered allmulticast mode [ 115.871799][ T7011] netlink: 'syz.0.1182': attribute type 27 has an invalid length. [ 115.888066][ T7011] erspan0: left allmulticast mode [ 115.901434][ T7011] veth1: left promiscuous mode [ 115.963382][ T7015] loop4: detected capacity change from 0 to 1024 [ 115.974436][ T7015] EXT4-fs: Ignoring removed bh option [ 115.982974][ T7015] EXT4-fs: inline encryption not supported [ 115.993532][ T7015] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.005249][ T7015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 116.014845][ T7015] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1185: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.029889][ T7015] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1185: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.045550][ T7015] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1185: Failed to acquire dquot type 0 [ 116.057115][ T7015] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 116.066751][ T7015] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1185: mark_inode_dirty error [ 116.086227][ T7015] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 116.096847][ T7015] EXT4-fs (loop4): 1 orphan inode deleted [ 116.103139][ T7015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.128474][ T3794] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.252906][ T3794] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 0 [ 116.298460][ T7030] loop1: detected capacity change from 0 to 128 [ 116.483666][ T7036] IPVS: Error connecting to the multicast addr [ 116.801485][ T7042] lo speed is unknown, defaulting to 1000 [ 116.894094][ T7044] syzkaller0: entered promiscuous mode [ 116.899621][ T7044] syzkaller0: entered allmulticast mode [ 116.918230][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.941073][ T3310] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.971114][ T7045] lo speed is unknown, defaulting to 1000 [ 117.053687][ T3310] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.082739][ T7046] loop0: detected capacity change from 0 to 512 [ 117.090032][ T3310] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 117.156280][ T7046] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 117.166909][ T7046] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.191235][ T7046] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 117.263902][ T7046] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 117.273847][ T7046] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.1195: casefold flag without casefold feature [ 117.287898][ T7046] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1195: couldn't read orphan inode 16 (err -117) [ 117.299987][ T7054] bridge0: Device is already in use. [ 117.300399][ T7046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.343689][ T29] kauditd_printk_skb: 863 callbacks suppressed [ 117.343707][ T29] audit: type=1400 audit(1759134748.181:7250): avc: denied { read } for pid=7057 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.385534][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.398100][ T7061] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 117.422749][ T29] audit: type=1400 audit(1759134748.261:7251): avc: denied { setopt } for pid=7059 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.436885][ T7066] loop0: detected capacity change from 0 to 128 [ 117.456901][ T29] audit: type=1400 audit(1759134748.301:7252): avc: denied { mounton } for pid=7065 comm="syz.0.1203" path="/210/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 117.504767][ T7066] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 117.534546][ T7068] loop2: detected capacity change from 0 to 2048 [ 117.547220][ T29] audit: type=1326 audit(1759134748.391:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 117.570775][ T29] audit: type=1326 audit(1759134748.391:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 117.577688][ T7074] loop4: detected capacity change from 0 to 1024 [ 117.594101][ T29] audit: type=1326 audit(1759134748.391:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 117.608549][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.645617][ T29] audit: type=1326 audit(1759134748.441:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 117.650180][ T7068] loop2: p2 p3 p7 [ 117.679848][ T7072] loop1: detected capacity change from 0 to 512 [ 117.689927][ T7072] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 117.699836][ T7072] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 117.712175][ T6242] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.731290][ T6242] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.751798][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.812282][ T7085] loop4: detected capacity change from 0 to 128 [ 117.818704][ T7084] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 117.825224][ T7084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.832752][ T7084] vhci_hcd vhci_hcd.0: Device attached [ 117.852981][ T29] audit: type=1326 audit(1759134748.691:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 117.876462][ T29] audit: type=1326 audit(1759134748.691:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 117.903144][ T29] audit: type=1326 audit(1759134748.741:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 117.966182][ T7084] loop1: detected capacity change from 0 to 2048 [ 118.004423][ T7096] loop0: detected capacity change from 0 to 1024 [ 118.011608][ T7096] EXT4-fs: Ignoring removed bh option [ 118.017156][ T7096] EXT4-fs: Ignoring removed orlov option [ 118.022864][ T7096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.058045][ T7084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.059612][ T7096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.082905][ T7096] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.105338][ T6242] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 118.106215][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.170017][ T7105] loop4: detected capacity change from 0 to 1024 [ 118.176796][ T7105] EXT4-fs: Ignoring removed bh option [ 118.182309][ T7105] EXT4-fs: inline encryption not supported [ 118.217315][ T7105] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.228637][ T7105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 118.238235][ T7105] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1213: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.252695][ T7105] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1213: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.267213][ T7105] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1213: Failed to acquire dquot type 0 [ 118.278897][ T7105] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 118.288554][ T7105] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1213: mark_inode_dirty error [ 118.300124][ T7105] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 118.310412][ T7105] EXT4-fs (loop4): 1 orphan inode deleted [ 118.317023][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.376538][ T7086] vhci_hcd: connection reset by peer [ 118.382706][ T3800] vhci_hcd: stop threads [ 118.387006][ T3800] vhci_hcd: release socket [ 118.391434][ T3800] vhci_hcd: disconnect device [ 118.569677][ T3911] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.603198][ T3911] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:27: Failed to release dquot type 0 [ 118.616959][ T7096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.699765][ T7125] process 'syz.0.1222' launched './file0' with NULL argv: empty string added [ 118.731285][ T7127] loop2: detected capacity change from 0 to 512 [ 118.738780][ T7127] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.750769][ T7127] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.767040][ T7127] EXT4-fs (loop2): 1 truncate cleaned up [ 118.773139][ T7127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.816297][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.840319][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.850454][ T3310] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.863398][ T3310] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 118.873527][ T3310] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 118.904638][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.110039][ T7154] syzkaller0: entered promiscuous mode [ 119.115574][ T7154] syzkaller0: entered allmulticast mode [ 119.123041][ T7156] random: crng reseeded on system resumption [ 119.236483][ T7157] loop1: detected capacity change from 0 to 512 [ 119.339012][ T7157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.351783][ T7157] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.498390][ T7165] __nla_validate_parse: 10 callbacks suppressed [ 119.498409][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 119.513696][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 119.561730][ T7163] lo speed is unknown, defaulting to 1000 [ 119.759958][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 119.886571][ T7175] tipc: Started in network mode [ 119.891500][ T7175] tipc: Node identity 9a0f723de54a, cluster identity 4711 [ 119.898706][ T7175] tipc: Enabled bearer , priority 0 [ 119.910971][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 119.974999][ T7180] syzkaller0: entered promiscuous mode [ 119.980505][ T7180] syzkaller0: entered allmulticast mode [ 120.042240][ T7182] loop3: detected capacity change from 0 to 512 [ 120.053868][ T7175] tipc: Resetting bearer [ 120.073898][ T7174] tipc: Resetting bearer [ 120.084097][ T7182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.105224][ T7174] tipc: Disabling bearer [ 120.135308][ T7182] EXT4-fs error (device loop3): ext4_init_orphan_info:611: comm syz.3.1241: orphan file block 0: bad magic [ 120.165417][ T7182] EXT4-fs (loop3): mount failed [ 120.208197][ T7185] loop4: detected capacity change from 0 to 128 [ 120.256839][ T7185] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.299368][ T7185] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.704024][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.792684][ T7209] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1247'. [ 120.821093][ T7209] hsr_slave_0: left promiscuous mode [ 120.846856][ T7209] hsr_slave_1: left promiscuous mode [ 120.942656][ T7223] syzkaller0: entered promiscuous mode [ 120.948234][ T7223] syzkaller0: entered allmulticast mode [ 121.057599][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1250'. [ 121.071534][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 121.370097][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 121.427327][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 121.717166][ T7251] loop3: detected capacity change from 0 to 8192 [ 121.961044][ T7271] lo speed is unknown, defaulting to 1000 [ 122.468455][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 122.468473][ T29] audit: type=1400 audit(1759134753.313:7613): avc: denied { mount } for pid=7287 comm="syz.3.1257" name="/" dev="ramfs" ino=18559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 122.511659][ T29] audit: type=1400 audit(1759134753.343:7614): avc: denied { execute } for pid=7287 comm="syz.3.1257" path="/file1" dev="ramfs" ino=18560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 122.556364][ T7294] loop3: detected capacity change from 0 to 512 [ 122.558516][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 122.595799][ T7296] netlink: 'syz.0.1258': attribute type 6 has an invalid length. [ 122.627583][ T7294] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.635509][ T7294] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1259: bad orphan inode 13 [ 122.639484][ T29] audit: type=1326 audit(1759134753.483:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.645680][ T7296] hsr_slave_0: left promiscuous mode [ 122.675909][ T7294] ext4_test_bit(bit=12, block=18) = 1 [ 122.675995][ T7296] hsr_slave_1: left promiscuous mode [ 122.681351][ T7294] is_bad_inode(inode)=0 [ 122.681361][ T7294] NEXT_ORPHAN(inode)=2130706432 [ 122.687077][ T29] audit: type=1326 audit(1759134753.513:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.690926][ T7294] max_ino=32 [ 122.695794][ T29] audit: type=1326 audit(1759134753.513:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.695823][ T29] audit: type=1326 audit(1759134753.513:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.695856][ T29] audit: type=1326 audit(1759134753.513:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.719294][ T7294] i_nlink=1 [ 122.723827][ T7305] loop2: detected capacity change from 0 to 512 [ 122.745999][ T29] audit: type=1326 audit(1759134753.513:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.771103][ T7294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.792680][ T29] audit: type=1326 audit(1759134753.513:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.792715][ T29] audit: type=1326 audit(1759134753.513:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 122.797729][ T7305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.896425][ T7305] EXT4-fs (loop2): 1 truncate cleaned up [ 122.902492][ T7305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.926160][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.942236][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.173135][ T6242] usb 3-1: enqueue for inactive port 0 [ 123.178771][ T6242] usb 3-1: enqueue for inactive port 0 [ 123.253199][ T6242] vhci_hcd: vhci_device speed not set [ 123.361908][ T7354] lo speed is unknown, defaulting to 1000 [ 123.833887][ T7367] loop2: detected capacity change from 0 to 128 [ 123.917683][ T7372] syzkaller0: entered promiscuous mode [ 123.923288][ T7372] syzkaller0: entered allmulticast mode [ 124.072518][ T7389] loop3: detected capacity change from 0 to 512 [ 124.080106][ T7389] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 124.103533][ T7389] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1273: bg 0: block 104: invalid block bitmap [ 124.125350][ T7389] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 124.134252][ T7395] loop2: detected capacity change from 0 to 1024 [ 124.141283][ T7395] EXT4-fs: Ignoring removed bh option [ 124.145581][ T7389] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1273: invalid indirect mapped block 1 (level 1) [ 124.147767][ T7395] EXT4-fs: Ignoring removed orlov option [ 124.165617][ T7395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.174815][ T7389] EXT4-fs (loop3): 1 truncate cleaned up [ 124.521326][ T7416] __nla_validate_parse: 8 callbacks suppressed [ 124.521341][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 124.563945][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 124.614587][ T7417] lo speed is unknown, defaulting to 1000 [ 125.117651][ T7420] syzkaller0: entered promiscuous mode [ 125.123260][ T7420] syzkaller0: entered allmulticast mode [ 125.151160][ T7424] loop4: detected capacity change from 0 to 2048 [ 125.160332][ T7422] veth0: entered promiscuous mode [ 125.170430][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 125.183508][ T7422] veth0 (unregistering): left promiscuous mode [ 125.203455][ T3310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 125.219586][ T3310] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 125.308797][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 125.336309][ T7437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1300'. [ 125.347102][ T7437] hsr_slave_0: left promiscuous mode [ 125.364566][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 125.379476][ T7437] hsr_slave_1: left promiscuous mode [ 125.490899][ T7449] loop4: detected capacity change from 0 to 1024 [ 125.497504][ T7449] EXT4-fs: Ignoring removed bh option [ 125.503098][ T7449] EXT4-fs: Ignoring removed orlov option [ 125.508797][ T7449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.548328][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 125.563405][ T7459] lo speed is unknown, defaulting to 1000 [ 125.609437][ T7462] loop2: detected capacity change from 0 to 512 [ 125.621604][ T7462] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.630710][ T7462] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.637388][ T7462] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.652813][ T7462] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 125.661356][ T7462] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.1295: casefold flag without casefold feature [ 125.674363][ T7462] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1295: couldn't read orphan inode 16 (err -117) [ 125.730197][ T7468] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 125.736793][ T7468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.744435][ T7468] vhci_hcd vhci_hcd.0: Device attached [ 125.763179][ T7468] loop4: detected capacity change from 0 to 2048 [ 125.793994][ T7470] vhci_hcd: connection closed [ 125.796911][ T3800] vhci_hcd: stop threads [ 125.805923][ T3800] vhci_hcd: release socket [ 125.810343][ T3800] vhci_hcd: disconnect device [ 125.845693][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 125.879747][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 126.411368][ T7490] lo speed is unknown, defaulting to 1000 [ 127.589077][ T7508] loop1: detected capacity change from 0 to 1024 [ 127.595854][ T7508] EXT4-fs: Ignoring removed bh option [ 127.625776][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 127.625795][ T29] audit: type=1326 audit(1759134758.475:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.673162][ T7510] loop0: detected capacity change from 0 to 128 [ 127.680658][ T7508] EXT4-fs: Ignoring removed orlov option [ 127.686441][ T7508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.693816][ T29] audit: type=1326 audit(1759134758.505:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.717317][ T29] audit: type=1326 audit(1759134758.515:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.740841][ T29] audit: type=1326 audit(1759134758.515:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.764320][ T29] audit: type=1326 audit(1759134758.515:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.787797][ T29] audit: type=1326 audit(1759134758.515:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.811180][ T29] audit: type=1326 audit(1759134758.515:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.834661][ T29] audit: type=1326 audit(1759134758.515:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.858117][ T29] audit: type=1326 audit(1759134758.515:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.881581][ T29] audit: type=1326 audit(1759134758.515:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8e26eec9 code=0x7ffc0000 [ 127.947380][ T7514] tipc: Started in network mode [ 127.952382][ T7514] tipc: Node identity a2b588459dc5, cluster identity 4711 [ 127.959619][ T7514] tipc: Enabled bearer , priority 0 [ 127.965579][ T7508] EXT4-fs mount: 12 callbacks suppressed [ 127.965594][ T7508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.985611][ T7514] syzkaller0: entered promiscuous mode [ 127.991095][ T7514] syzkaller0: entered allmulticast mode [ 128.004001][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 128.049018][ T7514] tipc: Resetting bearer [ 128.065486][ T7513] tipc: Resetting bearer [ 128.083265][ T7513] tipc: Disabling bearer [ 128.108895][ T7528] syzkaller0: entered promiscuous mode [ 128.111139][ T7530] loop0: detected capacity change from 0 to 128 [ 128.114570][ T7528] syzkaller0: entered allmulticast mode [ 128.145282][ T7508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.174084][ T7534] netlink: 'syz.1.1315': attribute type 6 has an invalid length. [ 128.317212][ T7548] syzkaller0: entered promiscuous mode [ 128.322780][ T7548] syzkaller0: entered allmulticast mode [ 128.358894][ T7553] netlink: 'syz.3.1325': attribute type 27 has an invalid length. [ 128.379333][ T7553] macvtap1: left promiscuous mode [ 128.384566][ T7553] macvtap1: left allmulticast mode [ 128.476682][ T7564] loop4: detected capacity change from 0 to 512 [ 128.513712][ T7564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.574587][ T7564] EXT4-fs (loop4): 1 truncate cleaned up [ 128.580802][ T7564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.635440][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.653398][ T7574] loop3: detected capacity change from 0 to 1024 [ 128.660252][ T7574] EXT4-fs: Ignoring removed bh option [ 128.665898][ T7574] EXT4-fs: Ignoring removed orlov option [ 128.671653][ T7574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.683242][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.936983][ T7574] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.998473][ T7600] netlink: 'syz.2.1341': attribute type 27 has an invalid length. [ 129.028900][ T7601] syzkaller0: entered promiscuous mode [ 129.034528][ T7601] syzkaller0: entered allmulticast mode [ 129.515463][ T7611] loop3: detected capacity change from 0 to 512 [ 129.530943][ T7613] __nla_validate_parse: 16 callbacks suppressed [ 129.530962][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 129.546229][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 129.556152][ T7611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.567578][ T7611] EXT4-fs (loop3): 1 truncate cleaned up [ 129.583524][ T7611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.703515][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.809235][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 129.817904][ T7622] lo speed is unknown, defaulting to 1000 [ 129.830947][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 129.864594][ T7626] tipc: New replicast peer: 255.255.255.255 [ 129.870701][ T7626] tipc: Enabled bearer , priority 10 [ 129.931162][ T7621] bond4: entered promiscuous mode [ 129.936386][ T7621] bond4: entered allmulticast mode [ 129.944964][ T7621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.973560][ T7621] bond4 (unregistering): Released all slaves [ 130.263695][ T7648] loop4: detected capacity change from 0 to 512 [ 130.290025][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 130.299736][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 130.315555][ T7651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'. [ 130.324802][ T7651] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1361'. [ 130.353035][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1362'. [ 130.394433][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 130.413005][ T7648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.426376][ T7648] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.458110][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.492673][ T7663] netlink: 'syz.4.1363': attribute type 27 has an invalid length. [ 130.500542][ T7663] erspan0: left allmulticast mode [ 130.506043][ T7663] $Hÿ: left promiscuous mode [ 130.513862][ T7663] bond1: left promiscuous mode [ 130.518674][ T7663] bond1: left allmulticast mode [ 130.523917][ T7663] veth5: left promiscuous mode [ 130.645519][ T7674] bond5: entered promiscuous mode [ 130.650580][ T7674] bond5: entered allmulticast mode [ 130.655949][ T7674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.677270][ T7674] bond5 (unregistering): Released all slaves [ 130.718515][ T7677] lo speed is unknown, defaulting to 1000 [ 130.819563][ T7677] tipc: New replicast peer: 255.255.255.255 [ 130.825854][ T7677] tipc: Enabled bearer , priority 10 [ 130.843511][ T7687] syzkaller0: entered promiscuous mode [ 130.849010][ T7687] syzkaller0: entered allmulticast mode [ 130.927712][ T7694] loop4: detected capacity change from 0 to 2048 [ 130.965717][ T7694] loop4: p2 p3 p7 [ 130.976509][ T7697] loop2: detected capacity change from 0 to 512 [ 130.991184][ T3480] tipc: Node number set to 1064339525 [ 131.000417][ T7697] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 131.021072][ T7697] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 131.629670][ T7735] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 131.636229][ T7735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.643867][ T7735] vhci_hcd vhci_hcd.0: Device attached [ 131.667572][ T7735] loop0: detected capacity change from 0 to 2048 [ 131.711666][ T7735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.833046][ T7737] vhci_hcd: connection closed [ 131.833299][ T999] vhci_hcd: stop threads [ 131.842376][ T999] vhci_hcd: release socket [ 131.846798][ T999] vhci_hcd: disconnect device [ 131.890857][ T4914] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 131.898170][ T4914] usb 1-1: enqueue for inactive port 0 [ 131.903714][ T4914] usb 1-1: enqueue for inactive port 0 [ 131.909228][ T4914] usb 1-1: enqueue for inactive port 0 [ 131.940822][ T6242] tipc: Node number set to 2135257661 [ 131.980893][ T4914] vhci_hcd: vhci_device speed not set [ 132.346571][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.926696][ T7768] loop2: detected capacity change from 0 to 512 [ 132.937612][ T7768] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 132.946773][ T7768] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.1401: iget: bad i_size value: 12154757448730 [ 132.960244][ T7768] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1401: couldn't read orphan inode 13 (err -117) [ 132.973874][ T7768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.047951][ T7778] EXT4-fs warning (device loop2): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 133.059588][ T7778] EXT4-fs warning (device loop2): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 133.132511][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.171931][ T7782] lo speed is unknown, defaulting to 1000 [ 133.192989][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 133.193004][ T29] audit: type=1326 audit(1759134764.046:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.2.1403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f572f31eec9 code=0x0 [ 133.222482][ T7785] tipc: Enabled bearer , priority 0 [ 133.231080][ T7785] syzkaller0: entered promiscuous mode [ 133.236642][ T7785] syzkaller0: entered allmulticast mode [ 133.247716][ T29] audit: type=1326 audit(1759134764.096:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 133.271196][ T29] audit: type=1326 audit(1759134764.096:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 133.294661][ T29] audit: type=1326 audit(1759134764.096:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 133.318148][ T29] audit: type=1326 audit(1759134764.096:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fcb560de7 code=0x7ffc0000 [ 133.326864][ T7797] tipc: Resetting bearer [ 133.341561][ T29] audit: type=1326 audit(1759134764.096:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0fcb560d5c code=0x7ffc0000 [ 133.341598][ T29] audit: type=1326 audit(1759134764.096:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0fcb560c94 code=0x7ffc0000 [ 133.393992][ T29] audit: type=1326 audit(1759134764.096:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0fcb560c94 code=0x7ffc0000 [ 133.417441][ T29] audit: type=1326 audit(1759134764.096:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0fcb55db2a code=0x7ffc0000 [ 133.440737][ T29] audit: type=1326 audit(1759134764.096:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.1.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fcb55eec9 code=0x7ffc0000 [ 133.464754][ T7784] tipc: Resetting bearer [ 133.489541][ T7802] loop0: detected capacity change from 0 to 256 [ 133.496476][ T7784] tipc: Disabling bearer [ 133.508517][ T7791] tipc: New replicast peer: 255.255.255.255 [ 133.514605][ T7791] tipc: Enabled bearer , priority 10 [ 133.583798][ T7808] tipc: Enabled bearer , priority 0 [ 133.590904][ T7808] syzkaller0: entered promiscuous mode [ 133.596411][ T7808] syzkaller0: entered allmulticast mode [ 133.607342][ T7808] tipc: Resetting bearer [ 133.614240][ T7807] tipc: Resetting bearer [ 133.622840][ T7807] tipc: Disabling bearer [ 133.638248][ T7811] netlink: 'syz.0.1421': attribute type 13 has an invalid length. [ 133.782934][ T7814] lo speed is unknown, defaulting to 1000 [ 133.867134][ T7819] xt_l2tp: invalid flags combination: 0 [ 134.249754][ T7838] loop3: detected capacity change from 0 to 4096 [ 134.255305][ T7843] loop2: detected capacity change from 0 to 512 [ 134.264134][ T7838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.565096][ T7850] loop2: detected capacity change from 0 to 512 [ 134.609409][ T7850] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 134.619023][ T7850] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1433: invalid indirect mapped block 8 (level 2) [ 134.633659][ T7850] EXT4-fs (loop2): Remounting filesystem read-only [ 134.640344][ T7850] EXT4-fs (loop2): 1 truncate cleaned up [ 134.647211][ T7850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.674614][ T7850] __nla_validate_parse: 20 callbacks suppressed [ 134.674632][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 134.721932][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.875386][ T7861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1436'. [ 134.929060][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.034732][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 135.050761][ T7877] loop0: detected capacity change from 0 to 512 [ 135.081878][ T7877] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.088630][ T7877] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.133794][ T7877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 135.143950][ T7877] System zones: 1-12 [ 135.171327][ T7877] EXT4-fs (loop0): 1 truncate cleaned up [ 135.177790][ T7877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.258006][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.346067][ T7889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'. [ 135.428945][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 135.481790][ T7863] net_ratelimit: 22 callbacks suppressed [ 135.481810][ T7863] Set syz1 is full, maxelem 65536 reached [ 135.749383][ T7919] loop0: detected capacity change from 0 to 128 [ 135.756155][ T7919] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.784809][ T7919] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.784435][ T7936] lo speed is unknown, defaulting to 1000 [ 136.992791][ T7939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1461'. [ 137.149587][ T7952] tipc: Started in network mode [ 137.154673][ T7952] tipc: Node identity 8eca6f9ca2f9, cluster identity 4711 [ 137.161893][ T7952] tipc: Enabled bearer , priority 0 [ 137.174555][ T7952] syzkaller0: entered promiscuous mode [ 137.180107][ T7952] syzkaller0: entered allmulticast mode [ 137.193286][ T7956] loop4: detected capacity change from 0 to 512 [ 137.214148][ T7952] tipc: Resetting bearer [ 137.222136][ T7956] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.231527][ T7956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.238319][ T7950] tipc: Resetting bearer [ 137.251157][ T7956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.259610][ T7956] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.270496][ T7950] tipc: Disabling bearer [ 137.288174][ T7959] loop3: detected capacity change from 0 to 512 [ 137.295282][ T7959] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.296192][ T7956] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1467: Allocating blocks 41-42 which overlap fs metadata [ 137.321516][ T7956] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1467: Failed to acquire dquot type 1 [ 137.333447][ T7956] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 137.360269][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1467: corrupted inode contents [ 137.373170][ T7956] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.1467: mark_inode_dirty error [ 137.385940][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1467: corrupted inode contents [ 137.403588][ T7965] IPv6: sit1: Disabled Multicast RS [ 137.409962][ T7965] sit1: entered allmulticast mode [ 137.429389][ T7956] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1467: mark_inode_dirty error [ 137.649505][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1467: corrupted inode contents [ 138.170962][ T7956] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 138.180824][ T7956] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.1467: corrupted inode contents [ 138.193998][ T7956] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.1467: mark_inode_dirty error [ 138.206916][ T7956] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 138.216653][ T7956] EXT4-fs (loop4): 1 truncate cleaned up [ 138.223953][ T7956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.315221][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 138.315320][ T29] audit: type=1400 audit(1759134769.157:8713): avc: denied { rename } for pid=7955 comm="syz.4.1467" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.356659][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.380631][ T3794] Quota error (device loop4): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 138.386838][ T7971] lo speed is unknown, defaulting to 1000 [ 138.390495][ T3794] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 138.421345][ T29] audit: type=1400 audit(1759134769.267:8714): avc: denied { read } for pid=7976 comm="syz.2.1472" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.423088][ T7973] lo speed is unknown, defaulting to 1000 [ 138.468953][ T7984] loop4: detected capacity change from 0 to 1024 [ 138.474873][ T7975] netlink: 'syz.0.1471': attribute type 10 has an invalid length. [ 138.476286][ T7984] EXT4-fs: Ignoring removed bh option [ 138.484922][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.489970][ T7984] EXT4-fs: inline encryption not supported [ 138.501632][ T7984] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.503261][ T7975] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 138.512740][ T7984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 138.521323][ T7986] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 138.529652][ T7984] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1474: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.541406][ T7980] pimreg: entered allmulticast mode [ 138.551653][ T7984] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 138.564967][ T7984] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1474: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.580799][ T7984] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 138.589675][ T7984] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1474: Failed to acquire dquot type 0 [ 138.627004][ T7973] pimreg: left allmulticast mode [ 138.632740][ T7984] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 138.642366][ T7984] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1474: mark_inode_dirty error [ 138.654264][ T7984] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 138.664656][ T7984] EXT4-fs (loop4): 1 orphan inode deleted [ 138.666557][ T29] audit: type=1326 audit(1759134769.517:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 138.670941][ T7984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.693903][ T29] audit: type=1326 audit(1759134769.517:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 138.740470][ T3794] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.757981][ T3794] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 138.766464][ T3794] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 0 [ 138.779897][ T29] audit: type=1326 audit(1759134769.557:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 138.803212][ T29] audit: type=1326 audit(1759134769.557:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572f31eec9 code=0x7ffc0000 [ 138.855716][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 138.873039][ T7996] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1478'. [ 138.882206][ T7996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1478'. [ 138.893058][ T7994] loop1: detected capacity change from 0 to 128 [ 138.906618][ T7994] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.941814][ T7994] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.954218][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.972869][ T3310] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.017125][ T8000] loop3: detected capacity change from 0 to 2048 [ 139.046381][ T3310] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.058167][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.069164][ T3310] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 139.100159][ T8000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.115647][ T8007] tipc: Failed to remove unknown binding: 66,1,1/0:3349429509/3349429511 [ 139.125025][ T8007] tipc: Failed to remove unknown binding: 66,1,1/0:3349429509/3349429511 [ 139.133495][ T8007] tipc: Failed to remove unknown binding: 66,1,1/0:3349429509/3349429511 [ 139.228314][ T3308] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 139.261300][ T6242] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.267354][ T8014] loop1: detected capacity change from 0 to 8192 [ 139.276093][ T3308] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 139.282480][ T6242] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.304841][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.375164][ T8022] loop3: detected capacity change from 0 to 2048 [ 139.392351][ T8022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.475373][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.623562][ T8040] syzkaller0: entered promiscuous mode [ 139.629078][ T8040] syzkaller0: entered allmulticast mode [ 139.670352][ T8046] loop1: detected capacity change from 0 to 512 [ 139.677533][ T8046] ext4: Unknown parameter 'pcr' [ 139.699199][ T8048] batadv0: entered promiscuous mode [ 139.801033][ T8050] lo speed is unknown, defaulting to 1000 [ 140.269532][ T8058] Invalid logical block size (6) [ 140.655607][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1510'. [ 140.674386][ T8083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8083 comm=syz.3.1510 [ 140.693383][ T8083] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 141.011006][ T8094] loop4: detected capacity change from 0 to 1024 [ 141.056617][ T8090] lo speed is unknown, defaulting to 1000 [ 141.136154][ T8095] lo speed is unknown, defaulting to 1000 [ 141.166884][ T8094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.207530][ T8102] loop2: detected capacity change from 0 to 512 [ 141.214952][ T8094] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1515: Allocating blocks 385-513 which overlap fs metadata [ 141.215435][ T8100] v: renamed from ip6_vti0 [ 141.230001][ T8102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.259921][ T8094] EXT4-fs (loop4): pa ffff888107247a10: logic 16, phys. 129, len 24 [ 141.267980][ T8094] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 141.314768][ T8102] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 141.347343][ T8094] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 141.359695][ T8094] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.359695][ T8094] [ 141.369328][ T8094] EXT4-fs (loop4): Total free blocks count 0 [ 141.369974][ T8102] EXT4-fs (loop2): 1 truncate cleaned up [ 141.375403][ T8094] EXT4-fs (loop4): Free/Dirty block details [ 141.375419][ T8094] EXT4-fs (loop4): free_blocks=128 [ 141.392170][ T8094] EXT4-fs (loop4): dirty_blocks=0 [ 141.397261][ T8094] EXT4-fs (loop4): Block reservation details [ 141.402787][ T8102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.403267][ T8094] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 141.409690][ T8106] syzkaller0: entered promiscuous mode [ 141.427117][ T8106] syzkaller0: entered allmulticast mode [ 141.542515][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.599870][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'. [ 141.659043][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 141.920522][ T8153] tipc: Failed to remove unknown binding: 66,1,1/2135257661:3545694538/3545694540 [ 141.931184][ T8153] tipc: Failed to remove unknown binding: 66,1,1/2135257661:3545694538/3545694540 [ 141.940576][ T8153] tipc: Failed to remove unknown binding: 66,1,1/2135257661:3545694538/3545694540 [ 141.962241][ T8156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.977497][ T8158] loop4: detected capacity change from 0 to 512 [ 141.984678][ T8156] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 141.986370][ T8156] bond4: (slave macvlan1): Enslaving as a backup interface with a down link [ 141.998277][ T8158] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.008582][ T8158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.012544][ T8156] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.030707][ T8158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 142.058117][ T8158] System zones: 1-12 [ 142.069031][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 142.079510][ T51] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.095403][ T8158] EXT4-fs (loop4): 1 truncate cleaned up [ 142.101908][ T8158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.130899][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 142.146262][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 142.209480][ T3911] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.270066][ T8158] ================================================================== [ 142.278175][ T8158] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 142.286205][ T8158] [ 142.288546][ T8158] write to 0xffff88810715e0f4 of 4 bytes by task 8177 on cpu 0: [ 142.296180][ T8158] xas_set_mark+0x12b/0x140 [ 142.300714][ T8158] tag_pages_for_writeback+0xc2/0x290 [ 142.306110][ T8158] ext4_do_writepages+0x6b2/0x2750 [ 142.311254][ T8158] ext4_writepages+0x176/0x300 [ 142.316031][ T8158] do_writepages+0x1c3/0x310 [ 142.320643][ T8158] filemap_write_and_wait_range+0x144/0x340 [ 142.326564][ T8158] ext4_file_write_iter+0xe04/0xf00 [ 142.331794][ T8158] iter_file_splice_write+0x666/0xa60 [ 142.337183][ T8158] direct_splice_actor+0x156/0x2a0 [ 142.342305][ T8158] splice_direct_to_actor+0x312/0x680 [ 142.347705][ T8158] do_splice_direct+0xda/0x150 [ 142.352481][ T8158] do_sendfile+0x380/0x650 [ 142.356922][ T8158] __x64_sys_sendfile64+0x105/0x150 [ 142.362161][ T8158] x64_sys_call+0x2bb0/0x2ff0 [ 142.366856][ T8158] do_syscall_64+0xd2/0x200 [ 142.371387][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.377305][ T8158] [ 142.379635][ T8158] read to 0xffff88810715e0f4 of 4 bytes by task 8158 on cpu 1: [ 142.387196][ T8158] file_write_and_wait_range+0x10e/0x2c0 [ 142.392947][ T8158] generic_buffers_fsync_noflush+0x45/0x120 [ 142.398862][ T8158] ext4_sync_file+0x1ab/0x690 [ 142.403559][ T8158] vfs_fsync_range+0x10a/0x130 [ 142.408362][ T8158] ext4_buffered_write_iter+0x34f/0x3c0 [ 142.413948][ T8158] ext4_file_write_iter+0xdbf/0xf00 [ 142.419184][ T8158] iter_file_splice_write+0x666/0xa60 [ 142.424571][ T8158] direct_splice_actor+0x156/0x2a0 [ 142.429700][ T8158] splice_direct_to_actor+0x312/0x680 [ 142.435093][ T8158] do_splice_direct+0xda/0x150 [ 142.439878][ T8158] do_sendfile+0x380/0x650 [ 142.444325][ T8158] __x64_sys_sendfile64+0x105/0x150 [ 142.449553][ T8158] x64_sys_call+0x2bb0/0x2ff0 [ 142.454249][ T8158] do_syscall_64+0xd2/0x200 [ 142.458773][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.464716][ T8158] [ 142.467039][ T8158] value changed: 0x02000021 -> 0x04000021 [ 142.472766][ T8158] [ 142.475098][ T8158] Reported by Kernel Concurrency Sanitizer on: [ 142.481250][ T8158] CPU: 1 UID: 0 PID: 8158 Comm: syz.4.1540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.490982][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.501052][ T8158] ================================================================== [ 142.838349][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.